last executing test programs: 9.502483438s ago: executing program 0 (id=2703): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0x10) shutdown(r2, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x0, 0x1b}, 0x9c) 9.358814954s ago: executing program 0 (id=2705): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x6, r2}, 0x14) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f0000000000)=""/24, 0x0, 0x8000000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') dup3(r0, r4, 0x0) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000000c0)={0x0, r4}) 9.06884421s ago: executing program 0 (id=2708): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00"], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00006dbffc), 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x101001a, 0x0, 0xfb, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x80000) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000000)={0x4}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 7.113442826s ago: executing program 2 (id=2719): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xe0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xa}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0x11b, 0x880, 0x0, 0x0) 7.025097748s ago: executing program 3 (id=2720): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0xa2, 0x6576, 0xd}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7ab, &(0x7f0000000280)={&(0x7f0000000d00)={{@my=0x0}, {@hyper, 0x800000}, 0x400, "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"}, 0x418}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2000003, 0x10, r2, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x2, 0xa, 0x8, 0x9, 0x2, 0x0, 0x70bd27, 0x25dfdbff}, 0x10}}, 0x80) ioctl$USBDEVFS_REAPURBNDELAY(r4, 0x4004550c, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = socket$packet(0x11, 0x2, 0x300) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000240)) dup(r6) 6.518350017s ago: executing program 2 (id=2721): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$video4linux(&(0x7f0000000380), 0x2, 0x20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='htcp\x00', 0x5) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x0, 0x18, 0x70, 0xfd}}]}}]}}, 0x0) sendto$inet(r0, &(0x7f0000000380)='\x00 q', 0x3, 0x30004009, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 5.284355704s ago: executing program 0 (id=2725): r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x648, 0x30, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [{0x5b0, 0x1, [@m_skbmod={0x74, 0x13, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x800, 0x9a85, 0x6, 0xd, 0x54}, 0xd}}]}, {0x21, 0x6, "90e3b7d8879cea2f8ba55766497a380a1c32c8afebdee9564440e8e978"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0xa8, 0x6, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5eb6, 0xa, 0x20000000, 0x9, 0x5}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x4}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_TYPE={0x6, 0x5, 0x2}]}, {0x45, 0x6, "3ee43d0e72ad4c341ddf30e8d07bf7743e064dd3b377c84bc037d47680c356711aab96eaca0f6753a9bf31d09e7478547fd459b009f8176a1ad45212c79bbb621c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ctinfo={0xc0, 0x6, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3}]}, {0x89, 0x6, "28904742a2b51a4e6f2b55fffd22301d425f2d28ae347713f12d5e9d46744689d7244aa1e1798221c6fea6678406396010ad012306fa172e78b016517a3b33ff8e4dbceca5393ff2f20217e03bad25174cdcacbab222f6fae4694bb64a5e824a789a71325857cbaedaf53c78a8f319d1f4a5a6d3fcf76c109e802871bebdd8878f67e0d0fc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_xt={0x28c, 0x2, 0x0, 0x0, {{0x7}, {0x22c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0xdd, 0x6, {0x8, 'mangle\x00', 0x1, 0x400, "924afd90481778605e5f2eea7e9b5c04463edda7fc3d55507fbb202af5581a2a9b6cbf84937d5b5b99224943dc2bcf48307222234e206443e7b60f42e6cc29cfccde7cd129c30694675168d30e7790ec823422759d53bef4ccf18da882d3f69cc05e149fc53d0908571b014c83c03373f2b4f88514eaf1399749eb52929f6f95c22b4e5b966efcaf792ca542e97927db6a0bf58117bf49dc0f1029cd4677e30c199233c3e2d04dcd8c08cddd9bbdd3c088cc5a"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x91, 0x6, {0x1, 'filter\x00', 0xa8, 0xa, "79bb29b7134cbd5ac13564109f8304db55b6d971f07f5bd31dfc7fa8028873d10b040681e0e655e8f6a79a16960d85d2f2121865b9263f9732ad28476130da57a32985e82fb8be0628683412cbd043119145a0ef05f5abd4132e52af2bf90e9b9ec2b1847f5128"}}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x51, 0x6, {0x1, 'nat\x00', 0x4, 0xe8a, "b4b2f0c030d77f49da74c818059136acd6cf59d496bbc2e7029dd388fcc931f43e7a16858cbb5d"}}, @TCA_IPT_HOOK={0x8}]}, {0x3a, 0x6, "e953316a0817b23401a80a38be5e445969116bb7d8a70a6ca771182dea4760bd84d166ef5161aa40d193cb19d0e4b1399cded9c961ad"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0xf0, 0x4, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x6, 0x2, 0x9, 0x7}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x5, 0x10000000, 0x4, 0x8}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x5, 0x80000001, 0x4}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}]}, {0x61, 0x6, "fc36f826477e680902707b500274a2f49e6484c516c92a312bf3f7e0fe9f13d1e603fa1fec7f14a3befd3b9bfd433fa9785c200feb22d8abb4fddd608fdcd2ed246c8853dfa66b7129ce9a97e141313bf5296f7f579de41474ff8c1979"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x54, 0x10, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}]}, {0x15, 0x6, "3b348867e4881d97691793f67aeba5d81d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x84, 0x1, [@m_ctinfo={0x80, 0x15, 0x0, 0x0, {{0xb}, {0x4}, {0x51, 0x6, "007c0bda1c2d40b853b4df622006243a2aed0b14626178023dc917b115d50783414e65298a0e47c9b60dd59956e0a1beb0a05a6b642edf8b3ad156310365969e24f4b675c58a2b85e911255ab0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x1}}}}]}]}, 0x648}, 0x1, 0x0, 0x0, 0x20000084}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x74, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x16}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89fe, &(0x7f0000000380)={'sit0\x00', 0x0}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xb) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x1e8}, {&(0x7f0000000000)=""/108, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/52, 0x14}, {&(0x7f00000007c0)=""/152, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}, 0x400}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r7, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000380)="90", 0x1}], 0x2) 5.09003961s ago: executing program 3 (id=2727): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000012000501000000000001000028001a00ac1414bb0000000000000000000000007f0000010000000000000000000000000a"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20040810) 4.934285026s ago: executing program 3 (id=2728): syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000140)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd8, 0xa, 0xd0e0000, 0xd8, 0x100, 0x1a8, 0x1d8, 0x1d8, 0x1a8, 0x1d8, 0x3, 0x0, {[{{@ip={@local, @multicast2, 0xffffff00, 0xff, 'veth0\x00', 'team0\x00', {}, {}, 0x2, 0x3, 0x40}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0xffff, 0x800, 0x1, 'syz1\x00', 'syz0\x00', {0x3}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0x2, 0x4, 0x3, 0x5, 0x3], 0x5, 0x5}, {0x0, [0x6, 0x6, 0x1, 0x7, 0x5, 0x5], 0x3, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x40, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @multicast2}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 4.900059084s ago: executing program 1 (id=2729): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r0 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x2410}, 0x1}) io_uring_enter(r0, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000240)=ANY=[]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000000, &(0x7f0000000100)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x34}, 0x7}, 0x1c) 4.638317336s ago: executing program 4 (id=2731): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xe0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xa}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f88a806892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918", 0x11b, 0x880, 0x0, 0x0) 4.526397974s ago: executing program 2 (id=2732): syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) socket$inet6(0xa, 0x400000000001, 0x0) open(&(0x7f00000000c0)='.\x00', 0x800, 0xd0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x94) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 4.525730857s ago: executing program 4 (id=2733): r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x0, @val=@target_btf_id=0xffffffffffffffff}, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x4000000) signalfd4(r0, &(0x7f0000000040)={[0xfdb]}, 0x8, 0x1800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x1052c0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r6}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xc}]}, 0x40}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3b823eddfb6e7a759fc99ad068dd19ba7533a6fd070b6f56629ae4f987a515dbbef9102820868fbdbc0578bf553c144d014594644c9bc0c78faab724", @ANYRESHEX, @ANYBLOB="d9ba72ae791cf26e89582406ca2c41441c01b6b833e9e49c52124a2178fd4909675e15f1df43ccd40d11a480c3fd90b2c599f1ec"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r10, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000080)={r11, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000200)={r10}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r12}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r12, 0xc04064a0, 0x0) 4.376366638s ago: executing program 2 (id=2734): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_bpf={0x2c, 0xa, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 4.292275019s ago: executing program 2 (id=2735): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00"], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00006dbffc), 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x101001a, 0x0, 0xfb, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x80000) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000000)={0x4}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 3.546227518s ago: executing program 3 (id=2736): syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x800) syz_io_uring_setup(0xeeb, &(0x7f0000000780)={0x0, 0x8000, 0x10100, 0x0, 0x3c8}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) eventfd2(0x2, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/pid_for_children\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x3243, &(0x7f0000000140)={0x0, 0x2, 0x1000, 0x2}, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000380), 0x80) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) fsopen(&(0x7f0000000000)='tmpfs\x00', 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x0) 3.492294708s ago: executing program 0 (id=2737): syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp6\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x1d, 0x2, 0x6) ppoll(&(0x7f0000000c80)=[{r2}], 0x1, &(0x7f0000000cc0)={0x0, 0x989680}, 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002a69bbc104f959941760f010203010902240001040000000904330202020c07"], 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) quotactl$Q_SETINFO(0xffffffff80000601, 0x0, 0x0, &(0x7f0000000440)={0x5, 0x2, 0x1, 0x2}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x100003}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40095}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000540)=@ethtool_perm_addr={0x20, 0x1f9, "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"}}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="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", 0x5c1, 0xfffffffffffffffb) keyctl$update(0x2, r4, &(0x7f0000000000)="11868a0fceae284c000000010000", 0xe) ioctl$TIOCGPKT(0xffffffffffffffff, 0x40045431, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000004c0)={0xc}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r6 = syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0) ioctl$EVIOCGLED(r6, 0x80284511, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), 0x4) 3.490703368s ago: executing program 1 (id=2738): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000004800010000000000000000000a00806e0800000000000000140001800d2a79075827af5aa534d6815c2e93f10c000280", @ANYRES32=0x0], 0x3c}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r6, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000"]) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[], 0x48) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000380), &(0x7f0000000400)=0x68) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 3.081432354s ago: executing program 3 (id=2739): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000070a010300000000000000000a0040010900010073797a31000000000900020073797a32"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x8004) 3.026778505s ago: executing program 4 (id=2740): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff08000440000000810800084000000003200001"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00178018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) 2.946218065s ago: executing program 3 (id=2741): socket(0xf, 0xa, 0x3b) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001440)={'bond0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, [0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x80000) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r4, 0xc0844123, &(0x7f0000000000)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) write$cgroup_int(r5, &(0x7f00000000c0)=0x5, 0x12) socket$kcm(0x10, 0x2, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r6, 0x0) socket$inet_udp(0x2, 0x2, 0x0) unshare(0x8000000) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x66) 2.877694064s ago: executing program 4 (id=2742): syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) socket$inet6(0xa, 0x400000000001, 0x0) open(&(0x7f00000000c0)='.\x00', 0x800, 0xd0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2.504721134s ago: executing program 4 (id=2743): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xe0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xa}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0x120, 0x880, 0x0, 0x0) 2.382448475s ago: executing program 4 (id=2744): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000280)={&(0x7f0000002080)=[{0x7, 0x211, 0x0, 0x0}, {0x50, 0x40f5, 0x0, 0x0}], 0x2}) 2.319343086s ago: executing program 1 (id=2745): socket$nl_route(0x10, 0x3, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, 0x0, 0x4000805) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x14, 0x28b}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.982518734s ago: executing program 1 (id=2746): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/56, 0x38}, 0x1fff}], 0x1, 0x1832b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000001440)="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", 0x5ad, 0x6d91fb6102d8910c, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 1.83927147s ago: executing program 1 (id=2747): syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000140)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd8, 0xa, 0xd0e0000, 0xd8, 0x100, 0x1a8, 0x1d8, 0x1d8, 0x1a8, 0x1d8, 0x3, 0x0, {[{{@ip={@local, @multicast2, 0xffffff00, 0xff, 'veth0\x00', 'team0\x00', {}, {}, 0x2, 0x3, 0x40}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0xffff, 0x800, 0x1, 'syz1\x00', 'syz0\x00', {0x3}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0x2, 0x4, 0x3, 0x5, 0x3], 0x5, 0x5}, {0x0, [0x6, 0x6, 0x1, 0x7, 0x5, 0x5], 0x3, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x40, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @multicast2}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 646.245571ms ago: executing program 2 (id=2748): r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x648, 0x30, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [{0x5b0, 0x1, [@m_skbmod={0x74, 0x13, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x800, 0x9a85, 0x6, 0xd, 0x54}, 0xd}}]}, {0x21, 0x6, "90e3b7d8879cea2f8ba55766497a380a1c32c8afebdee9564440e8e978"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0xa8, 0x6, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5eb6, 0xa, 0x20000000, 0x9, 0x5}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x4}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_TYPE={0x6, 0x5, 0x2}]}, {0x45, 0x6, "3ee43d0e72ad4c341ddf30e8d07bf7743e064dd3b377c84bc037d47680c356711aab96eaca0f6753a9bf31d09e7478547fd459b009f8176a1ad45212c79bbb621c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ctinfo={0xc0, 0x6, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3}]}, {0x89, 