last executing test programs: 4m6.303936354s ago: executing program 0 (id=1553): syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001700000008000a00"], 0x24}}, 0x0) 4m5.965729502s ago: executing program 0 (id=1557): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000fff00080001001500080005"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 4m5.541025355s ago: executing program 0 (id=1563): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x7f}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x2, 0x7cc8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d484"], 0x340a) 4m4.820650692s ago: executing program 0 (id=1573): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 4m4.532580421s ago: executing program 0 (id=1579): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 4m3.783879056s ago: executing program 0 (id=1584): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x7f}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x2, 0x7cc8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d484"], 0x340a) 4m3.177532306s ago: executing program 32 (id=1584): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x7f}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x2, 0x7cc8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d484"], 0x340a) 3m34.0315992s ago: executing program 2 (id=1730): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 3m33.712046544s ago: executing program 2 (id=1733): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) readv(r0, &(0x7f0000001140)=[{&(0x7f0000000400)=""/152, 0x98}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) 3m32.707296628s ago: executing program 2 (id=1743): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 3m32.429839275s ago: executing program 2 (id=1746): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) 3m32.224092008s ago: executing program 2 (id=1750): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0xc6828e1a3ea0f007, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0000}, 0x8000) 3m29.142217968s ago: executing program 2 (id=1778): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4, 0x0, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x4}, {0xa, 0x0, 0x7, @mcast2}, 0xffffffffffffffff, 0x800}}, 0x48) 3m28.858040594s ago: executing program 33 (id=1778): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4, 0x0, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x4}, {0xa, 0x0, 0x7, @mcast2}, 0xffffffffffffffff, 0x800}}, 0x48) 22.529885369s ago: executing program 3 (id=2921): r0 = getpid() timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f00000001c0)) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) r2 = syz_io_uring_setup(0x186, 0x0, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0xe091}}) io_uring_enter(r2, 0x2def, 0x9566, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 22.294680318s ago: executing program 3 (id=2923): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x37, 0x15, 0x66, 0x80, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0x1, 0x0, @empty}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x140, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 21.862943314s ago: executing program 3 (id=2928): r0 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902440001fd00000009040000ff0202ffff052406000005240000000d240f010000000000000000000905810320000000000905820220000000000905030208"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)=ANY=[], 0x0) syz_usb_control_io$printer(r1, &(0x7f0000001100)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="40090c0000000800fa77"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19.363284681s ago: executing program 3 (id=2949): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001480)=ANY=[@ANYBLOB="fc010000190001000000000000000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="feffffffffffffff000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000100000000000044010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000000003c00000000000000ac1414aa00000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c000000"], 0x1fc}}, 0x0) 19.108687895s ago: executing program 3 (id=2952): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000e40)}], 0x1) 18.895270433s ago: executing program 3 (id=2954): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240), 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) 11.815811277s ago: executing program 4 (id=3043): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'ipvlan1\x00', &(0x7f0000000580)=@ethtool_coalesce={0x1, 0x8, 0x6, 0x1f3e, 0x6, 0x10000, 0x40, 0xda, 0x1, 0x1, 0x1, 0x9, 0x9, 0x6, 0x8, 0x8001, 0x1, 0x3, 0x2, 0x7fffffff, 0x400, 0x7, 0x10001}}) 11.484731928s ago: executing program 4 (id=3046): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[], 0x5c}}, 0x4004804) 11.148397764s ago: executing program 4 (id=3052): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 10.829174146s ago: executing program 4 (id=3054): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaa429e82211cf808004517002c0066000007fd8f780a0101027f00000400004e2200004a20a7219b4b71575ed8eeb89a76f2c245585467ed579ea8dd206cc13ec58f3cc526579ca9ac4876c1ff8b4f59541977f8569caf709fc222fd22b4eb7aa18ee73fc9bc82dd9837db3f5c006a476fbcce2f834b0596bc715f59a4a3a5690893a69a0cdf600e4464cf9a7e977380e894f4c9c76deb818c96f874260acbe2db62b22f642ab078468d5536ff3eb8eb79cbb6821d0ddaf7c93fb3876f9bd9167c8274bff7d70f67a582e83e631d12894a3b38ca09dcd52e27af01444d0ba353bd6cf84ac9e5fdad03767f34490fa28eb937f20a09b3b00d6fc7e1db2b4d3a3740727396ca70a5b832af52fe452fef5c79c143c4fdeb1a490737f44aa93dab3a94faec119fa4fca021e63e4e3dc75c58bd4ed250853d040c4183911b83e79444d3c3657709fcc2"], 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 9.711542201s ago: executing program 6 (id=3062): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4085}, 0x20000004) 9.55598192s ago: executing program 6 (id=3064): r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r0, &(0x7f0000000400)={0xa, 0xfffd, 0x0, @empty, 0x5}, 0x1c) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x0, 0xfffffffffffffefa, 0x0, &(0x7f0000000100)="e0b9", 0x0, 0x7fff, 0x0, 0x0, 0xfffffde7, 0x0, 0x0, 0x2}, 0x50) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 9.417928191s ago: executing program 6 (id=3066): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0xfe, 0x0}}]}, &(0x7f0000000000)=0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c00028006000100000000"], 0x44}, 0x1, 0x0, 0x0, 0x240080d8}, 0x0) 7.748900235s ago: executing program 4 (id=3069): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010002503dccc00000000400000000000", @ANYRES32=0x0, @ANYBLOB="00010000000000001c00128009000100626f6e64000000000c00028005001d00000000"], 0x3c}}, 0x54) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 6.011934068s ago: executing program 5 (id=3081): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f00004a5000/0x3000)=nil, 0x3000, 0x0) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000000)={'NETMAP\x00'}, 0x0) r4 = io_uring_setup(0x2640, 0x0) r5 = syz_io_uring_setup(0x3d1a, &(0x7f0000000480)={0x0, 0xd03e, 0x10, 0x1, 0x0, 0x0, r4}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_enter(r5, 0x3ed0, 0x235c, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x13, &(0x7f0000000140), 0x2) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000000040)) ptrace$pokeuser(0x6, r1, 0x6, 0xf2) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000700)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @loopback, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) 4.801179296s ago: executing program 5 (id=3082): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x8001, 0x80000) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000080)) ioctl$EVIOCSABS2F(r0, 0x401845ef, 0x0) r1 = syz_usb_connect(0x2, 0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f62760009051cc200000000000705e37e1b82e6", @ANYRES64], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(r1, &(0x7f0000000380)={0x14, &(0x7f0000000080)={0x40, 0x16, 0x2, {0x2, 0x11}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x345e}}}, &(0x7f00000005c0)={0x34, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0xd}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x10}}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000014c0)={0x14, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 4.731039459s ago: executing program 1 (id=3083): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x5c}}, 0x4004804) 4.649045927s ago: executing program 1 (id=3084): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) 4.544131318s ago: executing program 1 (id=3085): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x64) 3.636140632s ago: executing program 1 (id=3086): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffde7, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) 1.440382688s ago: executing program 5 (id=3087): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) 1.303566025s ago: executing program 5 (id=3088): fspick(0xffffffffffffffff, &(0x7f0000000a80)='./cgroup\x00', 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r1}, 0x10) sendmsg$can_bcm(r2, 0x0, 0x0) sendmsg$sock(r2, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) 1.261731157s ago: executing program 5 (id=3089): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[], 0x14}}, 0x0) 1.182413925s ago: executing program 5 (id=3090): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088a8ffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) 388.742639ms ago: executing program 4 (id=3091): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f00004a5000/0x3000)=nil, 0x3000, 0x0) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x404c045) r4 = io_uring_setup(0x2640, 0x0) r5 = syz_io_uring_setup(0x3d1a, &(0x7f0000000480)={0x0, 0xd03e, 0x10, 0x1, 0x0, 0x0, r4}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_enter(r5, 0x3ed0, 0x235c, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x13, &(0x7f0000000140), 0x2) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000000040)) ptrace$pokeuser(0x6, r1, 0x6, 0xf2) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000700)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @loopback, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) 387.928452ms ago: executing program 6 (id=3092): close(0x3) r0 = socket(0x2, 0x80805, 0x0) shutdown(0xffffffffffffffff, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000300)={0x0, 0x9fd4, 0x9}, 0x8) 191.564047ms ago: executing program 1 (id=3093): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000900020073797a3100000000050004000000000014000780"], 