last executing test programs: 2.173833056s ago: executing program 0 (id=3566): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) 2.017428406s ago: executing program 0 (id=3568): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0x2a060400) writev(r0, &(0x7f0000000280)=[{&(0x7f0000001040)='>', 0x1}], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) 1.791880151s ago: executing program 0 (id=3572): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="48000000150081fb7042ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c49388a562af5745e17b8c119418f03000000d6e74703c48f93b8ecf6d65b223d", 0x48}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20044890) r1 = socket$netlink(0x10, 0x3, 0x1) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x8}, 0x2c) socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000160a030200000000001fc700020000000900020073790000000000000900010073797a30000000002c0003801800038014000100776c616e310000000000000000000000080002400000d250080001400000000014000000"], 0x80}}, 0x20000084) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) socket$vsock_stream(0x28, 0x1, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000080000000000000000000a20000000000a01010000000000000000010000030900010073797a31000000e13f000000030a010400000000000000000100ffff0900030073797a310000000014000480080002400000000008000140000000050900010073797a3100000000140000001100010000000000040000000700000a28f97b"], 0x88}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000030900010073797a310000000018010000030a010400000000000000000100ffff0900030073797a31000000002000048008000140000000051400030076657468315f6d6163767461700000000900010073797a3100000000280008"], 0x160}}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="300000003f0007012bbd70000000000002"], 0x30}, 0x1, 0x0, 0x0, 0x48011}, 0xc020) open(0x0, 0x4c27e, 0x0) 1.789957414s ago: executing program 2 (id=3573): mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.48759518s ago: executing program 3 (id=3578): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x724}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001680)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfcbb, &(0x7f00000002c0)=ANY=[], 0x0) 1.426154718s ago: executing program 3 (id=3579): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000540)) close_range(r0, r0, 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x3e9, 0x100, 0x8070bd29, 0x25dfdbfd, {0x22, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x76}}, 0x3c}, 0x1, 0x0, 0x0, 0x14008400}, 0x44000) sendto$inet(r1, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="e186", 0x2}], 0x1}, 0x24044041) recvmmsg(r1, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) 1.342433882s ago: executing program 0 (id=3580): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='GPL\x00'}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB='\\('], 0x150) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @random="53adea90150f", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "3c0200", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x1}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000003540)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, @local, {[], {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0xffff}}}}}}}, 0x0) 1.172950213s ago: executing program 4 (id=3583): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 1.171743719s ago: executing program 0 (id=3584): socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r7], 0x54}}, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.052515719s ago: executing program 4 (id=3585): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x25dfdbfc, 0x8}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x7, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x34, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 1.024806828s ago: executing program 1 (id=3586): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xa, 0x4, 0x8, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 965.085126ms ago: executing program 1 (id=3587): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r0, r0, 0x2) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x3e9, 0x100, 0x8070bd29, 0x25dfdbfd, {0x22, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x76}}, 0x3c}, 0x1, 0x0, 0x0, 0x14008400}, 0x44000) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="e186", 0x2}], 0x1}, 0x24044041) recvmmsg(r2, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) 819.492754ms ago: executing program 2 (id=3588): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f00000003c0)="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", 0x801}, {0x0}], 0x2) 819.157938ms ago: executing program 1 (id=3589): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x724}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001680)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfcbb, &(0x7f00000002c0)=ANY=[], 0x0) 817.371501ms ago: executing program 0 (id=3590): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000020), 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@ip_ttl={{0x14, 0x11a, 0x1, 0x16}}], 0x18}, 0x0) 708.482016ms ago: executing program 1 (id=3591): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="48000000150081fb7042ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c49388a562af5745e17b8c119418f03000000d6e74703c48f93b8ecf6d65b223d", 0x48}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20044890) r1 = socket$netlink(0x10, 0x3, 0x1) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x8}, 0x2c) socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000160a030200000000001fc700020000000900020073790000000000000900010073797a30000000002c0003801800038014000100776c616e310000000000000000000000080002400000d250080001400000000014000000"], 0x80}}, 0x20000084) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) socket$vsock_stream(0x28, 0x1, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000080000000000000000000a20000000000a01010000000000000000010000030900010073797a31000000e13f000000030a010400000000000000000100ffff0900030073797a310000000014000480080002400000000008000140000000050900010073797a3100000000140000001100010000000000040000000700000a28f97b"], 0x88}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000030900010073797a310000000018010000030a010400000000000000000100ffff0900030073797a31000000002000048008000140000000051400030076657468315f6d6163767461700000000900010073797a3100000000280008"], 0x160}}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="300000003f0007012bbd70000000000002"], 0x30}, 0x1, 0x0, 0x0, 0x48011}, 0xc020) open(0x0, 0x4c27e, 0x0) 670.36368ms ago: executing program 4 (id=3592): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 626.429729ms ago: executing program 2 (id=3593): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x20, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) 464.030003ms ago: executing program 3 (id=3594): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000240)="040cbca69ad4e1312c0c4bdd00a1f10aa415a8bdf83012b145abb56ebc1e9babb64407dc38925204", 0x28, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x800}], 0x1, 0x1, 0x0) 463.778229ms ago: executing program 2 (id=3595): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 366.446079ms ago: executing program 1 (id=3596): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x294}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 340.386293ms ago: executing program 4 (id=3597): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xa, 0x4, 0x8, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 264.09882ms ago: executing program 2 (id=3598): mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 263.938791ms ago: executing program 3 (id=3599): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000002480)={&(0x7f0000002380)={0x24, @long={0x3, 0x2}}, 0x14, &(0x7f0000002440)={0x0, 0x30}}, 0x4040044) 211.201831ms ago: executing program 4 (id=3600): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r0, r0, 0x2) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x3e9, 0x100, 0x8070bd29, 0x25dfdbfd, {0x22, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x76}}, 0x3c}, 0x1, 0x0, 0x0, 0x14008400}, 0x44000) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="e186", 0x2}], 0x1}, 0x24044041) recvmmsg(r2, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) 176.265573ms ago: executing program 3 (id=3601): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1802000000040000000000000000000085"], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x724}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001680)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfcbb, &(0x7f00000002c0)=ANY=[], 0x0) 72.601487ms ago: executing program 4 (id=3602): mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./myproc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./myproc/scsi/device_info\x00', 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) write(r0, 0x0, 0x0) 61.933294ms ago: executing program 1 (id=3603): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) bind$bt_hci(r3, 0x0, 0x0) write(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r0, r4, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8000000001000001, 0x0, 0x1}}, 0x40) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x80802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000040)) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000080)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r8 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r8, &(0x7f0000005400)=[{{&(0x7f0000001200)={0xa, 0x4e21, 0x7, @local, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000012c0)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x135, 0x0, 0x2, 0x4}}}], 0x18}}], 0x1, 0x40810) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020752f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffffff850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r9, r7, 0x25, 0x0, @val=@netkit={@void, @value=r9}}, 0x1c) 48.971085ms ago: executing program 2 (id=3604): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000540)) close_range(r0, r0, 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x3e9, 0x100, 0x8070bd29, 0x25dfdbfd, {0x22, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x76}}, 0x3c}, 0x1, 0x0, 0x0, 0x14008400}, 0x44000) sendto$inet(r1, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="e186", 0x2}], 0x1}, 0x24044041) recvmmsg(r1, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) 0s ago: executing program 3 (id=3605): prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0x0, &(0x7f00000004c0)={0x8, 0x8d}, 0x0) getpgid(0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): le to read config index 0 descriptor/start: -71 [ 156.717509][ T5703] usb 1-1: can't read configurations, error -71 [ 156.790235][ T5710] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 156.920886][ T5710] usb 4-1: device descriptor read/64, error -71 [ 156.984034][ T6903] sctp: [Deprecated]: syz.2.411 (pid 6903) Use of struct sctp_assoc_value in delayed_ack socket option. [ 156.984034][ T6903] Use struct sctp_sack_info instead [ 157.159955][ T5710] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 157.272974][ T6911] openvswitch: netlink: Missing key (keys=40, expected=100) [ 157.289952][ T5710] usb 4-1: device descriptor read/64, error -71 [ 157.329957][ T37] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 157.400443][ T5710] usb usb4-port1: attempt power cycle [ 157.482606][ T37] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 157.486056][ T37] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.486081][ T37] usb 2-1: config 0 has no interfaces? [ 157.486113][ T37] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.567814][ T37] usb 2-1: config 0 descriptor?? [ 157.740242][ T5710] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 157.761213][ T5710] usb 4-1: device descriptor read/8, error -71 [ 157.939066][ T6925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.419'. [ 158.009925][ T5710] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 158.031797][ T5710] usb 4-1: device descriptor read/8, error -71 [ 158.142198][ T5710] usb usb4-port1: unable to enumerate USB device [ 158.164697][ T6905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.165287][ T6905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.509992][ T5779] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 158.669881][ T5779] usb 3-1: Using ep0 maxpacket: 8 [ 158.670799][ T5779] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 158.671539][ T5779] usb 3-1: config 0 has no interfaces? [ 158.674052][ T5779] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.674067][ T5779] usb 3-1: Product: syz [ 158.674077][ T5779] usb 3-1: Manufacturer: syz [ 158.674086][ T5779] usb 3-1: SerialNumber: syz [ 158.735307][ T5779] usb 3-1: config 0 descriptor?? [ 158.949664][ T5712] usb 3-1: USB disconnect, device number 4 [ 159.111057][ T5703] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 159.270053][ T5703] usb 5-1: unable to get BOS descriptor or descriptor too short [ 159.270979][ T5703] usb 5-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 159.275479][ T5703] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 159.275514][ T5703] usb 5-1: can't read configurations, error -71 [ 159.950168][ T5779] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 160.061807][ T31] usb 2-1: USB disconnect, device number 13 [ 160.122903][ T5779] usb 3-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 160.125427][ T5779] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.125452][ T5779] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 160.167838][ T5779] usb 3-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 160.167871][ T5779] usb 3-1: Product: syz [ 160.167885][ T5779] usb 3-1: Manufacturer: syz [ 160.455360][ T5779] usb 3-1: config 0 descriptor?? [ 160.658030][ T5579] Bluetooth: hci3: Malformed LE Event: 0x0d [ 160.700521][ T6950] netlink: 52 bytes leftover after parsing attributes in process `syz.2.429'. [ 160.711575][ T5703] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 160.869958][ T5703] usb 1-1: Using ep0 maxpacket: 8 [ 160.870702][ T5703] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 160.871571][ T5703] usb 1-1: config 0 has no interfaces? [ 160.888369][ T5703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.888397][ T5703] usb 1-1: Product: syz [ 160.888413][ T5703] usb 1-1: Manufacturer: syz [ 160.888429][ T5703] usb 1-1: SerialNumber: syz [ 160.962933][ T5703] usb 1-1: config 0 descriptor?? [ 161.070073][ T31] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 161.176840][ T5703] usb 1-1: USB disconnect, device number 11 [ 161.263414][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 161.264009][ T31] usb 2-1: not running at top speed; connect to a high speed hub [ 161.264046][ T31] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 161.265286][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.265310][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 161.287484][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.287544][ T31] usb 2-1: Product: syz [ 161.287582][ T31] usb 2-1: Manufacturer: syz [ 161.287620][ T31] usb 2-1: SerialNumber: syz [ 161.617751][ T6977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.634840][ T6977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.788430][ T31] usb 2-1: USB disconnect, device number 14 [ 161.894152][ T5703] usb 3-1: USB disconnect, device number 5 [ 162.220381][ T6994] sctp: [Deprecated]: syz.0.444 (pid 6994) Use of struct sctp_assoc_value in delayed_ack socket option. [ 162.220381][ T6994] Use struct sctp_sack_info instead [ 162.660183][ T31] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 162.834410][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 162.854415][ T31] usb 1-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 162.859695][ T31] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 162.859742][ T31] usb 1-1: can't read configurations, error -71 [ 163.130093][ T5703] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 163.135928][ T7014] netlink: 'syz.3.451': attribute