0x6, "28904742a2b51a4e6f2b55fffd22301d425f2d28ae347713f12d5e9d46744689d7244aa1e1798221c6fea6678406396010ad012306fa172e78b016517a3b33ff8e4dbceca5393ff2f20217e03bad25174cdcacbab222f6fae4694bb64a5e824a789a71325857cbaedaf53c78a8f319d1f4a5a6d3fcf76c109e802871bebdd8878f67e0d0fc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_xt={0x28c, 0x2, 0x0, 0x0, {{0x7}, {0x22c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0xdd, 0x6, {0x8, 'mangle\x00', 0x1, 0x400, "924afd90481778605e5f2eea7e9b5c04463edda7fc3d55507fbb202af5581a2a9b6cbf84937d5b5b99224943dc2bcf48307222234e206443e7b60f42e6cc29cfccde7cd129c30694675168d30e7790ec823422759d53bef4ccf18da882d3f69cc05e149fc53d0908571b014c83c03373f2b4f88514eaf1399749eb52929f6f95c22b4e5b966efcaf792ca542e97927db6a0bf58117bf49dc0f1029cd4677e30c199233c3e2d04dcd8c08cddd9bbdd3c088cc5a"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x91, 0x6, {0x1, 'filter\x00', 0xa8, 0xa, "79bb29b7134cbd5ac13564109f8304db55b6d971f07f5bd31dfc7fa8028873d10b040681e0e655e8f6a79a16960d85d2f2121865b9263f9732ad28476130da57a32985e82fb8be0628683412cbd043119145a0ef05f5abd4132e52af2bf90e9b9ec2b1847f5128"}}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x51, 0x6, {0x1, 'nat\x00', 0x4, 0xe8a, "b4b2f0c030d77f49da74c818059136acd6cf59d496bbc2e7029dd388fcc931f43e7a16858cbb5d"}}, @TCA_IPT_HOOK={0x8}]}, {0x3a, 0x6, "e953316a0817b23401a80a38be5e445969116bb7d8a70a6ca771182dea4760bd84d166ef5161aa40d193cb19d0e4b1399cded9c961ad"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0xf0, 0x4, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x6, 0x2, 0x9, 0x7}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x5, 0x10000000, 0x4, 0x8}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x5, 0x80000001, 0x4}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}]}, {0x61, 0x6, "fc36f826477e680902707b500274a2f49e6484c516c92a312bf3f7e0fe9f13d1e603fa1fec7f14a3befd3b9bfd433fa9785c200feb22d8abb4fddd608fdcd2ed246c8853dfa66b7129ce9a97e141313bf5296f7f579de41474ff8c1979"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x54, 0x10, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}]}, {0x15, 0x6, "3b348867e4881d97691793f67aeba5d81d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x84, 0x1, [@m_ctinfo={0x80, 0x15, 0x0, 0x0, {{0xb}, {0x4}, {0x51, 0x6, "007c0bda1c2d40b853b4df622006243a2aed0b14626178023dc917b115d50783414e65298a0e47c9b60dd59956e0a1beb0a05a6b642edf8b3ad156310365969e24f4b675c58a2b85e911255ab0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x1}}}}]}]}, 0x648}, 0x1, 0x0, 0x0, 0x20000084}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x74, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x16}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89fe, &(0x7f0000000380)={'sit0\x00', 0x0}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xb) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x1e8}, {&(0x7f0000000000)=""/108, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/52, 0x14}, {&(0x7f00000007c0)=""/152, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}, 0x400}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') r6 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r7, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000380)="90", 0x1}], 0x2) 1.258925ms ago: executing program 0 (id=2750): syz_open_dev$radio(&(0x7f0000000140), 0x2, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x4000000}) 0s ago: executing program 1 (id=2751): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r2, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x2100c0, 0x0) getpid() r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000100)={0xa, 0x7, 0x3, 0x6, 0x1b}) ioctl$TIOCMSET(r3, 0x5418, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f0000000300)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r8, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r8}) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc000) kernel console output (not intermixed with test programs): Product=db1a, bcdDevice=61.23 [ 385.169012][ T5943] usb 5-1: USB disconnect, device number 53 [ 385.184763][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.465086][ T5874] usb 2-1: usb_control_msg returned -32 [ 385.491403][T11574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1928'. [ 385.501419][ T5874] usbtmc 2-1:16.0: can't read capabilities [ 385.544397][ T5874] usb 2-1: USB disconnect, device number 36 [ 385.580744][T11584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1932'. [ 385.752121][ T5943] usb 4-1: USB disconnect, device number 45 [ 386.616674][T11603] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1938'. [ 387.165314][ T24] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 387.386963][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.398404][ T24] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 387.410986][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 387.425584][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.433784][ T24] usb 3-1: Product: syz [ 387.440461][ T24] usb 3-1: Manufacturer: syz [ 387.445084][ T24] usb 3-1: SerialNumber: syz [ 387.472370][ T24] cdc_mbim 3-1:1.0: skipping garbage [ 387.506505][ T980] usb 1-1: USB disconnect, device number 44 [ 387.679783][ T24] cdc_mbim 3-1:1.0: bind() failure [ 387.722792][ T24] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 387.784108][ T5874] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 387.795359][ T24] cdc_ncm 3-1:1.1: bind() failure [ 387.803348][T11617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1943'. [ 387.846788][ T24] usb 3-1: USB disconnect, device number 47 [ 387.985766][ T5874] usb 4-1: Using ep0 maxpacket: 32 [ 387.994374][ T5874] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.007347][ T5874] usb 4-1: config 0 has no interfaces? [ 388.015738][T11621] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1945'. [ 388.039824][ T5874] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 388.051287][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.064318][ T5874] usb 4-1: Product: syz [ 388.076317][ T5874] usb 4-1: Manufacturer: syz [ 388.124146][T11621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1945'. [ 388.143755][ T5874] usb 4-1: SerialNumber: syz [ 388.162289][ T5874] usb 4-1: config 0 descriptor?? [ 388.205395][ T5943] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 388.376670][ T5943] usb 1-1: Using ep0 maxpacket: 8 [ 388.396218][ T5943] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 388.415320][ T5943] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 388.455290][ T5943] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 388.475287][ T5943] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 388.512767][ T5943] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 388.537542][ T5943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.745991][ T24] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 388.781095][ T5943] usb 1-1: usb_control_msg returned -32 [ 388.795638][ T5943] usbtmc 1-1:16.0: can't read capabilities [ 388.817674][ T5943] usb 1-1: USB disconnect, device number 45 [ 388.996873][T11636] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1950'. [ 389.055315][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 389.078776][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 389.094115][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 389.104801][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 389.116791][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 389.133459][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 389.151372][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.384729][ T24] usb 2-1: usb_control_msg returned -32 [ 389.418369][ T24] usbtmc 2-1:16.0: can't read capabilities [ 389.453858][ T24] usb 2-1: USB disconnect, device number 37 [ 389.543343][T11640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1951'. [ 389.742329][T11646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1953'. [ 391.065380][ T24] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 391.189867][T11669] netlink: 'syz.4.1957': attribute type 10 has an invalid length. [ 391.198109][T11669] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 391.219991][T11669] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 391.275614][T11669] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 391.349749][T11674] syz_tun: entered allmulticast mode [ 391.355331][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.389180][ T24] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 391.453177][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 391.464464][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.492121][ T24] usb 2-1: Product: syz [ 391.500345][ T24] usb 2-1: Manufacturer: syz [ 391.505091][ T24] usb 2-1: SerialNumber: syz [ 391.530800][ T5874] usb 4-1: USB disconnect, device number 46 [ 391.557828][ T24] cdc_mbim 2-1:1.0: skipping garbage [ 391.706396][ T5943] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 391.749634][ T24] cdc_mbim 2-1:1.0: bind() failure [ 391.786187][ T24] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 391.794307][ T24] cdc_ncm 2-1:1.1: bind() failure [ 391.809257][ T24] usb 2-1: USB disconnect, device number 38 [ 392.031100][ T5943] usb 3-1: Using ep0 maxpacket: 8 [ 392.045536][ T5943] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 392.057355][ T5943] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 392.113269][ T5943] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 392.164183][ T5943] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 392.210582][ T5943] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 392.232500][ T5943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.350594][T11690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1965'. [ 392.503964][ T5943] usb 3-1: usb_control_msg returned -71 [ 392.533360][ T5943] usbtmc 3-1:16.0: can't read capabilities [ 392.631773][T11694] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1967'. [ 392.675812][ T5943] usb 3-1: USB disconnect, device number 48 [ 392.774688][T11698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1967'. [ 393.295463][ T24] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 393.545548][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 393.557656][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.569175][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.584021][ T24] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 393.611649][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.725364][ T5943] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 393.837737][ T24] usb 5-1: config 0 descriptor?? [ 393.917428][ T5943] usb 4-1: Using ep0 maxpacket: 32 [ 393.983741][ T5943] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 394.302926][ T24] savu 0003:1E7D:2D5A.0017: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 394.328025][ T5943] usb 4-1: config 0 has no interfaces? [ 394.352060][ T5943] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 394.361591][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.376397][ T5943] usb 4-1: Product: syz [ 394.381036][ T5943] usb 4-1: Manufacturer: syz [ 394.386214][ T5943] usb 4-1: SerialNumber: syz [ 394.394313][ T5943] usb 4-1: config 0 descriptor?? [ 394.491646][T11721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1975'. [ 394.539259][T11721] vlan2: entered promiscuous mode [ 394.819697][ T5864] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 394.987166][ T5864] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.998444][ T5864] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 395.017783][ T5864] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 395.027241][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.035452][ T5864] usb 3-1: Product: syz [ 395.039900][ T5864] usb 3-1: Manufacturer: syz [ 395.044648][ T5864] usb 3-1: SerialNumber: syz [ 395.055450][ T5942] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 395.280038][ T5864] cdc_mbim 3-1:1.0: skipping garbage [ 395.288438][ T5864] cdc_mbim 3-1:1.0: bind() failure [ 395.302114][ T5864] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 395.311688][ T5864] cdc_ncm 3-1:1.1: bind() failure [ 395.332142][ T5864] usb 3-1: USB disconnect, device number 49 [ 395.386320][ T5942] usb 2-1: config 128 has an invalid descriptor of length 128, skipping remainder of the config [ 395.411622][ T5942] usb 2-1: config 128 has 0 interfaces, different from the descriptor's value: 1 [ 395.451118][ T5942] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 395.467217][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.754929][ T5942] usb 2-1: Product: syz [ 395.762379][ T5942] usb 2-1: Manufacturer: syz [ 395.787750][ T5942] usb 2-1: SerialNumber: syz [ 396.041735][T11729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1977'. [ 397.058424][ T919] usb 5-1: USB disconnect, device number 54 [ 397.423912][T11755] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1982'. [ 397.491445][ T24] usb 4-1: USB disconnect, device number 47 [ 398.427364][ T5942] usb 2-1: USB disconnect, device number 39 [ 399.947648][T11792] netlink: 'syz.3.1992': attribute type 10 has an invalid length. [ 399.955919][T11792] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 399.967307][T11792] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 399.979879][T11792] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 400.131379][ T5874] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 400.347151][ T5874] usb 2-1: Using ep0 maxpacket: 32 [ 400.512755][ T5874] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.549445][ T5874] usb 2-1: config 0 has no interfaces? [ 400.575728][ T5874] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 400.584790][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.593434][ T5874] usb 2-1: Product: syz [ 400.598066][ T5874] usb 2-1: Manufacturer: syz [ 400.603050][ T5874] usb 2-1: SerialNumber: syz [ 400.771167][ T5874] usb 2-1: config 0 descriptor?? [ 400.793067][T11806] netlink: 'syz.4.1997': attribute type 2 has an invalid length. [ 400.882903][T11806] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1997'. [ 402.820026][T11824] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1999'. [ 402.907334][ T24] usb 2-1: USB disconnect, device number 40 [ 403.420218][T11831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2005'. [ 403.990681][T11839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2008'. [ 404.234588][T11850] netlink: 'syz.3.2010': attribute type 10 has an invalid length. [ 404.242571][T11850] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 404.254095][T11850] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 404.266531][T11850] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 404.550769][ T5942] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 404.776325][ T5942] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.815716][ T5942] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.839695][ T5942] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 404.863940][ T5942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.877610][ T5942] usb 5-1: config 0 descriptor?? [ 405.115547][ T5864] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 405.300451][ T5942] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 405.317899][ T5942] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 405.385282][ T5864] usb 3-1: Using ep0 maxpacket: 32 [ 405.385417][ T5942] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 405.407122][ T5864] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.421559][ T5864] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 405.451088][ T5864] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 405.461316][ T5942] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 405.464107][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.477768][ T5942] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 405.482240][ T5864] usb 3-1: Product: syz [ 405.487827][ T5942] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 405.489210][T11863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2016'. [ 405.505570][ T5942] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 405.526389][ T5942] cp2112 0003:10C4:EA90.0018: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 405.537953][ T5864] usb 3-1: Manufacturer: syz [ 405.537976][ T5864] usb 3-1: SerialNumber: syz [ 405.542851][ T5864] usb 3-1: config 0 descriptor?? [ 405.706190][ T5942] cp2112 0003:10C4:EA90.0018: Part Number: 0x00 Device Version: 0x00 [ 405.860481][ T5942] cp2112 0003:10C4:EA90.0018: error requesting SMBus config [ 405.873261][ T5942] cp2112 0003:10C4:EA90.0018: probe with driver cp2112 failed with error -32 [ 405.973923][ T5942] usb 5-1: USB disconnect, device number 55 [ 406.933192][T11880] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2019'. [ 407.813655][T11900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2025'. [ 408.385303][ T5942] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 408.675291][ T5942] usb 2-1: Using ep0 maxpacket: 32 [ 408.719279][ T5942] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 408.738107][ T5942] usb 2-1: config 0 has no interface number 0 [ 408.774730][ T5942] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 408.806872][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.831583][ T5864] usb 3-1: USB disconnect, device number 50 [ 408.857961][ T5942] usb 2-1: Product: syz [ 408.867195][ T5942] usb 2-1: Manufacturer: syz [ 408.871980][ T5942] usb 2-1: SerialNumber: syz [ 408.949297][ T5942] usb 2-1: config 0 descriptor?? [ 408.998108][ T5942] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 409.672536][T11925] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2031'. [ 409.744448][T11923] vlan2: entered promiscuous mode [ 410.405455][ T5874] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 410.505423][ T5864] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 410.565373][ T5874] usb 4-1: Using ep0 maxpacket: 8 [ 410.574903][ T5874] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 410.685371][ T5864] usb 5-1: Using ep0 maxpacket: 32 [ 410.700630][ T5864] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.711790][ T5874] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 410.737312][ T5864] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 410.747699][ T5874] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 410.784648][ T5874] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 410.801829][ T5864] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 410.878764][T11941] binder: 11940:11941 ioctl c00c6211 0 returned -14 [ 410.919473][ T5942] usb 2-1: qt2_attach - failed to power on unit: -71 [ 410.929497][ T24] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 410.945566][ T5942] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71 [ 410.980535][ T5942] usb 2-1: USB disconnect, device number 41 [ 410.991311][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.031902][ T5874] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 411.072395][ T5864] usb 5-1: Product: syz [ 411.096385][ T5864] usb 5-1: Manufacturer: syz [ 411.101015][ T5864] usb 5-1: SerialNumber: syz [ 411.116377][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.122582][ T24] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 411.159562][ T24] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 411.169630][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 411.246895][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.266565][ T5864] usb 5-1: config 0 descriptor?? [ 411.432214][ T5874] usb 4-1: GET_CAPABILITIES returned 0 [ 411.445503][ T5874] usbtmc 4-1:16.0: can't read capabilities [ 411.522009][T11952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2041'. [ 411.636822][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 411.647401][ T5874] usb 4-1: USB disconnect, device number 48 [ 413.405285][ T5942] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 413.592774][ T5874] usb 3-1: USB disconnect, device number 51 [ 413.621793][ T5942] usb 1-1: Using ep0 maxpacket: 32 [ 413.668485][ T5942] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 413.691039][ T5942] usb 1-1: config 0 has no interface number 0 [ 413.747266][ T5942] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 413.761931][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.793693][ T5942] usb 1-1: Product: syz [ 413.807946][ T5942] usb 1-1: Manufacturer: syz [ 413.833953][ T5942] usb 1-1: SerialNumber: syz [ 413.867640][ T5942] usb 1-1: config 0 descriptor?? [ 413.888461][ T5942] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 414.246386][ T24] usb 5-1: USB disconnect, device number 56 [ 414.571717][T11994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2054'. [ 414.657562][ T5942] usb 1-1: qt2_attach - failed to power on unit: -71 [ 414.688311][ T5942] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 414.872356][ T5942] usb 1-1: USB disconnect, device number 46 [ 414.931917][T11986] binder: 11985:11986 ioctl c00c6211 0 returned -14 [ 415.575849][ T5874] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 415.737043][ T5874] usb 1-1: Using ep0 maxpacket: 8 [ 415.745512][ T5874] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 415.780028][ T5874] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 415.855449][ T5874] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 415.894498][ T5874] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 415.916979][ T5874] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 415.937484][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.305425][ T5874] usb 1-1: GET_CAPABILITIES returned 0 [ 416.310960][ T5874] usbtmc 1-1:16.0: can't read capabilities [ 416.327908][ T5864] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 416.365303][ T24] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 416.501363][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 416.514312][ T5874] usb 1-1: USB disconnect, device number 47 [ 416.552227][ T5864] usb 2-1: Using ep0 maxpacket: 16 [ 416.577555][ T24] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 416.580389][ T5864] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 416.588242][ T24] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 416.617649][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 416.637883][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 416.656528][ T5864] usb 2-1: Product: syz [ 416.660860][ T5864] usb 2-1: Manufacturer: syz [ 416.670945][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.671045][ T5864] usb 2-1: SerialNumber: syz [ 416.747331][ T5864] usb 2-1: config 0 descriptor?? [ 416.972675][ T5864] usb 2-1: USB disconnect, device number 42 [ 418.685606][ T5942] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 419.034547][ T5942] usb 3-1: Using ep0 maxpacket: 32 [ 419.051225][ T5942] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 419.059568][ T5942] usb 3-1: config 0 has no interface number 0 [ 419.070487][ T5942] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 419.080447][ T5942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.091019][ T5942] usb 3-1: Product: syz [ 419.130342][ T5942] usb 3-1: Manufacturer: syz [ 419.245931][ T24] usb 4-1: USB disconnect, device number 49 [ 419.284022][ T5942] usb 3-1: SerialNumber: syz [ 419.351728][ T5942] usb 3-1: config 0 descriptor?? [ 419.364530][ T5942] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 419.677583][ T5942] usb 3-1: qt2_attach - failed to power on unit: -71 [ 419.684432][ T5942] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71 [ 419.736252][ T5942] usb 3-1: USB disconnect, device number 52 [ 419.940681][T12055] netlink: 'syz.1.2071': attribute type 1 has an invalid length. [ 420.176748][T12055] 8021q: adding VLAN 0 to HW filter on device bond10 [ 420.221098][T12055] bond9: (slave bond10): making interface the new active one [ 420.252159][T12055] bond9: (slave bond10): Enslaving as an active interface with an up link [ 420.315787][T12064] vlan2: entered promiscuous mode [ 420.654675][T12074] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2077'. [ 420.682147][ T5943] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 421.104868][ T5943] usb 5-1: Using ep0 maxpacket: 8 [ 421.121033][ T5943] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 421.142954][ T5943] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 421.164612][ T5943] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 421.235745][ T5943] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 421.286919][ T5943] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 421.335509][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.854357][ T5943] usb 5-1: GET_CAPABILITIES returned 0 [ 421.860830][ T5943] usbtmc 5-1:16.0: can't read capabilities [ 421.905879][ T5943] usb 5-1: USB disconnect, device number 57 [ 421.932006][ T24] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 422.318951][T12096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2082'. [ 422.480664][ T24] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 422.491328][ T24] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 422.518767][T12101] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2084'. [ 422.585354][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 422.594662][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.625056][T12101] vlan0: entered promiscuous mode [ 423.439433][ T5943] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 423.638906][ T5943] usb 4-1: Using ep0 maxpacket: 32 [ 423.652139][ T5943] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 423.708228][ T5943] usb 4-1: config 0 has no interface number 0 [ 423.839208][ T5943] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 423.932834][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.021681][ T5943] usb 4-1: Product: syz [ 424.033278][ T5943] usb 4-1: Manufacturer: syz [ 424.103175][ T5943] usb 4-1: SerialNumber: syz [ 424.129901][ T5943] usb 4-1: config 0 descriptor?? [ 424.168676][T12123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2089'. [ 424.192634][ T5943] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 424.355259][ T980] usb 1-1: USB disconnect, device number 48 [ 424.504471][ T5943] usb 4-1: qt2_attach - failed to power on unit: -71 [ 424.543879][ T5943] quatech2 4-1:0.51: probe with driver quatech2 failed with error -71 [ 424.589643][ T5943] usb 4-1: USB disconnect, device number 50 [ 424.656643][T12131] netlink: 'syz.0.2092': attribute type 1 has an invalid length. [ 424.682041][T12133] netlink: 'syz.4.2093': attribute type 2 has an invalid length. [ 424.751937][T12135] 8021q: adding VLAN 0 to HW filter on device bond6 [ 424.788143][T12135] bond5: (slave bond6): making interface the new active one [ 424.822944][T12135] bond5: (slave bond6): Enslaving as an active interface with an up link [ 425.080430][T12135] bond5: (slave gretap2): Enslaving as a backup interface with an up link [ 425.281632][ T980] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 425.539458][ T980] usb 5-1: Using ep0 maxpacket: 8 [ 425.566252][ T980] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 425.613103][ T980] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 425.681269][ T980] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 425.720707][ T980] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 425.733870][ T980] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 425.747660][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.055339][ T980] usb 5-1: GET_CAPABILITIES returned 0 [ 426.060836][ T980] usbtmc 5-1:16.0: can't read capabilities [ 426.248875][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 426.257998][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 426.267085][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 426.315573][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 426.324718][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 426.333821][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 426.342921][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 426.540672][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 426.556491][ T980] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 426.644749][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 426.653863][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 426.662945][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 426.820882][ T980] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 426.836434][ T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 426.894816][ T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 426.906022][ T980] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 426.926808][ T980] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 426.936179][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.953107][ T980] usb 4-1: config 0 descriptor?? [ 426.976480][T12162] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 426.999221][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 427.008297][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 427.017346][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 427.026381][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 427.035415][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 427.065296][ T5864] usb 5-1: USB disconnect, device number 58 [ 427.325375][T12169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2103'. [ 427.398311][ T980] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 427.405871][ T980] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 427.423476][ T980] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 427.452124][ T980] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 427.481214][ T980] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 427.515813][ T980] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 427.781108][ T980] usb 4-1: USB disconnect, device number 51 [ 427.810162][ T24] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 427.866268][T12180] netlink: 'syz.4.2107': attribute type 2 has an invalid length. [ 427.985420][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 427.994456][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.035321][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.057018][ T24] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 428.520213][T12186] netlink: 'syz.4.2109': attribute type 1 has an invalid length. [ 428.531627][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.544452][ T24] usb 2-1: config 0 descriptor?? [ 428.668621][T12189] 8021q: adding VLAN 0 to HW filter on device bond12 [ 428.680727][T12189] bond11: (slave bond12): making interface the new active one [ 428.689689][T12189] bond11: (slave bond12): Enslaving as an active interface with an up link [ 429.014988][T12195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2111'. [ 429.024505][ T24] savu 0003:1E7D:2D5A.001A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 429.030966][T12195] vlan2: entered promiscuous mode [ 429.349557][T12203] syz_tun (unregistering): left allmulticast mode [ 429.385786][ T980] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 429.419461][T12186] bond11: (slave gretap2): Enslaving as a backup interface with an up link [ 429.535917][ T980] usb 3-1: Using ep0 maxpacket: 16 [ 429.546002][ T980] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.560346][ T980] usb 3-1: config 0 has no interfaces? [ 429.566954][ T980] usb 3-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 429.568538][T12207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2115'. [ 429.611953][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.631924][ T980] usb 3-1: config 0 descriptor?? [ 430.215353][ T5980] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 430.304423][T12221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.313642][T12221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.535411][ T5980] usb 5-1: Using ep0 maxpacket: 8 [ 430.544662][ T5980] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 430.562481][ T5980] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 430.575653][ T5980] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 430.585697][ T5980] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 430.599184][ T5980] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 430.608279][ T5980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.987516][ T5980] usb 5-1: GET_CAPABILITIES returned 0 [ 430.997598][ T5980] usbtmc 5-1:16.0: can't read capabilities [ 431.260802][ T5942] usb 2-1: USB disconnect, device number 43 [ 431.305050][ T5980] usb 5-1: USB disconnect, device number 59 [ 431.693253][T12235] netlink: 'syz.1.2121': attribute type 10 has an invalid length. [ 432.027991][T12235] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 432.040754][T12235] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 432.056055][T12235] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 432.253698][ T5942] usb 3-1: USB disconnect, device number 53 [ 432.704713][T12248] netlink: 'syz.4.2126': attribute type 1 has an invalid length. [ 433.242989][T12262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2129'. [ 433.639215][T12248] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2126'. [ 434.415313][ T980] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 434.506174][ T5864] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 434.519528][T12287] vlan2: entered promiscuous mode [ 434.575684][ T980] usb 1-1: Using ep0 maxpacket: 8 [ 434.582886][ T980] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 434.595247][ T980] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 434.609242][ T980] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 434.628875][ T980] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 434.647947][ T980] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 434.660956][ T980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.671706][ T5864] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.722633][ T5864] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 434.741394][ T5864] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 434.757586][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.783820][ T5864] usb 5-1: Product: syz [ 434.791844][ T5864] usb 5-1: Manufacturer: syz [ 434.798297][ T5864] usb 5-1: SerialNumber: syz [ 434.827959][ T5864] cdc_mbim 5-1:1.0: skipping garbage [ 434.862293][T12294] netlink: 'syz.1.2141': attribute type 1 has an invalid length. [ 434.925369][ T980] usb 1-1: GET_CAPABILITIES returned 0 [ 434.932133][ T980] usbtmc 1-1:16.0: can't read capabilities [ 435.034680][ T5864] cdc_mbim 5-1:1.0: bind() failure [ 435.054394][ T5864] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 435.068902][ T5864] cdc_ncm 5-1:1.1: bind() failure [ 435.077684][T12294] 8021q: adding VLAN 0 to HW filter on device bond12 [ 435.111762][ T5864] usb 5-1: USB disconnect, device number 60 [ 435.140693][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 435.149776][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 435.158825][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 435.167881][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 435.176941][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 435.186021][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 435.194859][T12294] bond11: (slave bond12): making interface the new active one [ 435.195175][ C0] vkms_vblank_simulate: vblank timer overrun [ 435.239023][ T5980] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 435.294827][T12294] bond11: (slave bond12): Enslaving as an active interface with an up link [ 435.317428][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 435.326502][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 435.335645][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 435.344686][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 435.353720][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 435.365180][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 435.374308][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 435.383402][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 435.392445][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 435.404847][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 435.437874][ T5980] usb 4-1: Using ep0 maxpacket: 16 [ 435.469001][ T24] usb 1-1: USB disconnect, device number 49 [ 435.819469][T12306] batadv0: entered promiscuous mode [ 435.854689][T12306] vlan2: entered promiscuous mode [ 436.254294][T12294] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2141'. [ 436.367227][T12314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2145'. [ 436.387695][T12314] vlan2: entered promiscuous mode [ 437.515079][T12336] bond_slave_0: entered promiscuous mode [ 437.521017][T12336] bond_slave_1: entered promiscuous mode [ 437.615707][T12336] vlan2: entered promiscuous mode [ 437.660065][T12336] bond0: entered promiscuous mode [ 438.155156][ T5980] usb 4-1: unable to get BOS descriptor or descriptor too short [ 438.166355][ T5980] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 438.173997][ T5980] usb 4-1: can't read configurations, error -71 [ 438.357617][ T5864] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 438.517715][ T5864] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.531942][T12354] netlink: 'syz.3.2156': attribute type 10 has an invalid length. [ 438.540233][T12354] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 438.551787][T12354] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 438.564234][T12354] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 438.725340][ T24] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 438.749581][ T5864] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 438.780907][ T5864] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 438.789998][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.808129][ T5864] usb 3-1: Product: syz [ 438.818627][ T5864] usb 3-1: Manufacturer: syz [ 438.830430][ T5864] usb 3-1: SerialNumber: syz [ 438.863801][ T5864] cdc_mbim 3-1:1.0: skipping garbage [ 438.876962][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 438.899917][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 438.907730][T12356] netlink: 'syz.4.2157': attribute type 1 has an invalid length. [ 438.918010][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 438.933745][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 438.981534][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 439.039525][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 439.050231][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.100799][ T5864] cdc_mbim 3-1:1.0: bind() failure [ 439.152836][ T5864] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 439.159847][ T5864] cdc_ncm 3-1:1.1: bind() failure [ 439.180754][ T5864] usb 3-1: USB disconnect, device number 54 [ 439.222779][T12358] 8021q: adding VLAN 0 to HW filter on device bond15 [ 439.288358][T12358] bond14: (slave bond15): making interface the new active one [ 439.312888][T12358] bond14: (slave bond15): Enslaving as an active interface with an up link [ 439.389254][ T24] usb 2-1: GET_CAPABILITIES returned 0 [ 439.407642][ T24] usbtmc 2-1:16.0: can't read capabilities [ 439.592564][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 439.601676][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 439.610789][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 439.619874][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 439.628955][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 439.638047][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 439.665629][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 439.674754][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 439.683842][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 439.693156][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 439.702251][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 439.781118][ T24] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 439.796795][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 439.806005][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 439.815099][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 439.824214][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 439.833342][ C0] vkms_vblank_simulate: vblank timer overrun [ 439.903995][T12356] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2157'. [ 439.928179][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 439.997834][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.006186][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.008083][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.044113][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.055877][ T5943] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 440.070289][ T5942] usb 2-1: USB disconnect, device number 44 [ 440.099907][ T24] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 440.130944][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.153162][ T24] usb 4-1: config 0 descriptor?? [ 440.257512][ T5943] usb 3-1: Using ep0 maxpacket: 32 [ 440.267828][ T5943] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 440.277060][ T5943] usb 3-1: config 0 has no interface number 0 [ 440.287682][ T5943] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 440.300061][ T5943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.308380][ T5943] usb 3-1: Product: syz [ 440.388768][ T5943] usb 3-1: Manufacturer: syz [ 440.409130][ T5943] usb 3-1: SerialNumber: syz [ 440.447119][ T5943] usb 3-1: config 0 descriptor?? [ 440.479471][ T5943] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 440.665611][ T5943] usb 3-1: qt2_setup_urbs - submit read urb failed -8 [ 440.672643][ T5943] quatech2 3-1:0.51: probe with driver quatech2 failed with error -8 [ 440.682278][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 440.688672][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 440.724958][ T24] usb 4-1: USB disconnect, device number 54 [ 440.953667][ T5864] usb 3-1: USB disconnect, device number 55 [ 441.570883][T12407] netlink: 'syz.2.2173': attribute type 1 has an invalid length. [ 442.140421][T12411] 8021q: adding VLAN 0 to HW filter on device bond6 [ 442.227531][T12411] bond5: (slave bond6): making interface the new active one [ 442.249200][T12411] bond5: (slave bond6): Enslaving as an active interface with an up link [ 442.762082][T12407] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2173'. [ 442.805552][ T5864] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 442.819317][T12427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2178'. [ 443.069067][ T5864] usb 5-1: Using ep0 maxpacket: 8 [ 443.105524][ T5864] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 443.135383][ T5864] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 443.150640][ T5864] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 443.195340][ T5864] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 443.213958][ T5864] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 443.229068][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.979554][ T5864] usb 5-1: GET_CAPABILITIES returned 0 [ 443.985088][ T5864] usbtmc 5-1:16.0: can't read capabilities [ 444.180983][ T5864] usb 5-1: USB disconnect, device number 61 [ 446.615345][ T5943] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 447.009706][ T5943] usb 3-1: Using ep0 maxpacket: 8 [ 447.016842][ T5943] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 447.045574][ T5943] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 447.058931][ T5943] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 447.069435][ T5943] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 447.086412][ T5943] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 447.099841][ T5943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.126951][ T24] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 447.345416][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 447.379408][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.396942][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.410563][ T24] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 447.422573][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.445116][ T24] usb 2-1: config 0 descriptor?? [ 447.487785][ T5943] usb 3-1: GET_CAPABILITIES returned 0 [ 447.503768][ T5943] usbtmc 3-1:16.0: can't read capabilities [ 447.698732][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 447.707848][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 447.716989][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 447.726055][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 447.742086][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 447.751174][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 447.760237][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 447.774171][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 447.783259][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 447.792331][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 447.835704][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 447.844784][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 447.853862][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 447.925685][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 447.934764][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 447.943832][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 447.963112][ T24] savu 0003:1E7D:2D5A.001B: hiddev1,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 447.974498][ T5943] usb 3-1: USB disconnect, device number 56 [ 448.375507][ T980] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 449.176709][ T980] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 449.209699][ T980] usb 5-1: config 0 has no interface number 0 [ 449.327343][ T980] usb 5-1: New USB device found, idVendor=2013, idProduct=0259, bcdDevice= e.96 [ 449.341753][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.349963][ T980] usb 5-1: Product: syz [ 449.357852][ T980] usb 5-1: Manufacturer: syz [ 449.362540][ T980] usb 5-1: SerialNumber: syz [ 449.388521][ T980] usb 5-1: config 0 descriptor?? [ 449.396795][ T980] cx231xx 5-1:0.1: New device syz syz @ 12 Mbps (2013:0259) with 1 interfaces [ 449.407948][ T980] cx231xx 5-1:0.1: Not found matching IAD interface [ 450.902332][ T5943] usb 2-1: USB disconnect, device number 45 [ 451.065699][ T5980] usb 5-1: USB disconnect, device number 62 [ 451.393585][T12559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2217'. [ 451.527685][T12559] vlan2: entered promiscuous mode [ 451.666091][ T980] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 451.843254][ T980] usb 1-1: Using ep0 maxpacket: 32 [ 451.911546][ T980] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 451.921241][ T980] usb 1-1: config 0 has no interface number 0 [ 451.932748][ T980] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 451.942130][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.950359][ T980] usb 1-1: Product: syz [ 451.954588][ T980] usb 1-1: Manufacturer: syz [ 451.959658][ T980] usb 1-1: SerialNumber: syz [ 451.979952][ T980] usb 1-1: config 0 descriptor?? [ 452.128917][ T980] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 452.925393][ T24] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 453.103187][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 453.155638][T12581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2219'. [ 453.164673][T12581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2219'. [ 453.179086][T12581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2219'. [ 453.188406][T12581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2219'. [ 453.197438][T12581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2219'. [ 453.206488][T12581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2219'. [ 453.215574][T12581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2219'. [ 453.224536][T12581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2219'. [ 453.233560][T12581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2219'. [ 455.228197][ T980] usb 1-1: qt2_attach - failed to power on unit: -71 [ 455.300469][ T980] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 455.352981][ T980] usb 1-1: USB disconnect, device number 50 [ 455.588331][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 455.627137][ T24] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 455.634955][ T24] usb 3-1: can't read configurations, error -71 [ 455.756392][T12607] vlan2: entered promiscuous mode [ 455.956863][T12608] vlan2: entered promiscuous mode [ 456.124969][T12618] netlink: 'syz.3.2233': attribute type 1 has an invalid length. [ 456.574672][T12618] 8021q: adding VLAN 0 to HW filter on device bond10 [ 456.595010][T12618] bond9: (slave bond10): making interface the new active one [ 456.611450][T12618] bond9: (slave bond10): Enslaving as an active interface with an up link [ 456.900994][T12613] __nla_validate_parse: 39 callbacks suppressed [ 456.901008][T12613] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2233'. [ 456.921264][T12613] 8021q: adding VLAN 0 to HW filter on device bond9 [ 457.110613][ T5980] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 457.215403][ T5874] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 457.295308][ T5980] usb 2-1: Using ep0 maxpacket: 32 [ 457.304951][ T5980] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 457.313614][ T5980] usb 2-1: config 0 has no interface number 0 [ 457.324931][ T5980] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 457.336819][ T5980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.345057][ T5980] usb 2-1: Product: syz [ 457.362450][ T5980] usb 2-1: Manufacturer: syz [ 457.474779][ T5980] usb 2-1: SerialNumber: syz [ 457.485503][ T5874] usb 3-1: Using ep0 maxpacket: 16 [ 457.497682][ T5980] usb 2-1: config 0 descriptor?? [ 457.503861][ T5874] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 457.514278][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 457.527907][ T5874] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 457.549953][ T5980] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 457.597078][ T5874] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 457.623795][ T5874] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 457.636121][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.644376][ T5874] usb 3-1: Product: syz [ 457.650243][ T5874] usb 3-1: Manufacturer: syz [ 457.661852][ T5874] usb 3-1: SerialNumber: syz [ 457.763054][ T5874] usb 3-1: config 0 descriptor?? [ 457.792199][ T5874] mcba_usb 3-1:0.0: Can't find endpoints [ 457.980017][T12655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2244'. [ 458.170717][T12655] vlan2: entered promiscuous mode [ 458.287315][ T5874] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 458.455367][ T5874] usb 4-1: Using ep0 maxpacket: 16 [ 460.390117][ T5980] usb 2-1: qt2_attach - failed to power on unit: -71 [ 460.399876][ T5980] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71 [ 460.476810][ T5980] usb 2-1: USB disconnect, device number 46 [ 460.931719][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 461.111715][ T980] usb 3-1: USB disconnect, device number 59 [ 461.280943][ T5874] usb 4-1: unable to get BOS descriptor or descriptor too short [ 461.319079][ T5874] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 461.380170][ T5874] usb 4-1: can't read configurations, error -71 [ 461.515854][T12682] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2253'. [ 462.237456][T12697] netlink: 'syz.2.2257': attribute type 10 has an invalid length. [ 462.245537][T12697] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 462.515445][T12697] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 462.606297][T12697] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 464.494826][ T3599] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 464.931195][T12721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2264'. [ 464.947206][T12721] vlan0: entered allmulticast mode [ 465.015607][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 465.092318][T12721] bridge0: entered allmulticast mode [ 465.392671][T12725] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2265'. [ 465.403266][ T5864] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 465.642943][T12729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2266'. [ 465.645296][ T5864] usb 2-1: Using ep0 maxpacket: 16 [ 465.705704][T12729] vlan2: entered promiscuous mode [ 466.289682][T12745] netlink: 'syz.4.2270': attribute type 10 has an invalid length. [ 466.305321][T12745] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 466.605729][T12745] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 467.092896][T12745] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 467.124607][T12750] vlan1: entered promiscuous mode [ 467.508611][T12757] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2275'. [ 467.703033][T12759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2275'. [ 468.535318][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 469.145375][ T5864] usb 2-1: unable to get BOS descriptor or descriptor too short [ 469.171460][ T5864] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 469.223386][ T5864] usb 2-1: can't read configurations, error -71 [ 470.206728][ T24] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 470.382759][ T24] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 470.531759][T12800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2289'. [ 470.539411][ T24] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 470.569276][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 470.579558][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.475369][ T24] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 471.736548][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 471.755089][ T24] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 471.788766][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.815516][ T24] usb 3-1: Product: syz [ 471.820337][ T24] usb 3-1: Manufacturer: syz [ 471.829155][ T24] usb 3-1: SerialNumber: syz [ 471.859154][ T24] usb 3-1: config 0 descriptor?? [ 472.403864][ T24] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 472.419580][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 472.505365][ T5864] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 472.548705][ T24] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 472.556846][ T24] usb 3-1: media controller created [ 472.585300][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 472.628965][T12803] dtv5100: wlen = 0, aborting. [ 472.735354][ T5864] usb 1-1: Using ep0 maxpacket: 16 [ 472.908268][ T5943] usb 5-1: USB disconnect, device number 63 [ 473.265976][ T24] zl10353_read_register: readreg error (reg=127, ret==0) [ 473.273453][ T24] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 473.300453][ T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 473.655405][ T5943] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 473.839997][T12835] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2298'. [ 473.877766][ T5943] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 473.886161][ T5943] usb 5-1: config 0 has no interface number 0 [ 473.894648][ T5943] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 473.904075][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 473.912661][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.921019][ T5943] usb 5-1: Product: syz [ 473.983546][ T5874] usb 3-1: USB disconnect, device number 60 [ 474.072517][ T5874] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 474.094502][ T5943] usb 5-1: Manufacturer: syz [ 474.109672][ T5943] usb 5-1: SerialNumber: syz [ 474.150777][ T5943] usb 5-1: config 0 descriptor?? [ 474.241199][T12838] vlan2: entered promiscuous mode [ 474.367548][ T5943] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 474.431877][ T5943] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 474.443661][ T5943] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 474.500809][ T5943] usb 5-1: media controller created [ 474.545882][ T5943] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 475.085275][ T24] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 475.333602][ T24] usb 3-1: config 128 has an invalid descriptor of length 128, skipping remainder of the config [ 475.419216][ T24] usb 3-1: config 128 has 0 interfaces, different from the descriptor's value: 1 [ 475.506629][ T24] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 475.515852][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.523950][ T24] usb 3-1: Product: syz [ 475.528693][ T24] usb 3-1: Manufacturer: syz [ 475.533341][ T24] usb 3-1: SerialNumber: syz [ 475.729755][ T5864] usb 1-1: unable to get BOS descriptor or descriptor too short [ 475.743769][ T5864] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 475.763920][T12847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2301'. [ 475.823331][ T5943] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 475.877895][ T5864] usb 1-1: can't read configurations, error -71 [ 476.083815][T12857] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 476.465399][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 476.566066][ T5943] usb 5-1: USB disconnect, device number 64 [ 478.153338][ T24] usb 3-1: USB disconnect, device number 61 [ 478.468778][ T5864] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 478.634337][T12886] vlan2: entered promiscuous mode [ 478.745979][ T5864] usb 1-1: Using ep0 maxpacket: 32 [ 478.794064][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.806158][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.818352][ T5864] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 478.832040][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.140960][T12891] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2313'. [ 479.797467][ T5864] usb 1-1: config 0 descriptor?? [ 479.919893][T12894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2314'. [ 479.933738][T12894] vlan0: entered promiscuous mode [ 480.280516][ T5864] savu 0003:1E7D:2D5A.001C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 481.859141][ T5943] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 482.370966][T12936] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2325'. [ 482.385462][T12938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2327'. [ 482.435443][ T5943] usb 5-1: device descriptor read/64, error -71 [ 482.845280][ T5943] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 482.995443][ T5943] usb 5-1: device descriptor read/64, error -71 [ 483.105537][ T5943] usb usb5-port1: attempt power cycle [ 483.455382][ T5943] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 483.617703][ T5943] usb 5-1: device descriptor read/8, error -71 [ 483.752228][ T24] usb 1-1: USB disconnect, device number 53 [ 483.888194][ T5943] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 483.983241][ T5943] usb 5-1: device descriptor read/8, error -71 [ 484.145738][ T5943] usb usb5-port1: unable to enumerate USB device [ 484.832284][T12970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2339'. [ 484.868390][T12970] vlan2: entered promiscuous mode [ 485.251629][T12985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2337'. [ 485.260875][T12985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2337'. [ 485.270333][T12985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2337'. [ 485.485943][T12985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2337'. [ 485.559029][T12985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2337'. [ 485.585380][ T5922] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 485.664001][T12985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2337'. [ 485.674987][T12985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2337'. [ 485.745611][ T5922] usb 3-1: Using ep0 maxpacket: 32 [ 485.758793][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.792872][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.862471][ T5922] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 485.932193][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.973770][ T5922] usb 3-1: config 0 descriptor?? [ 486.405335][ T5874] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 486.467654][ T5922] savu 0003:1E7D:2D5A.001D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 486.635287][ T5874] usb 1-1: device descriptor read/64, error -71 [ 486.905305][ T5874] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 487.218922][ T5874] usb 1-1: device descriptor read/64, error -71 [ 487.350869][ T5874] usb usb1-port1: attempt power cycle [ 487.810512][ T5874] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 487.896847][ T5874] usb 1-1: device descriptor read/8, error -71 [ 488.158290][ T5874] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 488.225307][ T5874] usb 1-1: device descriptor read/8, error -71 [ 488.397263][ T5874] usb usb1-port1: unable to enumerate USB device [ 489.177275][T13038] __nla_validate_parse: 41 callbacks suppressed [ 489.177294][T13038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2358'. [ 489.194701][T13038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2358'. [ 489.204226][T13038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2358'. [ 489.214485][T13038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2358'. [ 489.223513][T13038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2358'. [ 489.237190][T13038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2358'. [ 489.248367][T13038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2358'. [ 489.260916][T13038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2358'. [ 489.270388][T13038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2358'. [ 489.281083][T13038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2358'. [ 490.081604][ T5922] usb 3-1: USB disconnect, device number 62 [ 490.545369][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 492.098529][T13073] vlan2: entered promiscuous mode [ 492.211604][T13053] kvm: user requested TSC rate below hardware speed [ 492.341145][T13053] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 492.455480][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 493.905299][ T5942] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 494.067384][ T5942] usb 2-1: Using ep0 maxpacket: 32 [ 494.074073][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.107767][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.148729][ T5942] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 494.195067][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.227392][ T5942] usb 2-1: config 0 descriptor?? [ 494.557171][T13115] netlink: 'syz.0.2380': attribute type 1 has an invalid length. [ 494.703460][T13118] 8021q: adding VLAN 0 to HW filter on device bond8 [ 494.716145][ T5942] savu 0003:1E7D:2D5A.001E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 494.717780][T13118] bond7: (slave bond8): making interface the new active one [ 494.739097][T13118] bond7: (slave bond8): Enslaving as an active interface with an up link [ 495.514063][ T5942] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 495.758210][ T5942] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 495.774365][ T5942] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 495.814725][ T5942] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 495.834212][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.425311][ T5874] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 496.645897][ T5874] usb 5-1: device descriptor read/64, error -71 [ 496.653339][ T30] audit: type=1326 audit(1756507374.620:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13143 comm="syz.0.2387" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x0 [ 496.745532][ T5942] usb 3-1: USB disconnect, device number 63 [ 496.804561][ T5922] usb 2-1: USB disconnect, device number 49 [ 497.075314][ T5874] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 497.255491][ T5874] usb 5-1: device descriptor read/64, error -71 [ 497.380442][ T5874] usb usb5-port1: attempt power cycle [ 497.879783][ T5874] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 497.930644][ T5874] usb 5-1: device descriptor read/8, error -71 [ 498.401774][ T5874] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 498.513317][ T5874] usb 5-1: device descriptor read/8, error -71 [ 498.635581][ T5874] usb usb5-port1: unable to enumerate USB device [ 498.713833][T13183] __nla_validate_parse: 35 callbacks suppressed [ 498.713851][T13183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2396'. [ 498.811101][T13185] netlink: 'syz.1.2397': attribute type 1 has an invalid length. [ 498.954765][T13190] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2401'. [ 498.987992][T13187] 8021q: adding VLAN 0 to HW filter on device bond14 [ 499.004523][T13187] bond13: (slave bond14): making interface the new active one [ 499.023074][T13187] bond13: (slave bond14): Enslaving as an active interface with an up link [ 499.154283][T13190] vlan2: entered promiscuous mode [ 499.420234][T13207] netlink: 'syz.3.2403': attribute type 10 has an invalid length. [ 499.429366][T13207] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 499.441000][T13207] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 499.453731][T13207] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 499.965624][ T5942] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 500.316426][ T5942] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 500.328590][ T5942] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 500.339058][ T5942] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 500.364658][ T5942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.903857][ T6502] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 500.962382][ T5874] usb 1-1: USB disconnect, device number 58 [ 501.244095][T13242] netlink: 'syz.3.2416': attribute type 1 has an invalid length. [ 501.420557][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.427146][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.924342][T13246] 8021q: adding VLAN 0 to HW filter on device bond12 [ 502.036693][T13246] bond11: (slave bond12): making interface the new active one [ 502.044457][T13246] bond11: (slave bond12): Enslaving as an active interface with an up link [ 502.065305][ T24] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 502.355465][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 502.467280][ T24] usb 5-1: config 0 has an invalid interface number: 246 but max is 0 [ 502.490123][ T24] usb 5-1: config 0 has no interface number 0 [ 502.540006][ T24] usb 5-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 502.591882][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 502.603408][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.644084][ T24] usb 5-1: Product: syz [ 502.668218][ T24] usb 5-1: Manufacturer: syz [ 502.694398][ T24] usb 5-1: SerialNumber: syz [ 502.889280][ T24] usb 5-1: config 0 descriptor?? [ 503.497896][ T24] msi2500 5-1:0.246: Registered as swradio24 [ 503.517688][ T24] msi2500 5-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 503.656773][T13267] netlink: 'syz.0.2419': attribute type 10 has an invalid