0x5c}}, 0x4004804) 165.683542ms ago: executing program 1 (id=3094): r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/97, 0x61}, {0x0}], 0x2}, 0xfffffff8}], 0x1, 0x122, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}, 0x1, 0x0, 0x0, 0x4044080}, 0x20008800) 128.913864ms ago: executing program 6 (id=3095): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000900), 0x2000, 0x0) readv(r0, &(0x7f0000000980)=[{&(0x7f0000000940)=""/5, 0x5}], 0x1) 0s ago: executing program 6 (id=3096): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x7deae000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x8f0, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r3, &(0x7f0000000bc0)=[{{&(0x7f00000001c0)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000080)="d6976d1a0a08df", 0x7}, {&(0x7f0000000240)="a9050000000074640001000000", 0xd}], 0x2}}], 0x1, 0x24004044) kernel console output (not intermixed with test programs): nfig 0 descriptor?? [ 208.276452][ T7639] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 208.326202][ T5806] microtek usb (rev 0.4.3): will this work? Command EP is not usually 12 [ 208.326219][ T5806] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 208.326229][ T5806] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 208.398615][ T5806] scsi host1: microtekX6 [ 208.414716][ T1411] microtek usb (rev 0.4.3): error -90 submitting URB [ 208.703373][ T32] microtek usb (rev 0.4.3): error -90 submitting URB [ 208.743069][ T32] microtek usb (rev 0.4.3): error -90 submitting URB [ 208.820114][ T32] microtek usb (rev 0.4.3): error -90 submitting URB [ 209.628773][ T7673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.629314][ T7673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.957412][ T5883] usb 3-1: USB disconnect, device number 3 [ 210.999054][ T5806] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 211.105486][ T7709] netlink: 24 bytes leftover after parsing attributes in process `syz.2.699'. [ 211.126668][ T7709] vlan3: entered allmulticast mode [ 211.137765][ T5806] usb 4-1: device descriptor read/64, error -71 [ 211.415749][ T5806] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 211.503601][ T7713] netlink: 'syz.4.700': attribute type 6 has an invalid length. [ 211.503698][ T7713] netlink: 32 bytes leftover after parsing attributes in process `syz.4.700'. [ 211.554788][ T5806] usb 4-1: device descriptor read/64, error -71 [ 211.694431][ T5806] usb usb4-port1: attempt power cycle [ 211.743473][ T7727] fuse: Bad value for 'fd' [ 212.062833][ T5806] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 212.079376][ T5806] usb 4-1: device descriptor read/8, error -71 [ 212.335264][ T5806] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 212.357246][ T5806] usb 4-1: device descriptor read/8, error -71 [ 212.474640][ T5806] usb usb4-port1: unable to enumerate USB device [ 212.762685][ T7751] netlink: 'syz.0.717': attribute type 6 has an invalid length. [ 212.762708][ T7751] netlink: 32 bytes leftover after parsing attributes in process `syz.0.717'. [ 213.781942][ T7783] lo speed is unknown, defaulting to 1000 [ 213.859298][ T7786] netlink: 'syz.0.733': attribute type 6 has an invalid length. [ 213.859322][ T7786] netlink: 32 bytes leftover after parsing attributes in process `syz.0.733'. [ 216.201202][ T7820] 9p: Could not find request transport: tcp*por0000000004e22 [ 216.857241][ T36] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 217.245239][ T36] usb 3-1: device descriptor read/64, error -71 [ 217.253678][ T7833] siw: device registration error -23 [ 217.584190][ T36] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 218.024100][ T36] usb 3-1: device descriptor read/64, error -71 [ 218.882863][ T36] usb usb3-port1: attempt power cycle [ 219.051553][ T7846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.757'. [ 219.051588][ T7846] netlink: 12 bytes leftover after parsing attributes in process `syz.3.757'. [ 219.051616][ T7846] netlink: 'syz.3.757': attribute type 13 has an invalid length. [ 219.284037][ T36] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 219.351983][ T36] usb 3-1: device descriptor read/8, error -71 [ 219.636893][ T36] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 219.666856][ T36] usb 3-1: device descriptor read/8, error -71 [ 219.744559][ T7855] 9p: Bad value for 'wfdno' [ 219.777068][ T36] usb usb3-port1: unable to enumerate USB device [ 220.086078][ T7863] netlink: 16 bytes leftover after parsing attributes in process `syz.3.765'. [ 220.234911][ T7856] lo speed is unknown, defaulting to 1000 [ 222.007559][ T7888] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 222.170703][ T5806] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 222.309598][ T5806] usb 4-1: device descriptor read/64, error -71 [ 222.555119][ T5814] Bluetooth: hci0: command 0x0406 tx timeout [ 222.555170][ T5814] Bluetooth: hci2: command 0x0406 tx timeout [ 222.566257][ T5806] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 222.708320][ T5806] usb 4-1: device descriptor read/64, error -71 [ 222.813389][ T5814] Bluetooth: hci4: command 0x0406 tx timeout [ 222.813410][ T7899] Bluetooth: hci1: command 0x0406 tx timeout [ 222.813432][ T5814] Bluetooth: hci3: command 0x0406 tx timeout [ 222.828568][ T5806] usb usb4-port1: attempt power cycle [ 222.986370][ T7903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.780'. [ 222.986394][ T7903] netlink: 12 bytes leftover after parsing attributes in process `syz.1.780'. [ 222.986421][ T7903] netlink: 'syz.1.780': attribute type 13 has an invalid length. [ 223.208884][ T5806] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 223.241636][ T5806] usb 4-1: device descriptor read/8, error -71 [ 223.594159][ T7905] netlink: 32 bytes leftover after parsing attributes in process `syz.4.781'. [ 223.870967][ T5806] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 224.049634][ T5806] usb 4-1: device descriptor read/8, error -71 [ 224.344827][ T5806] usb usb4-port1: unable to enumerate USB device [ 224.503705][ T7913] lo: entered allmulticast mode [ 224.576881][ T7913] tunl0: entered allmulticast mode [ 224.627238][ T7913] gre0: entered allmulticast mode [ 224.713627][ T7913] gretap0: entered allmulticast mode [ 224.897195][ T7913] erspan0: entered allmulticast mode [ 224.935391][ T7913] ip_vti0: entered allmulticast mode [ 224.959070][ T7913] ip6_vti0: entered allmulticast mode [ 224.984708][ T7913] sit0: entered allmulticast mode [ 225.034256][ T7913] ip6tnl0: entered allmulticast mode [ 225.074001][ T7913] ip6gre0: entered allmulticast mode [ 225.150187][ T7913] syz_tun: entered allmulticast mode [ 225.244414][ T7913] ip6gretap0: entered allmulticast mode [ 225.331479][ T7913] bridge0: entered allmulticast mode [ 225.351000][ T7913] vcan0: entered allmulticast mode [ 225.389277][ T7913] bond0: entered allmulticast mode [ 225.442223][ T7913] team0: entered allmulticast mode [ 225.452259][ T7913] dummy0: entered allmulticast mode [ 225.539752][ T7913] nlmon0: entered allmulticast mode [ 225.556158][ T7913] caif0: entered allmulticast mode [ 225.557344][ T7913] batadv0: entered allmulticast mode [ 225.593399][ T7913] vxcan0: entered allmulticast mode [ 225.596144][ T7913] vxcan1: entered allmulticast mode [ 225.598806][ T7913] veth0: entered allmulticast mode [ 225.620424][ T7913] veth1: entered allmulticast mode [ 227.311587][ T7913] wg0: entered allmulticast mode [ 227.603540][ T7913] wg1: entered allmulticast mode [ 227.714614][ T7913] wg2: entered allmulticast mode [ 227.725839][ T7913] veth0_to_bridge: entered allmulticast mode [ 227.742568][ T7913] bridge_slave_0: entered allmulticast mode [ 227.745424][ T7913] veth1_to_bridge: entered allmulticast mode [ 227.749148][ T7913] bridge_slave_1: entered allmulticast mode [ 227.800365][ T7913] veth0_to_bond: entered allmulticast mode [ 227.834048][ T7913] bond_slave_0: entered allmulticast mode [ 227.860369][ T7913] veth1_to_bond: entered allmulticast mode [ 227.867496][ T7913] bond_slave_1: entered allmulticast mode [ 227.901343][ T7913] veth0_to_team: entered allmulticast mode [ 227.925164][ T7913] team_slave_0: entered allmulticast mode [ 227.986807][ T7913] veth1_to_team: entered allmulticast mode [ 228.037229][ T7913] team_slave_1: entered allmulticast mode [ 228.050371][ T7913] veth0_to_batadv: entered allmulticast mode [ 228.096418][ T7913] batadv_slave_0: entered allmulticast mode [ 228.150173][ T7913] xfrm0: entered allmulticast mode [ 228.176466][ T7913] veth0_to_hsr: entered allmulticast mode [ 228.202806][ T7913] hsr_slave_0: entered allmulticast mode [ 228.246192][ T7913] veth1_to_hsr: entered allmulticast mode [ 228.277639][ T7913] hsr_slave_1: entered allmulticast mode [ 228.297224][ T7913] hsr0: entered allmulticast mode [ 228.316922][ T7913] veth1_virt_wifi: entered allmulticast mode [ 228.358644][ T7913] veth0_virt_wifi: entered allmulticast mode [ 228.409757][ T7913] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 228.431693][ T7913] veth1_vlan: entered allmulticast mode [ 228.485772][ T7913] veth0_vlan: entered allmulticast mode [ 228.546329][ T7913] vlan0: entered allmulticast mode [ 228.546493][ T7913] vlan1: entered allmulticast mode [ 228.574262][ T7913] macvlan0: entered allmulticast mode [ 228.635731][ T7913] macvlan1: entered allmulticast mode [ 228.646530][ T7913] ipvlan0: entered allmulticast mode [ 228.646723][ T7913] ipvlan1: entered allmulticast mode [ 228.647790][ T7913] veth1_macvtap: entered allmulticast mode [ 228.670600][ T7913] veth0_macvtap: entered allmulticast mode [ 228.745280][ T7913] macvtap0: entered allmulticast mode [ 228.773276][ T7913] macsec0: entered allmulticast mode [ 228.862121][ T7958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.803'. [ 228.862146][ T7958] netlink: 12 bytes leftover after parsing attributes in process `syz.3.803'. [ 229.066325][ T7913] geneve0: entered allmulticast mode [ 229.824301][ T7960] 9p: Could not find request transport: tcp*por0000000004e22 [ 230.061928][ T7913] geneve1: entered allmulticast mode [ 230.146701][ T7913] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 230.231761][ T7913] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 230.317005][ T7913] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 230.416250][ T7913] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 230.634759][ T7913] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 230.843195][ T7913] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 230.847080][ T7913] vxlan0: entered allmulticast mode [ 230.879840][ T5806] lo speed is unknown, defaulting to 1000 [ 230.880094][ T5806] syz0: Port: 1 Link DOWN [ 230.913188][ T59] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.431400][ T59] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.431681][ T59] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.706672][ T5128] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 231.725865][ T59] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.875976][ T5128] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 231.876026][ T5128] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 231.876052][ T5128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.965571][ T5128] usb 3-1: config 0 descriptor?? [ 232.879537][ T7996] 9p: Could not find request transport: tcp*por0000000004e22 [ 233.381415][ T8008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.821'. [ 233.381450][ T8008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.821'. [ 235.234091][ T8031] netlink: 72 bytes leftover after parsing attributes in process `syz.3.828'. [ 235.546618][ T5806] usb 3-1: USB disconnect, device number 8 [ 237.759778][ T5806] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 237.978171][ T5806] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 237.978220][ T5806] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 237.978245][ T5806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.025337][ T5806] usb 3-1: config 0 descriptor?? [ 241.886899][ T5128] usb 3-1: USB disconnect, device number 9 [ 242.172776][ T5806] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 242.534743][ T5806] usb 1-1: config 7 has an invalid interface number: 252 but max is 0 [ 242.534775][ T5806] usb 1-1: config 7 has no interface number 0 [ 242.534911][ T5806] usb 1-1: config 7 interface 252 altsetting 8 endpoint 0xF has an invalid bInterval 232, changing to 4 [ 242.534941][ T5806] usb 1-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid maxpacket 64, setting to 0 [ 242.534978][ T5806] usb 1-1: config 7 interface 252 has no altsetting 0 [ 242.830231][ T8161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.883'. [ 244.192559][ T8195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.895'. [ 244.872880][ T8213] netlink: 'syz.4.902': attribute type 6 has an invalid length. [ 244.872902][ T8213] netlink: 32 bytes leftover after parsing attributes in process `syz.4.902'. [ 245.065277][ T5806] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 245.065308][ T5806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.112000][ T5806] usb 1-1: can't set config #7, error -71 [ 245.133041][ T5806] usb 1-1: USB disconnect, device number 10 [ 245.220335][ T8220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.906'. [ 246.406261][ T5806] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 246.569090][ T5806] usb 1-1: config 7 has an invalid interface number: 252 but max is 0 [ 246.569125][ T5806] usb 1-1: config 7 has no interface number 0 [ 246.569173][ T5806] usb 1-1: config 7 interface 252 altsetting 8 endpoint 0xF has an invalid bInterval 232, changing to 4 [ 246.569203][ T5806] usb 1-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid maxpacket 64, setting to 0 [ 246.569231][ T5806] usb 1-1: config 7 interface 252 has no altsetting 0 [ 249.497832][ T5806] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 249.497867][ T5806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.522080][ T5806] usb 1-1: can't set config #7, error -71 [ 249.539481][ T5806] usb 1-1: USB disconnect, device number 11 [ 250.224822][ T5806] IPVS: starting estimator thread 0... [ 250.319735][ T8328] IPVS: using max 9 ests per chain, 21600 per kthread [ 250.809824][ T8333] 9p: Could not find request transport: tcp*por0000000004e22 [ 251.056571][ T5806] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 251.230350][ T5806] usb 2-1: config 7 has an invalid interface number: 252 but max is 0 [ 251.230382][ T5806] usb 2-1: config 7 has no interface number 0 [ 251.230430][ T5806] usb 2-1: config 7 interface 252 altsetting 8 endpoint 0xF has an invalid bInterval 232, changing to 4 [ 251.230459][ T5806] usb 2-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid maxpacket 64, setting to 0 [ 251.230488][ T5806] usb 2-1: config 7 interface 252 has no altsetting 0 [ 251.657052][ T8359] netlink: 'syz.4.961': attribute type 6 has an invalid length. [ 251.657073][ T8359] netlink: 32 bytes leftover after parsing attributes in process `syz.4.961'. [ 252.051722][ T8371] netlink: 72 bytes leftover after parsing attributes in process `syz.2.967'. [ 252.055048][ T5883] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 253.155848][ T5883] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.155878][ T5883] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 253.161474][ T5883] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 253.161507][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.161529][ T5883] usb 4-1: Product: syz [ 253.161545][ T5883] usb 4-1: Manufacturer: syz [ 253.161560][ T5883] usb 4-1: SerialNumber: syz [ 253.437881][ T5883] usb 4-1: config 0 descriptor?? [ 253.903699][ T5883] usb 4-1: USB disconnect, device number 14 [ 254.034426][ T5806] usb 2-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 254.034459][ T5806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.038342][ T8390] IPVS: length: 528 != 8 [ 254.075609][ T8385] 9p: Could not find request transport: tcp*por0000000004e22 [ 254.105479][ T5806] usb 2-1: can't set config #7, error -71 [ 254.120319][ T5806] usb 2-1: USB disconnect, device number 6 [ 254.156699][ T8394] fuse: Bad value for 'fd' [ 254.410312][ T8402] netlink: 72 bytes leftover after parsing attributes in process `syz.0.978'. [ 255.069182][ T8426] IPVS: length: 528 != 8 [ 255.311374][ T5806] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 255.380294][ T8429] bond0: option all_slaves_active: invalid value (4) [ 255.474271][ T5806] usb 4-1: config 7 has an invalid interface number: 252 but max is 0 [ 255.474303][ T5806] usb 4-1: config 7 has no interface number 0 [ 255.474349][ T5806] usb 4-1: config 7 interface 252 altsetting 8 endpoint 0xF has an invalid bInterval 232, changing to 4 [ 255.474378][ T5806] usb 4-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid maxpacket 64, setting to 0 [ 255.474407][ T5806] usb 4-1: config 7 interface 252 has no altsetting 0 [ 255.659386][ T8440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.992'. [ 256.279589][ T8436] 9p: Could not find request transport: tcp*por0000000004e22 [ 258.292680][ T5806] usb 4-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 258.292740][ T5806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.344363][ T5806] usb 4-1: can't set config #7, error -71 [ 258.381739][ T5806] usb 4-1: USB disconnect, device number 15 [ 259.162480][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 259.323357][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.327238][ T10] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 259.327270][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.327293][ T10] usb 1-1: Product: syz [ 259.327309][ T10] usb 1-1: Manufacturer: syz [ 259.327324][ T10] usb 1-1: SerialNumber: syz [ 259.390155][ T10] usb 1-1: config 0 descriptor?? [ 259.555555][ T5806] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 259.682571][ T10] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 259.698702][ T10] usb 1-1: USB disconnect, device number 12 [ 259.718246][ T5806] usb 3-1: config 7 has an invalid interface number: 252 but max is 0 [ 259.718278][ T5806] usb 3-1: config 7 has no interface number 0 [ 259.718324][ T5806] usb 3-1: config 7 interface 252 altsetting 8 endpoint 0xF has an invalid bInterval 232, changing to 4 [ 259.718352][ T5806] usb 3-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid maxpacket 64, setting to 0 [ 259.718380][ T5806] usb 3-1: config 7 interface 252 has no altsetting 0 [ 259.753456][ T8502] 9p: Could not find request transport: tcp*por0000000004e22 [ 259.819504][ T6165] udevd[6165]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 260.858123][ T8532] IPVS: length: 528 != 8 [ 261.815908][ T10] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 262.615079][ T8557] IPVS: length: 528 != 8 [ 262.619747][ T5806] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 262.619779][ T5806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.676062][ T5806] usb 3-1: can't set config #7, error -71 [ 262.685374][ T10] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 262.685405][ T10] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 262.685426][ T10] usb 4-1: config 0 has no interface number 0 [ 262.685473][ T10] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC [ 262.685501][ T10] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 262.685524][ T10] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 262.685551][ T10] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 262.685580][ T10] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 262.685606][ T10] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 262.752188][ T10] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 262.752220][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.752241][ T10] usb 4-1: Product: syz [ 262.752256][ T10] usb 4-1: Manufacturer: syz [ 262.752270][ T10] usb 4-1: SerialNumber: syz [ 262.820475][ T5806] usb 3-1: USB disconnect, device number 10 [ 262.870411][ T10] usb 4-1: config 0 descriptor?? [ 262.871411][ T8541] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 262.877026][ T10] microtek usb (rev 0.4.3): will this work? Command EP is not usually 12 [ 262.877045][ T10] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 262.877057][ T10] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 262.931480][ T10] scsi host1: microtekX6 [ 262.983843][ T59] microtek usb (rev 0.4.3): error -90 submitting URB [ 263.008636][ T32] microtek usb (rev 0.4.3): error -90 submitting URB [ 263.053319][ T32] microtek usb (rev 0.4.3): error -90 submitting URB [ 263.094344][ T32] microtek usb (rev 0.4.3): error -90 submitting URB [ 263.480663][ T8583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.481213][ T8583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.122244][ T10] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 264.649027][ T10] usb 3-1: config 7 has an invalid interface number: 252 but max is 0 [ 264.649059][ T10] usb 3-1: config 7 has no interface number 0 [ 264.649106][ T10] usb 3-1: config 7 interface 252 altsetting 8 endpoint 0xF has an invalid bInterval 232, changing