type 1 has an invalid length. [ 163.310694][ T5703] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 163.312737][ T5703] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.312752][ T5703] usb 2-1: config 0 has no interfaces? [ 163.312770][ T5703] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.379160][ T7014] veth5: entered promiscuous mode [ 163.405587][ T5703] usb 2-1: config 0 descriptor?? [ 163.588622][ T7025] netlink: NAT attribute has 5 unknown bytes [ 163.588653][ T7025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.881369][ T7027] process 'syz.3.455' launched './file0' with NULL argv: empty string added [ 164.033962][ T7005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.034813][ T7005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.714860][ T31] usb 2-1: USB disconnect, device number 15 [ 166.219950][ T10] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 166.396084][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 166.398453][ T10] usb 5-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 166.399463][ T10] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 166.399494][ T10] usb 5-1: can't read configurations, error -71 [ 166.551969][ T31] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 166.719944][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 166.722476][ T31] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 166.725530][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.763162][ T31] usb 3-1: config 0 descriptor?? [ 166.778412][ T31] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 166.984973][ T31] gspca_vc032x: reg_r err -32 [ 166.985009][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 166.985024][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 166.985034][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 166.985044][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 166.985053][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 166.985063][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 166.985072][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 166.985082][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 166.985091][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 166.985100][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 166.985109][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 166.985119][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 166.985129][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 166.985138][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 166.985147][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 166.985156][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 166.985166][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 166.985175][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 166.985184][ T31] gspca_vc032x: Unknown sensor... [ 166.985275][ T31] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 167.599822][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 167.609818][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 167.619814][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 167.629811][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 167.639815][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 167.649815][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 168.644062][ T7119] netlink: 96 bytes leftover after parsing attributes in process `syz.0.488'. [ 168.809939][ T5779] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 168.974059][ T5779] usb 4-1: unable to get BOS descriptor or descriptor too short [ 168.975101][ T5779] usb 4-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 168.976296][ T5779] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 168.976347][ T5779] usb 4-1: can't read configurations, error -71 [ 169.071879][ T5703] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 169.226498][ T5703] usb 1-1: unable to get BOS descriptor or descriptor too short [ 169.227445][ T5703] usb 1-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 169.229046][ T5703] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 169.229078][ T5703] usb 1-1: can't read configurations, error -71 [ 169.388346][ T31] usb 3-1: USB disconnect, device number 6 [ 169.846960][ T7147] netlink: Unknown nat attribute (0) [ 169.846982][ T7147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.253371][ T7153] netlink: 96 bytes leftover after parsing attributes in process `syz.4.500'. [ 171.049943][ T5703] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 171.221426][ T5703] usb 5-1: Using ep0 maxpacket: 32 [ 171.225981][ T5703] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 171.230031][ T5703] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.282676][ T5703] usb 5-1: config 0 descriptor?? [ 171.309080][ T5703] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 171.401420][ T7170] netlink: 15051 bytes leftover after parsing attributes in process `syz.2.507'. [ 171.494563][ T5703] gspca_vc032x: reg_r err -32 [ 171.494582][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 171.494593][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 171.494602][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 171.494611][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 171.494620][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 171.494629][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 171.494638][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 171.494649][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 171.494658][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 171.494667][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 171.494676][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 171.494685][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 171.494694][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 171.494703][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 171.494712][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 171.494721][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 171.494730][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 171.494739][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 171.494748][ T5703] gspca_vc032x: Unknown sensor... [ 171.494831][ T5703] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 171.495131][ T7175] netlink: 'syz.1.509': attribute type 1 has an invalid length. [ 171.589965][ T10] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 171.638356][ T7178] netlink: 'syz.1.509': attribute type 10 has an invalid length. [ 171.638378][ T7178] netlink: 40 bytes leftover after parsing attributes in process `syz.1.509'. [ 171.743615][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 171.744451][ T10] usb 1-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 171.745332][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 171.745362][ T10] usb 1-1: can't read configurations, error -71 [ 171.829167][ T7175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.051223][ T7177] bond0: (slave dummy0): Enslaving as a backup interface with an up link [ 172.051507][ T7178] dummy0: entered promiscuous mode [ 172.074157][ T7190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.514'. [ 172.132754][ T7178] bond0: (slave dummy0): Releasing backup interface [ 172.580228][ T5703] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 172.750326][ T5703] usb 2-1: Using ep0 maxpacket: 16 [ 172.751226][ T5703] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 172.753335][ T5703] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 172.753351][ T5703] usb 2-1: config 0 has no interface number 0 [ 172.753378][ T5703] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 172.753394][ T5703] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 172.755929][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.755956][ T5703] usb 2-1: Product: syz [ 172.755972][ T5703] usb 2-1: Manufacturer: syz [ 172.755988][ T5703] usb 2-1: SerialNumber: syz [ 172.858647][ T5703] usb 2-1: config 0 descriptor?? [ 172.868043][ T7202] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 172.868245][ T7202] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 173.098016][ T7202] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 173.098345][ T7202] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 173.302948][ T5703] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 173.500670][ T5703] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 173.500699][ T5703] asix 2-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 173.500941][ T5703] asix 2-1:0.34: probe with driver asix failed with error -61 [ 173.772642][ T7228] netlink: 96 bytes leftover after parsing attributes in process `syz.3.528'. [ 174.001513][ T5712] usb 5-1: USB disconnect, device number 19 [ 174.006853][ T7232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.530'. [ 174.375611][ T7241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.534'. [ 174.740347][ T5703] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 174.906348][ T5703] usb 4-1: unable to get BOS descriptor or descriptor too short [ 174.918422][ T5703] usb 4-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 174.923681][ T5703] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 174.923768][ T5703] usb 4-1: can't read configurations, error -71 [ 175.100954][ T31] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 175.209936][ T5715] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 175.250852][ T31] usb 5-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 175.253738][ T31] usb 5-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 175.253762][ T31] usb 5-1: Product: syz [ 175.253775][ T31] usb 5-1: Manufacturer: syz [ 175.258507][ T31] usb 5-1: config 0 descriptor?? [ 175.284351][ T31] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 175.306860][ T31] ftdi_sio ttyUSB0: unknown device type: 0xa446 [ 175.355237][ T31] usb 2-1: USB disconnect, device number 16 [ 175.380067][ T5715] usb 3-1: Using ep0 maxpacket: 32 [ 175.380840][ T5715] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 175.385241][ T5715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.446667][ T5715] usb 3-1: config 0 descriptor?? [ 175.470235][ T5715] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 175.490350][ T7262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.542'. [ 175.524483][ T7255] netlink: 52 bytes leftover after parsing attributes in process `syz.4.539'. [ 175.723580][ T7268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.544'. [ 176.044738][ T7279] netlink: NAT attribute has 5 unknown bytes [ 176.044767][ T7279] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.141019][ T7268] 8021q: adding VLAN 0 to HW filter on device bond3 [ 176.242786][ T7269] bond3: entered promiscuous mode [ 176.242816][ T7269] bond3: entered allmulticast mode [ 176.295238][ T7272] macvlan2: entered promiscuous mode [ 176.295257][ T7272] macvlan2: entered allmulticast mode [ 176.304439][ T7272] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 176.613011][ T5710] usb 5-1: USB disconnect, device number 20 [ 176.743325][ T5710] ftdi_sio 5-1:0.0: device disconnected [ 176.820261][ T5696] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 176.989965][ T5696] usb 1-1: Using ep0 maxpacket: 16 [ 176.997573][ T5696] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 176.998923][ T5696] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 176.998948][ T5696] usb 1-1: config 0 has no interface number 0 [ 176.999124][ T5696] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 176.999244][ T5696] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 177.055468][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.055497][ T5696] usb 1-1: Product: syz [ 177.055574][ T5696] usb 1-1: Manufacturer: syz [ 177.055592][ T5696] usb 1-1: SerialNumber: syz [ 177.106873][ T5696] usb 1-1: config 0 descriptor?? [ 177.109479][ T7290] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 177.109644][ T7290] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 177.285257][ T5715] gspca_vc032x: reg_r err -32 [ 177.285272][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.285282][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.285290][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.285357][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.285367][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.285376][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.285385][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.285394][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.285402][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.285409][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.285417][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.285425][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.285432][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.285440][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.285448][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.285456][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.285516][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.285525][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.285534][ T5715] gspca_vc032x: Unknown sensor... [ 177.285610][ T5715] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 177.337912][ T7290] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 177.338143][ T7290] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 177.461361][ T31] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 177.541012][ T5696] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 177.617440][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 177.618366][ T31] usb 4-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 177.619300][ T31] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 177.619330][ T31] usb 4-1: can't read configurations, error -71 [ 177.746317][ T5696] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 177.746349][ T5696] asix 1-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 177.746510][ T5696] asix 1-1:0.34: probe with driver asix failed with error -61 [ 178.154685][ T5696] usb 3-1: USB disconnect, device number 7 [ 178.730428][ T7325] veth5: entered promiscuous mode [ 178.811361][ T31] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 178.963012][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 178.964673][ T31] usb 4-1: not running at top speed; connect to a high speed hub [ 178.964697][ T31] usb 4-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 178.965858][ T31] usb 4-1: config 1 has an invalid descriptor of length 117, skipping remainder of the config [ 178.965883][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 178.968581][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.968602][ T31] usb 4-1: Product: syz [ 178.968617][ T31] usb 4-1: Manufacturer: syz [ 178.968630][ T31] usb 4-1: SerialNumber: syz [ 179.099959][ T37] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 179.252071][ T37] usb 3-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 179.256931][ T37] usb 3-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 179.256954][ T37] usb 3-1: Product: syz [ 179.256968][ T37] usb 3-1: Manufacturer: syz [ 179.257022][ T7322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.257461][ T7322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.358251][ T37] usb 3-1: config 0 descriptor?? [ 179.378730][ T31] usb 4-1: unit 3 not found! [ 179.378744][ T31] usb 4-1: unit 98 not found! [ 179.394751][ T37] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 179.395993][ T37] ftdi_sio ttyUSB0: unknown device type: 0xa446 [ 179.469929][ T5696] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 179.518343][ T31] usb 4-1: USB disconnect, device number 18 [ 179.547761][ T9] usb 1-1: USB disconnect, device number 18 [ 179.610563][ T7333] netlink: 52 bytes leftover after parsing attributes in process `syz.2.568'. [ 179.621623][ T5696] usb 5-1: Using ep0 maxpacket: 32 [ 179.636588][ T5696] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 179.637192][ T5710] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 