last executing test programs: 12.334315286s ago: executing program 4 (id=3878): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x2007}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x20000000}) 12.115680426s ago: executing program 4 (id=3880): socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_create(0x52) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x1, 0x5, [@multicast1, @multicast1, @private=0xa010100, @rand_addr=0x64010100, @broadcast]}, 0x24) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0x5, 0x10009}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000) sendto$inet(r3, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0xd0e) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 10.919799473s ago: executing program 1 (id=3884): socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_create(0x52) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x1, 0x5, [@multicast1, @multicast1, @private=0xa010100, @rand_addr=0x64010100, @broadcast]}, 0x24) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0x5, 0x10009}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000) sendto$inet(r3, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0xd0e) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 8.513944305s ago: executing program 4 (id=3892): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a00000004000000080000000100000000800000", @ANYRES32], 0x50) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000071000040"]) 8.395817167s ago: executing program 4 (id=3893): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040), 0xff7a}], 0x1}}], 0x8000000000000df, 0x40080c1) shutdown(r1, 0x1) syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005e05b14021040203e8450000000109025100010000000009040900000202ff00052406000105240000000d24b8fe3f9ea3a0e8ca0800ff06241a05002a052401010305240600010524"], 0x0) r2 = socket(0x10, 0x803, 0x40000008) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r5) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f0000000100)={0x30, r6, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000004) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) openat$fuse(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) r7 = syz_io_uring_setup(0x7b1, &(0x7f0000000200)={0x0, 0x200086f7, 0x80, 0x0, 0x3b6, 0x0, r0}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r10, 0x401, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x23}) r11 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91524fc60", 0x14}], 0x1}, 0x0) io_uring_enter(r7, 0x48e9, 0x0, 0x3, 0x0, 0x0) 8.268877776s ago: executing program 0 (id=3895): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/address_bits', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d9, &(0x7f0000000340)={0x0, 0xafa1, 0x80, 0x0, 0x11f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 7.864275909s ago: executing program 1 (id=3896): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r2 = syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x8402, &(0x7f00000021c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000006180)="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", 0x2000, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000000000)="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", 0x2000, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002100)={0x20, 0x0, 0x1000000000007, {0x0, 0xf}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.327357022s ago: executing program 0 (id=3900): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x1}, 0x8) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x808ed3a56aee9e48) r4 = syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x2000400, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=r1, @ANYBLOB=',max_read=0x0000000000000001,max_read=0x0000000000'], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) open_tree(r4, 0x0, 0x8900) syz_open_dev$sg(0x0, 0x0, 0x2a00) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x58, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}]}]}], {0x14, 0x10}}, 0xa0}}, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r0, 0x89f6, &(0x7f0000000000)="3832b97d9ecf47e2d0ea3ba788fa247aa92dad6466f931b19a8baad7dee88d78523e61b499b1afb18318dee6f1a76397df108e6427df3e92") statx(0xffffffffffffff9c, 0x0, 0x1000, 0x200, &(0x7f0000000140)) sendto$inet(r0, &(0x7f0000000100)="ab", 0x34000, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 6.848232384s ago: executing program 1 (id=3902): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x1}, 0x8) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x808ed3a56aee9e48) r4 = syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x2000400, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=r1, @ANYBLOB=',max_read=0x0000000000000001,max_read=0x0000000000'], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) open_tree(r4, 0x0, 0x8900) syz_open_dev$sg(0x0, 0x0, 0x2a00) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x58, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}]}]}], {0x14, 0x10}}, 0xa0}}, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r0, 0x89f6, &(0x7f0000000000)="3832b97d9ecf47e2d0ea3ba788fa247aa92dad6466f931b19a8baad7dee88d78523e61b499b1afb18318dee6f1a76397df108e6427df3e92") statx(0xffffffffffffff9c, 0x0, 0x1000, 0x200, &(0x7f0000000140)) sendto$inet(r0, &(0x7f0000000100)="ab", 0x34000, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 6.27718181s ago: executing program 2 (id=3903): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a00000004000000080000000100000000800000", @ANYRES32], 0x50) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000071000040"]) 6.124847609s ago: executing program 2 (id=3905): r0 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0x40a45323, &(0x7f00000000c0)={{0x80}, 'port1\x00'}) syz_open_dev$dri(0x0, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x11}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101440, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) read(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$media(0x0, 0x66, 0x180502) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5.877272541s ago: executing program 1 (id=3906): r0 = socket$netlink(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)=0xffff0018) ioctl$SOUND_PCM_READ_CHANNELS(r4, 0x80045006, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0xffe, 0x0, 0x0) write$6lowpan_control(r3, &(0x7f0000000300)='connect aa:aa:aa:aa:aa:11 1', 0x1b) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000200), 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d"], 0x38}}, 0x0) 5.441936958s ago: executing program 0 (id=3907): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000003000000040122000b00000001"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB, @ANYRES32=r1], 0x90}}, 0x0) 5.047319894s ago: executing program 0 (id=3908): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000140)={0x0, 0x23, 0x2, {0x2, 0x2}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}}, &(0x7f0000000500)={0x44, &(0x7f00000002c0)={0x40, 0x7, 0x93, "354bae18878a73a89d0c7b0d1c9d13067eb61937523b93c39e8a40ea7fb98925729f99e805402dc84de5a15bf5f146c42ada1068daebe6ce7ae74bc6e1006ddec8affd1b8050b427e5d84081a953b7a0f0200d6ba5186985af8613ea5674e35c374bc640bf4c29662ef4db79aa4cc5744ca4f12608a257415e1b2f34666fc51bb225e99a0258c1da2b09dbc2734ee2ebb31e37"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000003c0)={0x20, 0x81, 0x1, "a7"}, &(0x7f0000000400)={0x20, 0x82, 0x1, "e9"}, &(0x7f0000000440)={0x20, 0x83, 0x1, 'O'}, &(0x7f0000000480)={0x20, 0x84, 0x4, "6e7454a4"}, &(0x7f00000004c0)={0x20, 0x85, 0x3, "2b5ab5"}}) 4.978316877s ago: executing program 4 (id=3909): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x14, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000580)=ANY=[@ANYBLOB="0003010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000000)=0x3) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) syz_emit_ethernet(0xc6b, 0x0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000140)=""/49, 0x31}, {0x0}], 0x2) 4.830990136s ago: executing program 3 (id=3910): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x5) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'dummy0\x00', 0x3}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f000801}, 0x840) 4.724050989s ago: executing program 3 (id=3911): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/address_bits', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d9, &(0x7f0000000340)={0x0, 0xafa1, 0x80, 0x0, 0x11f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 4.468379446s ago: executing program 2 (id=3912): socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_create(0x52) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x1, 0x5, [@multicast1, @multicast1, @private=0xa010100, @rand_addr=0x64010100, @broadcast]}, 0x24) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x80, 0x5, 0x10009}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000) sendto$inet(r3, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0xd0e) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 3.326768565s ago: executing program 3 (id=3913): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x1}, 0x8) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x808ed3a56aee9e48) r4 = syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x2000400, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYRESOCT=r1, @ANYBLOB=',max_read=0x0000000000000001,max_read=0x0000000000'], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) open_tree(r4, 0x0, 0x8900) syz_open_dev$sg(0x0, 0x0, 0x2a00) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x58, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}]}]}], {0x14, 0x10}}, 0xa0}}, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r0, 0x89f6, &(0x7f0000000000)="3832b97d9ecf47e2d0ea3ba788fa247aa92dad6466f931b19a8baad7dee88d78523e61b499b1afb18318dee6f1a76397df108e6427df3e92") statx(0xffffffffffffff9c, 0x0, 0x1000, 0x200, &(0x7f0000000140)) sendto$inet(r0, &(0x7f0000000100)="ab", 0x34000, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 2.651247835s ago: executing program 1 (id=3914): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000080)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "000001", 0x4c, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x38}, [{0x22, 0x4, "60aeb59d3fb13258c6f29dd7eed9c5aaa04a18f74d2a890000000000000000001c00"}]}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) read(r1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='ed:cb2e') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$ARCH_GET_GS(0x1e, 0x0, 0x0, 0x1004) setuid(0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) sendfile(r5, r5, 0x0, 0x200000) 1.540312s ago: executing program 0 (id=3915): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a00000004000000080000000100000000800000", @ANYRES32], 0x50) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000071000040"]) 1.442830527s ago: executing program 3 (id=3916): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x60, &(0x7f0000000080)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "000001", 0x2a, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x38}, [{0x22}]}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[], 0x119) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) read(r1, 0x0, 0x0) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='ed:cb2e') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$ARCH_GET_GS(0x1e, 0x0, 0x0, 0x1004) setuid(0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) sendfile(r5, r5, 0x0, 0x200000) 1.352115547s ago: executing program 0 (id=3917): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040), 0xff7a}], 0x1}}], 0x8000000000000df, 0x40080c1) shutdown(r1, 0x1) syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005e05b14021040203e8450000000109025100010000000009040900000202ff00052406000105240000000d24b8fe3f9ea3a0e8ca0800ff06241a05002a052401010305240600010524"], 0x0) r2 = socket(0x10, 0x803, 0x40000008) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r5) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f0000000100)={0x30, r6, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000004) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) openat$fuse(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) r7 = syz_io_uring_setup(0x7b1, &(0x7f0000000200)={0x0, 0x200086f7, 0x80, 0x0, 0x3b6, 0x0, r0}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r10, 0x401, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x23}) r11 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91524fc60", 0x14}], 0x1}, 0x0) io_uring_enter(r7, 0x48e9, 0x0, 0x3, 0x0, 0x0) 848.679921ms ago: executing program 4 (id=3918): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$sndctrl(0x0, 0x2, 0x141240) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x64, 0x4, 0x3b0, 0xffffffff, 0x128, 0x210, 0x210, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}, @common=@ah={{0x30}, {[], 0x0, 0x0, 0x5}}]}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], [], 'wlan0\x00', 'wg0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) r4 = socket(0x23, 0x4, 0x9) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xdf4, 0x80, 0x7, 0x2, 0x0, r5}) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) writev(r5, &(0x7f0000000000)=[{0x0}], 0x1) 733.023566ms ago: executing program 2 (id=3919): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000003000000040122000b00000001"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB, @ANYRES32=r1], 0x90}}, 0x0) 699.84694ms ago: executing program 1 (id=3920): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) 447.381257ms ago: executing program 2 (id=3921): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x5) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'dummy0\x00', 0x3}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f000801}, 0x840) 307.658879ms ago: executing program 3 (id=3922): sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYBLOB="01000000000000000000010000004000018007000600666f0000080008000000000006"], 0x54}}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7000fedbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="14002c"], 0x30}, 0x1, 0x0, 0x0, 0x30000080}, 0x10) 56.080382ms ago: executing program 2 (id=3923): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/address_bits', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d9, &(0x7f0000000340)={0x0, 0xafa1, 0x80, 0x0, 0x11f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 0s ago: executing program 3 (id=3924): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendto(0xffffffffffffffff, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000", 0x53, 0x8050, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 85] batman_adv: batadv0: Removing interface: dummy0 [ 420.944329][ T2985] veth1_macvtap: left promiscuous mode [ 420.957114][ T2985] veth0_macvtap: left promiscuous mode [ 420.978009][ T2985] veth1_vlan: left promiscuous mode [ 421.002977][ T2985] veth0_vlan: left promiscuous mode [ 421.853946][ T5189] Bluetooth: hci4: command tx timeout [ 422.077756][T13742] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2874'. [ 422.088587][T13742] netlink: 'syz.0.2874': attribute type 7 has an invalid length. [ 422.096887][T13742] netlink: 'syz.0.2874': attribute type 8 has an invalid length. [ 422.104872][T13742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2874'. [ 422.313861][ T5948] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 422.452209][ T2985] team0 (unregistering): Port