length. [ 503.664779][T13267] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 503.795526][T13267] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 503.808225][T13267] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 504.985058][ T5922] usb 5-1: USB disconnect, device number 73 [ 505.095362][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 506.338154][T13318] netlink: 'syz.0.2434': attribute type 1 has an invalid length. [ 506.451091][T13318] 8021q: adding VLAN 0 to HW filter on device bond10 [ 506.459763][T13318] bond9: (slave bond10): making interface the new active one [ 506.467866][T13318] bond9: (slave bond10): Enslaving as an active interface with an up link [ 507.179279][ T3599] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 507.519159][T13350] netlink: 'syz.1.2444': attribute type 10 has an invalid length. [ 507.527174][T13350] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 507.537727][T13350] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 507.550199][T13350] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 507.908943][ T5942] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 508.158997][ T5942] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 508.177744][ T5942] usb 5-1: config 0 has no interface number 0 [ 508.249336][ T5942] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 508.311961][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.320777][T13363] vlan2: entered promiscuous mode [ 508.333734][ T5942] usb 5-1: Product: syz [ 508.341917][ T5942] usb 5-1: Manufacturer: syz [ 508.350606][ T5942] usb 5-1: SerialNumber: syz [ 508.364291][ T5942] usb 5-1: config 0 descriptor?? [ 508.595703][ T5942] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 508.637031][ T5942] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 508.690385][ T5942] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 508.719811][ T5942] usb 5-1: media controller created [ 508.872080][ T5942] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 508.983489][ T5942] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 509.046108][ T5942] usb 5-1: USB disconnect, device number 74 [ 509.146889][T13374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2453'. [ 509.163531][T13374] vlan0: entered promiscuous mode [ 509.453606][T13379] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2454'. [ 509.642566][T13384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2454'. [ 510.092587][T13395] netlink: 'syz.4.2458': attribute type 1 has an invalid length. [ 510.225740][T13395] 8021q: adding VLAN 0 to HW filter on device bond17 [ 510.289095][T13395] bond16: (slave bond17): making interface the new active one [ 510.368574][T13395] bond16: (slave bond17): Enslaving as an active interface with an up link [ 510.829640][T13405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2460'. [ 510.898734][ T24] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 510.965284][ T980] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 511.145370][ T980] usb 3-1: Using ep0 maxpacket: 32 [ 511.145371][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 511.147089][ T24] usb 1-1: config 4 has an invalid interface number: 51 but max is 0 [ 511.167126][ T980] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 511.167479][ T24] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 511.175475][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 511.204158][ T24] usb 1-1: config 4 has no interface number 0 [ 511.212761][ T980] usb 3-1: config 0 has no interface number 0 [ 511.228588][ T980] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 511.238293][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.249284][ T980] usb 3-1: Product: syz [ 511.253596][ T980] usb 3-1: Manufacturer: syz [ 511.270645][ T980] usb 3-1: SerialNumber: syz [ 511.271226][ T24] usb 1-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 511.307295][ T980] usb 3-1: config 0 descriptor?? [ 511.375263][ T24] usb 1-1: config 4 interface 51 has no altsetting 0 [ 511.379037][ T980] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 511.401640][ T24] usb 1-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 511.421849][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.443872][ T24] usb 1-1: Product: syz [ 511.488800][ T24] usb 1-1: Manufacturer: syz [ 511.513822][ T24] usb 1-1: SerialNumber: syz [ 511.554330][ T24] cdc_eem 1-1:4.51: probe with driver cdc_eem failed with error -22 [ 511.576845][ T980] usb 3-1: qt2_attach - failed to power on unit: -71 [ 511.586552][ T980] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71 [ 511.689757][ T980] usb 3-1: USB disconnect, device number 64 [ 512.034839][T13423] netlink: 'syz.1.2463': attribute type 10 has an invalid length. [ 512.055405][T13423] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 512.076408][T13423] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 512.110754][T13423] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 512.498306][T13432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2467'. [ 512.562026][T13432] vlan2: entered promiscuous mode [ 513.465295][ T5943] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 513.575308][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 513.590985][T13448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2465'. [ 513.600289][T13448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2465'. [ 513.609492][T13448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2465'. [ 513.618652][T13448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2465'. [ 513.627802][T13448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2465'. [ 513.683247][ T5943] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 513.773913][ T5943] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 513.793999][ T5943] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 513.807140][ T5943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.917313][ T24] usb 1-1: USB disconnect, device number 59 [ 514.922642][ T5874] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 515.095399][ T5874] usb 5-1: Using ep0 maxpacket: 32 [ 515.230375][T13475] netlink: 'syz.1.2479': attribute type 10 has an invalid length. [ 515.238818][ T5874] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 515.248269][T13475] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 515.281411][T13475] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 515.307590][T13475] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 515.339629][ T5874] usb 5-1: config 0 has no interface number 0 [ 515.350714][ T5874] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 515.381687][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.398438][ T5874] usb 5-1: Product: syz [ 515.404742][ T5874] usb 5-1: Manufacturer: syz [ 515.413574][ T5874] usb 5-1: SerialNumber: syz [ 515.443677][ T5874] usb 5-1: config 0 descriptor?? [ 515.466684][ T5874] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 515.521187][T13479] tipc: Cannot configure node identity twice [ 515.704837][ T5874] usb 5-1: qt2_attach - failed to power on unit: -71 [ 515.714359][ T5874] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71 [ 515.741115][ T5874] usb 5-1: USB disconnect, device number 75 [ 515.825470][ T5922] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 515.977299][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.989375][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.039720][ T5922] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 516.087185][ T24] usb 3-1: USB disconnect, device number 65 [ 516.173979][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.304366][ T5922] usb 1-1: config 0 descriptor?? [ 517.084784][ T5922] usbhid 1-1:0.0: can't add hid device: -32 [ 517.131289][ T5922] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 517.206268][ T5922] usb 1-1: USB disconnect, device number 60 [ 517.855584][ T5874] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 518.215324][ T5874] usb 4-1: Using ep0 maxpacket: 32 [ 518.229320][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.287247][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.321615][ T5874] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 518.328535][T13528] netlink: 'syz.0.2496': attribute type 10 has an invalid length. [ 518.344825][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.384841][ T5874] usb 4-1: config 0 descriptor?? [ 518.396954][T13528] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 518.451816][T13528] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 518.464909][T13528] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 518.745075][ T980] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 518.815143][ T5874] savu 0003:1E7D:2D5A.001F: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 518.953253][ T980] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 519.005100][ T980] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 519.055304][ T980] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 519.064356][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.335364][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 519.675346][ T5922] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 519.695523][ T5874] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 519.837961][ T5922] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 519.860159][ T5922] usb 2-1: config 0 has no interface number 0 [ 519.865617][ T5874] usb 1-1: Using ep0 maxpacket: 32 [ 519.874029][ T5874] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 519.882664][ T5874] usb 1-1: config 0 has no interface number 0 [ 519.893921][ T5874] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 519.903560][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.912588][ T5874] usb 1-1: Product: syz [ 519.915347][ T5922] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 519.934943][ T5874] usb 1-1: Manufacturer: syz [ 519.934939][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.934963][ T5922] usb 2-1: Product: syz [ 519.960897][ T5922] usb 2-1: Manufacturer: syz [ 519.963299][ T5874] usb 1-1: SerialNumber: syz [ 519.972008][ T5922] usb 2-1: SerialNumber: syz [ 519.990742][ T5874] usb 1-1: config 0 descriptor?? [ 520.001605][ T5922] usb 2-1: config 0 descriptor?? [ 520.017571][ T5874] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 520.211289][ T5874] usb 1-1: qt2_attach - failed to power on unit: -71 [ 520.242851][ T5922] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 520.258694][ T5922] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 520.270369][ T5874] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 520.306410][ T5922] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 520.329059][ T5922] usb 2-1: media controller created [ 520.329272][ T5874] usb 1-1: USB disconnect, device number 61 [ 520.429657][ T5922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 520.501077][ T5943] usb 4-1: USB disconnect, device number 57 [ 520.548042][ T5922] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 520.622807][ T5922] usb 2-1: USB disconnect, device number 50 [ 521.177669][ T5874] usb 5-1: USB disconnect, device number 76 [ 521.216779][T13555] __nla_validate_parse: 41 callbacks suppressed [ 521.216793][T13555] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2505'. [ 521.302095][T13555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2505'. [ 521.375288][ T24] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 521.507513][T13565] netlink: 'syz.4.2508': attribute type 10 has an invalid length. [ 521.515597][T13565] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 521.555245][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.569252][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.576041][T13565] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 521.584740][ T24] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 521.605444][T13565] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 521.605960][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.688929][ T24] usb 2-1: config 0 descriptor?? [ 522.333433][ T24] usbhid 2-1:0.0: can't add hid device: -32 [ 522.340485][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 522.384728][ T24] usb 2-1: USB disconnect, device number 51 [ 522.766221][ T5922] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 522.867788][ T5980] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 522.945330][ T5922] usb 5-1: Using ep0 maxpacket: 16 [ 523.037130][ T5980] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 523.075250][ T5980] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 523.094658][ T24] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 523.114680][ T5980] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 523.151011][ T5980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.175384][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 523.255403][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 523.330524][ T5922] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 523.342533][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.353025][ T5922] usb 5-1: Product: syz [ 523.359507][ T5922] usb 5-1: Manufacturer: syz [ 523.387580][ T5922] usb 5-1: SerialNumber: syz [ 523.421524][ T5922] usb 5-1: config 0 descriptor?? [ 523.509805][ T5980] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 523.695412][ T5942] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 523.703120][ T5980] usb 4-1: Using ep0 maxpacket: 32 [ 523.710934][ T5980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.722373][ T5980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.734363][ T5980] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 523.746101][ T5980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.768154][ T5980] usb 4-1: config 0 descriptor?? [ 523.815621][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 523.864356][ T5942] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 523.872735][ T5942] usb 2-1: config 0 has no interface number 0 [ 523.885875][ T5942] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 523.981089][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.021382][ T5942] usb 2-1: Product: syz [ 524.038453][ T5942] usb 2-1: Manufacturer: syz [ 524.046351][ T5942] usb 2-1: SerialNumber: syz [ 524.058674][ T5942] usb 2-1: config 0 descriptor?? [ 524.174373][ T5922] dvb_usb_dtv5100 5-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 524.212586][ T5980] savu 0003:1E7D:2D5A.0020: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 524.332254][ T5942] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 524.346312][ T5942] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 524.361052][ T5942] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 524.379304][ T5942] usb 2-1: media controller created [ 524.564764][ T5942] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 524.725633][ T5942] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 524.830544][ T5942] usb 2-1: USB disconnect, device number 52 [ 525.171897][T13605] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2518'. [ 525.203048][T13605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2518'. [ 525.425650][ T5943] usb 5-1: USB disconnect, device number 77 [ 525.537893][ T5874] usb 3-1: USB disconnect, device number 66 [ 525.699380][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 526.155241][ T24] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 526.162835][ T24] usb 1-1: can't read configurations, error -71 [ 526.316945][T13625] netlink: 'syz.1.2524': attribute type 10 has an invalid length. [ 526.324930][T13625] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 526.338799][T13625] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 526.554212][T13625] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 526.623077][ T5942] usb 4-1: USB disconnect, device number 58 [ 527.325571][ T5942] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 527.507217][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.520212][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 527.530421][ T5942] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 527.542619][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.562073][ T5942] usb 3-1: config 0 descriptor?? [ 527.615396][ T5943] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 527.777277][ T5943] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 527.785603][ T5943] usb 2-1: config 0 has no interface number 0 [ 527.793904][ T5943] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 527.795364][ T5957] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 527.803124][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.819315][ T5943] usb 2-1: Product: syz [ 527.823550][ T5943] usb 2-1: Manufacturer: syz [ 527.828441][ T5943] usb 2-1: SerialNumber: syz [ 527.836957][ T5943] usb 2-1: config 0 descriptor?? [ 527.976958][ T5957] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 527.997565][ T5957] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 528.007168][ T5957] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 528.021647][ T5957] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.057713][ T5943] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 528.090922][ T5943] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 528.109312][ T5943] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 528.119871][ T5943] usb 2-1: media controller created [ 528.154217][ T5943] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 528.176768][ T5942] usbhid 3-1:0.0: can't add hid device: -32 [ 528.184024][ T5942] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 528.284862][ T5957] usb 3-1: USB disconnect, device number 67 [ 528.297174][ T5943] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 528.376346][ T5943] usb 2-1: USB disconnect, device number 53 [ 529.035415][ T24] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 529.298114][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 530.215364][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 530.723695][ T5943] usb 1-1: USB disconnect, device number 64 [ 531.145357][ T5943] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 531.529684][ T5943] usb 1-1: Using ep0 maxpacket: 16 [ 531.732830][ T5943] usb 1-1: config 4 has an invalid interface number: 51 but max is 0 [ 531.753766][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 531.761570][ T5943] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 531.761595][ T5943] usb 1-1: config 4 has no interface number 0 [ 531.761632][ T5943] usb 1-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 531.761658][ T5943] usb 1-1: config 4 interface 51 has no altsetting 0 [ 531.782032][ T5943] usb 1-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 531.838731][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.849138][ T5943] usb 1-1: Product: syz [ 531.853352][ T5943] usb 1-1: Manufacturer: syz [ 531.858705][ T5943] usb 1-1: SerialNumber: syz [ 531.888849][ T5943] cdc_eem 1-1:4.51: probe with driver cdc_eem failed with error -22 [ 531.894387][ T24] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 531.905492][ T24] usb 4-1: can't read configurations, error -71 [ 532.395812][ T24] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 532.639311][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.738585][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.777136][ T24] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 532.822774][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.843527][ T24] usb 4-1: config 0 descriptor?? [ 533.525519][ T24] usbhid 4-1:0.0: can't add hid device: -32 [ 533.531635][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 533.570267][ T24] usb 4-1: USB disconnect, device number 60 [ 534.089162][ T24] usb 1-1: USB disconnect, device number 65 [ 534.352192][T13734] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2555'. [ 534.857919][ T30] audit: type=1326 audit(1756507412.700:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13728 comm="syz.0.2556" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 534.987542][ T30] audit: type=1326 audit(1756507412.700:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13728 comm="syz.0.2556" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 534.988309][T13734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2555'. [ 535.064666][ T30] audit: type=1326 audit(1756507412.710:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13728 comm="syz.0.2556" exe="/root/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 535.186313][ T30] audit: type=1326 audit(1756507412.710:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13728 comm="syz.0.2556" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 535.345369][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 535.373849][ T30] audit: type=1326 audit(1756507412.710:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13728 comm="syz.0.2556" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 535.431720][T13740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2557'. [ 535.533193][ T30] audit: type=1326 audit(1756507412.710:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13728 comm="syz.0.2556" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 535.555129][ C1] vkms_vblank_simulate: vblank timer overrun [ 535.717121][ T30] audit: type=1326 audit(1756507412.710:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13728 comm="syz.0.2556" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 535.739039][ C1] vkms_vblank_simulate: vblank timer overrun [ 535.850137][ T30] audit: type=1326 audit(1756507412.710:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13728 comm="syz.0.2556" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 535.872052][ C1] vkms_vblank_simulate: vblank timer overrun [ 535.951098][ T30] audit: type=1326 audit(1756507412.710:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13728 comm="syz.0.2556" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 535.972924][ C1] vkms_vblank_simulate: vblank timer overrun [ 535.988301][ T30] audit: type=1326 audit(1756507412.710:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13728 comm="syz.0.2556" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 536.775765][ T5943] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 536.965623][ T5943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.986811][ T5943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.011293][ T5943] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 537.037527][ T5943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.216327][ T5943] usb 1-1: config 0 descriptor?? [ 537.851192][ T5943] usbhid 1-1:0.0: can't add hid device: -32 [ 537.907768][ T5943] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 538.115274][ T5943] usb 1-1: USB disconnect, device number 66 [ 538.688057][T13797] netlink: 'syz.1.2574': attribute type 10 has an invalid length. [ 538.790497][T13797] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 538.805667][T13797] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 538.862301][T13797] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 539.285624][T13805] vlan0: entered promiscuous mode [ 540.215871][ T5942] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 540.470528][T13834] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2587'. [ 540.703335][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.719160][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.729828][ T5942] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 540.739976][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.756471][ T5942] usb 2-1: config 0 descriptor?? [ 541.178301][ T5942] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 541.215444][ T5942] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 541.222463][ T5942] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 541.295582][ T5942] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 541.310796][ T5942] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 541.370293][ T5942] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 541.391678][ T5942] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 541.430039][ T5942] cp2112 0003:10C4:EA90.0021: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 541.740132][ T5942] cp2112 0003:10C4:EA90.0021: error requesting version [ 541.765112][ T5942] cp2112 0003:10C4:EA90.0021: probe with driver cp2112 failed with error -32 [ 541.787453][ T5980] hid-generic 00A0:0008:0003.0022: unknown main item tag 0x0 [ 541.809382][ T5980] hid-generic 00A0:0008:0003.0022: unknown main item tag 0x0 [ 541.828820][ T5980] hid-generic 00A0:0008:0003.0022: unknown main item tag 0x0 [ 541.845758][ T5980] hid-generic 00A0:0008:0003.0022: hidraw0: HID v0.05 Device [syz1] on syz0 [ 541.993982][T13851] vlan1: entered promiscuous mode [ 542.255001][T13853] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2591'. [ 542.853798][T13858] fido_id[13858]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 543.006184][T13864] bridge2: entered allmulticast mode [ 543.047429][T13866] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2598'. [ 543.364312][T13877] netlink: 'syz.3.2602': attribute type 10 has an invalid length. [ 543.386541][T13877] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 543.409582][T13877] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 543.427918][T13877] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 543.477082][ T5942] usb 2-1: USB disconnect, device number 54 [ 543.536439][ T5980] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 544.069583][ T5980] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 544.091492][ T5980] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 544.135140][ T5980] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 544.154404][ T5980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.767338][T13893] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2604'. [ 545.535468][ T5957] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 545.698630][ T5957] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.729025][ T5957] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.760827][ T5957] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 545.784104][ T5957] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.181919][ T5957] usb 1-1: config 0 descriptor?? [ 546.249082][ T980] usb 3-1: USB disconnect, device number 68 [ 546.384921][T13938] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2623'. [ 546.627861][ T5957] hid_parser_main: 12 callbacks suppressed [ 546.627884][ T5957] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 546.643779][ T5957] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 546.712201][ T5957] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 546.720920][ T5957] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 546.728851][ T5957] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 546.737037][ T5957] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 546.744338][ T5957] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 546.758164][ T5957] cp2112 0003:10C4:EA90.0023: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 546.898123][ T5957] cp2112 0003:10C4:EA90.0023: error requesting version [ 546.963442][ T5957] cp2112 0003:10C4:EA90.0023: probe with driver cp2112 failed with error -32 [ 547.029099][T13955] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2626'. [ 547.795442][ T5874] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 547.878623][T13979] pim6reg: entered allmulticast mode [ 547.945352][ T5874] usb 5-1: Using ep0 maxpacket: 32 [ 547.953907][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.968655][ T5943] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 547.978051][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.995282][ T5874] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 548.011929][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.030783][ T5874] usb 5-1: config 0 descriptor?? [ 548.139891][ T5943] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 548.160019][ T5943] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 548.170039][ T5943] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 548.181321][ T5943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.500471][ T5874] savu 0003:1E7D:2D5A.0024: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 548.739955][ T5874] usb 1-1: USB disconnect, device number 67 [ 549.102181][T13996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2640'. [ 549.210006][T13996] vlan1: entered promiscuous mode [ 549.671723][T14007] netlink: 'syz.3.2642': attribute type 10 has an invalid length. [ 549.682718][T14007] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 549.712940][T14007] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 549.729302][T14007] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 550.594349][T14013] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2645'. [ 550.702104][ T5942] usb 3-1: USB disconnect, device number 69 [ 550.847521][T14018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2647'. [ 550.885296][ T5874] usb 5-1: USB disconnect, device number 78 [ 551.415867][ T5980] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 551.675250][ T5980] usb 2-1: Using ep0 maxpacket: 32 [ 551.687517][ T5980] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 551.722790][ T5980] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 551.849909][ T5980] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 551.859276][ T5980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.867579][ T5980] usb 2-1: Product: syz [ 551.871921][ T5980] usb 2-1: Manufacturer: syz [ 551.877657][ T5980] usb 2-1: SerialNumber: syz [ 551.895114][ T5980] usb 2-1: config 0 descriptor?? [ 551.935348][ T5957] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 552.101079][ T5957] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 552.111649][ T5957] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 552.159475][ T5957] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 552.191912][ T5957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.598401][T14055] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2661'. [ 552.854525][T14060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2663'. [ 552.965379][ T5957] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 553.125714][ T5957] usb 1-1: Using ep0 maxpacket: 32 [ 553.125777][T14066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2666'. [ 553.143632][ T5957] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.161318][ T5957] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.178868][ T5957] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 553.198970][ T5957] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.222239][ T5957] usb 1-1: config 0 descriptor?? [ 553.233579][T14066] vlan2: entered promiscuous mode [ 553.803256][ T5957] savu 0003:1E7D:2D5A.0025: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 554.607601][ T5957] usb 4-1: USB disconnect, device number 61 [ 554.664172][T14082] netlink: 'syz.3.2672': attribute type 1 has an invalid length. [ 554.674656][T14082] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 554.860280][ T5957] usb 2-1: USB disconnect, device number 55 [ 556.406684][ T5874] usb 1-1: USB disconnect, device number 68 [ 557.265585][T14134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2684'. [ 557.327071][T14134] vlan1: entered promiscuous mode [ 557.505399][ T24] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 557.679670][ T24] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 557.705282][ T24] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 557.730116][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 557.737156][ T5874] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 557.782232][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.065765][ T5874] usb 1-1: Using ep0 maxpacket: 32 [ 558.093394][ T5874] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 558.129461][ T5874] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 558.141248][ T5874] usb 1-1: config 0 has no interface number 0 [ 558.158745][ T5874] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 558.185594][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.218724][ T5874] usb 1-1: Product: syz [ 558.223036][ T5874] usb 1-1: Manufacturer: syz [ 558.279373][ T5874] usb 1-1: SerialNumber: syz [ 558.295863][ T5874] usb 1-1: config 0 descriptor?? [ 558.319012][ T5874] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 560.221993][ T24] usb 5-1: USB disconnect, device number 79 [ 560.528382][ T5874] usb 1-1: qt2_attach - failed to power on unit: -71 [ 560.569841][ T5874] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 560.657688][ T24] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 560.691989][ T5874] usb 1-1: USB disconnect, device number 69 [ 560.855725][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 560.872049][ T24] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 560.883497][ T24] usb 5-1: config 0 has no interface number 0 [ 560.904477][ T24] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 560.914984][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.931143][ T24] usb 5-1: Product: syz [ 560.937801][ T24] usb 5-1: Manufacturer: syz [ 560.944381][ T24] usb 5-1: SerialNumber: syz [ 560.964643][ T24] usb 5-1: config 0 descriptor?? [ 560.991044][ T24] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 561.220583][ T24] usb 5-1: qt2_attach - failed to power on unit: -71 [ 561.230268][ T24] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71 [ 