179.654740][ T5696] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.729217][ T5696] usb 5-1: config 0 descriptor?? [ 179.766645][ T5696] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 179.856811][ T5710] usb 2-1: unable to get BOS descriptor or descriptor too short [ 179.858438][ T5710] usb 2-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 179.877508][ T5710] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 179.877540][ T5710] usb 2-1: can't read configurations, error -71 [ 181.454691][ T5715] usb 3-1: USB disconnect, device number 8 [ 181.503620][ T5715] ftdi_sio 3-1:0.0: device disconnected [ 181.540090][ T5710] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 181.699858][ T5710] usb 1-1: Using ep0 maxpacket: 16 [ 181.701738][ T5710] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 181.709351][ T5710] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 181.709373][ T5710] usb 1-1: config 0 has no interface number 0 [ 181.709417][ T5710] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 181.709491][ T5710] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 181.760287][ T5696] gspca_vc032x: reg_r err -32 [ 181.760319][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.760329][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.760337][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.760345][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.760352][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.760360][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.760643][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.760654][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.760662][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.760670][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.760679][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.760688][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.760996][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.761006][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.761015][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.761023][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.761031][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.761039][ T5696] gspca_vc032x: I2c Bus Busy Wait 00 [ 181.761047][ T5696] gspca_vc032x: Unknown sensor... [ 181.761203][ T5696] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 181.765864][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.765889][ T5710] usb 1-1: Product: syz [ 181.765904][ T5710] usb 1-1: Manufacturer: syz [ 181.765919][ T5710] usb 1-1: SerialNumber: syz [ 181.927651][ T5710] usb 1-1: config 0 descriptor?? [ 181.928410][ T7373] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 181.928527][ T7373] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 182.150762][ T7373] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 182.150971][ T7373] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 182.354387][ T5710] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 182.561248][ T5710] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 182.561277][ T5710] asix 1-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 182.561510][ T5710] asix 1-1:0.34: probe with driver asix failed with error -61 [ 182.730964][ T5696] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 182.795116][ T5715] usb 5-1: USB disconnect, device number 21 [ 183.036367][ T5696] usb 2-1: unable to get BOS descriptor or descriptor too short [ 183.037330][ T5696] usb 2-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 183.039421][ T5696] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 183.039542][ T5696] usb 2-1: can't read configurations, error -71 [ 183.078491][ T7409] fuse: Unknown parameter 'group_id00000000000000000000' [ 183.873348][ T7439] fuse: Unknown parameter 'group_id00000000000000000000' [ 184.359807][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 184.497693][ T5710] usb 1-1: USB disconnect, device number 19 [ 185.289323][ T7467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.621'. [ 185.309949][ T5696] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 185.417232][ T7467] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.419254][ T7471] fuse: Unknown parameter 'group_id00000000000000000000' [ 185.482693][ T5696] usb 1-1: unable to get BOS descriptor or descriptor too short [ 185.483653][ T5696] usb 1-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 185.485804][ T5696] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 185.485829][ T5696] usb 1-1: can't read configurations, error -71 [ 185.678766][ T7469] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.683042][ T7469] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 185.750687][ T7469] bond1: (slave vti0): Error -95 calling set_mac_address [ 185.970029][ T5571] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 186.133480][ T5571] usb 3-1: unable to get BOS descriptor or descriptor too short [ 186.134751][ T5571] usb 3-1: not running at top speed; connect to a high speed hub [ 186.134784][ T5571] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 186.155784][ T5571] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.155802][ T5571] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 186.191018][ T5571] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.191041][ T5571] usb 3-1: Product: syz [ 186.191054][ T5571] usb 3-1: Manufacturer: syz [ 186.191068][ T5571] usb 3-1: SerialNumber: syz [ 186.305633][ T7487] netlink: 24 bytes leftover after parsing attributes in process `syz.3.628'. [ 186.481761][ T7476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.487086][ T7476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.605225][ T5571] usb 3-1: unit 3 not found! [ 186.629013][ T7491] netlink: NAT attribute has 5 unknown bytes [ 186.629042][ T7491] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.641746][ T5703] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 186.739431][ T5571] usb 3-1: USB disconnect, device number 9 [ 186.971800][ T5703] usb 4-1: Using ep0 maxpacket: 8 [ 186.972531][ T5703] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 186.973133][ T5703] usb 4-1: config 0 has no interfaces? [ 186.976114][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.976139][ T5703] usb 4-1: Product: syz [ 186.976155][ T5703] usb 4-1: Manufacturer: syz [ 186.976170][ T5703] usb 4-1: SerialNumber: syz [ 187.047138][ T5703] usb 4-1: config 0 descriptor?? [ 187.239693][ T7501] fuse: Bad value for 'user_id' [ 187.239712][ T7501] fuse: Bad value for 'user_id' [ 187.269286][ T5703] usb 4-1: USB disconnect, device number 19 [ 187.820127][ T7523] netlink: 212 bytes leftover after parsing attributes in process `syz.1.642'. [ 187.911458][ T31] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 187.978593][ T7529] fuse: Bad value for 'user_id' [ 187.978611][ T7529] fuse: Bad value for 'user_id' [ 188.027109][ T7531] netlink: 40 bytes leftover after parsing attributes in process `syz.3.645'. [ 188.095893][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 188.096842][ T31] usb 3-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 188.098519][ T31] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 188.098551][ T31] usb 3-1: can't read configurations, error -71 [ 188.215179][ T7536] netlink: NAT attribute has 5 unknown bytes [ 188.215291][ T7536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.670201][ T7555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.655'. [ 188.774989][ T7560] netlink: 212 bytes leftover after parsing attributes in process `syz.1.657'. [ 188.944320][ T7566] fuse: Bad value for 'user_id' [ 188.944340][ T7566] fuse: Bad value for 'user_id' [ 189.110005][ T5571] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 189.270403][ T5571] usb 5-1: Using ep0 maxpacket: 8 [ 189.271596][ T5571] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 189.272267][ T5571] usb 5-1: config 0 has no interfaces? [ 189.278510][ T5571] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.278533][ T5571] usb 5-1: Product: syz [ 189.278548][ T5571] usb 5-1: Manufacturer: syz [ 189.278561][ T5571] usb 5-1: SerialNumber: syz [ 189.343802][ T5571] usb 5-1: config 0 descriptor?? [ 189.525756][ T7580] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.610160][ T37] usb 5-1: USB disconnect, device number 22 [ 189.719340][ T7580] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.900250][ T7598] netlink: 212 bytes leftover after parsing attributes in process `syz.2.669'. [ 190.044945][ T7604] fuse: Bad value for 'fd' [ 190.085403][ T7608] wlan0 speed is unknown, defaulting to 1000 [ 190.086289][ T7608] wlan0 speed is unknown, defaulting to 1000 [ 190.144419][ T7608] wlan0 speed is unknown, defaulting to 1000 [ 190.171382][ T7608] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 190.171414][ T7608] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 190.171451][ T7608] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 190.230054][ T37] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 190.274947][ T7608] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 190.389955][ T37] usb 1-1: Using ep0 maxpacket: 16 [ 190.390100][ T31] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 190.391331][ T37] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 190.392419][ T37] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 190.392440][ T37] usb 1-1: config 0 has no interface number 0 [ 190.392573][ T37] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 190.392598][ T37] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 190.399468][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.399489][ T37] usb 1-1: Product: syz [ 190.399502][ T37] usb 1-1: Manufacturer: syz [ 190.399515][ T37] usb 1-1: SerialNumber: syz [ 190.451451][ T7608] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 190.505729][ T37] usb 1-1: config 0 descriptor?? [ 190.506882][ T7601] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 190.507086][ T7601] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 190.583920][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 190.585087][ T31] usb 2-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 190.615420][ T31] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 190.615517][ T31] usb 2-1: can't read configurations, error -71 [ 190.668317][ T7608] wlan0 speed is unknown, defaulting to 1000 [ 190.680776][ T7608] wlan0 speed is unknown, defaulting to 1000 [ 190.684690][ T7608] wlan0 speed is unknown, defaulting to 1000 [ 190.687150][ T7608] wlan0 speed is unknown, defaulting to 1000 [ 190.709311][ T7608] wlan0 speed is unknown, defaulting to 1000 [ 190.755177][ T7601] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 190.756659][ T7601] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 190.959660][ T37] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 190.996085][ T7623] bridge0: port 3(vlan2) entered blocking state [ 190.996350][ T7623] bridge0: port 3(vlan2) entered disabled state [ 190.996502][ T7623] vlan2: entered allmulticast mode [ 190.996519][ T7623] geneve0: entered allmulticast mode [ 190.999054][ T7623] vlan2: entered promiscuous mode [ 190.999071][ T7623] geneve0: entered promiscuous mode [ 191.163599][ T37] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 191.163629][ T37] asix 1-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 191.163914][ T37] asix 1-1:0.34: probe with driver asix failed with error -61 [ 191.266437][ T7632] fuse: Bad value for 'fd' [ 191.324320][ T7635] netlink: 12 bytes leftover after parsing attributes in process `syz.4.685'. [ 191.670025][ T37] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 191.830580][ T37] usb 5-1: Using ep0 maxpacket: 8 [ 191.833371][ T37] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 191.837316][ T37] usb 5-1: config 0 has no interfaces? [ 191.850410][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.850463][ T37] usb 5-1: Product: syz [ 191.850499][ T37] usb 5-1: Manufacturer: syz [ 191.850528][ T37] usb 5-1: SerialNumber: syz [ 191.892832][ T7651] netlink: 28 bytes leftover after parsing attributes in process `syz.1.690'. [ 191.927235][ T37] usb 5-1: config 0 descriptor?? [ 192.147445][ T37] usb 5-1: USB disconnect, device number 23 [ 192.212207][ T7660] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.694'. [ 192.599955][ T37] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 192.765959][ T37] usb 4-1: unable to get BOS descriptor or descriptor too short [ 192.766918][ T37] usb 4-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 192.774657][ T37] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 192.774757][ T37] usb 4-1: can't read configurations, error -71 [ 193.011549][ T7690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.709'. [ 193.056737][ T5571] usb 1-1: USB disconnect, device number 22 [ 193.288306][ T7704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.714'. [ 194.079313][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.079405][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.158192][ T7729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.725'. [ 194.759959][ T37] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 194.909932][ T37] usb 4-1: Using ep0 maxpacket: 8 [ 194.910879][ T37] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 194.911664][ T37] usb 4-1: config 0 has no interfaces? [ 194.914300][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.914324][ T37] usb 4-1: Product: syz [ 194.914338][ T37] usb 4-1: Manufacturer: syz [ 194.914352][ T37] usb 4-1: SerialNumber: syz [ 194.966775][ T37] usb 4-1: config 0 descriptor?? [ 195.183148][ T31] usb 4-1: USB disconnect, device number 22 [ 195.852003][ T7778] netlink: 28 bytes leftover after parsing attributes in process `syz.4.747'. [ 196.003175][ T7778] veth5: entered promiscuous mode [ 196.081598][ T5571] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 196.232772][ T5571] usb 4-1: Using ep0 maxpacket: 16 [ 196.233549][ T5571] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 196.236734][ T5571] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 196.236756][ T5571] usb 4-1: config 0 has no interface number 0 [ 196.236798][ T5571] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 196.236821][ T5571] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 196.291448][ T5571] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.291470][ T5571] usb 4-1: Product: syz [ 196.291483][ T5571] usb 4-1: Manufacturer: syz [ 196.291497][ T5571] usb 4-1: SerialNumber: syz [ 196.558007][ T5571] usb 4-1: config 0 descriptor?? [ 196.559151][ T7782] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 196.559333][ T7782] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 196.796870][ T7782] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 196.799655][ T7782] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 197.024117][ T5571] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 197.441589][ T5571] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 197.441796][ T5571] asix 4-1:0.34: probe with driver asix failed with error -32 [ 198.820038][ T5710] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 198.840713][ T37] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 198.943208][ T5571] usb 4-1: USB disconnect, device number 23 [ 198.992795][ T37] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 198.994906][ T37] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.994927][ T37] usb 2-1: config 0 has no interfaces? [ 198.994971][ T37] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.996450][ T5710] usb 5-1: Using ep0 maxpacket: 8 [ 198.997970][ T5710] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 199.001240][ T5710] usb 5-1: config 0 has no interfaces? [ 199.064259][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.064284][ T5710] usb 5-1: Product: syz [ 199.064299][ T5710] usb 5-1: Manufacturer: syz [ 199.064313][ T5710] usb 5-1: SerialNumber: syz [ 199.176353][ T37] usb 2-1: config 0 descriptor?? [ 199.228774][ T5710] usb 5-1: config 0 descriptor?? [ 199.446368][ T5712] usb 5-1: USB disconnect, device