device team_slave_1 removed [ 422.503885][ T5948] usb 3-1: Using ep0 maxpacket: 32 [ 422.520338][ T5948] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 422.538083][ T2985] team0 (unregistering): Port device team_slave_0 removed [ 422.545374][ T5948] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 422.558652][ T5948] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 422.567861][ T5948] usb 3-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 422.577645][ T5948] usb 3-1: Product: syz [ 422.581843][ T5948] usb 3-1: Manufacturer: syz [ 422.586584][ T5948] usb 3-1: SerialNumber: syz [ 422.601948][ T5948] usb 3-1: config 0 descriptor?? [ 422.638706][ T5948] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 422.821306][ T13] usb 3-1: Failed to submit usb control message: -71 [ 422.821652][ T5948] usb 3-1: USB disconnect, device number 33 [ 422.840830][ T13] usb 3-1: unable to send the bmi data to the device: -71 [ 422.852128][ T13] usb 3-1: unable to get target info from device [ 422.867112][ T13] usb 3-1: could not get target info (-71) [ 422.890191][ T13] usb 3-1: could not probe fw (-71) [ 423.219436][T13626] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.227342][T13626] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.234890][T13626] bridge_slave_0: entered allmulticast mode [ 423.244583][T13626] bridge_slave_0: entered promiscuous mode [ 423.278929][T13626] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.291312][T13626] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.318720][T13626] bridge_slave_1: entered allmulticast mode [ 423.337766][T13626] bridge_slave_1: entered promiscuous mode [ 423.460664][T13626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.499209][T13626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.676196][T13626] team0: Port device team_slave_0 added [ 423.715655][T13626] team0: Port device team_slave_1 added [ 423.901443][T13626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.922901][T13626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.933811][ T5189] Bluetooth: hci4: command tx timeout [ 423.997015][T13626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.018889][T13626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.035146][T13626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.078492][T13626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.193894][T13626] hsr_slave_0: entered promiscuous mode [ 424.205028][T13626] hsr_slave_1: entered promiscuous mode [ 424.211478][T13626] debugfs: 'hsr0' already exists in 'hsr' [ 424.227710][T13626] Cannot create hsr debugfs directory [ 424.807440][T13783] tipc: Enabling of bearer rejected, already enabled [ 424.959138][T13789] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2887'. [ 424.978859][T13789] netlink: 'syz.3.2887': attribute type 7 has an invalid length. [ 424.998824][T13789] netlink: 'syz.3.2887': attribute type 8 has an invalid length. [ 425.018732][T13789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2887'. [ 425.054586][T13789] bond0: entered promiscuous mode [ 425.095764][T13789] bond0: left promiscuous mode [ 425.625215][T13626] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 425.661060][T13626] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 425.710373][T13626] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 425.741479][T13626] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 425.752778][T13809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2892'. [ 425.775243][T13809] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2892'. [ 426.151850][T13626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.205235][T13825] tipc: Enabling of bearer rejected, already enabled [ 426.246530][T13626] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.296780][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.303944][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.408428][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.415642][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.926292][T13839] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2897'. [ 426.971419][T13626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.255998][T13626] veth0_vlan: entered promiscuous mode [ 427.302551][T13626] veth1_vlan: entered promiscuous mode [ 427.429251][T13861] program syz.4.2903 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 427.442940][T13626] veth0_macvtap: entered promiscuous mode [ 427.478268][T13626] veth1_macvtap: entered promiscuous mode [ 427.588366][T13626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.654611][T13866] fuse: Bad value for 'fd' [ 427.680345][T13626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.727659][T13736] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.752779][T13736] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.814299][T13736] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.832460][T13736] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.893671][ T5867] Bluetooth: hci4: command 0x0405 tx timeout [ 429.134021][ T5867] Bluetooth: hci0: command 0x0406 tx timeout [ 429.134942][T13849] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 429.662796][T13849] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 429.670426][T13849] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 429.678422][T13849] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 429.686648][T13849] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 429.698541][T13849] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 429.707311][T13849] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 429.715738][T13849] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 429.725306][T13849] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 429.797644][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.826856][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.879272][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.889930][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.965753][T13895] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2913'. [ 429.975045][T13895] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2913'. [ 429.984251][T13895] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2913'. [ 429.993482][T13895] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2913'. [ 430.394874][T13908] tipc: Enabling of bearer rejected, already enabled [ 430.413347][T13908] sch_tbf: burst 4 is lower than device syzkaller0 mtu (313) ! [ 430.611149][T13914] netlink: 'syz.3.2918': attribute type 10 has an invalid length. [ 430.666862][T13914] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2918'. [ 430.989825][T13920] syzkaller0: entered promiscuous mode [ 431.073649][T13920] syzkaller0: entered allmulticast mode [ 431.105417][T13922] syzkaller1: entered promiscuous mode [ 431.111007][T13922] syzkaller1: entered allmulticast mode [ 431.126829][T13925] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 431.229509][ T5189] Bluetooth: hci1: command 0x0406 tx timeout [ 431.694095][ T5189] Bluetooth: hci2: command 0x0c1a tx timeout [ 431.700178][ T5189] Bluetooth: hci3: command 0x0406 tx timeout [ 431.774369][ T5189] Bluetooth: hci4: command 0x0405 tx timeout [ 431.809128][T13941] tipc: Enabling of bearer rejected, already enabled [ 431.861385][T13941] sch_tbf: burst 4 is lower than device syzkaller0 mtu (313) ! [ 432.691691][ C0] Unknown status report in ack skb [ 432.691725][T13962] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2936'. [ 432.744916][T13966] syzkaller1: entered promiscuous mode [ 432.773791][T13962] netlink: 'syz.0.2936': attribute type 7 has an invalid length. [ 432.781643][T13966] syzkaller1: entered allmulticast mode [ 432.816660][T13962] netlink: 'syz.0.2936': attribute type 8 has an invalid length. [ 432.828725][T13962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2936'. [ 433.014201][T13973] fuse: Unknown parameter 'user_id00000000000000000000' [ 433.244368][T13974] syzkaller0: entered promiscuous mode [ 433.249881][T13974] syzkaller0: entered allmulticast mode [ 433.299299][T13970] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 433.775348][ T5189] Bluetooth: hci2: command 0x0c1a tx timeout [ 433.856580][ T5189] Bluetooth: hci4: command 0x0405 tx timeout [ 433.899082][T13987] netlink: 'syz.2.2946': attribute type 10 has an invalid length. [ 433.908761][T13987] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2946'. [ 433.936677][T13987] batadv0: entered promiscuous mode [ 433.945401][T13987] batadv0: entered allmulticast mode [ 433.980507][T13987] bridge0: port 3(batadv0) entered blocking state [ 434.002279][T13987] bridge0: port 3(batadv0) entered disabled state [ 434.034569][T13987] bridge0: port 3(batadv0) entered blocking state [ 434.041275][T13987] bridge0: port 3(batadv0) entered forwarding state [ 434.178474][ T1093] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 434.188130][ T1093] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 435.002230][T14014] fuse: Unknown parameter 'user_id00000000000000000000' [ 435.234912][ T30] audit: type=1326 audit(1758085167.673:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14015 comm="syz.3.2956" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 435.353679][ T30] audit: type=1326 audit(1758085167.673:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14015 comm="syz.3.2956" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f85558 code=0x7ffc0000 [ 435.489499][ T30] audit: type=1326 audit(1758085167.673:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14015 comm="syz.3.2956" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 435.610521][ T30] audit: type=1326 audit(1758085167.673:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14015 comm="syz.3.2956" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f85558 code=0x7ffc0000 [ 435.774974][ T30] audit: type=1326 audit(1758085167.673:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14015 comm="syz.3.2956" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 435.853965][ T5189] Bluetooth: hci2: command 0x0c1a tx timeout [ 435.892236][ T30] audit: type=1326 audit(1758085167.673:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14015 comm="syz.3.2956" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f85558 code=0x7ffc0000 [ 435.918126][ T30] audit: type=1326 audit(1758085167.673:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14015 comm="syz.3.2956" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 435.948617][ T5189] Bluetooth: hci4: command 0x0405 tx timeout [ 435.988022][ T30] audit: type=1326 audit(1758085167.673:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14015 comm="syz.3.2956" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f85558 code=0x7ffc0000 [ 436.010139][ T30] audit: type=1326 audit(1758085167.673:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14015 comm="syz.3.2956" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f85558 code=0x7ffc0000 [ 436.046069][ T30] audit: type=1326 audit(1758085167.673:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14015 comm="syz.3.2956" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f85558 code=0x7ffc0000 [ 436.116888][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880588fe400: rx timeout, send abort [ 436.125477][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880588fe400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 436.552672][ T5867] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 436.567963][ T5867] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 436.584314][ T5867] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 436.593395][ T5867] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 436.603281][ T5867] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 436.660803][T14036] tipc: Started in network mode [ 436.670068][T14036] tipc: Node identity da01720414e7, cluster identity 4711 [ 436.678693][T14036] tipc: Enabled bearer , priority 0 [ 436.723444][T14036] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 436.749935][T14036] tipc: Resetting bearer [ 436.778977][T14035] tipc: Disabling bearer [ 436.856975][ T5920] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 437.113825][ T5920] usb 1-1: Using ep0 maxpacket: 32 [ 437.129111][ T5920] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 437.362930][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 437.387090][ T5920] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 437.400535][ T5920] usb 1-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 437.408870][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880588fe800: rx timeout, send abort [ 437.417558][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880588fe800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 437.432365][ T5920] usb 1-1: Product: syz [ 437.436767][ T5920] usb 1-1: Manufacturer: syz [ 437.441466][ T5920] usb 1-1: SerialNumber: syz [ 437.503040][ T5920] usb 1-1: config 0 descriptor?? [ 437.614015][ T5920] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 437.733218][T14055] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2969'. [ 437.769271][T13736] usb 1-1: Failed to submit usb control message: -71 [ 437.769600][ T5921] usb 1-1: USB disconnect, device number 29 [ 437.783594][T13736] usb 1-1: unable to send the bmi data to the device: -71 [ 437.801560][T13736] usb 1-1: unable to get target info from device [ 437.810020][T13736] usb 1-1: could not get target info (-71) [ 437.821315][T13736] usb 1-1: could not probe fw (-71) [ 437.995967][T14037] chnl_net:caif_netlink_parms(): no params data found [ 438.193812][ T1229] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 438.345439][ T1229] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 438.357650][ T1229] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 438.368060][ T1229] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 438.378439][ T1229] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 438.387819][ T1229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.410416][ T1229] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 438.442126][ T1093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.495561][ T1093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.525213][ T1093] bond0 (unregistering): Released all slaves [ 438.554025][ T1229] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 438.655273][ T5867] Bluetooth: hci3: command tx timeout [ 438.760105][ T1093] tipc: Disabling bearer [ 438.797304][ T5920] usb 2-1: USB disconnect, device number 39 [ 438.806989][ T1093] tipc: Disabling bearer [ 438.858716][ T1093] tipc: Left network mode [ 438.866037][T14037] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.901235][T14037] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.915207][T14037] bridge_slave_0: entered allmulticast mode [ 438.931801][T14037] bridge_slave_0: entered promiscuous mode [ 438.958207][T14037] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.985935][T14037] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.009510][T14037] bridge_slave_1: entered allmulticast mode [ 439.034235][T14037] bridge_slave_1: entered promiscuous mode [ 439.403283][T14037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.552829][T14098] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2980'. [ 439.698243][T14037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.983296][T14037] team0: Port device team_slave_0 added [ 440.000796][T14109] program syz.2.2982 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 