561.287708][ T24] usb 5-1: USB disconnect, device number 80 [ 561.704211][T14202] bridge3: entered allmulticast mode [ 561.925725][ T5874] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 562.147862][ T5874] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 562.199209][ T5874] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 562.250590][ T5874] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 562.280774][T14213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2707'. [ 562.289970][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.314247][T14214] kvm: pic: single mode not supported [ 562.314343][T14214] kvm: pic: level sensitive irq not supported [ 562.338717][T14214] kvm: pic: non byte read [ 562.351069][T14214] kvm: pic: non byte read [ 562.356279][T14214] kvm: pic: non byte read [ 562.362399][T14214] kvm: pic: non byte read [ 562.368124][T14214] kvm: pic: non byte read [ 562.369630][T14213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2707'. [ 562.372952][T14214] kvm: pic: single mode not supported [ 562.388862][T14214] kvm: pic: non byte read [ 562.399376][T14214] kvm: pic: non byte read [ 562.404176][T14213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2707'. [ 562.406690][T14214] kvm: pic: non byte read [ 562.418224][T14214] kvm: pic: non byte read [ 562.425934][T14213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2707'. [ 562.455530][T14213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2707'. [ 562.469066][T14213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2707'. [ 562.500021][T14213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2707'. [ 562.509685][T14213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2707'. [ 562.531581][T14213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2707'. [ 562.543926][T14213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2707'. [ 562.865897][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.874595][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.116827][T14225] vlan2: entered promiscuous mode [ 563.495387][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 564.635262][ T5980] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 564.815415][ T5980] usb 3-1: Using ep0 maxpacket: 32 [ 564.832692][ T5980] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 564.852372][ T5980] usb 3-1: config 0 has no interface number 0 [ 564.884878][ T5980] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 565.003788][ T5980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.033396][ T5980] usb 3-1: Product: syz [ 565.070516][ T5980] usb 3-1: Manufacturer: syz [ 565.090796][ T5980] usb 3-1: SerialNumber: syz [ 565.144760][ T5980] usb 3-1: config 0 descriptor?? [ 565.167228][ T5980] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 565.193568][ T24] usb 1-1: USB disconnect, device number 70 [ 565.370219][ T5980] usb 3-1: qt2_attach - failed to power on unit: -71 [ 565.379825][ T5980] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71 [ 565.415314][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 565.436333][ T5980] usb 3-1: USB disconnect, device number 70 [ 565.469269][T14256] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 565.685265][ T24] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 565.741984][T14263] vlan2: entered promiscuous mode [ 565.847005][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 565.867741][ T24] usb 1-1: config 0 has no interface number 0 [ 565.879078][ T24] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 565.892675][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.934264][ T24] usb 1-1: Product: syz [ 565.951691][ T24] usb 1-1: Manufacturer: syz [ 565.973582][ T24] usb 1-1: SerialNumber: syz [ 565.992721][T14269] vlan2: entered promiscuous mode [ 566.004287][ T24] usb 1-1: config 0 descriptor?? [ 566.215949][ T24] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 566.482008][ T24] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 566.493248][ T24] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 566.501413][ T24] usb 1-1: media controller created [ 567.015231][ T5980] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 567.031964][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 567.146007][ T24] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 567.356968][ T5980] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 567.367437][ T5980] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 567.391076][ T5980] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 567.435724][ T24] usb 1-1: USB disconnect, device number 71 [ 567.462681][T14290] __nla_validate_parse: 84 callbacks suppressed [ 567.462697][T14290] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2739'. [ 567.483341][ T5980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.558621][T14293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 567.757305][T14299] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2742'. [ 567.779856][T14299] vlan2: entered promiscuous mode [ 567.835406][ T24] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 568.029951][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 568.037215][ T24] usb 1-1: config 4 has an invalid interface number: 51 but max is 0 [ 568.047679][ T24] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 568.069528][ T24] usb 1-1: config 4 has no interface number 0 [ 568.076665][ T24] usb 1-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 568.121376][ T24] usb 1-1: config 4 interface 51 has no altsetting 0 [ 568.254985][ T24] usb 1-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 568.265425][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.284714][ T24] usb 1-1: Product: syz [ 568.292899][ T24] usb 1-1: Manufacturer: syz [ 568.299204][ T24] usb 1-1: SerialNumber: syz [ 568.320782][ T24] cdc_eem 1-1:4.51: probe with driver cdc_eem failed with error -22 [ 568.495365][ T5922] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 568.713396][ T5922] usb 5-1: Using ep0 maxpacket: 16 [ 569.441625][ T5922] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 569.684608][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.712487][ T5980] usb 3-1: USB disconnect, device number 71 [ 569.819169][ T5922] usb 5-1: Product: syz [ 569.828112][ T5922] usb 5-1: Manufacturer: syz [ 569.868329][ T5922] usb 5-1: SerialNumber: syz [ 569.939753][T14321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2747'. [ 569.978054][T14321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2747'. [ 570.013192][T14321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2747'. [ 570.030967][T14321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2747'. [ 570.106424][T14321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2747'. [ 570.154683][T14321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2747'. [ 570.166568][ T5922] usb 5-1: config 0 descriptor?? [ 570.205326][T14321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2747'. [ 570.228355][T14321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2747'. [ 570.315241][ T5980] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 570.438120][ T5864] usb 1-1: USB disconnect, device number 72 [ 570.506895][ T5980] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 570.522856][ T5980] usb 3-1: config 0 has no interface number 0 [ 570.554929][ T5980] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 570.584857][ T5980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.607554][ T5980] usb 3-1: Product: syz [ 570.631554][ T5980] usb 3-1: Manufacturer: syz [ 570.648630][ T5980] usb 3-1: SerialNumber: syz [ 570.657696][ T5980] usb 3-1: config 0 descriptor?? [ 570.687812][ T5922] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 570.696984][ T5922] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 570.728442][ T5922] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 570.736824][ T5922] usb 5-1: media controller created [ 570.781606][ T5922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 570.865380][ T5980] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 570.918886][ T5980] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 570.941264][ T5980] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 570.962010][ T5980] usb 3-1: media controller created [ 571.190416][ T5980] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 571.386415][T14305] dtv5100: wlen = 0, aborting. [ 571.391343][ T5922] zl10353_read_register: readreg error (reg=127, ret==0) [ 571.495449][T14322] dtv5100: wlen = 0, aborting. [ 571.506127][ T5922] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 571.514065][ T5922] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 571.555383][T14322] ------------[ cut here ]------------ [ 571.560873][T14322] usb 5-1: BOGUS control dir, pipe 80005180 doesn't match bRequestType c0 [ 571.572574][T14322] WARNING: CPU: 0 PID: 14322 at drivers/usb/core/urb.c:413 usb_submit_urb+0x112b/0x1830 [ 571.582884][T14322] Modules linked in: [ 571.587195][T14322] CPU: 0 UID: 0 PID: 14322 Comm: syz.2.2748 Not tainted syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 571.596596][T14322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 571.606699][T14322] RIP: 0010:usb_submit_urb+0x112b/0x1830 [ 571.612504][T14322] Code: 0f b6 44 05 00 84 c0 0f 85 e8 05 00 00 45 0f b6 45 00 48 c7 c7 00 ff 34 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 46 6f 57 fa 90 <0f> 0b 90 90 49 bc 00 00 00 00 00 fc ff df e9 17 f4 ff ff 89 e9 80 [ 571.632201][T14322] RSP: 0018:ffffc900037475f0 EFLAGS: 00010246 [ 571.638401][T14322] RAX: 1de4b563842d0a00 RBX: ffff888146b3bd00 RCX: 0000000000080000 [ 571.646400][T14322] RDX: ffffc9000c98a000 RSI: 0000000000006e52 RDI: 0000000000006e53 [ 571.654369][T14322] RBP: 1ffff11009a3a130 R08: 0000000000000003 R09: 0000000000000004 [ 571.662543][T14322] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: dffffc0000000000 [ 571.670694][T14322] R13: ffff88804d1d0980 R14: 0000000080005180 R15: ffff88807ce9e600 [ 571.678704][T14322] FS: 0000000000000000(0000) GS:ffff888125c18000(0063) knlGS:00000000f5506b40 [ 571.687698][T14322] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 571.694272][T14322] CR2: 000000003321bffc CR3: 000000006c970000 CR4: 00000000003526f0 [ 571.702281][T14322] Call Trace: [ 571.705577][T14322] [ 571.708500][T14322] usb_start_wait_urb+0x114/0x4c0 [ 571.713522][T14322] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 571.719104][T14322] usb_control_msg+0x232/0x3e0 [ 571.723854][T14322] dtv5100_i2c_msg+0x250/0x330 [ 571.728644][T14322] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 571.733488][T14322] __i2c_transfer+0x874/0x2170 [ 571.738336][T14322] ? lockdep_hardirqs_on+0x9c/0x150 [ 571.743622][T14322] ? __pfx___i2c_transfer+0x10/0x10 [ 571.748874][T14322] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 571.754233][T14322] ? i2c_transfer+0x11d/0x3a0 [ 571.758924][T14322] i2c_transfer+0x25b/0x3a0 [ 571.763424][T14322] ? __pfx_i2c_transfer+0x10/0x10 [ 571.768516][T14322] ? __might_fault+0xb0/0x130 [ 571.773188][T14322] i2c_transfer_buffer_flags+0x105/0x190 [ 571.778858][T14322] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 571.785005][T14322] ? _copy_from_user+0x94/0xb0 [ 571.789806][T14322] i2cdev_write+0x112/0x1b0 [ 571.794294][T14322] vfs_writev+0x4b3/0x960 [ 571.798644][T14322] ? __pfx_i2cdev_write+0x10/0x10 [ 571.803648][T14322] ? __pfx_vfs_writev+0x10/0x10 [ 571.808547][T14322] ? __fget_files+0x2a/0x420 [ 571.813120][T14322] ? __fget_files+0x3a0/0x420 [ 571.818093][T14322] ? __fget_files+0x2a/0x420 [ 571.822676][T14322] do_writev+0x14d/0x2d0 [ 571.826947][T14322] ? __pfx_do_writev+0x10/0x10 [ 571.831692][T14322] ? lockdep_hardirqs_on+0x9c/0x150 [ 571.836907][T14322] __do_fast_syscall_32+0xb6/0x2b0 [ 571.842001][T14322] do_fast_syscall_32+0x34/0x80 [ 571.846897][T14322] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 571.853216][T14322] RIP: 0023:0xf7fe3539 [ 571.857297][T14322] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 571.876934][T14322] RSP: 002b:00000000f550655c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 571.885346][T14322] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000040 [ 571.893303][T14322] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 571.901361][T14322] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 571.909339][T14322] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 571.917315][T14322] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 571.925412][T14322] [ 571.928410][T14322] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 571.935671][T14322] CPU: 0 UID: 0 PID: 14322 Comm: syz.2.2748 Not tainted syzkaller #0 PREEMPT(full) [ 571.945010][T14322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 571.955052][T14322] Call Trace: [ 571.958310][T14322] [ 571.961219][T14322] dump_stack_lvl+0x99/0x250 [ 571.965797][T14322] ? __asan_memcpy+0x40/0x70 [ 571.970361][T14322] ? __pfx_dump_stack_lvl+0x10/0x10 [ 571.975539][T14322] ? __pfx__printk+0x10/0x10 [ 571.980113][T14322] vpanic+0x281/0x750 [ 571.984073][T14322] ? __pfx__printk+0x10/0x10 [ 571.988641][T14322] ? __pfx_vpanic+0x10/0x10 [ 571.993119][T14322] ? is_bpf_text_address+0x292/0x2b0 [ 571.998388][T14322] panic+0xb9/0xc0 [ 572.002083][T14322] ? __pfx_panic+0x10/0x10 [ 572.006483][T14322] __warn+0x31b/0x4b0 [ 572.010439][T14322] ? usb_submit_urb+0x112b/0x1830 [ 572.015455][T14322] ? usb_submit_urb+0x112b/0x1830 [ 572.020451][T14322] report_bug+0x2be/0x4f0 [ 572.024760][T14322] ? usb_submit_urb+0x112b/0x1830 [ 572.029772][T14322] ? usb_submit_urb+0x112b/0x1830 [ 572.034782][T14322] ? usb_submit_urb+0x112d/0x1830 [ 572.039780][T14322] handle_bug+0x84/0x160 [ 572.043996][T14322] exc_invalid_op+0x1a/0x50 [ 572.048492][T14322] asm_exc_invalid_op+0x1a/0x20 [ 572.053319][T14322] RIP: 0010:usb_submit_urb+0x112b/0x1830 [ 572.058928][T14322] Code: 0f b6 44 05 00 84 c0 0f 85 e8 05 00 00 45 0f b6 45 00 48 c7 c7 00 ff 34 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 46 6f 57 fa 90 <0f> 0b 90 90 49 bc 00 00 00 00 00 fc ff df e9 17 f4 ff ff 89 e9 80 [ 572.078514][T14322] RSP: 0018:ffffc900037475f0 EFLAGS: 00010246 [ 572.084564][T14322] RAX: 1de4b563842d0a00 RBX: ffff888146b3bd00 RCX: 0000000000080000 [ 572.092520][T14322] RDX: ffffc9000c98a000 RSI: 0000000000006e52 RDI: 0000000000006e53 [ 572.100471][T14322] RBP: 1ffff11009a3a130 R08: 0000000000000003 R09: 0000000000000004 [ 572.108417][T14322] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: dffffc0000000000 [ 572.116367][T14322] R13: ffff88804d1d0980 R14: 0000000080005180 R15: ffff88807ce9e600 [ 572.124330][T14322] usb_start_wait_urb+0x114/0x4c0 [ 572.129337][T14322] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 572.134868][T14322] usb_control_msg+0x232/0x3e0 [ 572.139615][T14322] dtv5100_i2c_msg+0x250/0x330 [ 572.144361][T14322] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 572.149194][T14322] __i2c_transfer+0x874/0x2170 [ 572.153935][T14322] ? lockdep_hardirqs_on+0x9c/0x150 [ 572.159117][T14322] ? __pfx___i2c_transfer+0x10/0x10 [ 572.164294][T14322] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 572.169643][T14322] ? i2c_transfer+0x11d/0x3a0 [ 572.174306][T14322] i2c_transfer+0x25b/0x3a0 [ 572.178801][T14322] ? __pfx_i2c_transfer+0x10/0x10 [ 572.183823][T14322] ? __might_fault+0xb0/0x130 [ 572.188496][T14322] i2c_transfer_buffer_flags+0x105/0x190 [ 572.194127][T14322] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 572.200262][T14322] ? _copy_from_user+0x94/0xb0 [ 572.205008][T14322] i2cdev_write+0x112/0x1b0 [ 572.209488][T14322] vfs_writev+0x4b3/0x960 [ 572.213795][T14322] ? __pfx_i2cdev_write+0x10/0x10 [ 572.218810][T14322] ? __pfx_vfs_writev+0x10/0x10 [ 572.223642][T14322] ? __fget_files+0x2a/0x420 [ 572.228211][T14322] ? __fget_files+0x3a0/0x420 [ 572.232878][T14322] ? __fget_files+0x2a/0x420 [ 572.237466][T14322] do_writev+0x14d/0x2d0 [ 572.241727][T14322] ? __pfx_do_writev+0x10/0x10 [ 572.246483][T14322] ? lockdep_hardirqs_on+0x9c/0x150 [ 572.251670][T14322] __do_fast_syscall_32+0xb6/0x2b0 [ 572.256769][T14322] do_fast_syscall_32+0x34/0x80 [ 572.261596][T14322] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 572.267900][T14322] RIP: 0023:0xf7fe3539 [ 572.271952][T14322] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 572.291555][T14322] RSP: 002b:00000000f550655c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 572.299946][T14322] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000040 [ 572.307895][T14322] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 572.315854][T14322] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 572.323817][T14322] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 572.331774][T14322] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 572.339755][T14322] [ 572.343051][T14322] Kernel Offset: disabled [ 572.347383][T14322] Rebooting in 86400 seconds..