number 24 [ 199.585597][ T7891] macvlan2: entered promiscuous mode [ 199.585625][ T7891] macvlan2: entered allmulticast mode [ 199.586079][ T7891] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 199.745459][ T7866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.746129][ T7866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.289910][ T37] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 201.443658][ T5710] usb 2-1: USB disconnect, device number 23 [ 201.458838][ T37] usb 5-1: unable to get BOS descriptor or descriptor too short [ 201.469637][ T37] usb 5-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 201.481901][ T37] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 201.481932][ T37] usb 5-1: can't read configurations, error -71 [ 201.877059][ T7978] netlink: 96 bytes leftover after parsing attributes in process `syz.0.834'. [ 202.729936][ T5571] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 202.910717][ T5571] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 202.912368][ T5571] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.912394][ T5571] usb 5-1: config 0 has no interfaces? [ 202.912426][ T5571] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.946327][ T5571] usb 5-1: config 0 descriptor?? [ 202.970121][ T5710] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 203.193718][ T5710] usb 2-1: unable to get BOS descriptor or descriptor too short [ 203.194656][ T5710] usb 2-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 203.197795][ T5710] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 203.197828][ T5710] usb 2-1: can't read configurations, error -71 [ 203.238351][ T8043] netlink: 40 bytes leftover after parsing attributes in process `syz.0.861'. [ 203.478118][ T8053] Bluetooth: MGMT ver 1.23 [ 203.532283][ T8004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.532916][ T8004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.958337][ T8073] netlink: 28 bytes leftover after parsing attributes in process `syz.0.877'. [ 204.260601][ T5715] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 204.420290][ T5715] usb 4-1: Using ep0 maxpacket: 8 [ 204.421764][ T5715] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 204.422855][ T5715] usb 4-1: config 0 has no interfaces? [ 204.427516][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.427533][ T5715] usb 4-1: Product: syz [ 204.427543][ T5715] usb 4-1: Manufacturer: syz [ 204.427553][ T5715] usb 4-1: SerialNumber: syz [ 204.498642][ T5715] usb 4-1: config 0 descriptor?? [ 204.737884][ T37] usb 4-1: USB disconnect, device number 24 [ 205.284344][ T37] usb 5-1: USB disconnect, device number 27 [ 205.452017][ T5712] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 205.603153][ T5712] usb 2-1: unable to get BOS descriptor or descriptor too short [ 205.604243][ T5712] usb 2-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 205.605638][ T5712] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 205.605674][ T5712] usb 2-1: can't read configurations, error -71 [ 206.065380][ T8160] l2tp_ppp: sess 2/0: no socket in recv [ 206.608894][ T8184] netlink: NAT attribute has 5 unknown bytes [ 206.610392][ T8184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.240031][ T31] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 207.424116][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 207.427637][ T31] usb 2-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 207.428807][ T31] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 207.428844][ T31] usb 2-1: can't read configurations, error -71 [ 208.584933][ T8246] netlink: NAT attribute has 5 unknown bytes [ 208.584967][ T8246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.237421][ T8268] netlink: NAT attribute has 5 unknown bytes [ 209.237453][ T8268] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.660006][ T5710] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 209.820802][ T5710] usb 1-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 209.827834][ T5710] usb 1-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 209.827862][ T5710] usb 1-1: Product: syz [ 209.827878][ T5710] usb 1-1: Manufacturer: syz [ 209.874935][ T5710] usb 1-1: config 0 descriptor?? [ 209.956562][ T8297] netlink: 28 bytes leftover after parsing attributes in process `syz.1.973'. [ 209.991747][ T5710] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 210.105040][ T8306] netlink: NAT attribute has 5 unknown bytes [ 210.105079][ T8306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.127418][ T5710] ftdi_sio ttyUSB0: unknown device type: 0xa446 [ 210.739861][ T5710] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 210.929701][ T5710] usb 2-1: unable to get BOS descriptor or descriptor too short [ 210.936447][ T5710] usb 2-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 210.957745][ T5710] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 210.957778][ T5710] usb 2-1: can't read configurations, error -71 [ 211.495655][ T5571] usb 1-1: USB disconnect, device number 23 [ 211.527456][ T5571] ftdi_sio 1-1:0.0: device disconnected [ 212.445313][ T8396] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.1021'. [ 212.563321][ T8404] openvswitch: netlink: Duplicate key (type 6). [ 213.723236][ T8448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1047'. [ 214.571833][ T8489] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.1067'. [ 215.227705][ T8518] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1080'. [ 215.873385][ T8549] netlink: 15487 bytes leftover after parsing attributes in process `syz.4.1095'. [ 216.500270][ T8578] netlink: 15487 bytes leftover after parsing attributes in process `syz.4.1109'. [ 216.646525][ T59] Bluetooth: hci2: command 0x0406 tx timeout [ 216.646560][ T59] Bluetooth: hci3: command 0x0406 tx timeout [ 216.646679][ T59] Bluetooth: hci4: command 0x0406 tx timeout [ 216.646704][ T59] Bluetooth: hci0: command 0x0406 tx timeout [ 216.646726][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 216.759865][ T5571] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 216.952381][ T5571] usb 2-1: unable to get BOS descriptor or descriptor too short [ 216.955552][ T5571] usb 2-1: not running at top speed; connect to a high speed hub [ 216.955589][ T5571] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 216.956731][ T5571] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.956751][ T5571] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 216.959555][ T5571] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.959579][ T5571] usb 2-1: Product: syz [ 216.959594][ T5571] usb 2-1: Manufacturer: syz [ 216.959615][ T5571] usb 2-1: SerialNumber: syz [ 217.250988][ T8577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.251545][ T8577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.355094][ T5571] usb 2-1: 3:0: cannot get min/max values for control 3 (id 3) [ 217.356595][ T5571] usb 2-1: 3:0: cannot get min/max values for control 5 (id 3) [ 217.357908][ T5571] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 217.386135][ T5571] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 217.840709][ T5571] usb 2-1: 3:0: cannot get min/max values for control 3 (id 3) [ 217.842622][ T5571] usb 2-1: 3:0: cannot get min/max values for control 5 (id 3) [ 217.967393][ T5571] usb 2-1: USB disconnect, device number 32 [ 218.374395][ T5676] udevd[5676]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 218.751124][ T31] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 218.926680][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 218.929188][ T31] usb 2-1: not running at top speed; connect to a high speed hub [ 218.929220][ T31] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 218.960463][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.960486][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 218.994924][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.994947][ T31] usb 2-1: Product: syz [ 218.994961][ T31] usb 2-1: Manufacturer: syz [ 218.994974][ T31] usb 2-1: SerialNumber: syz [ 219.229074][ T8677] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1157'. [ 219.303386][ T8648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.303924][ T8648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.386654][ T31] usb 2-1: 3:0: cannot get min/max values for control 3 (id 3) [ 219.388839][ T31] usb 2-1: 3:0: cannot get min/max values for control 5 (id 3) [ 219.407474][ T31] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 219.421764][ T31] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 219.475323][ T31] usb 2-1: 3:0: cannot get min/max values for control 3 (id 3) [ 219.476815][ T31] usb 2-1: 3:0: cannot get min/max values for control 5 (id 3) [ 219.532059][ T31] usb 2-1: USB disconnect, device number 33 [ 219.797796][ T5676] udevd[5676]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 220.042092][ T5715] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 220.190102][ T5715] usb 1-1: Using ep0 maxpacket: 8 [ 220.192332][ T5715] usb 1-1: New USB device found, idVendor=053c, idProduct=a4a1, bcdDevice= 0.40 [ 220.195620][ T5715] usb 1-1: config index 0 descriptor too short (expected 341, got 85) [ 220.195649][ T5715] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.195711][ T5715] usb 1-1: config 1 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 220.195740][ T5715] usb 1-1: config 1 interface 0 has no altsetting 0 [ 220.206550][ T5696] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 220.271823][ T5715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.271848][ T5715] usb 1-1: Product: syz [ 220.271862][ T5715] usb 1-1: Manufacturer: syz [ 220.271875][ T5715] usb 1-1: SerialNumber: syz [ 220.421467][ T5696] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 220.427993][ T5696] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.428020][ T5696] usb 5-1: config 0 has no interfaces? [ 220.428041][ T5696] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.521757][ T5696] usb 5-1: config 0 descriptor?? [ 221.099268][ T8700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.116564][ T8700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.034858][ T37] usb 5-1: USB disconnect, device number 28 [ 224.123239][ T5715] usb 1-1: No union descriptors [ 224.148260][ T5715] usb 1-1: USB disconnect, device number 24 [ 224.528998][ T8771] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1200'. [ 224.929896][ T37] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 225.082429][ T37] usb 1-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 225.088564][ T37] usb 1-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 225.088587][ T37] usb 1-1: Product: syz [ 225.088600][ T37] usb 1-1: Manufacturer: syz [ 225.131949][ T37] usb 1-1: config 0 descriptor?? [ 225.147322][ T37] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 225.149065][ T37] ftdi_sio ttyUSB0: unknown device type: 0xa446 [ 225.222166][ T8802] netlink: NAT attribute has 5 unknown bytes [ 225.222196][ T8802] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.710035][ T8828] capability: warning: `syz.4.1225' uses 32-bit capabilities (legacy support in use) [ 225.746853][ T8828] program syz.4.1225 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 226.170074][ T5710] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 226.246619][ T5696] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 226.331890][ T5710] usb 2-1: Using ep0 maxpacket: 8 [ 226.335380][ T5710] usb 2-1: New USB device found, idVendor=053c, idProduct=a4a1, bcdDevice= 0.40 [ 226.369241][ T5710] usb 2-1: config index 0 descriptor too short (expected 341, got 85) [ 226.369264][ T5710] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.369304][ T5710] usb 2-1: config 1 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 226.369328][ T5710] usb 2-1: config 1 interface 0 has no altsetting 0 [ 226.421469][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.421494][ T5710] usb 2-1: Product: syz [ 226.421509][ T5710] usb 2-1: Manufacturer: syz [ 226.421523][ T5710] usb 2-1: SerialNumber: syz [ 226.444526][ T5696] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 226.461692][ T5696] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.461713][ T5696] usb 5-1: config 0 has no interfaces? [ 226.461751][ T5696] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.577287][ T5696] usb 5-1: config 0 descriptor?? [ 227.146998][ T8835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.158154][ T8835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.188925][ T37] usb 1-1: USB disconnect, device number 25 [ 228.209660][ T37] ftdi_sio 1-1:0.0: device disconnected [ 228.999133][ T31] usb 5-1: USB disconnect, device number 29 [ 229.801165][ T8901] fuse: Unknown parameter 'user_id00000000000000000000' [ 230.282581][ T8912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1266'. [ 231.625026][ T5710] usb 2-1: No union descriptors [ 232.001596][ T5696] usb 2-1: USB disconnect, device number 34 [ 232.792065][ T8963] veth3: entered promiscuous mode [ 233.351116][ T8984] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1298'. [ 234.227562][ T9014] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1313'. [ 234.432418][ T9027] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1316'. [ 235.179854][ T9060] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1333'. [ 237.629930][ T5712] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 237.775935][ T9180] ======================================================= [ 237.775935][ T9180] WARNING: The mand mount option has been deprecated and [ 237.775935][ T9180] and is ignored by this kernel. Remove the mand [ 237.775935][ T9180] option from the mount to silence this warning. [ 237.775935][ T9180] ======================================================= [ 237.828369][ T5712] usb 1-1: unable to get BOS descriptor or descriptor too short [ 237.845183][ T5712] usb 1-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 237.846193][ T5712] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 237.846229][ T5712] usb 1-1: can't read configurations, error -71 [ 238.647757][ T9215] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1405'. [ 239.992940][ T5696] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 240.214536][ T5696] usb 5-1: unable to get BOS descriptor or descriptor too short [ 240.216291][ T5696] usb 5-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 240.220605][ T5696] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 240.220685][ T5696] usb 5-1: can't read configurations, error -71 [ 244.043883][ T38] audit: type=1326 audit(1786314940.435:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9407 comm="syz.0.1497" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0ba1e0d9 code=0x7ffc0000 [ 244.043933][ T38] audit: type=1326 audit(1786314940.455:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9407 comm="syz.0.1497" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0ba1e0d9 code=0x7ffc0000 [ 244.043977][ T38] audit: type=1326 audit(1786314940.465:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9407 comm="syz.0.1497" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0ba1e0d9 code=0x7ffc0000 [ 244.044020][ T38] audit: type=1326 audit(1786314940.465:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9407 comm="syz.0.1497" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7fac0ba1e0d9 code=0x7ffc0000 [ 244.044062][ T38] audit: type=1326 audit(1786314940.465:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9407 comm="syz.0.1497" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0ba1e0d9 code=0x7ffc0000 [ 244.044116][ T38] audit: type=1326 audit(1786314940.465:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9407 comm="syz.0.1497" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0ba1e0d9 code=0x7ffc0000 [ 244.044347][ T38] audit: type=1326 audit(1786314940.465:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9407 comm="syz.0.1497" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0ba1e0d9 code=0x7ffc0000 [ 244.044389][ T38] audit: type=1326 audit(1786314940.465:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9407 