440.019456][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.025872][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.163074][T14037] team0: Port device team_slave_1 added [ 440.341700][ T1093] hsr_slave_0: left promiscuous mode [ 440.394943][ T1093] hsr_slave_1: left promiscuous mode [ 440.419058][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.440259][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.734138][ T5867] Bluetooth: hci3: command tx timeout [ 441.370702][T14134] fuse: Bad value for 'fd' [ 441.504165][ T1229] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 441.664694][ T1229] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 441.682077][ T1229] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 441.703101][ T1229] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 441.733173][ T1229] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 441.750975][ T1229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.792142][ T1229] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 441.921372][ T1093] team0 (unregistering): Port device team_slave_1 removed [ 441.953428][ T1229] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 442.016210][ T1093] team0 (unregistering): Port device team_slave_0 removed [ 442.017692][T14148] netlink: 'syz.2.2992': attribute type 4 has an invalid length. [ 442.063743][T14148] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2992'. [ 442.102308][ T5921] usb 4-1: USB disconnect, device number 41 [ 442.621323][T14037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.628381][T14037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.664414][T14037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.696692][T14037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.703776][T14037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.732870][T14037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.813805][ T5867] Bluetooth: hci3: command tx timeout [ 442.850375][T14037] hsr_slave_0: entered promiscuous mode [ 442.892055][T14037] hsr_slave_1: entered promiscuous mode [ 442.899314][T14037] debugfs: 'hsr0' already exists in 'hsr' [ 442.905599][T14037] Cannot create hsr debugfs directory [ 443.168526][T14167] fuse: Bad value for 'fd' [ 443.204068][T14165] netlink: 'syz.3.3001': attribute type 10 has an invalid length. [ 443.220696][T14165] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3001'. [ 443.661258][T14186] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3005'. [ 443.719809][T14186] netlink: 'syz.1.3005': attribute type 7 has an invalid length. [ 443.814290][T14186] netlink: 'syz.1.3005': attribute type 8 has an invalid length. [ 443.864662][T14186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3005'. [ 443.969418][T14186] bond0: entered promiscuous mode [ 444.003874][T14186] bond_slave_0: entered promiscuous mode [ 444.115942][T14186] bond_slave_1: entered promiscuous mode [ 444.174032][T14186] bond0: left promiscuous mode [ 444.212546][T14186] bond_slave_0: left promiscuous mode [ 444.256530][T14186] bond_slave_1: left promiscuous mode [ 444.908768][ T5867] Bluetooth: hci3: command tx timeout [ 444.917758][T14037] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 445.033778][T14037] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 445.097275][T14037] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 445.192912][T14037] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 445.748994][T14241] syzkaller0: entered promiscuous mode [ 445.779609][T14241] syzkaller0: entered allmulticast mode [ 445.799231][T14242] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3021'. [ 445.857429][T14241] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 445.860427][T14242] netlink: 'syz.3.3021': attribute type 7 has an invalid length. [ 445.917172][T14242] netlink: 'syz.3.3021': attribute type 8 has an invalid length. [ 445.987095][T14242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3021'. [ 446.008930][T14249] fuse: Unknown parameter '0x0000000000000004' [ 446.201113][T14242] bond0: entered promiscuous mode [ 446.242617][T14242] bond0: left promiscuous mode [ 446.476848][T14037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.606302][T14037] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.740582][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.747738][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.804556][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.811719][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.241145][T14037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.413331][T14037] veth0_vlan: entered promiscuous mode [ 447.591037][T14037] veth1_vlan: entered promiscuous mode [ 447.737672][T14037] veth0_macvtap: entered promiscuous mode [ 447.806303][T14037] veth1_macvtap: entered promiscuous mode [ 447.901801][T14037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.945999][T14037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.982511][ T1093] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.011811][ T1093] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.047785][ T1093] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.077645][ T1093] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.154108][ T5948] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 448.239459][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.266008][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.324613][ T5948] usb 3-1: Using ep0 maxpacket: 32 [ 448.341765][ T5948] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 448.342700][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.380904][ T5948] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 448.393168][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.423447][ T5948] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 448.456274][ T5948] usb 3-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 448.483287][ T5948] usb 3-1: Product: syz [ 448.500108][ T5948] usb 3-1: Manufacturer: syz [ 448.510053][ T5948] usb 3-1: SerialNumber: syz [ 448.531433][ T5948] usb 3-1: config 0 descriptor?? [ 448.568778][ T5948] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 448.766580][ T5948] usb 3-1: USB disconnect, device number 34 [ 448.773811][ T12] usb 3-1: Failed to submit usb control message: -71 [ 448.812047][ T12] usb 3-1: unable to send the bmi data to the device: -71 [ 448.843494][ T12] usb 3-1: unable to get target info from device [ 448.879785][ T12] usb 3-1: could not get target info (-71) [ 448.914213][ T12] usb 3-1: could not probe fw (-71) [ 449.839434][ T5189] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 449.894878][ T5189] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 449.903505][ T5189] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 449.937888][ T5189] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 449.946375][ T5189] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 450.859756][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 451.540966][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 451.683492][T14363] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3051'. [ 451.697063][T14364] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3051'. [ 451.809673][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 451.976707][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 452.012930][T14368] tipc: Enabled bearer , priority 0 [ 452.036123][ T5867] Bluetooth: hci5: command tx timeout [ 452.130518][T14372] tipc: Resetting bearer [ 452.160562][T14368] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 452.357734][T14367] tipc: Disabling bearer [ 452.386353][T14383] fuse: Unknown parameter '0x0000000000000004' [ 452.873148][T14339] chnl_net:caif_netlink_parms(): no params data found [ 452.973390][T14393] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3060'. [ 453.028465][ T12] bridge0: port 3(batadv0) entered disabled state [ 453.062235][ T12] bridge_slave_1: left allmulticast mode [ 453.069235][ T12] bridge_slave_1: left promiscuous mode [ 453.083184][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.132795][ T12] bridge_slave_0: left allmulticast mode [ 453.173015][ T12] bridge_slave_0: left promiscuous mode [ 453.198369][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.238464][T14400] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3062'. [ 453.503017][T14400] netlink: 'syz.1.3062': attribute type 7 has an invalid length. [ 453.601841][T14400] netlink: 'syz.1.3062': attribute type 8 has an invalid length. [ 453.612285][T14400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3062'. [ 453.973857][ T5948] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 453.990035][ T12] gretap0 (unregistering): left promiscuous mode [ 454.105251][ T5867] Bluetooth: hci5: command tx timeout [ 454.150257][ T5948] usb 4-1: Using ep0 maxpacket: 32 [ 454.161150][ T5948] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 454.180657][ T12] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 454.186608][ T5948] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 454.216583][ T5948] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 454.233666][ T5948] usb 4-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 454.252161][ T5948] usb 4-1: Product: syz [ 454.262293][ T5948] usb 4-1: Manufacturer: syz [ 454.272431][ T5948] usb 4-1: SerialNumber: syz [ 454.289842][ T5948] usb 4-1: config 0 descriptor?? [ 454.331293][ T5948] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 454.490083][ T12] bond0 (unregistering): left promiscuous mode [ 454.497652][ T12] bond_slave_0: left promiscuous mode [ 454.503322][ T12] bond_slave_1: left promiscuous mode [ 454.515997][ T37] usb 4-1: Failed to submit usb control message: -71 [ 454.517520][ T5948] usb 4-1: USB disconnect, device number 42 [ 454.537996][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 454.541775][ T37] usb 4-1: unable to send the bmi data to the device: -71 [ 454.557354][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 454.559879][ T37] usb 4-1: unable to get target info from device [ 454.572443][ T37] usb 4-1: could not get target info (-71) [ 454.583791][ T37] usb 4-1: could not probe fw (-71) [ 454.598584][ T12] bond0 (unregistering): Released all slaves [ 454.653383][T14400] bond0: entered promiscuous mode [ 454.700073][T14400] bond_slave_0: entered promiscuous mode [ 454.723890][T14400] bond_slave_1: entered promiscuous mode [ 454.742523][T14400] bond0: left promiscuous mode [ 454.750699][T14400] bond_slave_0: left promiscuous mode [ 454.768191][T14400] bond_slave_1: left promiscuous mode [ 454.809386][ T12] tipc: Disabling bearer [ 454.818907][ T12] tipc: Disabling bearer [ 454.836135][ T12] tipc: Left network mode [ 454.840542][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805575c000: rx timeout, send abort [ 454.849174][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805575c000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 455.359903][T14446] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 455.380559][T14339] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.389614][T14339] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.419657][T14339] bridge_slave_0: entered allmulticast mode [ 455.430261][T14339] bridge_slave_0: entered promiscuous mode [ 455.442334][T14445] tipc: Enabling of bearer rejected, already enabled [ 455.466892][T14339] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.481176][T14339] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.488780][T14339] bridge_slave_1: entered allmulticast mode [ 455.503710][T14339] bridge_slave_1: entered promiscuous mode [ 455.908331][T14339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.005041][T14339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.067421][ T12] team0: left promiscuous mode [ 456.085275][ T12] team_slave_0: left promiscuous mode [ 456.126569][ T12] team_slave_1: left promiscuous mode [ 456.173912][ T5867] Bluetooth: hci5: command tx timeout [ 456.208717][ T12] hsr_slave_0: left promiscuous mode [ 456.253380][ T12] hsr_slave_1: left promiscuous mode [ 456.274494][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.305012][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.367559][ T12] batman_adv: batadv0: Removing interface: dummy0 [ 456.448314][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 456.448333][ T30] audit: type=1326 audit(1758085188.923:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14474 comm="syz.1.3079" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1539 code=0x7ffc0000 [ 456.491826][ T30] audit: type=1326 audit(1758085188.923:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14474 comm="syz.1.3079" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1539 code=0x7ffc0000 [ 456.525343][ T30] audit: type=1326 audit(1758085188.993:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14474 comm="syz.1.3079" exe="/root/syz-executor" sig=0 arch=40000003 syscall=440 compat=1 ip=0xf7fb1539 code=0x7ffc0000 [ 456.642172][ T30] audit: type=1326 audit(1758085188.993:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14474 comm="syz.1.3079" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1539 code=0x7ffc0000 [ 456.695688][ T30] audit: type=1326 audit(1758085188.993:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14474 comm="syz.1.3079" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1539 code=0x7ffc0000 [ 457.678560][ T12] team0 (unregistering): Port device team_slave_1 removed [ 457.727363][ T12] team0 (unregistering): Port device team_slave_0 removed [ 458.254042][ T5867] Bluetooth: hci5: command tx timeout [ 458.262986][T14478] tipc: Enabling of bearer rejected, failed to enable media [ 458.436357][T14339] team0: Port device team_slave_0 added [ 458.450496][T14339] team0: Port device team_slave_1 added [ 458.647566][T14339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.897696][T14339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.136460][T14339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.163757][T14339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.171484][T14339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.240788][T14339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.502426][T14339] hsr_slave_0: entered promiscuous mode [ 459.529910][T14339] hsr_slave_1: entered promiscuous mode [ 459.535407][T14517] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3089'. [ 459.567209][T14339] debugfs: 'hsr0' already exists in 'hsr' [ 459.568503][T14517] netlink: 'syz.2.3089': attribute type 7 has an invalid length. [ 459.572996][T14339] Cannot create hsr debugfs directory [ 459.671997][T14517] netlink: 'syz.2.3089': attribute type 8 has an invalid length. [ 459.782279][T14517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3089'. [ 459.842121][T14517] bond0: entered promiscuous mode [ 459.893731][T14517] bond_slave_0: entered promiscuous mode [ 459.907805][T14517] bond_slave_1: entered promiscuous mode [ 459.996515][T14517] bond0: left promiscuous mode [ 460.001554][T14517] bond_slave_0: left promiscuous mode [ 460.023152][T14517] bond_slave_1: left promiscuous mode [ 460.246189][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888055cc8400: rx timeout, send abort [ 460.263987][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888055cc8400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 461.861556][T14339] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 461.913242][T14339] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 461.921316][ T30] audit: type=1326 