comm="syz.0.1497" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fac0ba1e0d9 code=0x7ffc0000 [ 244.044430][ T38] audit: type=1326 audit(1786314940.465:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9407 comm="syz.0.1497" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fac0ba1e0d9 code=0x7ffc0000 [ 246.034709][ T9463] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1522'. [ 246.450351][ T9483] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1532'. [ 246.685765][ T9483] veth5: entered promiscuous mode [ 247.342242][ T9526] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1553'. [ 247.721102][ T5715] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 247.870019][ T5715] usb 5-1: Using ep0 maxpacket: 8 [ 247.873194][ T5715] usb 5-1: New USB device found, idVendor=053c, idProduct=a4a1, bcdDevice= 0.40 [ 247.895274][ T5715] usb 5-1: config index 0 descriptor too short (expected 341, got 85) [ 247.895302][ T5715] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.895350][ T5715] usb 5-1: config 1 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 247.895380][ T5715] usb 5-1: config 1 interface 0 has no altsetting 0 [ 247.952940][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.952971][ T5715] usb 5-1: Product: syz [ 247.952981][ T5715] usb 5-1: Manufacturer: syz [ 247.952990][ T5715] usb 5-1: SerialNumber: syz [ 248.668397][ T9564] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1571'. [ 249.822256][ T9591] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1585'. [ 250.984688][ T9615] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.1597'. [ 252.545031][ T9652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1614'. [ 253.069163][ T5715] usb 5-1: No union descriptors [ 253.401052][ T9671] sg_write: data in/out 229440/136 bytes for SCSI command 0x0-- guessing data in; [ 253.401052][ T9671] program syz.0.1624 not setting count and/or reply_len properly [ 253.670664][ T5710] usb 5-1: USB disconnect, device number 32 [ 253.808462][ T9684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1629'. [ 254.330002][ T5703] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 254.482880][ T5703] usb 1-1: unable to get BOS descriptor or descriptor too short [ 254.483579][ T5703] usb 1-1: not running at top speed; connect to a high speed hub [ 254.483612][ T5703] usb 1-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 254.485164][ T5703] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.485189][ T5703] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 254.539371][ T5703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.539394][ T5703] usb 1-1: Product: syz [ 254.539407][ T5703] usb 1-1: Manufacturer: syz [ 254.539420][ T5703] usb 1-1: SerialNumber: syz [ 254.804307][ T5595] Bluetooth: hci2: unexpected event for opcode 0x1009 [ 254.833856][ T9698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.835812][ T9698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.911000][ T5703] usb 1-1: 3:0: cannot get min/max values for control 3 (id 3) [ 254.912776][ T5703] usb 1-1: 3:0: cannot get min/max values for control 5 (id 3) [ 254.938326][ T5703] usb 1-1: 3:0: failed to get current value for ch 0 (-71) [ 254.955478][ T5703] usb 1-1: 3:0: failed to get current value for ch 0 (-71) [ 255.060325][ T5703] usb 1-1: 3:0: cannot get min/max values for control 3 (id 3) [ 255.063664][ T5703] usb 1-1: 3:0: cannot get min/max values for control 5 (id 3) [ 255.122797][ T5703] usb 1-1: USB disconnect, device number 28 [ 255.494478][ T5676] udevd[5676]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 255.526198][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.526280][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.258314][ T9790] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1680'. [ 256.746912][ T9811] netlink: 11575 bytes leftover after parsing attributes in process `syz.4.1691'. [ 257.156218][ T9830] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1696'. [ 258.057142][ T9867] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1718'. [ 259.720513][ T9930] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1749'. [ 260.669910][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 260.841607][ T9] usb 5-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 260.845601][ T9] usb 5-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 260.845638][ T9] usb 5-1: Product: syz [ 260.845654][ T9] usb 5-1: Manufacturer: syz [ 260.910540][ T9] usb 5-1: config 0 descriptor?? [ 260.967055][ T9] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 261.018688][ T9] ftdi_sio ttyUSB0: unknown device type: 0xa446 [ 261.553306][T10012] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1787'. [ 261.946476][T10024] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1794'. [ 262.457687][T10045] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1804'. [ 263.539576][ T5710] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 263.632531][ T5712] usb 5-1: USB disconnect, device number 33 [ 263.685893][ T5712] ftdi_sio 5-1:0.0: device disconnected [ 263.748431][ T5710] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 264.246969][T10106] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1834'. [ 264.603624][T10112] fido_id[10112]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 269.540339][T10325] ceph: No mds server is up or the cluster is laggy [ 269.540660][ T5595] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 270.546835][T10373] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1964'. [ 271.260532][T10407] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1980'. [ 271.850046][ T5710] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 272.030985][ T5710] usb 5-1: unable to get BOS descriptor or descriptor too short [ 272.032118][ T5710] usb 5-1: not running at top speed; connect to a high speed hub [ 272.032154][ T5710] usb 5-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 272.033742][ T5710] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.033764][ T5710] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 272.084682][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.084710][ T5710] usb 5-1: Product: syz [ 272.084725][ T5710] usb 5-1: Manufacturer: syz [ 272.084740][ T5710] usb 5-1: SerialNumber: syz [ 272.291191][T10447] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 272.336814][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 272.368546][T10415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.369311][T10415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.455881][ T5710] usb 5-1: 3:0: cannot get min/max values for control 3 (id 3) [ 272.458862][ T5710] usb 5-1: 3:0: cannot get min/max values for control 5 (id 3) [ 272.477340][ T5710] usb 5-1: 3:0: failed to get current value for ch 0 (-71) [ 272.493561][ T5710] usb 5-1: 3:0: failed to get current value for ch 0 (-71) [ 272.521104][T10451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2002'. [ 272.572015][ T5710] usb 5-1: 3:0: cannot get min/max values for control 3 (id 3) [ 272.574833][ T5710] usb 5-1: 3:0: cannot get min/max values for control 5 (id 3) [ 272.655408][ T5710] usb 5-1: USB disconnect, device number 34 [ 273.123364][ T5676] udevd[5676]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 273.308273][T10489] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2014'. [ 274.409009][T10536] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2038'. [ 274.427351][T10536] netlink: 'syz.0.2038': attribute type 2 has an invalid length. [ 274.464591][T10541] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2038'. [ 274.802843][ T37] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 274.953737][ T5579] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 274.959474][ T5579] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 275.002865][ T37] usb 5-1: unable to get BOS descriptor or descriptor too short [ 275.012164][ T37] usb 5-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 275.012295][ T5579] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 275.013132][ T37] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 275.013163][ T37] usb 5-1: can't read configurations, error -71 [ 275.053882][ T5579] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 275.068481][ T5579] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 276.473039][T10609] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2068'. [ 276.473248][T10609] netlink: 'syz.0.2068': attribute type 2 has an invalid length. [ 276.514362][T10607] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2068'. [ 277.192742][ T5595] Bluetooth: hci5: command tx timeout [ 277.407451][T10644] program syz.0.2085 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 277.636328][ T1463] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.740343][T10557] wlan0 speed is unknown, defaulting to 1000 [ 278.594510][ T1463] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.099874][ T37] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 279.271847][ T5595] Bluetooth: hci5: command tx timeout [ 279.275755][ T37] usb 1-1: unable to get BOS descriptor or descriptor too short [ 279.276753][ T37] usb 1-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 279.277741][ T37] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 279.277784][ T37] usb 1-1: can't read configurations, error -71 [ 279.667500][ T1463] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.331482][ T1463] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.402944][T10767] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2141'. [ 280.403942][T10767] netlink: 'syz.4.2141': attribute type 2 has an invalid length. [ 280.458671][T10774] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2141'. [ 281.349899][ T5595] Bluetooth: hci5: command tx timeout [ 282.426973][ T1463] vlan2: left allmulticast mode [ 282.426993][ T1463] geneve0: left allmulticast mode [ 282.427177][ T1463] vlan2: left promiscuous mode [ 282.427188][ T1463] geneve0: left promiscuous mode [ 282.489160][ T1463] bridge0: port 3(vlan2) entered disabled state [ 282.769457][ T1463] bridge_slave_1: left allmulticast mode [ 282.769561][ T1463] bridge_slave_1: left promiscuous mode [ 282.793728][ T1463] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.996330][ T1463] bridge_slave_0: left allmulticast mode [ 282.996364][ T1463] bridge_slave_0: left promiscuous mode [ 283.036544][ T1463] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.429869][ T5595] Bluetooth: hci5: command tx timeout [ 285.624256][ T1463] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.712174][ T1463] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.781472][ T1463] bond0 (unregistering): Released all slaves [ 286.085256][T10557] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.085358][T10557] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.085554][T10557] bridge_slave_0: entered allmulticast mode [ 286.108892][T10557] bridge_slave_0: entered promiscuous mode [ 286.273162][T10557] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.275296][T10557] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.275496][T10557] bridge_slave_1: entered allmulticast mode [ 286.302358][T10557] bridge_slave_1: entered promiscuous mode [ 286.327140][T11013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2254'. [ 286.371613][T11013] l2tp_ppp: sess 2/0: no socket in recv [ 286.624486][T10557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.649008][T10557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.853736][T10557] team0: Port device team_slave_0 added [ 287.999847][T10557] team0: Port device team_slave_1 added [ 288.377998][ T5241] 8021q: adding VLAN 0 to HW filter on device eth1 [ 288.535957][T11091] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2282'. [ 288.559905][T11091] netlink: 'syz.0.2282': attribute type 2 has an invalid length. [ 288.589901][T11094] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2282'. [ 288.665819][T10557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.665837][T10557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.665868][T10557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.763524][T10557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.763541][T10557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.763567][T10557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.981053][T11107] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2291'. [ 288.985518][T11107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2291'. [ 289.714426][ T1172] smbdirect: ib_dev[syz0] removed [ 289.844702][T11107] syz.0.2291 (11107) used greatest stack depth: 18144 bytes left [ 290.005184][ T5703] wlan0 speed is unknown, defaulting to 1000 [ 290.005214][ T5703] infiniband syz0: ib_query_port failed (-19) [ 290.376847][T10557] hsr_slave_0: entered promiscuous mode [ 290.393103][T10557] hsr_slave_1: entered promiscuous mode [ 290.395738][T10557] debugfs: 'hsr0' already exists in 'hsr' [ 290.395763][T10557] Cannot create hsr debugfs directory [ 290.805858][ T1463] hsr_slave_0: left promiscuous mode [ 290.866830][ T1463] hsr_slave_1: left promiscuous mode [ 290.880858][ T1463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.881021][ T1463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.951851][ T1463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.951877][ T1463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.378242][ T1463] veth1_macvtap: left promiscuous mode [ 291.378570][ T1463] veth0_macvtap: left promiscuous mode [ 291.378883][ T1463] veth1_vlan: left promiscuous mode [ 291.379166][ T1463] veth0_vlan: left promiscuous mode [ 291.802368][T11209] openvswitch: netlink: Flow key attr not present in new flow. [ 294.011442][ T1463] team0 (unregistering): Port device team_slave_1 removed [ 294.111869][ T1463] team0 (unregistering): Port device team_slave_0 removed [ 294.943906][ T5241] 8021q: adding VLAN 0 to HW filter on device eth2 [ 296.960375][T11385] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2410'. [ 297.209463][ T1463] IPVS: stop unused estimator thread 0... [ 298.285699][T11434] netlink: 'syz.4.2433': attribute type 1 has an invalid length. [ 298.854451][T11440] veth5: entered promiscuous mode [ 298.946338][T11440] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 300.506455][T10557] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 300.680503][T10557] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 300.683883][T10557] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 300.759290][T11543] program syz.4.2477 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 300.843537][T10557] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 300.847034][T10557] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 301.019346][T10557] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 301.031859][T10557] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 301.133067][T10557] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 301.266925][T11565] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2481'. [ 301.267161][T11565] netlink: 'syz.4.2481': attribute type 2 has an invalid length. [ 301.299409][T11560] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2481'. [ 301.705542][T10557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.795707][T10557] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.895572][ T5703] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 301.914238][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.933643][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.996169][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.996261][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.181108][ T5703] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 302.800487][T11622] program syz.4.2501 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 302.939222][T11627] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2504'. [ 305.220360][T10557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.513956][T10557] veth0_vlan: entered promiscuous mode [ 305.594840][T10557] veth1_vlan: entered promiscuous mode [ 305.728764][T11713] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 305.745145][T10557] veth0_macvtap: entered promiscuous mode [ 305.818565][T10557] veth1_macvtap: entered promiscuous mode [ 305.849327][T10557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.980588][T10557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.212278][ T67] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.212987][ T67] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.529254][ T67] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.615777][ T67] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.017911][ T1463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.017933][ T1463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.089268][T11747] program syz.0.2546 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 307.412603][ T160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.412626][ T160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.574598][T11764] IPVS: Scheduler module ip_vs_ not found [ 307.753721][T11772] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.2557'. [ 308.349987][ T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 308.439991][T11797] Illegal XDP return value 3266425781 on prog (id 50) dev N/A, expect packet loss! [ 308.501334][ T9] usb 1-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 308.507074][ T9] usb 1-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 308.507098][ T9] usb 1-1: Product: syz [ 308.507113][ T9] usb 1-1: Manufacturer: syz [ 308.599834][ T9] usb 1-1: config 0 descriptor?? [ 308.622082][ T9] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 308.625826][ T9] ftdi_sio ttyUSB0: unknown device type: 0xa446 [ 308.759983][T11806] netlink: 17271 bytes leftover after parsing attributes in process `syz.2.2574'. [ 308.912498][ T5579] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 308.971613][ T5579] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 308.980296][ T5579] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 309.012989][ T5579] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 309.013918][ T5579] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 309.055303][T11816] program syz.2.2577 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 309.092953][ T5712] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 309.282815][ T5712] usb 5-1: unable to get BOS descriptor or descriptor too short [ 309.283387][ T5712] usb 5-1: not running at top speed; connect to a high speed hub [ 309.283421][ T5712] usb 5-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 309.284679][ T5712] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 309.284701][ T5712] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 309.288378][ T5712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.288403][ T5712] usb 5-1: Product: syz [ 309.288417][ T5712] usb 5-1: Manufacturer: syz [ 309.288431][ T5712] usb 5-1: SerialNumber: syz [ 309.525664][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 309.594932][T11803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.595686][T11803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.760314][ T5712] usb 5-1: 3:0: cannot get min/max values for control 3 (id 3) [ 309.765648][ T5712] usb 5-1: 3:0: cannot get min/max values for control 5 (id 3) [ 309.768599][ T5712] usb 5-1: 3:0: failed to get current value for ch 0 (-71) [ 309.831860][ T5712] usb 5-1: 3:0: failed to get current value for ch 0 (-71) [ 309.907287][ T5712] usb 5-1: 3:0: cannot get min/max values for control 3 (id 3) [ 309.910998][ T5712] usb 5-1: 3:0: cannot get min/max values for control 5 (id 3) [ 310.072821][ T5712] usb 5-1: USB disconnect, device number 37 [ 310.364212][ T5676] udevd[5676]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 310.421732][T11843] program syz.2.2586 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 310.940463][T11858] program syz.4.2593 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 311.192377][ T5595] Bluetooth: hci3: command tx timeout [ 311.229541][T11868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2597'. [ 311.294312][ T1172] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.504443][T11868] vlan2: entered allmulticast mode [ 311.504782][T11868] bridge0: port 3(vlan2) entered blocking state [ 311.504922][T11868] bridge0: port 3(vlan2) entered disabled state [ 311.539148][T11868] vlan2: entered promiscuous mode [ 311.574848][ T5712] usb 1-1: USB disconnect, device number 31 [ 311.600594][ T5712] ftdi_sio 1-1:0.0: device disconnected [ 311.867976][T11884] program syz.2.2604 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 312.181487][ T1172] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.459842][ T9] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 312.641380][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 312.649104][ T9] usb 1-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 312.650622][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 312.650714][ T9] usb 1-1: can't read configurations, error -71 [ 312.713397][ T1172] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.269806][ T5595] Bluetooth: hci3: command tx timeout [ 313.637766][T11937] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2628'. [ 313.637787][T11937] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2628'. [ 314.152314][ T1172] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.718329][T11978] program syz.0.2647 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 314.975631][T11992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2653'. [ 315.222399][ T9] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 315.350267][ T5595] Bluetooth: hci3: command tx timeout [ 315.396418][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 315.400806][ T9] usb 3-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 315.410274][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 315.410354][ T9] usb 3-1: can't read configurations, error -71 [ 315.443187][T12005] program syz.0.2660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.057777][ T1172] bridge_slave_1: left promiscuous mode [ 316.058055][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.297687][ T1172] bridge_slave_0: left allmulticast mode [ 316.297717][ T1172] bridge_slave_0: left promiscuous mode [ 316.298041][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.274504][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.274592][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.347662][T12053] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2673'. [ 317.347891][T12053] netlink: 'syz.2.2673': attribute type 2 has an invalid length. [ 317.348422][ T5703] IPVS: starting estimator thread 0... [ 317.399363][T12054] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2673'. [ 317.430366][ T5595] Bluetooth: hci3: command tx timeout [ 317.439628][T12056] IPVS: using max 8 ests per chain, 19200 per kthread [ 317.922615][ T1172] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 317.922639][ T1172] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - ea:5d:25:18:1a:44 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 317.991033][ T5712] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 318.173817][ T5712] usb 1-1: unable to get BOS descriptor or descriptor too short [ 318.174381][ T5712] usb 1-1: not running at top speed; connect to a high speed hub [ 318.174417][ T5712] usb 1-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 318.175594][ T5712] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.175619][ T5712] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 318.178176][ T5712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.178198][ T5712] usb 1-1: Product: syz [ 318.178215][ T5712] usb 1-1: Manufacturer: syz [ 318.178224][ T5712] usb 1-1: SerialNumber: syz [ 318.310009][ T5696] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 318.459329][ T5595] Bluetooth: hci2: unexpected event for opcode 0x1009 [ 318.479336][ T5696] usb 3-1: unable to get BOS descriptor or descriptor too short [ 318.494593][ T5696] usb 3-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 318.500210][ T5696] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 318.500264][ T5696] usb 3-1: can't read configurations, error -71 [ 318.502937][T12064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.510807][T12064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.551057][ T1172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.579220][ T5712] usb 1-1: 3:0: cannot get min/max values for control 3 (id 3) [ 318.589437][ T5712] usb 1-1: 3:0: cannot get min/max values for control 5 (id 3) [ 318.605385][ T5712] usb 1-1: 3:0: failed to get current value for ch 0 (-71) [ 318.618951][ T5712] usb 1-1: 3:0: failed to get current value for ch 0 (-71) [ 318.643445][ T1172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.677103][ T5712] usb 1-1: 3:0: cannot get min/max values for control 3 (id 3) [ 318.678360][ T5712] usb 1-1: 3:0: cannot get min/max values for control 5 (id 3) [ 318.698727][ T1172] bond0 (unregistering): Released all slaves [ 318.730682][ T1172] bond1 (unregistering): (slave veth3): Releasing backup interface [ 318.736822][ T5712] usb 1-1: USB disconnect, device number 34 [ 318.781294][ T1172] bond1 (unregistering): Released all slaves [ 318.798265][ T1172] bond2 (unregistering): Released all slaves [ 318.820141][ T1172] bond3 (unregistering): Released all slaves [ 318.928031][ T5241] 8021q: adding VLAN 0 to HW filter on device eth1 [ 318.963571][ T5676] udevd[5676]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 319.223861][T11800] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.223970][T11800] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.224155][T11800] bridge_slave_0: entered allmulticast mode [ 319.255890][T11800] bridge_slave_0: entered promiscuous mode [ 319.358318][T11800] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.358513][T11800] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.358688][T11800] bridge_slave_1: entered allmulticast mode [ 319.387189][T11800] bridge_slave_1: entered promiscuous mode [ 319.564084][T12110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2697'. [ 319.703446][T12110] vlan2: entered allmulticast mode [ 319.774578][T11800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.565725][T12152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2710'. [ 320.608731][T11800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.923755][T12161] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2713'. [ 320.996884][T11800] team0: Port device team_slave_0 added [ 321.030929][T11800] team0: Port device team_slave_1 added [ 321.818448][ T5241] 8021q: adding VLAN 0 to HW filter on device eth2 [ 321.830137][T12188] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2723'. [ 321.889012][T12189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2725'. [ 321.992020][T11800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.992036][T11800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.992060][T11800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.080776][T11800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.080793][T11800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.080821][T11800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.265799][T11800] hsr_slave_0: entered promiscuous mode [ 322.268809][T11800] hsr_slave_1: entered promiscuous mode [ 322.286103][T11800] debugfs: 'hsr0' already exists in 'hsr' [ 322.286129][T11800] Cannot create hsr debugfs directory [ 322.688395][ T1172] hsr_slave_0: left promiscuous mode [ 322.725650][ T1172] hsr_slave_1: left promiscuous mode [ 322.726672][ T1172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.726696][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.786791][ T1172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.786817][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.897857][T12225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2737'. [ 323.249929][ T1172] veth1_macvtap: left promiscuous mode [ 323.250043][ T1172] veth0_macvtap: left promiscuous mode [ 323.251367][ T1172] veth1_vlan: left promiscuous mode [ 323.251595][ T1172] veth0_vlan: left promiscuous mode [ 323.358163][T12240] program syz.2.2742 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 324.952613][ T1172] team0 (unregistering): Port device team_slave_1 removed [ 325.032730][ T1172] team0 (unregistering): Port device team_slave_0 removed [ 325.527865][T12206] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2734'. [ 325.596730][ T5241] 8021q: adding VLAN 0 to HW filter on device eth3 [ 325.737160][T12308] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2773'. [ 325.737185][T12308] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2773'. [ 325.737206][T12308] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2773'. [ 325.737222][T12308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2773'. [ 326.627167][T12343] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2786'. [ 326.627188][T12343] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2786'. [ 326.627207][T12343] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2786'. [ 326.627223][T12343] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2786'. [ 327.317036][T12360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2794'. [ 327.541502][ T1233] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 327.690534][ T1233] usb 5-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 327.708293][ T1233] usb 5-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 327.708331][ T1233] usb 5-1: Product: syz [ 327.708347][ T1233] usb 5-1: Manufacturer: syz [ 327.789916][ T1233] usb 5-1: config 0 descriptor?? [ 327.806178][ T1233] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 327.830507][ T1233] ftdi_sio ttyUSB0: unknown device type: 0xa446 [ 327.911815][T12375] program syz.2.2799 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 328.153178][ T1172] IPVS: stop unused estimator thread 0... [ 329.731583][T12421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2815'. [ 330.555947][ T5696] usb 5-1: USB disconnect, device number 38 [ 330.566958][ T5696] ftdi_sio 5-1:0.0: device disconnected [ 331.709841][ T5712] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 331.830969][T12476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2835'. [ 331.865581][ T5712] usb 5-1: unable to get BOS descriptor or descriptor too short [ 331.866335][ T5712] usb 5-1: not running at top speed; connect to a high speed hub [ 331.866381][ T5712] usb 5-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 331.867530][ T5712] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 331.867553][ T5712] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 331.929963][ T5712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.930004][ T5712] usb 5-1: Product: syz [ 331.930021][ T5712] usb 5-1: Manufacturer: syz [ 331.930042][ T5712] usb 5-1: SerialNumber: syz [ 332.212755][ T5595] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 332.227933][T12466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.248032][T12466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.414995][ T5712] usb 5-1: 3:0: cannot get min/max values for control 3 (id 3) [ 332.420874][ T5712] usb 5-1: 3:0: cannot get min/max values for control 5 (id 3) [ 332.437475][ T5712] usb 5-1: 3:0: failed to get current value for ch 0 (-71) [ 332.461269][ T5712] usb 5-1: 3:0: failed to get current value for ch 0 (-71) [ 332.682589][ T5712] usb 5-1: 3:0: cannot get min/max values for control 3 (id 3) [ 332.683751][ T5712] usb 5-1: 3:0: cannot get min/max values for control 5 (id 3) [ 332.891690][ T5712] usb 5-1: USB disconnect, device number 39 [ 333.095293][T11800] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 333.129560][ T5676] udevd[5676]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 333.167659][T11800] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 333.169423][T11800] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 333.219173][T11800] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 333.242245][T11800] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 