audit(1758085194.383:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14559 comm="syz.4.3102" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 462.057367][T14339] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 462.083617][ T30] audit: type=1326 audit(1758085194.383:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14559 comm="syz.4.3102" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 462.153507][ T30] audit: type=1326 audit(1758085194.383:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14559 comm="syz.4.3102" exe="/root/syz-executor" sig=0 arch=40000003 syscall=440 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 462.162991][T14339] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 462.313616][ T30] audit: type=1326 audit(1758085194.383:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14559 comm="syz.4.3102" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 462.368108][T14571] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3105'. [ 462.399807][T14571] netlink: 'syz.1.3105': attribute type 7 has an invalid length. [ 462.415649][T14571] netlink: 'syz.1.3105': attribute type 8 has an invalid length. [ 462.423407][T14571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3105'. [ 462.544154][T14571] bond0: entered promiscuous mode [ 462.567046][T14571] bond_slave_0: entered promiscuous mode [ 462.578909][T14571] bond_slave_1: entered promiscuous mode [ 462.605424][T14571] bond0: left promiscuous mode [ 462.623648][T14571] bond_slave_0: left promiscuous mode [ 462.643827][T14571] bond_slave_1: left promiscuous mode [ 462.744353][ T5953] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 462.944238][ T5953] usb 5-1: Using ep0 maxpacket: 32 [ 462.965358][ T5953] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 463.003701][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 463.059819][ T5953] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 463.096692][T14339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.103572][ T5953] usb 5-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 463.111757][ T5953] usb 5-1: Product: syz [ 463.141645][ T5953] usb 5-1: Manufacturer: syz [ 463.168407][ T5953] usb 5-1: SerialNumber: syz [ 463.196896][ T5953] usb 5-1: config 0 descriptor?? [ 463.209792][T14339] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.248753][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.255987][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.273162][ T5953] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 463.317085][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.324306][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.439428][ T1093] usb 5-1: Failed to submit usb control message: -71 [ 463.452380][ T982] usb 5-1: USB disconnect, device number 35 [ 463.462227][ T1093] usb 5-1: unable to send the bmi data to the device: -71 [ 463.489517][ T1093] usb 5-1: unable to get target info from device [ 463.506634][ T1093] usb 5-1: could not get target info (-71) [ 463.520964][T14339] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 463.534163][ T1093] usb 5-1: could not probe fw (-71) [ 463.590828][ T30] audit: type=1326 audit(1758085196.063:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14606 comm="syz.3.3114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 463.612784][ C1] vkms_vblank_simulate: vblank timer overrun [ 463.676438][ T30] audit: type=1326 audit(1758085196.103:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14606 comm="syz.3.3114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 463.698355][ C1] vkms_vblank_simulate: vblank timer overrun [ 463.708838][T14605] syzkaller0: entered promiscuous mode [ 463.717554][ T30] audit: type=1326 audit(1758085196.103:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14606 comm="syz.3.3114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=440 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 463.776407][T14605] syzkaller0: entered allmulticast mode [ 463.812075][ T30] audit: type=1326 audit(1758085196.103:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14606 comm="syz.3.3114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 463.834069][ C1] vkms_vblank_simulate: vblank timer overrun [ 463.890542][T14605] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 463.945261][ T30] audit: type=1326 audit(1758085196.103:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14606 comm="syz.3.3114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 463.967330][ C1] vkms_vblank_simulate: vblank timer overrun [ 464.011226][T14339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.299536][T14339] veth0_vlan: entered promiscuous mode [ 464.319918][T14623] netlink: 'syz.3.3118': attribute type 10 has an invalid length. [ 464.354448][T14620] syzkaller0: entered promiscuous mode [ 464.360069][T14620] syzkaller0: entered allmulticast mode [ 464.364318][T14623] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3118'. [ 464.389464][T14620] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 464.527014][T14339] veth1_vlan: entered promiscuous mode [ 464.780914][T14339] veth0_macvtap: entered promiscuous mode [ 464.830064][T14339] veth1_macvtap: entered promiscuous mode [ 464.920193][T14339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.977958][T14339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.046806][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.098840][ T1093] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.139117][ T1093] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.337315][ T1093] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.503869][ T1229] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 465.653620][ T1229] usb 5-1: device descriptor read/64, error -71 [ 465.696520][T13736] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.713681][T13736] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.784420][T14669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3131'. [ 466.142028][ T1229] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 466.211388][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.268888][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.323740][ T1229] usb 5-1: device descriptor read/64, error -71 [ 466.436555][T14674] netlink: 'syz.2.3132': attribute type 10 has an invalid length. [ 466.458672][T14674] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3132'. [ 466.484571][ T1229] usb usb5-port1: attempt power cycle [ 466.854545][ T1229] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 466.924418][ T1229] usb 5-1: device descriptor read/8, error -71 [ 467.165654][ T1229] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 467.194623][ T1229] usb 5-1: device descriptor read/8, error -71 [ 467.333607][ T1229] usb usb5-port1: unable to enumerate USB device [ 468.051958][ T982] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 468.204374][ T982] usb 1-1: Using ep0 maxpacket: 32 [ 468.211703][ T982] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 468.221447][ T982] usb 1-1: config 0 has no interface number 0 [ 468.227895][ T982] usb 1-1: config 0 interface 184 has no altsetting 0 [ 468.239850][ T982] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 468.333720][ T982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.341756][ T982] usb 1-1: Product: syz [ 468.356310][ T982] usb 1-1: Manufacturer: syz [ 468.360948][ T982] usb 1-1: SerialNumber: syz [ 468.385726][ T982] usb 1-1: config 0 descriptor?? [ 468.415402][ T982] smsc75xx v1.0.0 [ 468.807271][T14728] fuse: Bad value for 'group_id' [ 468.827160][T14728] fuse: Bad value for 'group_id' [ 468.838505][ T982] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 468.878160][ T982] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 468.907019][ T982] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 468.907487][T14736] netlink: 'syz.3.3147': attribute type 10 has an invalid length. [ 468.927286][T14734] syzkaller0: entered promiscuous mode [ 468.944170][T14736] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3147'. [ 468.949173][ T982] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 468.967596][T14734] syzkaller0: entered allmulticast mode [ 468.999223][T14734] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 469.019758][ T982] usb 1-1: USB disconnect, device number 30 [ 469.255077][T14750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3150'. [ 469.460271][ T5920] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 469.694674][ T5920] usb 5-1: Using ep0 maxpacket: 32 [ 469.702432][ T5920] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 469.716176][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 469.807801][ T5920] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 469.818608][ T5920] usb 5-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 469.827436][ T5920] usb 5-1: Product: syz [ 469.833991][ T5920] usb 5-1: Manufacturer: syz [ 469.843354][ T5920] usb 5-1: SerialNumber: syz [ 469.866487][ T5920] usb 5-1: config 0 descriptor?? [ 469.919797][T14762] syzkaller0: entered promiscuous mode [ 469.925415][T14762] syzkaller0: entered allmulticast mode [ 469.939845][ T5920] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 469.950292][T14762] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 470.109964][ T1093] usb 5-1: Failed to submit usb control message: -71 [ 470.112511][ T1229] usb 5-1: USB disconnect, device number 40 [ 470.120942][ T1093] usb 5-1: unable to send the bmi data to the device: -71 [ 470.317876][ T1093] usb 5-1: unable to get target info from device [ 470.979461][ T1093] usb 5-1: could not get target info (-71) [ 470.991796][ T1093] usb 5-1: could not probe fw (-71) [ 471.380229][T14781] netlink: 'syz.4.3160': attribute type 10 has an invalid length. [ 471.423277][T14781] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3160'. [ 471.473819][T14781] batadv0: entered promiscuous mode [ 471.523629][T14781] batadv0: entered allmulticast mode [ 471.552271][T14781] bridge0: port 3(batadv0) entered blocking state [ 471.566806][T14781] bridge0: port 3(batadv0) entered disabled state [ 471.576378][T14781] bridge0: port 3(batadv0) entered blocking state [ 471.582974][T14781] bridge0: port 3(batadv0) entered forwarding state [ 472.026763][ T36] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 472.036155][ T36] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 472.848711][T14806] syzkaller0: entered promiscuous mode [ 472.871931][T14806] syzkaller0: entered allmulticast mode [ 472.926202][T14806] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 474.572733][T14857] capability: warning: `syz.3.3172' uses deprecated v2 capabilities in a way that may be insecure [ 476.609682][T14887] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3183'. [ 476.728820][T14887] netlink: 'syz.0.3183': attribute type 10 has an invalid length. [ 476.900741][T14887] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3183'. [ 477.005030][T14887] batadv0: entered promiscuous mode [ 477.012370][T14887] batadv0: entered allmulticast mode [ 477.019672][T14887] bridge0: port 3(batadv0) entered blocking state [ 477.026856][T14887] bridge0: port 3(batadv0) entered disabled state [ 477.051719][T14887] bridge0: port 3(batadv0) entered blocking state [ 477.058377][T14887] bridge0: port 3(batadv0) entered forwarding state [ 477.138648][ T36] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 477.147902][ T36] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 478.305375][ T30] audit: type=1326 audit(1758085210.783:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14908 comm="syz.2.3189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 478.488594][ T30] audit: type=1326 audit(1758085210.783:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14908 comm="syz.2.3189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 478.603607][ T30] audit: type=1326 audit(1758085210.783:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14908 comm="syz.2.3189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=440 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 478.753738][ T30] audit: type=1326 audit(1758085210.783:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14908 comm="syz.2.3189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 478.854515][ T30] audit: type=1326 audit(1758085210.783:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14908 comm="syz.2.3189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 479.196895][T14928] syzkaller1: entered promiscuous mode [ 479.222829][T14928] syzkaller1: entered allmulticast mode [ 479.320446][T14932] program syz.3.3198 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 479.548515][ T30] audit: type=1326 audit(1758085212.023:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14937 comm="syz.3.3201" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 479.621496][ T30] audit: type=1326 audit(1758085212.023:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14937 comm="syz.3.3201" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 479.665451][ T30] audit: type=1326 audit(1758085212.053:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14937 comm="syz.3.3201" exe="/root/syz-executor" sig=0 arch=40000003 syscall=440 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 479.699162][ T30] audit: type=1326 audit(1758085212.053:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14937 comm="syz.3.3201" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 479.704993][T14944] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3203'. [ 479.740404][ T30] audit: type=1326 audit(1758085212.053:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14937 comm="syz.3.3201" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 479.786893][T14944] netlink: 'syz.4.3203': attribute type 10 has an invalid length. [ 479.800597][T14944] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3203'. [ 480.372084][T14964] syzkaller1: entered promiscuous mode [ 480.386617][T14964] syzkaller1: entered allmulticast mode [ 481.115509][T14979] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3219'. [ 481.135052][T14979] netlink: 'syz.0.3219': attribute type 10 has an invalid length. [ 481.151533][T14979] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3219'. [ 481.583770][ T5921] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 481.769302][ T5921] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 481.802157][ T5921] usb 3-1: config 0 has no interface number 0 [ 481.851148][ T5921] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 481.871766][T14994] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3224'. [ 481.884774][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.910074][T14994] netlink: 'syz.1.3224': attribute type 7 has an invalid length. [ 481.918624][ T5921] usb 3-1: Product: syz [ 481.933059][ T5921] usb 3-1: Manufacturer: syz [ 481.947142][T14994] netlink: 'syz.1.3224': attribute type 8 has an invalid length. [ 481.957219][ T5921] usb 3-1: SerialNumber: syz [ 481.981485][ T5921] usb 3-1: config 0 descriptor?? [ 481.990139][T14994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3224'. [ 482.052664][T14994] bond0: entered promiscuous mode [ 482.064699][T14994] bond_slave_0: entered promiscuous mode [ 482.070761][T14994] bond_slave_1: entered promiscuous mode [ 482.080169][T14994] bond0: left promiscuous mode [ 482.087451][T14994] bond_slave_0: left promiscuous mode [ 482.093310][T14994] bond_slave_1: left promiscuous mode [ 482.125709][T15003] syzkaller1: entered promiscuous mode [ 482.139427][T15003] syzkaller1: entered allmulticast mode [ 482.182860][T15005] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3228'. [ 482.216698][ T5921] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 482.237332][ T5921] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 482.251987][ T5921] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 482.268219][T15005] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3228'. [ 482.281021][ T5921] usb 3-1: media controller created [ 482.371204][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 482.518496][ T5921] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 482.587897][ T5921] usb 3-1: USB disconnect, device number 35 [ 482.606622][ T919] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 482.722003][T15019] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3233'. [ 482.740804][T15019] netlink: 'syz.0.3233': attribute type 10 has an invalid length. [ 482.753210][T15019] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3233'. [ 482.807041][ T919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.834416][ T919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.975270][ T919] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 483.005467][ T919] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 483.041195][ T919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.129110][ T919] usb 2-1: config 0 descriptor?? [ 483.639065][ T919] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 483.830685][ T919] usb 2-1: USB disconnect, device number 40 [ 483.965590][T15033] fido_id[15033]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 484.401004][ T5189] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 484.421946][ T5189] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 484.434334][ T5189] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 484.443540][ T5189] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 484.451309][ T5189] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 484.689087][ T1229] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 484.891673][ T1229] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 484.910505][ T1229] usb 1-1: config 0 has no interface number 0 [ 484.933345][ T1229] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 484.961808][ T1229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.015961][ T1229] usb 1-1: Product: syz [ 485.026645][ T1229] usb 1-1: Manufacturer: syz [ 485.041467][ T1229] usb 1-1: SerialNumber: syz [ 485.064736][ T1229] usb 1-1: config 0 descriptor?? [ 485.107731][T15057] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3249'. [ 485.163400][T15057] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3249'. [ 485.282928][ T1229] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 485.316392][ T1229] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 485.364919][ T1229] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 485.387668][ T1229] usb 1-1: media controller created [ 485.413661][ T10] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 485.451236][ T1229] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 485.461993][T15071] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3253'. [ 485.472066][T15049] chnl_net:caif_netlink_parms(): no params data found [ 485.500210][T15071] netlink: 'syz.2.3253': attribute type 10 has an invalid length. [ 485.510622][T15071] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3253'. [ 485.527135][ T1229] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 485.610029][ T1229] usb 1-1: USB disconnect, device number 31 [ 485.616883][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 485.631603][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 485.656346][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 485.680654][ T10] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 485.699216][ T10] usb 2-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 485.712088][ T10] usb 2-1: Product: syz [ 485.719280][ T10] usb 2-1: Manufacturer: syz [ 485.729110][ T10] usb 2-1: SerialNumber: syz [ 485.729458][T15049] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.741271][T15049] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.743161][ T10] usb 2-1: config 0 descriptor?? [ 485.749885][T15049] bridge_slave_0: entered allmulticast mode [ 485.763347][T15049] bridge_slave_0: entered promiscuous mode [ 485.773314][T15049] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.781302][ T10] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 485.781393][T15049] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.799072][T15049] bridge_slave_1: entered allmulticast mode [ 485.807216][T15049] bridge_slave_1: entered promiscuous mode [ 485.853870][ T5920] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 485.870467][T15049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.883147][T15049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.926261][T15049] team0: Port device team_slave_0 added [ 485.935255][T15049] team0: Port device team_slave_1 added [ 485.973974][ T10] usb 2-1: USB disconnect, device number 41 [ 485.979988][T13736] usb 2-1: Failed to submit usb control message: -71 [ 485.988032][T13736] usb 2-1: unable to send the bmi data to the device: -71 [ 485.995766][T13736] usb 2-1: unable to get target info from device [ 486.007004][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.007763][T13736] usb 2-1: could not get target info (-71) [ 486.046979][T15049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.049741][T13736] usb 2-1: could not probe fw (-71) [ 486.061927][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.084800][T15049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.114356][ T5920] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 486.129797][ T5920] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 486.138924][T15049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.169094][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.183426][T15049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.194084][T15049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.230051][T15049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.230168][ T5920] usb 3-1: config 0 descriptor?? [ 486.362987][T15049] hsr_slave_0: entered promiscuous mode [ 486.371118][T15049] hsr_slave_1: entered promiscuous mode [ 486.377915][T15049] debugfs: 'hsr0' already exists in 'hsr' [ 486.383789][T15049] Cannot create hsr debugfs directory [ 486.390510][T15088] syzkaller0: entered promiscuous mode [ 486.396785][T15088] syzkaller0: entered allmulticast mode [ 486.443832][T15088] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 486.493832][ T5867] Bluetooth: hci0: command tx timeout [ 486.678241][ T5920] usbhid 3-1:0.0: can't add hid device: -71 [ 486.690893][ T5920] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 486.765943][ T5920] usb 3-1: USB disconnect, device number 36 [ 487.334377][T15112] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3265'. [ 488.208651][T15121] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3271'. [ 488.306815][T15121] netlink: 'syz.1.3271': attribute type 10 has an invalid length. [ 488.366476][T15121] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3271'. [ 488.410972][T15121] batadv0: entered promiscuous mode [ 488.416609][T15121] batadv0: entered allmulticast mode [ 488.422493][T15121] bridge0: port 3(batadv0) entered blocking state [ 488.437171][T15121] bridge0: port 3(batadv0) entered disabled state [ 488.475548][T15121] bridge0: port 3(batadv0) entered blocking state [ 488.482198][T15121] bridge0: port 3(batadv0) entered forwarding state [ 488.504826][T15049] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 488.554721][T15049] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 488.578484][ T5869] Bluetooth: hci0: command tx timeout [ 488.595082][T15049] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 488.608152][T15049] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 488.694876][ T5920] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 489.220073][T14822] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 489.223682][ T5920] usb 3-1: Using ep0 maxpacket: 32 [ 489.229440][T14822] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 489.257073][ T5920] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 489.272819][T15049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.282404][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 489.318258][ T5920] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 489.331021][T15049] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.339229][ T5920] usb 3-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 489.357950][ T5920] usb 3-1: Product: syz [ 489.360955][T14832] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.362139][ T5920] usb 3-1: Manufacturer: syz [ 489.369304][T14832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.390548][T13736] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.397712][T13736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.422883][ T5920] usb 3-1: SerialNumber: syz [ 489.451015][ T5920] usb 3-1: config 0 descriptor?? [ 489.501073][ T982] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 489.576588][ T5920] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 489.695572][ T982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.711313][ T982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.733012][T15049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.747211][T13736] usb 3-1: Failed to submit usb control message: -71 [ 489.751682][ T1229] usb 3-1: USB disconnect, device number 37 [ 489.761866][T13736] usb 3-1: unable to send the bmi data to the device: -71 [ 489.770211][ T982] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 489.772865][T13736] usb 3-1: unable to get target info from device [ 489.796022][T13736] usb 3-1: could not get target info (-71) [ 489.811753][T13736] usb 3-1: could not probe fw (-71) [ 489.831385][ T982] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 489.885019][ T982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.951470][ T982] usb 2-1: config 0 descriptor?? [ 489.999444][T15049] veth0_vlan: entered promiscuous mode [ 490.039611][T15049] veth1_vlan: entered promiscuous mode [ 490.099375][T15049] veth0_macvtap: entered promiscuous mode [ 490.130255][T15049] veth1_macvtap: entered promiscuous mode [ 490.178565][T15049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.218180][T15049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.250042][T14832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.441391][T14832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.447895][ T982] usbhid 2-1:0.0: can't add hid device: -71 [ 490.489602][T14832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.509548][ T982] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 490.539283][T14832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.543884][ T982] usb 2-1: USB disconnect, device number 42 [ 490.654166][ T5869] Bluetooth: hci0: command 0x040f tx timeout [ 491.073285][T14492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.080764][T15159] syzkaller0: entered promiscuous mode [ 491.102038][T14492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.109459][T15159] syzkaller0: entered allmulticast mode [ 491.252718][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.263737][T15159] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 491.271531][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.645696][T15199] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3294'. [ 492.738706][ T5869] Bluetooth: hci0: command 0x040f tx timeout [ 493.206466][T15214] syzkaller1: entered promiscuous mode [ 493.227030][T15214] syzkaller1: entered allmulticast mode [ 493.403838][T15216] syzkaller0: entered promiscuous mode [ 493.459257][T15216] syzkaller0: entered allmulticast mode [ 493.556871][T15216] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 493.711717][T15221] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3304'. [ 493.748862][T15221] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3304'. [ 493.940264][T15221] team0: entered promiscuous mode [ 493.961433][T15221] team_slave_0: entered promiscuous mode [ 493.976877][T15221] team_slave_1: entered promiscuous mode [ 494.031578][T15221] bond0: entered promiscuous mode [ 494.080453][T15221] bond_slave_0: entered promiscuous mode [ 494.144274][T15221] bond_slave_1: entered promiscuous mode [ 494.203486][T15221] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 494.204724][T15234] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 494.217864][T15234] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 494.254156][T15237] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(7) [ 494.260710][T15237] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 494.427350][T15234] vhci_hcd vhci_hcd.0: Device attached [ 494.433783][T15237] vhci_hcd vhci_hcd.0: Device attached [ 494.530691][T15238] vhci_hcd: connection closed [ 494.532089][T15235] vhci_hcd: connection closed [ 494.542716][T14828] vhci_hcd: stop threads [ 494.565206][T14828] vhci_hcd: release socket [ 494.661032][T14828] vhci_hcd: disconnect device [ 494.669497][T14828] vhci_hcd: stop threads [ 494.676544][T14828] vhci_hcd: release socket [ 494.691600][T14828] vhci_hcd: disconnect device [ 494.713822][ T919] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 494.721490][ T919] usb 33-1: enqueue for inactive port 0 [ 494.808940][ T919] vhci_hcd: vhci_device speed not set [ 494.816009][ T5869] Bluetooth: hci0: command 0x040f tx timeout [ 494.898213][T15247] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 494.943694][T15247] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 494.953955][T15247] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 494.962425][T15247] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 495.029216][T15247] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 495.039394][T15247] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 495.351265][T15247] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 495.360536][T15247] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 495.419451][T15247] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 495.427405][T15247] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 496.007623][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 496.007639][ T30] audit: type=1326 audit(1758085228.483:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15261 comm="syz.4.3315" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x0 [ 496.954044][ T919] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 497.126474][ T919] usb 5-1: Using ep0 maxpacket: 32 [ 497.143671][ T919] usb 5-1: no configurations [ 497.148396][ T919] usb 5-1: can't read configurations, error -22 [ 497.485278][ T919] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 497.953644][ T919] usb 5-1: Using ep0 maxpacket: 32 [ 498.003794][T15299] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3325'. [ 498.135850][ T919] usb 5-1: no configurations [ 498.140452][ T919] usb 5-1: can't read configurations, error -22 [ 498.184587][ T919] usb usb5-port1: attempt power cycle [ 498.479671][T15307] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3329'. [ 498.489217][T15307] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3329'. [ 498.609580][ T919] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 498.637225][ T919] usb 5-1: Using ep0 maxpacket: 32 [ 498.670508][ T919] usb 