333.327640][T11800] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 333.329256][T11800] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 333.362525][T12495] program syz.2.2843 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 333.425560][T11800] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 333.602209][T12509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2847'. [ 334.284530][T11800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.336248][T11800] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.357620][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.357997][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.394569][ T4605] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.568540][ T4605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.232786][T12567] program syz.4.2865 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 337.028360][T11800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.305217][T11800] veth0_vlan: entered promiscuous mode [ 337.703723][T11800] veth1_vlan: entered promiscuous mode [ 337.917639][T11800] veth0_macvtap: entered promiscuous mode [ 337.963462][T11800] veth1_macvtap: entered promiscuous mode [ 338.092740][T11800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.179521][T12636] syzkaller0: entered promiscuous mode [ 338.179539][T12636] syzkaller0: entered allmulticast mode [ 338.194429][T12641] tipc: Started in network mode [ 338.194578][T12641] tipc: Node identity 62e97bc2be9b, cluster identity 4711 [ 338.286342][T12641] tipc: Enabled bearer , priority 0 [ 338.303015][T11800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.342620][T12633] tipc: Resetting bearer [ 338.651788][T12633] tipc: Disabling bearer [ 339.400293][ T52] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.401970][ T4605] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.402498][ T4605] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.403047][ T4605] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.790060][ T1463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.790084][ T1463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.290674][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.290704][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.157621][T12697] netlink: 'syz.3.2565': attribute type 1 has an invalid length. [ 341.180168][T12697] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2565'. [ 341.434054][T12697] veth3: entered promiscuous mode [ 342.224693][ T5579] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 342.228465][ T5579] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 342.265706][ T5579] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 342.270601][ T5579] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 342.326254][ T5579] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 342.485301][T12736] program syz.0.2923 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 342.829238][T12752] program syz.4.2928 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 343.527610][T12769] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2934'. [ 343.888721][T12782] program syz.2.2940 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 344.229160][T12794] program syz.2.2947 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 344.246251][ T4605] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.482979][ T5579] Bluetooth: hci4: command tx timeout [ 344.748906][T12810] program syz.2.2952 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 344.926633][ T4605] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.239503][T12823] program syz.3.2959 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 346.117077][T12855] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2974'. [ 346.551494][ T5579] Bluetooth: hci4: command tx timeout [ 346.727859][ T4605] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.180358][T12887] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2984'. [ 347.180436][T12887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2984'. [ 347.296720][ T4605] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.616941][T12903] 9p: Bad value for 'wfdno' [ 347.894649][T12729] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.894849][T12729] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.895134][T12729] bridge_slave_0: entered allmulticast mode [ 347.911744][T12729] bridge_slave_0: entered promiscuous mode [ 348.068690][T12926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3001'. [ 348.112266][T12729] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.112390][T12729] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.112608][T12729] bridge_slave_1: entered allmulticast mode [ 348.115629][T12729] bridge_slave_1: entered promiscuous mode [ 348.557986][T12944] netlink: 'syz.4.3010': attribute type 1 has an invalid length. [ 348.619010][T12947] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3010'. [ 348.635305][ T5579] Bluetooth: hci4: command tx timeout [ 348.854288][T12729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.989995][ T5712] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 349.042023][T12949] veth7: entered promiscuous mode [ 349.046702][T12949] bond3: (slave veth7): Enslaving as a backup interface with a down link [ 349.058697][T12729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.158528][T12961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3015'. [ 349.171178][ T5712] usb 1-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 349.175880][ T5712] usb 1-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 349.175903][ T5712] usb 1-1: Product: syz [ 349.175916][ T5712] usb 1-1: Manufacturer: syz [ 349.216095][ T5712] usb 1-1: config 0 descriptor?? [ 349.234528][ T5712] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 349.238061][ T5712] ftdi_sio ttyUSB0: unknown device type: 0xa446 [ 349.538741][T12729] team0: Port device team_slave_0 added [ 349.567969][T12729] team0: Port device team_slave_1 added [ 349.640101][ T38] audit: type=1326 audit(1786315046.035:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12964 comm="syz.2.3017" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed145ce0d9 code=0x7ffc0000 [ 349.640315][ T38] audit: type=1326 audit(1786315046.075:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12964 comm="syz.2.3017" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed145ce0d9 code=0x7ffc0000 [ 349.640705][ T38] audit: type=1326 audit(1786315046.075:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12964 comm="syz.2.3017" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed145ce0d9 code=0x7ffc0000 [ 349.640884][ T38] audit: type=1326 audit(1786315046.075:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12964 comm="syz.2.3017" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fed145ce0d9 code=0x7ffc0000 [ 349.660137][ T38] audit: type=1326 audit(1786315046.085:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12964 comm="syz.2.3017" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed145ce0d9 code=0x7ffc0000 [ 349.798407][ T38] audit: type=1326 audit(1786315046.165:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12964 comm="syz.2.3017" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fed1458e90e code=0x7ffc0000 [ 349.853673][ T38] audit: type=1326 audit(1786315046.235:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12964 comm="syz.2.3017" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fed1458e90e code=0x7ffc0000 [ 349.853713][ T38] audit: type=1326 audit(1786315046.285:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12964 comm="syz.2.3017" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fed1458e90e code=0x7ffc0000 [ 349.860251][ T38] audit: type=1326 audit(1786315046.285:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12964 comm="syz.2.3017" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fed1458e90e code=0x7ffc0000 [ 349.860412][ T38] audit: type=1326 audit(1786315046.285:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12964 comm="syz.2.3017" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fed1458e90e code=0x7ffc0000 [ 350.042189][T12729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.042201][T12729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.042218][T12729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.160392][ T4605] bridge_slave_1: left allmulticast mode [ 350.160424][ T4605] bridge_slave_1: left promiscuous mode [ 350.160662][ T4605] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.309597][ T4605] bridge_slave_0: left allmulticast mode [ 350.309625][ T4605] bridge_slave_0: left promiscuous mode [ 350.315004][ T4605] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.710376][ T5579] Bluetooth: hci4: command tx timeout [ 351.402667][T12991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3027'. [ 351.543763][T12995] netlink: Conntrack attr type has unexpected length (type=0, length=5, expected=0) [ 351.543813][T12995] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.143495][ T5712] usb 1-1: USB disconnect, device number 35 [ 352.162361][ T5712] ftdi_sio 1-1:0.0: device disconnected [ 352.238184][ T4605] bond0 (unregistering): Released all slaves [ 352.273294][ T4605] bond1 (unregistering): Released all slaves [ 352.347277][T12729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.347289][T12729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.347307][T12729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.507676][T13018] netlink: Conntrack attr type has unexpected length (type=0, length=5, expected=0) [ 352.507710][T13018] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.572285][T13020] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3041'. [ 352.767791][T12729] hsr_slave_0: entered promiscuous mode [ 352.768821][T12729] hsr_slave_1: entered promiscuous mode [ 352.781222][T12729] debugfs: 'hsr0' already exists in 'hsr' [ 352.781242][T12729] Cannot create hsr debugfs directory [ 352.816479][ T5779] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 352.974852][ T5779] usb 4-1: unable to get BOS descriptor or descriptor too short [ 352.976326][ T5779] usb 4-1: not running at top speed; connect to a high speed hub [ 352.976365][ T5779] usb 4-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 352.979296][ T5779] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.979318][ T5779] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 353.024677][ T5779] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.024704][ T5779] usb 4-1: Product: syz [ 353.024720][ T5779] usb 4-1: Manufacturer: syz [ 353.024736][ T5779] usb 4-1: SerialNumber: syz [ 353.319516][T13016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.330015][T13016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.490430][ T5779] usb 4-1: 3:0: cannot get min/max values for control 3 (id 3) [ 353.492295][ T5779] usb 4-1: 3:0: cannot get min/max values for control 5 (id 3) [ 353.493865][ T5779] usb 4-1: 3:0: failed to get current value for ch 0 (-71) [ 353.527521][ T5779] usb 4-1: 3:0: failed to get current value for ch 0 (-71) [ 353.765227][ T5779] usb 4-1: 3:0: cannot get min/max values for control 3 (id 3) [ 353.773181][ T5779] usb 4-1: 3:0: cannot get min/max values for control 5 (id 3) [ 353.856388][ T5779] usb 4-1: USB disconnect, device number 25 [ 353.967251][T13055] netlink: Conntrack attr type has unexpected length (type=0, length=5, expected=0) [ 353.967286][T13055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.068080][T13058] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3052'. [ 354.119056][ T5241] 8021q: adding VLAN 0 to HW filter on device eth1 [ 354.264972][ T5676] udevd[5676]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 354.405541][T12998] infiniband syz2: set down [ 354.405562][T12998] infiniband syz2: added ipvlan0 [ 354.448734][T12998] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 354.507981][T12998] infiniband syz2: Couldn't open port 1 [ 354.508281][T12998] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 354.508317][T12998] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 354.508361][T12998] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 354.629480][T13067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3056'. [ 354.690944][T13060] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.699467][T12998] RDS/IB: syz2: added [ 354.705226][T12998] smc: adding ib device syz2 with port count 1 [ 354.705474][T12998] smc: ib device syz2 port 1 has no pnetid [ 354.727906][T13060] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.243176][T13082] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3063'. [ 355.318014][T13060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.352136][T13060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.312229][T13115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3077'. [ 356.312248][T13115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3077'. [ 356.979994][ T67] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.022389][ T67] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.022542][ T67] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.022583][ T67] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.160567][T13126] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3082'. [ 357.236795][T13129] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3082'. [ 357.969802][T13151] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3088'. [ 357.969829][T13151] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3088'. [ 358.862973][T13173] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.3098'. [ 359.287984][T13181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3099'. [ 359.288008][T13181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3099'. [ 360.414795][T13220] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.3110'. [ 360.878439][T12729] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 360.940870][T12729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 360.950745][T12729] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 361.143823][T12729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 361.145333][T12729] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 361.213095][T12729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 361.218052][T12729] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 361.386984][T12729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 361.852508][T12729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.968582][T12729] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.001854][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.001952][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.043878][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.044079][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.078298][T12729] 8021q: adding VLAN 0 to HW filter on device batadv0 syzkaller syzkaller login: [ 364.505670][T12729] veth0_vlan: entered promiscuous mode [ 364.633150][T12729] veth1_vlan: entered promiscuous mode [ 365.127895][T13368] netlink: 'syz.3.3151': attribute type 1 has an invalid length. [ 365.181202][T13369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3151'. [ 365.201720][T12729] veth0_macvtap: entered promiscuous mode [ 365.731768][T13371] veth3: entered promiscuous mode [ 365.747650][T13371] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 366.033463][ T4605] hsr_slave_0: left promiscuous mode [ 366.071298][ T4605] hsr_slave_1: left promiscuous mode [ 366.072312][ T4605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.072335][ T4605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.131190][ T4605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.131215][ T4605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.232278][ T4605] veth1_macvtap: left promiscuous mode [ 366.232373][ T4605] veth0_macvtap: left promiscuous mode [ 366.232606][ T4605] veth1_vlan: left promiscuous mode [ 366.234425][ T4605] veth0_vlan: left promiscuous mode [ 366.377671][T13397] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3159'. [ 366.426470][T13398] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3159'. [ 367.170317][ T4605] team0 (unregistering): Port device team_slave_1 removed [ 367.232193][ T4605] team0 (unregistering): Port device team_slave_0 removed [ 367.432992][T12729] veth1_macvtap: entered promiscuous mode [ 367.672347][T12729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.715236][T12729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.858326][T13411] netlink: 'syz.3.3166': attribute type 1 has an invalid length. [ 367.941982][T13414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3166'. [ 368.245177][T13422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3168'. [ 368.392079][T13418] veth5: entered promiscuous mode [ 368.426106][T13418] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 368.851502][ T1172] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.854269][ T1172] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.855688][ T1172] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.906020][ T1172] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.237468][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.237488][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.859410][ T3209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.859425][ T3209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.889653][ T4605] IPVS: stop unused estimator thread 0... [ 370.146560][T13469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3181'. [ 370.199528][T13469] vlan2: entered allmulticast mode [ 370.895494][T13505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3195'. [ 371.112665][T13514] netlink: 292 bytes leftover after parsing attributes in process `syz.3.3199'. [ 371.112706][T13514] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3199'. [ 372.128757][T13561] netlink: 'syz.3.3218': attribute type 1 has an invalid length. [ 372.181928][T13564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3218'. [ 372.341329][T13561] veth7: entered promiscuous mode [ 372.348231][T13561] bond3: (slave veth7): Enslaving as a backup interface with a down link [ 373.384999][T13611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3238'. [ 374.810175][T13663] ocfs2: Unknown parameter 'addr' [ 376.220257][T13716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3274'. [ 376.492941][T13716] bond1: entered allmulticast mode [ 376.500698][T13716] 8021q: adding VLAN 0 to HW filter on device bond1 [ 378.399089][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.399177][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.036756][T13808] netlink: 292 bytes leftover after parsing attributes in process `syz.0.3311'. [ 379.036785][T13808] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3311'. [ 379.699264][T13838] netlink: 292 bytes leftover after parsing attributes in process `syz.1.3324'. [ 379.699288][T13838] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3324'. [ 379.958736][ T1233] IPVS: starting estimator thread 0... [ 380.079869][T13852] IPVS: using max 9 ests per chain, 21600 per kthread [ 380.309653][T13865] netlink: 'syz.3.3335': attribute type 1 has an invalid length. [ 380.378708][T13868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3335'. [ 380.410267][T13869] netlink: 292 bytes leftover after parsing attributes in process `syz.2.3336'. [ 380.410290][T13869] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3336'. [ 380.711469][T13871] veth9: entered promiscuous mode [ 380.734532][T13871] bond4: (slave veth9): Enslaving as a backup interface with a down link [ 380.980093][T13895] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 381.356105][T13910] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3356'. [ 381.646490][ T37] IPVS: starting estimator thread 0... [ 381.674107][T13925] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3360'. [ 381.674334][T13925] netlink: 'syz.1.3360': attribute type 2 has an invalid length. [ 381.726652][T13920] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3360'. [ 381.729970][T13927] IPVS: using max 8 ests per chain, 19200 per kthread [ 384.526434][T14042] netlink: 'syz.4.3413': attribute type 1 has an invalid length. [ 384.960871][T14045] veth9: entered promiscuous mode [ 384.998192][T14045] bond4: (slave veth9): Enslaving as a backup interface with a down link [ 385.232052][T14066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3424'. [ 385.352835][T14066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.641956][T14066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.531340][ T5696] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 386.692944][ T5696] usb 3-1: Using ep0 maxpacket: 16 [ 386.693845][ T5696] usb 3-1: New USB device found, idVendor=0f11, idProduct=2030, bcdDevice=a9.fd [ 386.706588][ T5696] usb 3-1: config 222 has an invalid interface number: 31 but max is 0 [ 386.706691][ T5696] usb 3-1: config 222 has an invalid descriptor of length 255, skipping remainder of the config [ 386.706744][ T5696] usb 3-1: config 222 has no interface number 0 [ 386.706881][ T5696] usb 3-1: config 222 interface 31 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 386.706956][ T5696] usb 3-1: config 222 interface 31 has no altsetting 0 [ 386.804090][ T5696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.804133][ T5696] usb 3-1: Product: syz [ 386.804148][ T5696] usb 3-1: Manufacturer: syz [ 386.804162][ T5696] usb 3-1: SerialNumber: syz [ 387.083117][ T5696] ldusb 3-1:222.31: Interrupt in endpoint not found [ 387.121939][ T5696] usb 3-1: USB disconnect, device number 16 [ 387.367326][T14128] netlink: 208 bytes leftover after parsing attributes in process `syz.1.3451'. [ 387.435991][T14139] sg_write: data in/out 331932/136 bytes for SCSI command 0x0-- guessing data in; [ 387.435991][T14139] program syz.0.3453 not setting count and/or reply_len properly [ 388.686076][T14181] hub 8-0:1.0: USB hub found [ 388.697992][T14181] hub 8-0:1.0: 1 port detected [ 391.316414][T14244] netlink: 'syz.4.3499': attribute type 1 has an invalid length. [ 392.652665][T14245] veth11: entered promiscuous mode [ 392.668714][T14245] bond5: (slave veth11): Enslaving as a backup interface with a down link [ 392.989787][ T5712] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 393.146109][ T5712] usb 2-1: unable to get BOS descriptor or descriptor too short [ 393.147040][ T5712] usb 2-1: not running at top speed; connect to a high speed hub [ 393.147079][ T5712] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 393.149424][ T5712] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.149448][ T5712] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 393.196453][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.196477][ T5712] usb 2-1: Product: syz [ 393.196491][ T5712] usb 2-1: Manufacturer: syz [ 393.196504][ T5712] usb 2-1: SerialNumber: syz [ 393.446945][T14265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.462364][T14265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.561309][ T5712] usb 2-1: 3:0: cannot get min/max values for control 3 (id 3) [ 393.563030][ T5712] usb 2-1: 3:0: cannot get min/max values for control 5 (id 3) [ 393.564575][ T5712] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 393.593618][ T5712] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 393.654551][ T5712] usb 2-1: 3:0: cannot get min/max values for control 3 (id 3) [ 393.659935][ T5712] usb 2-1: 3:0: cannot get min/max values for control 5 (id 3) [ 393.716347][ T5712] usb 2-1: USB disconnect, device number 35 [ 393.788725][ T5858] udevd[5858]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 394.048457][T14299] netlink: 'syz.3.3519': attribute type 1 has an invalid length. [ 394.121429][T14303] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3519'. [ 394.480642][T14305] veth11: entered promiscuous mode [ 394.537736][T14305] bond5: (slave veth11): Enslaving as a backup interface with a down link [ 394.737297][T14320] capability: warning: `syz.4.3526' uses deprecated v2 capabilities in a way that may be insecure [ 395.821489][T14354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3539'. [ 397.825251][T14418] netlink: 'syz.2.3561': attribute type 12 has an invalid length. [ 397.967845][T14423] netlink: 'syz.2.3565': attribute type 1 has an invalid length. [ 398.032564][T14428] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3565'. [ 398.256800][T14433] veth3: entered promiscuous mode [ 398.276940][T14433] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 398.585602][T14451] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3572'. [ 398.585850][T14451] netlink: 'syz.0.3572': attribute type 2 has an invalid length. [ 398.636227][T14447] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3572'. [ 399.023448][T14471] netlink: 'syz.0.3584': attribute type 1 has an invalid length. [ 399.067056][T14471] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3584'. [ 399.163890][T14471] veth5: entered promiscuous mode [ 399.207303][T14471] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 399.563427][T14490] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3591'. [ 399.563646][T14490] netlink: 'syz.1.3591': attribute type 2 has an invalid length. [ 399.614291][T14493] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3591'. [ 400.262375][T14527] ------------[ cut here ]------------ [ 400.262386][T14527] do not call blocking ops when !TASK_RUNNING; state=2 set at [] prepare_to_wait_event+0x3d6/0x470 [ 400.262438][T14527] WARNING: kernel/sched/core.c:9124 at __might_sleep+0x92/0xf0, CPU#0: syz.3.3605/14527 [ 400.262464][T14527] Modules linked in: [ 400.262488][T14527] CPU: 0 UID: 0 PID: 14527 Comm: syz.3.3605 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 400.262510][T14527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 400.262520][T14527] RIP: 0010:__might_sleep+0xac/0xf0 [ 400.262538][T14527] Code: 00 00 48 89 3c 24 41 89 f5 4c 8d 35 1e b1 1c 0e 43 80 3c 3c 00 74 08 48 89 df e8 bf 7d 99 00 48 8b 0b 4c 89 f7 89 ee 48 89 ca <67> 48 0f b9 3a 44 89 ee 48 8b 3c 24 eb b5 44 89 f1 80 e1 07 80 c1 [ 400.262552][T14527] RSP: 0018:ffffc90007b27c30 EFLAGS: 00010246 [ 400.262565][T14527] RAX: 0000000000000000 RBX: ffff88801e3a3758 RCX: ffffffff819e98c6 [ 400.262577][T14527] RDX: ffffffff819e98c6 RSI: 0000000000000002 RDI: ffffffff8fb27140 [ 400.262588][T14527] RBP: 0000000000000002 R08: ffffffff8faf4b37 R09: 1ffffffff1f5e966 [ 400.262599][T14527] R10: dffffc0000000000 R11: fffffbfff1f5e967 R12: 1ffff11003c746eb [ 400.262611][T14527] R13: 000000000000022e R14: ffffffff8fb27140 R15: dffffc0000000000 [ 400.262622][T14527] FS: 00007f961bc266c0(0000) GS:ffff888125c46000(0000) knlGS:0000000000000000 [ 400.262636][T14527] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 400.262647][T14527] CR2: 00007f961bc25ff8 CR3: 000000005fc8a000 CR4: 00000000003526f0 [ 400.262664][T14527] Call Trace: [ 400.262670][T14527] [ 400.262679][T14527] ? futex_hash_allocate+0x81c/0xf20 [ 400.262698][T14527] mutex_lock_nested+0x37/0x1d0 [ 400.262720][T14527] futex_hash_allocate+0x81c/0xf20 [ 400.262763][T14527] ? __pfx_futex_hash_allocate+0x10/0x10 [ 400.262784][T14527] ? __pfx_var_wake_function+0x10/0x10 [ 400.262807][T14527] ? static_key_count+0x41/0x70 [ 400.262830][T14527] __se_sys_prctl+0x78c/0x1910 [ 400.262854][T14527] ? kfree+0x4d/0x6c0 [ 400.262879][T14527] ? __pfx___se_sys_prctl+0x10/0x10 [ 400.262908][T14527] ? __x64_sys_prctl+0x20/0xc0 [ 400.262931][T14527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.262949][T14527] do_syscall_64+0x174/0x580 [ 400.262972][T14527] ? trace_irq_disable+0x3b/0x140 [ 400.263011][T14527] ? clear_bhb_loop+0x70/0xc0 [ 400.263031][T14527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.263047][T14527] RIP: 0033:0x7f961d9ce0d9 [ 400.263064][T14527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.263077][T14527] RSP: 002b:00007f961bc26028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 400.263093][T14527] RAX: ffffffffffffffda RBX: 00007f961dc55fa0 RCX: 00007f961d9ce0d9 [ 400.263105][T14527] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000004e [ 400.263114][T14527] RBP: 00007f961da65024 R08: 0000000000000000 R09: 0000000000000000 [ 400.263124][T14527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.263133][T14527] R13: 00007f961dc56038 R14: 00007f961dc55fa0 R15: 00007ffc056ebe38 [ 400.263158][T14527] [ 400.263168][T14527] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 400.263185][T14527] CPU: 0 UID: 0 PID: 14527 Comm: syz.3.3605 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 400.263202][T14527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 400.263211][T14527] Call Trace: [ 400.263217][T14527] [ 400.263223][T14527] vpanic+0x56c/0xa60 [ 400.263260][T14527] ? __pfx__printk+0x10/0x10 [ 400.263276][T14527] ? __pfx_vpanic+0x10/0x10 [ 400.263297][T14527] ? is_bpf_text_address+0x292/0x2b0 [ 400.263313][T14527] ? is_bpf_text_address+0x26/0x2b0 [ 400.263335][T14527] panic+0xc5/0xd0 [ 400.263356][T14527] ? __pfx_panic+0x10/0x10 [ 400.263389][T14527] __warn+0x315/0x4c0 [ 400.263411][T14527] ? __might_sleep+0x92/0xf0 [ 400.263429][T14527] ? __might_sleep+0x92/0xf0 [ 400.263445][T14527] __report_bug+0x276/0x570 [ 400.263489][T14527] ? __might_sleep+0x92/0xf0 [ 400.263508][T14527] ? __pfx___report_bug+0x10/0x10 [ 400.263529][T14527] ? do_raw_spin_lock+0x12b/0x2f0 [ 400.263552][T14527] ? prepare_to_wait_event+0x3d6/0x470 [ 400.263575][T14527] ? prepare_to_wait_event+0x3d6/0x470 [ 400.263605][T14527] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 400.263630][T14527] report_bug_entry+0x19a/0x290 [ 400.263654][T14527] ? __might_sleep+0xac/0xf0 [ 400.263670][T14527] ? __might_sleep+0xb1/0xf0 [ 400.263687][T14527] handle_bug+0xce/0x200 [ 400.263702][T14527] exc_invalid_op+0x1a/0x50 [ 400.263716][T14527] asm_exc_invalid_op+0x1a/0x20 [ 400.263731][T14527] RIP: 0010:__might_sleep+0xac/0xf0 [ 400.263748][T14527] Code: 00 00 48 89 3c 24 41 89 f5 4c 8d 35 1e b1 1c 0e 43 80 3c 3c 00 74 08 48 89 df e8 bf 7d 99 00 48 8b 0b 4c 89 f7 89 ee 48 89 ca <67> 48 0f b9 3a 44 89 ee 48 8b 3c 24 eb b5 44 89 f1 80 e1 07 80 c1 [ 400.263761][T14527] RSP: 0018:ffffc90007b27c30 EFLAGS: 00010246 [ 400.263774][T14527] RAX: 0000000000000000 RBX: ffff88801e3a3758 RCX: ffffffff819e98c6 [ 400.263785][T14527] RDX: ffffffff819e98c6 RSI: 0000000000000002 RDI: ffffffff8fb27140 [ 400.263796][T14527] RBP: 0000000000000002 R08: ffffffff8faf4b37 R09: 1ffffffff1f5e966 [ 400.263807][T14527] R10: dffffc0000000000 R11: fffffbfff1f5e967 R12: 1ffff11003c746eb [ 400.263819][T14527] R13: 000000000000022e R14: ffffffff8fb27140 R15: dffffc0000000000 [ 400.263836][T14527] ? prepare_to_wait_event+0x3d6/0x470 [ 400.263859][T14527] ? prepare_to_wait_event+0x3d6/0x470 [ 400.263889][T14527] ? futex_hash_allocate+0x81c/0xf20 [ 400.263905][T14527] mutex_lock_nested+0x37/0x1d0 [ 400.263926][T14527] futex_hash_allocate+0x81c/0xf20 [ 400.263950][T14527] ? __pfx_futex_hash_allocate+0x10/0x10 [ 400.263970][T14527] ? __pfx_var_wake_function+0x10/0x10 [ 400.263992][T14527] ? static_key_count+0x41/0x70 [ 400.264014][T14527] __se_sys_prctl+0x78c/0x1910 [ 400.264038][T14527] ? kfree+0x4d/0x6c0 [ 400.264063][T14527] ? __pfx___se_sys_prctl+0x10/0x10 [ 400.264098][T14527] ? __x64_sys_prctl+0x20/0xc0 [ 400.264122][T14527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.264157][T14527] do_syscall_64+0x174/0x580 [ 400.264188][T14527] ? trace_irq_disable+0x3b/0x140 [ 400.264219][T14527] ? clear_bhb_loop+0x70/0xc0 [ 400.264239][T14527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.264255][T14527] RIP: 0033:0x7f961d9ce0d9 [ 400.264268][T14527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.264282][T14527] RSP: 002b:00007f961bc26028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 400.264297][T14527] RAX: ffffffffffffffda RBX: 00007f961dc55fa0 RCX: 00007f961d9ce0d9 [ 400.264310][T14527] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000004e [ 400.264319][T14527] RBP: 00007f961da65024 R08: 0000000000000000 R09: 0000000000000000 [ 400.264329][T14527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.264339][T14527] R13: 00007f961dc56038 R14: 00007f961dc55fa0 R15: 00007ffc056ebe38 [ 400.264364][T14527] [ 400.264985][T14527] Kernel Offset: disabled