5-1: no configurations [ 498.706619][ T919] usb 5-1: can't read configurations, error -22 [ 498.873724][ T919] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 498.894666][ T919] usb 5-1: Using ep0 maxpacket: 32 [ 498.900827][ T919] usb 5-1: no configurations [ 498.909033][ T919] usb 5-1: can't read configurations, error -22 [ 498.944044][ T919] usb usb5-port1: unable to enumerate USB device [ 499.957910][T15335] syzkaller0: entered promiscuous mode [ 499.963677][T15335] syzkaller0: entered allmulticast mode [ 499.973877][T15335] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 500.830380][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888059eab400: rx timeout, send abort [ 500.843606][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888059eab400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 500.983999][T15349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3344'. [ 500.994053][ T5953] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 501.153661][ T5953] usb 3-1: Using ep0 maxpacket: 32 [ 501.161487][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.194368][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.218226][ T5953] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 501.251082][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.301706][ T5953] usb 3-1: config 0 descriptor?? [ 501.459368][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.465899][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.753828][T15366] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3353'. [ 501.757799][ T5953] ft260 0003:0403:6030.0021: unknown main item tag 0x7 [ 501.782393][T15366] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3353'. [ 501.948259][ T5953] ft260 0003:0403:6030.0021: chip code: 6424 8183 [ 502.131222][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888059eab800: rx timeout, send abort [ 502.140963][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888059eab800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 502.158195][ T5953] ft260 0003:0403:6030.0021: failed to retrieve system status [ 502.285399][T15377] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3355'. [ 502.344739][ T5953] ft260 0003:0403:6030.0021: probe with driver ft260 failed with error -32 [ 502.957618][T15392] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3360'. [ 502.978687][T15392] netlink: 'syz.4.3360': attribute type 10 has an invalid length. [ 502.991780][T15392] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3360'. [ 503.118744][T15397] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3361'. [ 503.129798][T15397] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3361'. [ 503.149440][T15397] team0: entered promiscuous mode [ 503.164585][T15397] team_slave_0: entered promiscuous mode [ 503.181513][T15397] team_slave_1: entered promiscuous mode [ 503.199292][T15397] bond0: entered promiscuous mode [ 503.213660][T15397] bond_slave_0: entered promiscuous mode [ 503.266447][T15397] bond_slave_1: entered promiscuous mode [ 503.276060][T15397] debugfs: 'hsr1' already exists in 'hsr' [ 503.301417][T15397] Cannot create hsr debugfs directory [ 503.321895][T15397] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 503.407143][T15402] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3364'. [ 503.417622][T15402] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3364'. [ 504.302298][ T5953] usb 3-1: USB disconnect, device number 38 [ 504.699692][T15430] syzkaller0: entered promiscuous mode [ 504.716449][T15430] syzkaller0: entered allmulticast mode [ 504.790287][T15430] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 506.033764][ T919] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 506.349595][ T919] usb 2-1: Using ep0 maxpacket: 16 [ 506.378680][ T919] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 506.485677][ T919] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 506.542755][ T919] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 506.589139][ T919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.627384][ T919] usb 2-1: config 0 descriptor?? [ 506.656655][ T919] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 506.931360][ T919] usb 2-1: USB disconnect, device number 43 [ 507.097225][T15462] syzkaller0: entered promiscuous mode [ 507.140524][T15462] syzkaller0: entered allmulticast mode [ 507.175686][T15462] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 507.365265][ T1229] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 507.547177][ T1229] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 507.570880][ T1229] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 507.604985][ T1229] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 507.632583][ T1229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.657909][ T1229] usb 3-1: config 0 descriptor?? [ 507.682638][ T1229] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 508.439755][T15493] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3396'. [ 509.812598][T15509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3400'. [ 509.823195][T15509] netlink: 'syz.1.3400': attribute type 10 has an invalid length. [ 509.831685][T15509] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3400'. [ 511.041583][ T5935] usb 3-1: USB disconnect, device number 39 [ 511.639989][T15544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3415'. [ 511.875280][T15550] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3418'. [ 511.893662][T15550] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3418'. [ 512.004990][T15551] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3416'. [ 512.026056][T15551] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3416'. [ 512.136837][T15551] bond0: entered promiscuous mode [ 512.152369][T15551] bond_slave_0: entered promiscuous mode [ 512.180247][T15551] bond_slave_1: entered promiscuous mode [ 512.203669][T15551] bond0: left promiscuous mode [ 512.331096][T15551] bond_slave_0: left promiscuous mode [ 512.345517][T15551] bond_slave_1: left promiscuous mode [ 512.653762][ T982] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 512.885925][ T982] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 512.949666][ T982] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 512.974280][ T982] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 512.993919][ T982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.022956][ T982] usb 5-1: config 0 descriptor?? [ 513.049099][ T982] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 514.209573][T15584] fuse: Invalid rootmode [ 514.275742][T15585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3429'. [ 514.576338][T15592] netlink: 'syz.1.3432': attribute type 10 has an invalid length. [ 514.587220][T15592] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3432'. [ 514.826635][T15596] syzkaller0: entered promiscuous mode [ 514.832149][T15596] syzkaller0: entered allmulticast mode [ 514.880673][T15596] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 516.152939][T15614] fuse: Invalid rootmode [ 516.423670][ T5953] usb 5-1: USB disconnect, device number 45 [ 516.433290][T15623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3442'. [ 516.811008][T15630] netlink: 'syz.1.3446': attribute type 10 has an invalid length. [ 516.835532][T15630] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3446'. [ 517.497202][T15647] fuse: Invalid rootmode [ 518.075380][ T1229] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 518.245742][ T1229] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 518.260718][ T1229] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 518.291936][ T1229] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 518.339664][ T1229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.359120][ T1229] usb 3-1: config 0 descriptor?? [ 518.369078][ T1229] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 518.372234][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888031fc7c00: rx timeout, send abort [ 518.385088][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888031fc7c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 518.875729][T15668] netlink: 'syz.1.3462': attribute type 10 has an invalid length. [ 518.883976][T15668] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3462'. [ 519.103661][ T1229] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 519.263757][ T1229] usb 1-1: Using ep0 maxpacket: 16 [ 519.270642][ T1229] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.288141][ T1229] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 519.317457][ T1229] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 519.327405][ T1229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.341659][ T1229] usb 1-1: Product: syz [ 519.348912][ T1229] usb 1-1: Manufacturer: syz [ 519.360529][ T1229] usb 1-1: SerialNumber: syz [ 519.376329][ T1229] usb 1-1: config 0 descriptor?? [ 519.668716][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888031fc7000: rx timeout, send abort [ 519.678325][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888031fc7000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 519.942277][T15683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3466'. [ 520.031810][T15688] syzkaller0: entered promiscuous mode [ 520.037568][T15688] syzkaller0: entered allmulticast mode [ 520.050823][T15688] tipc: Enabling of bearer rejected, failed to enable media [ 520.089976][T15688] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 520.240864][ T30] audit: type=1326 audit(1758085252.713:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15695 comm="syz.3.3471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 520.288678][ T30] audit: type=1326 audit(1758085252.743:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15695 comm="syz.3.3471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 520.310679][ C0] vkms_vblank_simulate: vblank timer overrun [ 520.335906][ T30] audit: type=1326 audit(1758085252.743:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15695 comm="syz.3.3471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 520.357912][ C0] vkms_vblank_simulate: vblank timer overrun [ 520.368727][ T30] audit: type=1326 audit(1758085252.743:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15695 comm="syz.3.3471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=338 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 520.390731][ C0] vkms_vblank_simulate: vblank timer overrun [ 520.397286][ T30] audit: type=1326 audit(1758085252.743:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15695 comm="syz.3.3471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 520.426937][ T30] audit: type=1326 audit(1758085252.743:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15695 comm="syz.3.3471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 520.458119][ T30] audit: type=1326 audit(1758085252.743:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15695 comm="syz.3.3471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 520.481091][ T30] audit: type=1326 audit(1758085252.743:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15695 comm="syz.3.3471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 520.505404][ T30] audit: type=1326 audit(1758085252.743:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15695 comm="syz.3.3471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 520.527401][ C0] vkms_vblank_simulate: vblank timer overrun [ 520.535123][ T30] audit: type=1326 audit(1758085252.743:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15695 comm="syz.3.3471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 520.557109][ C0] vkms_vblank_simulate: vblank timer overrun [ 521.644929][ T1229] usb 3-1: USB disconnect, device number 40 [ 521.891379][ T982] usb 1-1: USB disconnect, device number 32 [ 522.181489][T15727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3480'. [ 523.743592][ T5874] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 523.913710][ T5874] usb 4-1: Using ep0 maxpacket: 16 [ 523.924895][ T5874] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.943702][ T5874] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 523.998072][ T5874] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 524.023729][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.049816][ T5874] usb 4-1: Product: syz [ 524.068178][ T5874] usb 4-1: Manufacturer: syz [ 524.072811][ T5874] usb 4-1: SerialNumber: syz [ 524.106347][ T5874] usb 4-1: config 0 descriptor?? [ 524.278931][T15765] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3494'. [ 524.290555][T15765] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3494'. [ 526.684818][ T982] usb 4-1: USB disconnect, device number 43 [ 528.283183][T15851] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3521'. [ 528.292921][T15851] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3521'. [ 530.810033][T15910] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3544'. [ 530.833210][T15910] netlink: 'syz.3.3544': attribute type 10 has an invalid length. [ 530.843195][T15910] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3544'. [ 530.864963][T15910] batadv0: entered promiscuous mode [ 530.909472][T15914] fuse: Unknown parameter 'use00000000000000000000' [ 530.932899][T15910] batadv0: entered allmulticast mode [ 530.949633][T15910] bridge0: port 3(batadv0) entered blocking state [ 530.958553][T15910] bridge0: port 3(batadv0) entered disabled state [ 530.975163][T15910] bridge0: port 3(batadv0) entered blocking state [ 530.981681][T15910] bridge0: port 3(batadv0) entered forwarding state [ 531.128910][T15918] fuse: Unknown parameter '0xffffffffffffffff' [ 531.495365][ T36] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 531.504675][ T36] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 531.930690][T15932] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3553'. [ 531.939914][T15932] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3553'. [ 531.978645][T15932] team0: entered promiscuous mode [ 532.033642][T15932] team_slave_0: entered promiscuous mode [ 532.079090][T15932] team_slave_1: entered promiscuous mode [ 532.106814][T15932] bond0: entered promiscuous mode [ 532.136726][T15932] bond_slave_0: entered promiscuous mode [ 532.142633][T15932] bond_slave_1: entered promiscuous mode [ 532.195764][T15932] debugfs: 'hsr1' already exists in 'hsr' [ 532.201533][T15932] Cannot create hsr debugfs directory [ 532.231803][T15942] fuse: Unknown parameter 'user_i00000000000000000000' [ 532.253284][T15932] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 532.451317][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 532.451343][ T30] audit: type=1326 audit(1758085264.913:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15948 comm="syz.0.3562" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x0 [ 532.833821][ T1229] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 532.973996][ T1229] usb 5-1: device descriptor read/64, error -71 [ 533.283622][ T1229] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 533.431651][T15976] fuse: Unknown parameter 'user_i00000000000000000000' [ 533.494466][ T1229] usb 5-1: device descriptor read/64, error -71 [ 533.613941][ T1229] usb usb5-port1: attempt power cycle [ 533.973878][ T1229] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 534.004741][ T1229] usb 5-1: device descriptor read/8, error -71 [ 534.263829][ T1229] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 534.285270][ T1229] usb 5-1: device descriptor read/8, error -71 [ 534.395510][ T1229] usb usb5-port1: unable to enumerate USB device [ 534.529662][T16004] fuse: Unknown parameter 'user_i00000000000000000000' [ 535.334326][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805c0b0c00: rx timeout, send abort [ 535.343073][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805c0b0c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 536.629911][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805c0b1000: rx timeout, send abort [ 536.638566][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805c0b1000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 536.753632][ T919] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 536.984025][ T919] usb 4-1: device descriptor read/64, error -71 [ 537.279114][ T919] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 537.395832][ T30] audit: type=1326 audit(1758085269.873:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16094 comm="syz.2.3622" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x0 [ 537.608367][ T919] usb 4-1: device descriptor read/64, error -71 [ 537.783128][ T919] usb usb4-port1: attempt power cycle [ 538.144053][ T919] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 538.184220][ T919] usb 4-1: device descriptor read/8, error -71 [ 538.317084][T16108] fuse: Unknown parameter 'user_id00000000000000000000' [ 538.434663][ T919] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 538.478525][ T919] usb 4-1: device descriptor read/8, error -71 [ 538.509291][T16115] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3630'. [ 538.555011][T16115] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3630'. [ 538.594069][ T919] usb usb4-port1: unable to enumerate USB device [ 538.674256][ T5874] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 538.834035][ T5874] usb 2-1: Using ep0 maxpacket: 16 [ 538.847441][ T5874] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 538.898300][ T5874] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 538.999488][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.033424][ T5874] usb 2-1: Product: syz [ 539.051110][ T5874] usb 2-1: Manufacturer: syz [ 539.111418][ T5874] usb 2-1: SerialNumber: syz [ 539.256190][ T5874] usb 2-1: config 0 descriptor?? [ 539.605104][T16138] fuse: Unknown parameter 'user_id00000000000000000000' [ 540.638180][T16157] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3645'. [ 540.679195][T16157] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3645'. [ 541.233697][ T5953] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 541.269551][T16178] fuse: Bad value for 'fd' [ 541.409821][ T5953] usb 1-1: device descriptor read/64, error -71 [ 541.471222][ T919] usb 2-1: USB disconnect, device number 44 [ 541.804028][ T5953] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 541.902895][T16193] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3656'. [ 541.997398][ T5953] usb 1-1: device descriptor read/64, error -71 [ 542.119308][ T5953] usb usb1-port1: attempt power cycle [ 542.535118][ T5953] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 542.575954][ T5953] usb 1-1: device descriptor read/8, error -71 [ 542.850476][ T5953] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 542.953879][ T5953] usb 1-1: device descriptor read/8, error -71 [ 543.050572][T16211] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 543.083958][ T5953] usb usb1-port1: unable to enumerate USB device [ 543.168099][T16214] fuse: Bad value for 'fd' [ 543.573621][ T5953] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 543.750284][ T5953] usb 4-1: Using ep0 maxpacket: 16 [ 543.765294][ T5953] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 543.785757][ T5953] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 543.803602][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.813280][ T5953] usb 4-1: Product: syz [ 544.025533][ T5953] usb 4-1: Manufacturer: syz [ 544.030170][ T5953] usb 4-1: SerialNumber: syz [ 544.065822][ T5953] usb 4-1: config 0 descriptor?? [ 544.727747][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805e75dc00: rx timeout, send abort [ 544.743171][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805e75dc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 545.194495][ T30] audit: type=1326 audit(1758085277.663:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16243 comm="syz.0.3674" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x0 [ 545.423179][T16251] net_ratelimit: 50 callbacks suppressed [ 545.423189][T16251] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 546.029038][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805e75e000: rx timeout, send abort [ 546.037609][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805e75e000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 546.151251][T16266] syzkaller0: entered promiscuous mode [ 546.157193][T16266] syzkaller0: entered allmulticast mode [ 546.174648][T16266] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 546.449907][ T982] usb 4-1: USB disconnect, device number 48 [ 546.740266][T16275] netlink: 'syz.2.3684': attribute type 3 has an invalid length. [ 546.760655][T16275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3684'. [ 547.352890][ T30] audit: type=1326 audit(1758085279.823:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16292 comm="syz.4.3692" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x0 [ 547.933833][ T982] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 548.114053][ T982] usb 2-1: Using ep0 maxpacket: 32 [ 548.132416][ T982] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.147041][ T982] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 548.185441][ T982] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 548.204038][ T982] usb 2-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 548.219713][ T982] usb 2-1: Product: syz [ 548.225224][ T982] usb 2-1: Manufacturer: syz [ 548.229855][ T982] usb 2-1: SerialNumber: syz [ 548.240554][ T982] usb 2-1: config 0 descriptor?? [ 548.289112][ T982] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 548.472651][ T5935] usb 2-1: USB disconnect, device number 45 [ 548.479929][T14832] usb 2-1: Failed to submit usb control message: -71 [ 548.493097][T14832] usb 2-1: unable to send the bmi data to the device: -71 [ 548.501748][T14832] usb 2-1: unable to get target info from device [ 548.508545][T14832] usb 2-1: could not get target info (-71) [ 548.515754][T14832] usb 2-1: could not probe fw (-71) [ 548.801604][T16329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3706'. [ 548.977854][ T30] audit: type=1326 audit(1758085281.443:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16334 comm="syz.3.3710" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x0 [ 549.187778][T16349] ucma_write: process 463 (syz.1.3715) changed security contexts after opening file descriptor, this is not allowed. [ 549.463831][T16361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3719'. [ 550.500535][T16391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3733'. [ 551.065140][ T30] audit: type=1326 audit(1758085283.533:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16401 comm="syz.1.3737" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb1539 code=0x0 [ 551.424591][T16407] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3738'. [ 551.754918][T16407] netlink: 'syz.4.3738': attribute type 10 has an invalid length. [ 551.784376][T16407] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3738'. [ 552.166069][T16421] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3746'. [ 552.493659][ T10] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 552.555979][T16434] usb usb8: usbfs: process 16434 (syz.1.3747) did not claim interface 0 before use [ 552.740291][ T10] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 552.986996][ T30] audit: type=1326 audit(1758085285.463:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16443 comm="syz.3.3752" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x0 [ 554.067169][T16454] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3754'. [ 554.084890][T16454] netlink: 'syz.2.3754': attribute type 10 has an invalid length. [ 554.092750][T16454] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3754'. [ 554.333887][ T982] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 554.418120][T16464] fuse: Unknown parameter '0000000000000000000000000000000000000000004' [ 554.552515][ T5953] IPVS: starting estimator thread 0... [ 554.595406][ T982] usb 4-1: config 0 has an invalid interface number: 9 but max is 0 [ 554.603602][ T982] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.614774][ T982] usb 4-1: config 0 has no interface number 0 [ 554.621306][ T982] usb 4-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 554.633295][ T982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.701777][ T982] usb 4-1: config 0 descriptor?? [ 554.715456][T16467] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 554.735321][ T982] rndis_host 4-1:0.9: More than one union descriptor, skipping ... [ 554.747595][ T982] rndis_host 4-1:0.9: skipping garbage [ 554.753185][ T982] usb 4-1: bad CDC descriptors [ 554.759167][T16466] IPVS: using max 36 ests per chain, 86400 per kthread [ 554.761244][ T982] cdc_acm 4-1:0.9: More than one union descriptor, skipping ... [ 554.941987][ T982] cdc_acm 4-1:0.9: skipping garbage [ 556.657415][ T10] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 556.857918][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 556.904501][ T5935] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 556.923121][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.965251][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.966085][ T30] audit: type=1326 audit(1758085289.443:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16485 comm="syz.1.3763" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb1539 code=0x0 [ 557.002893][ T10] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 557.101481][ T5935] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 557.119716][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.152437][ T10] usb 5-1: config 0 descriptor?? [ 557.172912][ T5935] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 557.223321][ T5935] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 557.257944][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.303173][ T5935] usb 1-1: config 0 descriptor?? [ 557.320903][ T982] usb 4-1: USB disconnect, device number 49 [ 557.577948][ T10] ft260 0003:0403:6030.0023: unknown main item tag 0x7 [ 557.859373][ T982] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 557.897985][ T10] ft260 0003:0403:6030.0023: chip code: 6424 8183 [ 557.915710][ T982] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 558.070954][ T10] ft260 0003:0403:6030.0023: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 558.289922][ T10] ft260 0003:0403:6030.0023: failed to retrieve status: -32, no wakeup [ 558.335715][ T10] ft260 0003:0403:6030.0023: failed to retrieve status: -32 [ 558.585430][ T982] usb 5-1: USB disconnect, device number 50 [ 559.213845][T16512] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3769'. [ 559.516460][ T919] usb 1-1: USB disconnect, device number 37 [ 559.954508][ T1229] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 560.125551][ T1229] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 560.143375][ T1229] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 560.167775][ T1229] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 560.179276][ T1229] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 560.192962][ T1229] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 560.202897][ T1229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.298856][ T1229] usb 2-1: config 0 descriptor?? [ 561.644094][ T1229] usbhid 2-1:0.0: can't add hid device: -71 [ 561.651712][ T1229] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 561.723990][ T1229] usb 2-1: USB disconnect, device number 46 [ 562.503303][ T5953] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 562.522221][ T5953] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 562.870903][T16556] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3782'. [ 562.899060][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.905519][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.486252][ T1229] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 563.816366][ T1229] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 563.827697][ T1229] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 563.852811][ T1229] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 563.877859][ T1229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.906295][ T1229] usb 1-1: config 0 descriptor?? [ 563.920589][ T1229] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 564.465151][T16584] fuse: Unknown parameter '0000000000000000000000000000000000000000004' [ 564.525032][ T5935] IPVS: starting estimator thread 0... [ 564.633604][T16585] IPVS: using max 50 ests per chain, 120000 per kthread [ 565.333793][ T10] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 565.485835][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 565.498810][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 565.515186][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 565.547936][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 565.578355][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 565.603662][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.640138][ T10] usb 2-1: config 0 descriptor?? [ 565.826370][T16602] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3796'. [ 566.149394][ T5920] usb 1-1: USB disconnect, device number 38 [ 566.517385][T16621] fuse: Unknown parameter '0000000000000000000000000000000000000000004' [ 566.583575][ T5920] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 566.734023][ T5920] usb 1-1: Using ep0 maxpacket: 32 [ 566.741352][ T5920] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 566.753433][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 566.778652][ T5920] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 566.788314][ T5920] usb 1-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 566.807068][ T5920] usb 1-1: Product: syz [ 566.821676][ T5920] usb 1-1: Manufacturer: syz [ 566.831752][ T5920] usb 1-1: SerialNumber: syz [ 566.860662][ T5920] usb 1-1: config 0 descriptor?? [ 566.883843][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 566.895351][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 566.918992][ T10] usb 2-1: USB disconnect, device number 47 [ 566.932177][ T5920] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 567.093192][ T5920] usb 1-1: USB disconnect, device number 39 [ 567.101894][T14828] usb 1-1: Failed to submit usb control message: -71 [ 567.156610][T14828] usb 1-1: unable to send the bmi data to the device: -71 [ 567.472952][T14828] usb 1-1: unable to get target info from device [ 567.479981][T14828] usb 1-1: could not get target info (-71) [ 567.486230][T14828] usb 1-1: could not probe fw (-71) [ 568.061388][T16640] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3809'. [ 568.263852][ T5920] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 568.383610][ T5935] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 568.435183][ T5920] usb 1-1: config 0 has an invalid interface number: 9 but max is 0 [ 568.443551][ T5920] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 568.510970][ T1229] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 568.511092][ T5920] usb 1-1: config 0 has no interface number 0 [ 568.525703][ T5920] usb 1-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 568.557509][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.577604][ T5920] usb 1-1: config 0 descriptor?? [ 568.590377][ T5935] usb 3-1: Using ep0 maxpacket: 32 [ 568.600392][ T5920] rndis_host 1-1:0.9: More than one union descriptor, skipping ... [ 568.609057][ T5920] usb 1-1: bad CDC descriptors [ 568.614910][ T5935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.626959][ T5920] cdc_acm 1-1:0.9: More than one union descriptor, skipping ... [ 568.634668][ T5935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.650909][ T5935] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 568.665020][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.680712][ T5935] usb 3-1: config 0 descriptor?? [ 568.699515][ T1229] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 568.720111][ T1229] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 568.794047][ T1229] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 568.924398][ T1229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.942100][ T1229] usb 4-1: config 0 descriptor?? [ 568.950391][ T1229] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 569.130140][ T5935] ft260 0003:0403:6030.0026: unknown main item tag 0x7 [ 569.324764][ T5935] ft260 0003:0403:6030.0026: chip code: 6424 8183 [ 569.526639][ T5935] ft260 0003:0403:6030.0026: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 569.727293][ T5935] ft260 0003:0403:6030.0026: failed to retrieve status: -32, no wakeup [ 569.767134][ T5935] ft260 0003:0403:6030.0026: failed to retrieve status: -32 [ 570.004577][ T1229] usb 3-1: USB disconnect, device number 41 [ 570.207026][ T5935] usb 1-1: USB disconnect, device number 40 [ 570.334660][T16661] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 570.342319][T16661] IPv6: NLM_F_CREATE should be set when creating new route [ 570.349580][T16661] IPv6: NLM_F_CREATE should be set when creating new route [ 570.862255][T16670] fuse: Unknown parameter '0000000000000000000000000000000000000000004' [ 571.053935][ T5935] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 571.054292][ T10] IPVS: starting estimator thread 0... [ 571.212272][T16676] IPVS: using max 26 ests per chain, 62400 per kthread [ 571.251558][ T10] usb 4-1: USB disconnect, device number 50 [ 571.419186][ T5935] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 571.433928][ T5935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 571.475372][ T5935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 571.513731][ T5935] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 571.639627][ T5935] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 571.658971][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.837599][ T5935] usb 5-1: config 0 descriptor?? [ 573.265056][ T5935] usbhid 5-1:0.0: can't add hid device: -71 [ 573.276766][ T5935] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 573.327177][ T5935] usb 5-1: USB disconnect, device number 51 [ 574.783845][ T5920] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 574.925550][ T5935] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 575.033662][ T5920] usb 4-1: Using ep0 maxpacket: 32 [ 575.115673][ T5935] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 575.198731][ T5935] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 575.214182][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.226558][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.236476][ T5935] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 575.432636][ T5920] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 575.441831][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.449876][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.463682][ T5935] usb 5-1: config 0 descriptor?? [ 575.488183][ T5920] usb 4-1: config 0 descriptor?? [ 575.511692][ T5935] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 575.970039][ T5920] ft260 0003:0403:6030.0027: unknown main item tag 0x7 [ 576.114973][T16734] fuse: Unknown parameter '0000000000000000000000000000000000000000004' [ 576.163931][ T5920] ft260 0003:0403:6030.0027: chip code: 6424 8183 [ 576.372013][ T5921] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 576.383657][ T5920] ft260 0003:0403:6030.0027: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 576.427434][ T10] IPVS: starting estimator thread 0... [ 576.437675][ T5921] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz1] on syz0 [ 576.533629][T16738] IPVS: using max 50 ests per chain, 120000 per kthread [ 576.597687][ T5920] ft260 0003:0403:6030.0027: failed to retrieve status: -32, no wakeup [ 576.615404][ T5920] ft260 0003:0403:6030.0027: failed to retrieve status: -32 [ 576.987920][ T5953] usb 4-1: USB disconnect, device number 51 [ 577.697935][ T982] usb 5-1: USB disconnect, device number 52 [ 577.823685][ T5953] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 577.995533][ T5953] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 578.021934][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 578.052601][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 578.073993][ T5953] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 578.179817][ T5953] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 578.227411][T16763] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 578.258005][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.453181][ T5953] usb 4-1: config 0 descriptor?? [ 579.897177][T16780] fuse: Unknown parameter '0000000000000000000000000000000000000000004' [ 580.211985][ T5953] usbhid 4-1:0.0: can't add hid device: -71 [ 580.218206][ T5953] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 580.227969][ T5953] usb 4-1: USB disconnect, device number 52 [ 581.001857][T16793] fuse: Unknown parameter '0000000000000000000000000000000000000000004' [ 581.153796][ T982] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 581.304167][ T982] usb 2-1: Using ep0 maxpacket: 32 [ 581.311287][ T982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.376618][ T982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.953589][ T982] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 581.979438][ T982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.003132][ T982] usb 2-1: config 0 descriptor?? [ 582.368111][T16806] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3856'. [ 582.410464][T16806] netlink: 'syz.4.3856': attribute type 7 has an invalid length. [ 582.452880][T16806] netlink: 'syz.4.3856': attribute type 8 has an invalid length. [ 582.482614][T16806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3856'. [ 582.709222][ T982] ft260 0003:0403:6030.0029: unknown main item tag 0x7 [ 582.902519][ T982] ft260 0003:0403:6030.0029: chip code: 6424 8183 [ 583.078298][T16822] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 583.110801][ T982] ft260 0003:0403:6030.0029: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 583.438191][ T10] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 583.581829][ T982] ft260 0003:0403:6030.0029: failed to retrieve status: -32, no wakeup [ 583.773760][ T982] ft260 0003:0403:6030.0029: failed to retrieve status: -32 [ 583.829320][T16833] fuse: Unknown parameter '0000000000000000000000000000000000000000004' [ 584.029315][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 584.065488][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 584.088036][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 584.098282][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 584.147003][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 584.172025][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.227686][ T10] usb 4-1: config 0 descriptor?? [ 584.849919][ T5920] usb 2-1: USB disconnect, device number 48 [ 584.883166][T16845] fuse: Unknown parameter '0000000000000000000000000000000000000000004' [ 585.221405][T16849] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3869'. [ 585.252918][T16849] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3869'. [ 586.236189][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 586.400403][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 586.421657][ T10] usb 4-1: USB disconnect, device number 53 [ 586.639117][T16870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3877'. [ 586.667155][T16870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3877'. [ 586.718376][T16868] fuse: Unknown parameter '0000000000000000000000000000000000000000004' [ 587.472197][T16881] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 587.845017][T16882] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3881'. [ 587.854437][T16882] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3881'. [ 588.397269][T16897] fuse: Unknown parameter '0000000000000000000000000000000000000000004' [ 588.453605][ T5921] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 588.622005][ T5921] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 588.645543][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 588.794543][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 588.805039][ T5921] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 588.819646][ T5921] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 589.348138][T16902] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 589.526842][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.560131][ T5921] usb 3-1: config 0 descriptor?? [ 590.054237][T16912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3889'. [ 590.068584][T16912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3889'. [ 590.606502][ T5921] usbhid 3-1:0.0: can't add hid device: -71 [ 590.612751][ T5921] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 590.632054][ T5921] usb 3-1: USB disconnect, device number 42 [ 590.772908][T16923] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3894'. [ 590.782429][T16923] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3894'. [ 590.953598][ T919] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 591.115642][ T919] usb 5-1: config 0 has an invalid interface number: 9 but max is 0 [ 591.135156][ T919] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 591.150087][ T919] usb 5-1: config 0 has no interface number 0 [ 591.169333][ T919] usb 5-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 591.242798][ T919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.262311][ T919] usb 5-1: config 0 descriptor?? [ 591.299581][ T919] rndis_host 5-1:0.9: More than one union descriptor, skipping ... [ 591.379887][ T919] usb 5-1: bad CDC descriptors [ 591.456058][ T919] cdc_acm 5-1:0.9: More than one union descriptor, skipping ... [ 592.128334][T16947] fuse: Unknown parameter '0000000000000000000000000000000000000000004' [ 592.443444][T16954] fuse: Unknown parameter '00000000000000000000' [ 592.469031][ T1229] IPVS: starting estimator thread 0... [ 592.570236][T16955] IPVS: using max 36 ests per chain, 86400 per kthread [ 593.136526][ T1229] usb 5-1: USB disconnect, device number 53 [ 593.682165][T16970] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3906'. [ 593.955390][T16973] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3907'. [ 593.965169][T16973] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3907'. [ 594.603534][ T5921] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 594.695770][ T1229] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 594.773699][ T5921] usb 1-1: Using ep0 maxpacket: 16 [ 594.802410][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 594.815971][ T5921] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 594.825649][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.837820][ T5921] usb 1-1: Product: syz [ 594.855044][ T5921] usb 1-1: Manufacturer: syz [ 594.864471][ T5921] usb 1-1: SerialNumber: syz [ 594.877466][ T1229] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 594.889777][ T1229] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 594.966276][T16987] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 595.012889][ T5921] usb 1-1: config 0 descriptor?? [ 595.021959][ T1229] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 595.035994][ T5921] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 595.069287][ T5921] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 595.069301][ T1229] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 595.110673][ T1229] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 595.162853][ T1229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.232273][ T1229] usb 5-1: config 0 descriptor?? [ 595.657656][ T5921] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 596.132235][ T5921] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 596.153688][ T5921] em28xx 1-1:0.0: board has no eeprom [ 596.187078][T16992] fuse: Unknown parameter '0000000000000000000000000000000000000000004' [ 596.494567][ T5921] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 596.502660][ T5921] em28xx 1-1:0.0: dvb set to bulk mode. [ 596.509752][ T919] em28xx 1-1:0.0: Binding DVB extension [ 596.855162][ T5921] usb 1-1: USB disconnect, device number 41 [ 596.862601][ T5921] em28xx 1-1:0.0: Disconnecting em28xx [ 596.924953][ T919] em28xx 1-1:0.0: Registering input extension [ 596.965043][ T5921] em28xx 1-1:0.0: Closing input extension [ 596.971703][ T1229] usbhid 5-1:0.0: can't add hid device: -71 [ 596.979619][ T1229] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 596.995284][ T5921] em28xx 1-1:0.0: Freeing device [ 597.466274][ T1229] usb 5-1: USB disconnect, device number 54 [ 598.103588][ T5921] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 598.265984][ T5921] usb 1-1: config 0 has an invalid interface number: 9 but max is 0 [ 598.284625][ T5921] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 598.393045][ T5921] usb 1-1: config 0 has no interface number 0 [ 598.401153][T17015] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3919'. [ 598.409957][ T5921] usb 1-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 598.450784][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.539869][T17015] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3919'. [ 598.575009][ T5921] usb 1-1: config 0 descriptor?? [ 598.600037][ T5921] rndis_host 1-1:0.9: More than one union descriptor, skipping ... [ 598.612416][ T5921] usb 1-1: bad CDC descriptors [ 598.643057][ T5921] cdc_acm 1-1:0.9: More than one union descriptor, skipping ... [ 599.303807][ T12] unregister_netdevice: waiting for batadv_slave_0 to become free. Usage count = 2 [ 599.313472][ T12] ref_tracker: netdev@ffff8880769cc610 has 1/1 users at [ 599.313472][ T12] batadv_hard_if_event+0xf0f/0x1730 [ 599.313472][ T12] notifier_call_chain+0x1b3/0x3e0 [ 599.313472][ T12] register_netdevice+0x1608/0x1ae0 [ 599.313472][ T12] veth_newlink+0x5cc/0xa50 [ 599.313472][ T12] rtnl_newlink_create+0x30d/0xb00 [ 599.313472][ T12] rtnl_newlink+0x16d6/0x1c70 [ 599.313472][ T12] rtnetlink_rcv_msg+0x7cc/0xb70 [ 599.313472][ T12] netlink_rcv_skb+0x208/0x470 [ 599.313472][ T12] netlink_unicast+0x82c/0x9e0 [ 599.313472][ T12] netlink_sendmsg+0x805/0xb30 [ 599.313472][ T12] __sock_sendmsg+0x219/0x270 [ 599.313472][ T12] __sys_sendto+0x3bd/0x520 [ 599.313472][ T12] __ia32_compat_sys_socketcall+0x71c/0x9c0 [ 599.313472][ T12] __do_fast_syscall_32+0xb6/0x2b0 [ 599.313472][ T12] do_fast_syscall_32+0x34/0x80 [ 599.313472][ T12] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 599.313472][ T12] [ 600.491124][ T982] usb 1-1: USB disconnect, device number 42