to 4 [ 264.649136][ T10] usb 3-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid maxpacket 64, setting to 0 [ 264.649165][ T10] usb 3-1: config 7 interface 252 has no altsetting 0 [ 264.708479][ T5806] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 264.915140][ T5806] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 264.915172][ T5806] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.021964][ T5128] usb 4-1: USB disconnect, device number 16 [ 265.041572][ T5806] usb 1-1: config 0 descriptor?? [ 265.171137][ T5806] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 265.952605][ T8622] siw: device registration error -23 [ 266.884534][ T10] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 266.884780][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.942194][ T10] usb 3-1: can't set config #7, error -71 [ 266.980161][ T10] usb 3-1: USB disconnect, device number 11 [ 267.135274][ T5806] usb 1-1: USB disconnect, device number 13 [ 267.998478][ T8645] IPVS: length: 528 != 8 [ 269.495644][ T8674] IPVS: length: 528 != 8 [ 269.594748][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 269.594824][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 270.592787][ T8682] 9p: Could not find request transport: tcp*por0000000004e22 [ 271.202460][ T8694] fuse: Unknown parameter 'fd0x0000000000000004' [ 273.064146][ T8718] 9p: Could not find request transport: tcp*por0000000004e22 [ 273.500388][ T5806] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 274.634675][ T5806] usb 4-1: config 7 has an invalid interface number: 252 but max is 0 [ 274.634706][ T5806] usb 4-1: config 7 has no interface number 0 [ 274.634773][ T5806] usb 4-1: config 7 interface 252 altsetting 8 endpoint 0xF has an invalid bInterval 232, changing to 4 [ 274.634801][ T5806] usb 4-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid maxpacket 64, setting to 0 [ 274.634828][ T5806] usb 4-1: config 7 interface 252 has no altsetting 0 [ 274.708435][ T5806] usb 4-1: string descriptor 0 read error: -22 [ 274.708589][ T5806] usb 4-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 274.708614][ T5806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.785828][ T5806] idmouse 4-1:7.252: Unable to find bulk-in endpoint. [ 275.002339][ T8730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.002942][ T8730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.008213][ T8730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.009490][ T8730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.733491][ T5883] usb 4-1: USB disconnect, device number 17 [ 276.221005][ T8760] sg_write: data in/out 32732/14 bytes for SCSI command 0x0-- guessing data in; [ 276.221005][ T8760] program syz.2.1118 not setting count and/or reply_len properly [ 278.002229][ T37] kauditd_printk_skb: 38 callbacks suppressed [ 278.002250][ T37] audit: type=1326 audit(1770930975.256:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8785 comm="syz.0.1128" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4a8d9bbf79 code=0x0 [ 278.797033][ T8811] siw: device registration error -23 [ 282.247049][ T8868] siw: device registration error -23 [ 282.711458][ T5128] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 282.874052][ T5128] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 282.876610][ T5128] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 282.876642][ T5128] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.876663][ T5128] usb 3-1: Product: syz [ 282.876679][ T5128] usb 3-1: Manufacturer: syz [ 282.876694][ T5128] usb 3-1: SerialNumber: syz [ 282.906131][ T5128] usb 3-1: config 0 descriptor?? [ 284.418347][ T8893] 9p: Could not find request transport: tcp*por0000000004e22 [ 286.378865][ T6324] usb 3-1: USB disconnect, device number 12 [ 286.923591][ T6324] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 287.086696][ T6324] usb 5-1: config 7 has an invalid interface number: 252 but max is 0 [ 287.086730][ T6324] usb 5-1: config 7 has no interface number 0 [ 287.086778][ T6324] usb 5-1: config 7 interface 252 altsetting 8 endpoint 0xF has an invalid bInterval 232, changing to 4 [ 287.086807][ T6324] usb 5-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid maxpacket 64, setting to 0 [ 287.086835][ T6324] usb 5-1: config 7 interface 252 has no altsetting 0 [ 287.091463][ T6324] usb 5-1: string descriptor 0 read error: -22 [ 287.091619][ T6324] usb 5-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 287.091644][ T6324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.187098][ T6324] idmouse 5-1:7.252: Unable to find bulk-in endpoint. [ 287.403668][ T8948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.404257][ T8948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.421094][ T8948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.421667][ T8948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.537499][ T5128] usb 5-1: USB disconnect, device number 4 [ 289.298302][ T8977] tipc: Started in network mode [ 289.298357][ T8977] tipc: Node identity fe80000000000000000000000000002, cluster identity 4711 [ 289.300526][ T8977] tipc: Enabled bearer , priority 10 [ 289.659723][ T8980] 9p: Could not find request transport: tcp*por0000000004e22 [ 289.851947][ T8992] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1204'. [ 290.419927][ T8998] netlink: 'syz.0.1209': attribute type 20 has an invalid length. [ 290.419951][ T8998] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1209'. [ 290.498380][ T5128] tipc: Node number set to 4269801504 [ 291.800796][ T9012] tipc: Started in network mode [ 291.800831][ T9012] tipc: Node identity fe80000000000000000000000000002, cluster identity 4711 [ 291.800887][ T9012] tipc: Enabling of bearer rejected, failed to enable media [ 292.045471][ T9018] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1217'. [ 292.114678][ T9021] netlink: 'syz.2.1218': attribute type 4 has an invalid length. [ 296.192839][ T9107] netlink: 'syz.1.1257': attribute type 10 has an invalid length. [ 296.192887][ T9107] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 296.195923][ T9107] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 296.196892][ T9107] team0: Port device netdevsim0 added [ 296.531724][ T9115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1261'. [ 296.869442][ T9124] 9p: Could not find request transport: tcp*por0000000004e22 [ 298.472389][ T9150] 9pnet_fd: Insufficient options for proto=fd [ 298.796610][ T9154] hub 8-0:1.0: USB hub found [ 298.803931][ T9154] hub 8-0:1.0: 1 port detected [ 299.754571][ T37] audit: type=1326 audit(1770930995.610:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9160 comm="syz.3.1278" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0eea4dbf79 code=0x0 [ 301.130539][ T9182] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32 [ 303.755557][ T37] audit: type=1326 audit(1770930999.352:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9211 comm="syz.0.1299" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4a8d9bbf79 code=0x0 [ 305.086930][ T36] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 305.264235][ T36] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 305.264269][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.264290][ T36] usb 2-1: Product: syz [ 305.264304][ T36] usb 2-1: Manufacturer: syz [ 305.264320][ T36] usb 2-1: SerialNumber: syz [ 305.307254][ T36] usb 2-1: config 0 descriptor?? [ 305.535838][ T36] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 305.751076][ T36] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 306.298072][ T37] audit: type=1326 audit(1770931001.727:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9244 comm="syz.2.1312" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe41391bf79 code=0x0 [ 308.107983][ T31] usb 2-1: USB disconnect, device number 7 [ 308.453283][ T9226] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 308.572077][ T5810] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 308.735128][ T5810] usb 2-1: config 7 has an invalid interface number: 252 but max is 0 [ 308.735157][ T5810] usb 2-1: config 7 has no interface number 0 [ 308.735200][ T5810] usb 2-1: config 7 interface 252 altsetting 8 endpoint 0xF has an invalid bInterval 232, changing to 4 [ 308.735226][ T5810] usb 2-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid maxpacket 64, setting to 0 [ 308.735253][ T5810] usb 2-1: config 7 interface 252 has no altsetting 0 [ 308.745585][ T5810] usb 2-1: string descriptor 0 read error: -22 [ 308.746000][ T5810] usb 2-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 308.746065][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.824656][ T5810] idmouse 2-1:7.252: Unable to find bulk-in endpoint. [ 308.906439][ T37] audit: type=1326 audit(1770931004.169:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9276 comm="syz.0.1323" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4a8d9bbf79 code=0x0 [ 309.036121][ T9267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.036643][ T9267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.076946][ T5128] usb 2-1: USB disconnect, device number 8 [ 310.165024][ T5810] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 310.330737][ T5810] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 310.330762][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.330777][ T5810] usb 1-1: Product: syz [ 310.330787][ T5810] usb 1-1: Manufacturer: syz [ 310.330798][ T5810] usb 1-1: SerialNumber: syz [ 310.339705][ T5810] usb 1-1: config 0 descriptor?? [ 310.583814][ T5810] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 310.799880][ T5810] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 312.377951][ T9297] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1330'. [ 313.291909][ T9313] 9p: Could not find request transport: tcp*por0000000004e22 [ 313.332142][ T9317] sg_write: data in/out 32732/14 bytes for SCSI command 0x0-- guessing data in; [ 313.332142][ T9317] program syz.1.1338 not setting count and/or reply_len properly [ 313.434106][ T37] audit: type=1326 audit(1770931008.397:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9318 comm="syz.3.1337" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0eea4dbf79 code=0x0 [ 313.554395][ T31] usb 1-1: USB disconnect, device number 14 [ 314.069936][ T9337] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1346'. [ 314.590829][ T5806] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 314.760805][ T5806] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 314.760840][ T5806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.760855][ T5806] usb 2-1: Product: syz [ 314.760865][ T5806] usb 2-1: Manufacturer: syz [ 314.760875][ T5806] usb 2-1: SerialNumber: syz [ 314.813590][ T5806] usb 2-1: config 0 descriptor?? [ 315.199661][ T5806] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 315.254722][ T9362] 9p: Could not find request transport: tcp*por0000000004e22 [ 315.415918][ T5806] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 316.311415][ T37] audit: type=1326 audit(1770931011.063:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9381 comm="syz.2.1364" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe41391bf79 code=0x0 [ 316.826650][ T9392] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1368'. [ 317.073297][ T9400] loop7: detected capacity change from 0 to 16384 [ 317.364791][ C1] I/O error, dev loop7, sector 1536 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 317.367958][ C1] I/O error, dev loop7, sector 1792 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 317.368421][ C1] I/O error, dev loop7, sector 1536 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 317.368630][ C1] Buffer I/O error on dev loop7, logical block 192, async page read [ 317.422882][ C1] I/O error, dev loop7, sector 15432 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 317.423307][ C1] I/O error, dev loop7, sector 15432 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 317.423335][ C1] Buffer I/O error on dev loop7, logical block 1929, async page read [ 317.434909][ T9412] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1375'. [ 317.448060][ T9403] loop7: detected capacity change from 16384 to 0 [ 317.728458][ T31] usb 2-1: USB disconnect, device number 9 [ 318.404907][ T9439] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1388'. [ 318.909780][ T5806] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 319.134821][ T5806] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 319.134855][ T5806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.134876][ T5806] usb 1-1: Product: syz [ 319.134890][ T5806] usb 1-1: Manufacturer: syz [ 319.134904][ T5806] usb 1-1: SerialNumber: syz [ 319.148449][ T5806] usb 1-1: config 0 descriptor?? [ 319.375502][ T5806] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 319.540635][ T9469] sg_write: data in/out 32732/14 bytes for SCSI command 0x0-- guessing data in; [ 319.540635][ T9469] program syz.2.1401 not setting count and/or reply_len properly [ 319.591911][ T5806] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 321.695682][ T9517] 9p: Could not find request transport: tcp*por0000000004e22 [ 321.930669][ T6324] usb 1-1: USB disconnect, device number 15 [ 322.986351][ T9547] 9p: Could not find request transport: fd0x0000000000000004 [ 323.370708][ T9562] sg_write: data in/out 32732/14 bytes for SCSI command 0x0-- guessing data in; [ 323.370708][ T9562] program syz.4.1438 not setting count and/or reply_len properly [ 323.421282][ T5810] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 323.587490][ T5810] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 323.587523][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.587544][ T5810] usb 4-1: Product: syz [ 323.587559][ T5810] usb 4-1: Manufacturer: syz [ 323.587573][ T5810] usb 4-1: SerialNumber: syz [ 323.634783][ T5810] usb 4-1: config 0 descriptor?? [ 323.880725][ T5810] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 324.110977][ T5810] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 324.479694][ T31] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 324.640118][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 324.642057][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.642083][ T31] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 324.645574][ T31] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 324.645606][ T31] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 324.645620][ T31] usb 3-1: Product: syz [ 324.645630][ T31] usb 3-1: Manufacturer: syz [ 324.645640][ T31] usb 3-1: SerialNumber: syz [ 324.655493][ T31] usb 3-1: config 0 descriptor?? [ 324.875180][ T5810] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 324.961888][ T5806] usb 3-1: USB disconnect, device number 13 [ 325.040653][ T5810] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 325.040687][ T5810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.070608][ T5810] usb 5-1: config 0 descriptor?? [ 325.098259][ T5810] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 325.252259][ T9590] 9p: Could not find request transport: tcp*por0000000004e22 [ 325.335151][ T5806] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 325.454314][ T9612] siw: device registration error -23 [ 325.505953][ T5806] usb 3-1: Using ep0 maxpacket: 32 [ 325.509351][ T5806] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.509378][ T5806] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 325.516335][ T5806] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 325.520163][ T5806] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 325.520187][ T5806] usb 3-1: Product: syz [ 325.520202][ T5806] usb 3-1: Manufacturer: syz [ 325.520217][ T5806] usb 3-1: SerialNumber: syz [ 325.602864][ T5806] usb 3-1: config 0 descriptor?? [ 325.833085][ T5806] usb 3-1: USB disconnect, device number 14 [ 326.534248][ T6324] usb 4-1: USB disconnect, device number 18 [ 327.249456][ T5810] usb 5-1: USB disconnect, device number 5 [ 327.748856][ T9628] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 327.748986][ T9628] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 327.834595][ T9628] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 327.834701][ T9628] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 327.880899][ T9628] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 327.880998][ T9628] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 327.924812][ T9628] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 327.924906][ T9628] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 327.966461][ T9628] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 327.966550][ T9628] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 329.030785][ T5813] Bluetooth: hci0: command 0x0406 tx timeout [ 329.163789][ T9691] siw: device registration error -23 [ 330.144897][ T5813] Bluetooth: hci2: command 0x0406 tx timeout [ 330.145193][ T5813] Bluetooth: hci1: command 0x0406 tx timeout [ 330.145285][ T5813] Bluetooth: hci4: command 0x0406 tx timeout [ 330.145369][ T5813] Bluetooth: hci3: command 0x0406 tx timeout [ 331.246735][ T5809] Bluetooth: hci0: command 0x0406 tx timeout [ 332.400249][ T5809] Bluetooth: hci3: command 0x0406 tx timeout [ 332.400292][ T5809] Bluetooth: hci4: command 0x0406 tx timeout [ 332.400320][ T5809] Bluetooth: hci1: command 0x0406 tx timeout [ 332.400347][ T5809] Bluetooth: hci2: command 0x0406 tx timeout [ 332.583303][ T5806] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 332.776012][ T5806] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 332.776045][ T5806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.776066][ T5806] usb 1-1: Product: syz [ 332.776081][ T5806] usb 1-1: Manufacturer: syz [ 332.776096][ T5806] usb 1-1: SerialNumber: syz [ 332.824785][ T5806] usb 1-1: config 0 descriptor?? [ 333.117847][ T5806] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 333.299597][ T9770] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1512'. [ 333.618651][ T9778] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1515'. [ 333.727929][ T9775] 9p: Could not find request transport: tcp*por0000000004e22 [ 334.184917][ T5806] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 334.788368][ T9805] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1524'. [ 334.797335][ T9805] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.805144][ T9805] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.064320][ T9811] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1526'. [ 335.278097][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 335.278177][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 335.527484][ T5806] usb 1-1: USB disconnect, device number 16 [ 335.772903][ T9834] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1536'. [ 336.506563][ T5806] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 336.674982][ T5806] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 336.675016][ T5806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.675036][ T5806] usb 2-1: Product: syz [ 336.675051][ T5806] usb 2-1: Manufacturer: syz [ 336.675066][ T5806] usb 2-1: SerialNumber: syz [ 336.717000][ T5806] usb 2-1: config 0 descriptor?? [ 336.947013][ T5806] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 337.535683][ T9882] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1557'. [ 337.578081][ T9882] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.582736][ T9882] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.759605][ T5806] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 338.216838][ T9902] hub 8-0:1.0: USB hub found [ 338.224688][ T9902] hub 8-0:1.0: 1 port detected [ 339.228228][ T9938] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1582'. [ 339.588974][ T5806] usb 2-1: USB disconnect, device number 10 [ 340.633576][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.948420][ T5809] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 340.951720][ T5809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 340.963467][ T5809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 340.972347][ T5809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 340.987473][ T5809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 341.372555][ T9972] hub 8-0:1.0: USB hub found [ 341.376917][ T9972] hub 8-0:1.0: 1 port detected [ 342.386359][ T10] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 342.442772][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.584636][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 342.584667][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.584686][ T10] usb 3-1: Product: syz [ 342.584700][ T10] usb 3-1: Manufacturer: syz [ 342.584714][ T10] usb 3-1: SerialNumber: syz [ 342.616146][ T10] usb 3-1: config 0 descriptor?? [ 342.673031][ T9958] lo speed is unknown, defaulting to 1000 [ 342.851843][ T10] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 343.115242][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.231336][ T5809] Bluetooth: hci2: command tx timeout [ 343.461031][ T9993] 9p: Could not find request transport: tcp*por0000000004e22 [ 343.499901][ T10] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 343.724993][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.324182][ T9958] chnl_net:caif_netlink_parms(): no params data found [ 344.548634][ T59] bridge_slave_1: left allmulticast mode [ 344.548835][ T59] bridge_slave_1: left promiscuous mode [ 344.553673][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.652687][T10011] siw: device registration error -23 [ 345.196919][ T31] usb 3-1: USB disconnect, device number 15 [ 345.474037][ T5809] Bluetooth: hci2: command tx timeout [ 345.518452][ T59] bridge_slave_0: left allmulticast mode [ 345.518485][ T59] bridge_slave_0: left promiscuous mode [ 345.540402][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.614741][ T10] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 347.678785][ T5809] Bluetooth: hci2: command tx timeout [ 347.804664][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 347.804697][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.804719][ T10] usb 4-1: Product: syz [ 347.804742][ T10] usb 4-1: Manufacturer: syz [ 347.804758][ T10] usb 4-1: SerialNumber: syz [ 347.874408][ T10] usb 4-1: config 0 descriptor?? [ 348.107039][ T10] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 348.753365][ T10] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 349.036638][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.122301][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.145668][ T59] bond0 (unregistering): Released all slaves [ 349.215743][T10030] syzkaller0: entered promiscuous mode [ 349.215769][T10030] syzkaller0: entered allmulticast mode [ 349.250430][T10059] tipc: Started in network mode [ 349.250466][T10059] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 349.250517][T10059] tipc: Enabling of bearer rejected, failed to enable media [ 349.395603][ T59] IPVS: stopping master sync thread 7888 ... [ 349.891262][ T5809] Bluetooth: hci2: command tx timeout [ 351.057060][ T5128] usb 4-1: USB disconnect, device number 19 [ 351.255033][ T9958] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.255149][ T9958] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.255388][ T9958] bridge_slave_0: entered allmulticast mode [ 351.258087][ T9958] bridge_slave_0: entered promiscuous mode [ 351.276093][T10103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1630'. [ 351.339429][T10073] lo speed is unknown, defaulting to 1000 [ 351.342937][ T9958] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.343066][ T9958] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.343296][ T9958] bridge_slave_1: entered allmulticast mode [ 351.390924][ T9958] bridge_slave_1: entered promiscuous mode [ 352.600020][ T9958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.745595][ T5883] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 352.837284][ T9958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.923040][ T5883] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 352.923083][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.923105][ T5883] usb 3-1: Product: syz [ 352.923120][ T5883] usb 3-1: Manufacturer: syz [ 352.923136][ T5883] usb 3-1: SerialNumber: syz [ 352.964671][ T5883] usb 3-1: config 0 descriptor?? [ 353.089285][ T59] hsr_slave_0: left promiscuous mode [ 353.130578][ T59] hsr_slave_1: left promiscuous mode [ 353.140371][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.155825][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.186863][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.186893][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.188994][ T5883] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 353.379045][ T59] veth1_macvtap: left promiscuous mode [ 353.379354][ T59] veth0_macvtap: left promiscuous mode [ 353.379652][ T59] veth1_vlan: left promiscuous mode [ 353.380042][ T59] veth0_vlan: left promiscuous mode [ 353.840056][ T5883] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 355.748441][ T10] usb 3-1: USB disconnect, device number 16 [ 356.017352][T10164] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1656'. [ 356.445225][ T59] team0 (unregistering): Port device team_slave_1 removed [ 356.691132][ T59] team0 (unregistering): Port device team_slave_0 removed [ 358.727731][ T9958] team0: Port device team_slave_0 added [ 358.916614][ T9958] team0: Port device team_slave_1 added [ 359.211091][T10174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1660'. [ 359.264365][ T9958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.264408][ T9958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.264439][ T9958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.473375][ T9958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.473394][ T9958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.473421][ T9958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.590669][ T5883] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 360.040546][T10187] siw: device registration error -23 [ 360.063611][ T5883] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 360.063644][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.063664][ T5883] usb 3-1: Product: syz [ 360.063679][ T5883] usb 3-1: Manufacturer: syz [ 360.063694][ T5883] usb 3-1: SerialNumber: syz [ 360.076631][ T5883] usb 3-1: config 0 descriptor?? [ 360.155258][ T9958] hsr_slave_0: entered promiscuous mode [ 360.156848][ T9958] hsr_slave_1: entered promiscuous mode [ 360.157963][ T9958] debugfs: 'hsr0' already exists in 'hsr' [ 360.157990][ T9958] Cannot create hsr debugfs directory [ 360.363517][ T5883] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 361.135184][ T59] IPVS: stop unused estimator thread 0... [ 361.165856][T10197] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1667'. [ 361.707642][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 361.710230][ T5883] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 361.780362][ T5883] usb 3-1: USB disconnect, device number 17 [ 362.125529][ T9958] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 362.175584][ T9958] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 362.239350][ T9958] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 362.329462][ T9958] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 362.353391][T10216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1672'. [ 362.415957][T10222] ucma_write: process 914 (syz.4.1673) changed security contexts after opening file descriptor, this is not allowed. [ 362.803847][T10237] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1677'. [ 363.485269][ T9958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.711841][ T9958] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.771138][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.771301][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.796358][T10256] siw: device registration error -23 [ 363.848380][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.863996][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.129702][T10288] siw: device registration error -23 [ 365.658272][ T9958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.536810][T10335] siw: device registration error -23 [ 366.818636][T10345] vlan0: left allmulticast mode [ 366.908018][ T9958] veth0_vlan: entered promiscuous mode [ 366.936327][ T9958] veth1_vlan: entered promiscuous mode [ 367.002729][T10353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1714'. [ 367.087974][ T9958] veth0_macvtap: entered promiscuous mode [ 367.114250][ T9958] veth1_macvtap: entered promiscuous mode [ 367.162357][ T9958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.202357][ T9958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.273832][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.292044][ T43] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.308430][ T43] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.310243][ T43] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.829853][ T3480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.829974][ T3480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.070767][T10383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1726'. [ 368.160093][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.160114][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.193777][ T5810] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 368.475029][T10390] hub 8-0:1.0: USB hub found [ 368.477705][T10390] hub 8-0:1.0: 1 port detected [ 369.233636][ T5810] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 369.233668][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.233687][ T5810] usb 4-1: Product: syz [ 369.233701][ T5810] usb 4-1: Manufacturer: syz [ 369.233715][ T5810] usb 4-1: SerialNumber: syz [ 369.246369][ T5810] usb 4-1: config 0 descriptor?? [ 369.477609][ T5810] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 370.150587][T10414] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 370.793737][ T5810] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 370.828541][ T5810] usb 4-1: USB disconnect, device number 20 [ 371.389260][T10446] netlink: 'syz.5.1753': attribute type 27 has an invalid length. [ 371.777308][T10446] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.779064][T10446] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.812010][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1759'. [ 371.812033][T10463] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1759'. [ 372.349289][T10446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.366048][T10446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.097374][T10479] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1767'. [ 373.575308][T10448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.595167][T10448] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.666035][T10448] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 374.191189][ T13] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.342842][ T13] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.343150][ T13] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.343186][ T13] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.630864][T10507] tipc: Started in network mode [ 374.630907][T10507] tipc: Node identity ae34f89ae0ca, cluster identity 4711 [ 374.631260][T10507] tipc: Enabled bearer , priority 0 [ 374.634675][T10507] syzkaller0: entered promiscuous mode [ 374.634804][T10507] syzkaller0: entered allmulticast mode [ 374.866650][ T5813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 374.872908][ T5813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 374.896222][ T5813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 375.048121][ T5813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 375.049144][ T5813] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 375.516826][T10520] tipc: Resetting bearer [ 375.605716][T10505] tipc: Resetting bearer [ 375.861997][T10505] tipc: Disabling bearer [ 375.924393][T10542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1791'. [ 375.924417][T10542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1791'. [ 376.174651][ T5810] tipc: Node number set to 1325332634 [ 376.230893][T10513] lo speed is unknown, defaulting to 1000 [ 376.994123][T10513] chnl_net:caif_netlink_parms(): no params data found [ 377.168353][ T3629] bridge_slave_1: left allmulticast mode [ 377.168383][ T3629] bridge_slave_1: left promiscuous mode [ 377.168794][ T3629] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.230634][ T3629] bridge_slave_0: left promiscuous mode [ 377.240691][ T3629] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.344918][ T5813] Bluetooth: hci0: command tx timeout [ 377.528592][T10574] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1804'. [ 377.761844][T10577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1805'. [ 377.761868][T10577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1805'. [ 380.379390][ T5813] Bluetooth: hci0: command tx timeout [ 380.795833][T10610] ntfs3(nullb0): Primary boot signature is not NTFS. [ 380.796730][T10610] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 381.397507][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 381.398737][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 381.402438][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 381.403657][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 381.404631][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 381.405917][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 381.406064][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 381.818693][ T3629] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.006730][ T3629] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.095742][ T3629] bond0 (unregistering): Released all slaves [ 382.402426][ T3629] tipc: Left network mode [ 382.481698][T10513] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.481792][T10513] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.483243][T10513] bridge_slave_0: entered allmulticast mode [ 382.513733][T10513] bridge_slave_0: entered promiscuous mode [ 382.528614][T10513] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.528697][T10513] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.529035][T10513] bridge_slave_1: entered allmulticast mode [ 382.553926][T10513] bridge_slave_1: entered promiscuous mode [ 382.583175][ T5813] Bluetooth: hci0: command tx timeout [ 382.721768][T10513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.199494][T10513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.785354][ T5813] Bluetooth: hci0: command tx timeout [ 384.992594][T10513] team0: Port device team_slave_0 added [ 386.001625][T10513] team0: Port device team_slave_1 added [ 386.530078][T10513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.530096][T10513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.530126][T10513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.638254][T10684] ntfs3(nullb0): Primary boot signature is not NTFS. [ 386.638657][T10684] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 386.688282][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 386.733839][T10687] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 386.782112][ T3629] hsr_slave_0: left promiscuous mode [ 386.830896][ T3629] hsr_slave_1: left promiscuous mode [ 386.832152][ T3629] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.887973][ T3629] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.590352][T10737] ntfs3(nullb0): Primary boot signature is not NTFS. [ 391.590664][T10737] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 391.994232][ T3629] team0 (unregistering): Port device team_slave_1 removed [ 392.269701][ T3629] team0 (unregistering): Port device team_slave_0 removed [ 394.301782][T10513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.301798][T10513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.301819][T10513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.626446][T10758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1870'. [ 394.626619][T10758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1870'. [ 396.125166][T10513] hsr_slave_0: entered promiscuous mode [ 396.134411][T10513] hsr_slave_1: entered promiscuous mode [ 399.033463][T10797] hub 8-0:1.0: USB hub found [ 399.033908][T10797] hub 8-0:1.0: 1 port detected [ 399.155845][T10803] siw: device registration error -23 [ 399.178378][T10791] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 399.445114][T10791] team0 (unregistering): Port device netdevsim0 removed [ 399.885642][T10513] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 400.205571][T10513] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 400.331531][T10513] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 401.337921][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 401.337995][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 401.411645][T10513] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 401.536972][ T3629] IPVS: stop unused estimator thread 0... [ 401.956157][T10513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.993022][T10513] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.021895][ T3480] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.023582][ T3480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.054187][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.054474][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.494443][T10513] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 402.626508][T10854] mmap: syz.4.1902 (10854) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 402.810970][T10891] hub 8-0:1.0: USB hub found [ 402.813379][T10891] hub 8-0:1.0: 1 port detected [ 404.857955][T10910] 9p: Could not find request transport: tcp*por0000000004e22 [ 405.627705][T10513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.747400][ T5810] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 406.375982][ T5810] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 406.376016][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.376055][ T5810] usb 4-1: Product: syz [ 406.376070][ T5810] usb 4-1: Manufacturer: syz [ 406.376086][ T5810] usb 4-1: SerialNumber: syz [ 406.428985][ T5810] usb 4-1: config 0 descriptor?? [ 407.675440][ T5810] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 408.810646][T10513] veth0_vlan: entered promiscuous mode [ 408.902413][T10513] veth1_vlan: entered promiscuous mode [ 409.194563][T10513] veth0_macvtap: entered promiscuous mode [ 409.231301][ T5810] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 409.263663][T10513] veth1_macvtap: entered promiscuous mode [ 409.285202][ T5810] usb 4-1: USB disconnect, device number 21 [ 409.309215][T10513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.402038][T10513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.435845][ T3480] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.436118][ T3480] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.436630][ T3480] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.436730][ T3480] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.189265][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.189288][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.306236][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.306257][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.435316][T11019] macvlan0: left allmulticast mode [ 410.435508][T11019] netlink: 'syz.3.1946': attribute type 1 has an invalid length. [ 410.435522][T11019] netlink: 'syz.3.1946': attribute type 2 has an invalid length. [ 410.535337][T11007] 9p: Could not find request transport: tcp*por0000000004e22 [ 410.988125][T11040] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1953'. [ 411.586980][T11060] netlink: 'syz.6.1961': attribute type 1 has an invalid length. [ 411.587005][T11060] netlink: 'syz.6.1961': attribute type 2 has an invalid length. [ 412.550817][ T5883] IPVS: starting estimator thread 0... [ 412.655821][T11089] IPVS: using max 8 ests per chain, 19200 per kthread [ 412.715628][T11087] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.931891][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 416.931942][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 417.909399][T11160] siw: device registration error -23 [ 419.581247][T11201] siw: device registration error -23 [ 420.240163][T11202] 9p: Bad value for 'rfdno' [ 421.415475][T11235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2019'. [ 423.050884][T11278] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2035'. [ 423.323389][T11277] lo speed is unknown, defaulting to 1000 [ 423.421849][T11283] syzkaller0: entered promiscuous mode [ 423.421877][T11283] syzkaller0: entered allmulticast mode [ 424.862759][T11316] lo speed is unknown, defaulting to 1000 [ 429.925717][T11410] siw: device registration error -23 [ 431.496729][T11434] hub 8-0:1.0: USB hub found [ 432.393042][T11434] hub 8-0:1.0: 1 port detected [ 433.953372][T11449] 9p: Could not find request transport: tcp*por0000000004e22 [ 434.197707][T11457] siw: device registration error -23 [ 435.715012][T11476] hub 8-0:1.0: USB hub found [ 435.720480][T11476] hub 8-0:1.0: 1 port detected [ 436.861519][T11485] vlan0: left allmulticast mode [ 438.091355][T11496] 9p: Could not find request transport: tcp*por0000000004e22 [ 440.392990][T11540] hub 8-0:1.0: USB hub found [ 440.394361][T11540] hub 8-0:1.0: 1 port detected [ 440.601075][ T5810] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 440.827064][ T5810] usb 4-1: no configurations [ 440.827087][ T5810] usb 4-1: can't read configurations, error -22 [ 441.007287][ T5810] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 441.304762][ T5810] usb 4-1: no configurations [ 441.304785][ T5810] usb 4-1: can't read configurations, error -22 [ 441.305795][ T5810] usb usb4-port1: attempt power cycle [ 441.691447][ T5810] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 441.723938][ T5810] usb 4-1: no configurations [ 441.723960][ T5810] usb 4-1: can't read configurations, error -22 [ 441.862605][ T5810] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 441.914625][ T5810] usb 4-1: no configurations [ 441.914646][ T5810] usb 4-1: can't read configurations, error -22 [ 441.916532][ T5810] usb usb4-port1: unable to enumerate USB device [ 441.938463][T11563] netlink: 'syz.6.2128': attribute type 1 has an invalid length. [ 441.938487][T11563] netlink: 'syz.6.2128': attribute type 2 has an invalid length. [ 443.373303][T11594] hub 8-0:1.0: USB hub found [ 443.373881][T11594] hub 8-0:1.0: 1 port detected [ 443.496164][T11596] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2139'. [ 444.235205][T11622] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2147'. [ 444.888431][T11638] 9p: Could not find request transport: tcp*por0000000004e22 [ 447.816663][T11712] 9p: Could not find request transport: tcp*por0000000004e22 [ 449.330343][T11765] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2196'. [ 449.686872][T11769] syzkaller0: entered promiscuous mode [ 449.686901][T11769] syzkaller0: entered allmulticast mode [ 449.860613][T11776] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2200'. [ 451.092696][T11779] syzkaller0: entered promiscuous mode [ 451.092726][T11779] syzkaller0: entered allmulticast mode [ 451.118070][T11779] tipc: Started in network mode [ 451.118103][T11779] tipc: Node identity 52311401d062, cluster identity 4711 [ 451.118478][T11779] tipc: Enabled bearer , priority 0 [ 451.181678][T11779] tipc: Resetting bearer [ 451.412342][T11779] tipc: Disabling bearer [ 451.771021][T11799] syzkaller0: entered promiscuous mode [ 451.771048][T11799] syzkaller0: entered allmulticast mode [ 451.787193][T11798] tipc: Enabled bearer , priority 0 [ 453.405141][ T37] audit: type=1804 audit(1770933955.303:58): pid=11823 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.6.2217" name="/newroot/51/file0" dev="tmpfs" ino=275 res=1 errno=0 [ 453.443539][T11823] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -17959, delta: 1 [ 453.443569][T11823] ref_ctr increment failed for inode: 0x113 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888033b08cc0 [ 453.745646][T11808] tipc: Resetting bearer [ 454.309672][T11820] uprobe: syz.6.2217:11820 failed to unregister, leaking uprobe [ 454.713471][T11797] tipc: Resetting bearer [ 455.825252][T11797] tipc: Disabling bearer [ 457.414540][T11818] lo speed is unknown, defaulting to 1000 [ 458.712610][T11860] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2232'. [ 460.603122][ T36] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 460.749133][T11890] GUP no longer grows the stack in syz.3.2245 (11890): 200000006000-200000008000 (200000004000) [ 460.749196][T11890] CPU: 1 UID: 0 PID: 11890 Comm: syz.3.2245 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 460.749222][T11890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 460.749244][T11890] Call Trace: [ 460.749256][T11890] [ 460.749266][T11890] dump_stack_lvl+0xe8/0x150 [ 460.749399][T11890] fixup_user_fault+0x637/0x6f0 [ 460.749524][T11890] fault_in_user_writeable+0x71/0xd0 [ 460.749579][T11890] futex_lock_pi+0x80c/0xb00 [ 460.749625][T11890] ? __pfx_futex_lock_pi+0x10/0x10 [ 460.749699][T11890] ? __pfx_futex_wake_mark+0x10/0x10 [ 460.749748][T11890] ? __sys_sendmmsg+0x4b4/0x4e0 [ 460.749878][T11890] do_futex+0x292/0x420 [ 460.749915][T11890] ? __pfx_do_futex+0x10/0x10 [ 460.749955][T11890] __se_sys_futex+0x3a8/0x450 [ 460.749993][T11890] ? __pfx___se_sys_futex+0x10/0x10 [ 460.750025][T11890] ? rcu_is_watching+0x15/0xb0 [ 460.750086][T11890] ? __x64_sys_futex+0x21/0xf0 [ 460.750119][T11890] do_syscall_64+0x14d/0xf80 [ 460.750225][T11890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.750268][T11890] ? trace_irq_disable+0x37/0x100 [ 460.750297][T11890] ? clear_bhb_loop+0x40/0x90 [ 460.750325][T11890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.750347][T11890] RIP: 0033:0x7f0eea4dbf79 [ 460.750373][T11890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.750401][T11890] RSP: 002b:00007f0ee872e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 460.750441][T11890] RAX: ffffffffffffffda RBX: 00007f0eea755fa0 RCX: 00007f0eea4dbf79 [ 460.750457][T11890] RDX: 00000000fffff7fc RSI: 000000000000008d RDI: 0000200000004000 [ 460.750471][T11890] RBP: 00007f0eea5727e0 R08: 0000000000000000 R09: 0000000000000000 [ 460.750485][T11890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.750499][T11890] R13: 00007f0eea756038 R14: 00007f0eea755fa0 R15: 00007ffedc838f68 [ 460.750534][T11890] [ 460.881132][ T36] usb 2-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 460.881200][ T36] usb 2-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 460.881238][ T36] usb 2-1: config 253 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 460.881262][ T36] usb 2-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 460.883058][ T36] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 460.883080][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 460.883094][ T36] usb 2-1: SerialNumber: syz [ 461.290639][ T36] rndis_host 2-1:253.0: probe with driver rndis_host failed with error -22 [ 461.332494][ T36] usb 2-1: USB disconnect, device number 11 [ 461.332917][T11898] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2248'. [ 461.469100][T11906] hub 8-0:1.0: USB hub found [ 461.476470][T11906] hub 8-0:1.0: 1 port detected [ 462.486038][T11912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2254'. [ 462.901619][ T36] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 463.006301][T11919] bridge_slave_0: left promiscuous mode [ 463.006606][T11919] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.082062][ T36] usb 2-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 463.082126][ T36] usb 2-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 463.082158][ T36] usb 2-1: config 253 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 463.082183][ T36] usb 2-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 463.084979][ T36] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 463.085071][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 463.085125][ T36] usb 2-1: SerialNumber: syz [ 463.155540][T11919] bridge_slave_1: left promiscuous mode [ 463.155820][T11919] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.309548][T11919] bond0: (slave bond_slave_0): Releasing backup interface [ 463.387590][T11919] bond0: (slave bond_slave_1): Releasing backup interface [ 463.406084][ T36] rndis_host 2-1:253.0: probe with driver rndis_host failed with error -22 [ 463.512476][T11919] team0: Port device team_slave_0 removed [ 463.577962][T11919] team0: Port device team_slave_1 removed [ 463.584739][T11919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.631802][T11919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.672962][T11919] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 464.387758][T11937] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2264'. [ 464.516698][T11945] siw: device registration error -23 [ 465.422255][ T6576] usb 2-1: USB disconnect, device number 12 [ 466.401285][T11980] siw: device registration error -23 [ 467.279355][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 467.279463][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 467.402524][T11989] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2283'. [ 467.434429][ T5810] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 467.613532][ T5810] usb 2-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 467.613586][ T5810] usb 2-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 467.613617][ T5810] usb 2-1: config 253 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 467.613641][ T5810] usb 2-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 467.615673][ T5810] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 467.615703][ T5810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 467.615726][ T5810] usb 2-1: SerialNumber: syz [ 467.972730][ T5810] rndis_host 2-1:253.0: probe with driver rndis_host failed with error -22 [ 468.044315][ T5810] usb 2-1: USB disconnect, device number 13 [ 468.567824][ T5810] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 468.730650][ T5810] usb 2-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 468.730700][ T5810] usb 2-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 468.730731][ T5810] usb 2-1: config 253 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 468.730755][ T5810] usb 2-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 468.732274][ T5810] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 468.732309][ T5810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 468.732330][ T5810] usb 2-1: SerialNumber: syz [ 469.041101][ T5810] rndis_host 2-1:253.0: probe with driver rndis_host failed with error -22 [ 469.636704][ T5810] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 469.775699][ T5810] usb 5-1: device descriptor read/64, error -71 [ 470.032291][ T5810] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 470.093979][T12072] netlink: 'syz.6.2320': attribute type 10 has an invalid length. [ 470.094005][T12072] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2320'. [ 470.094484][T12072] dummy0: entered promiscuous mode [ 470.094508][T12072] dummy0: entered allmulticast mode [ 470.138615][T12072] bridge0: port 3(dummy0) entered blocking state [ 470.138819][T12072] bridge0: port 3(dummy0) entered disabled state [ 470.173104][T12072] bridge0: port 3(dummy0) entered blocking state [ 470.173264][T12072] bridge0: port 3(dummy0) entered forwarding state [ 470.197106][ T5810] usb 5-1: device descriptor read/64, error -71 [ 470.321644][ T5810] usb usb5-port1: attempt power cycle [ 470.393030][ T10] usb 2-1: USB disconnect, device number 14 [ 470.705832][ T5810] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 470.732314][ T5810] usb 5-1: device descriptor read/8, error -71 [ 470.983766][ T5810] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 471.016747][ T5810] usb 5-1: device descriptor read/8, error -71 [ 471.135006][ T5810] usb usb5-port1: unable to enumerate USB device [ 471.902010][T12075] team0 (unregistering): Port device team_slave_0 removed [ 471.964961][T12075] team0 (unregistering): Port device team_slave_1 removed [ 472.780189][T12136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2353'. [ 473.399785][ T5944] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 473.473731][T12164] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2368'. [ 473.549481][ T5944] usb 2-1: device descriptor read/64, error -71 [ 473.848806][ T5944] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 474.043108][T12183] siw: device registration error -23 [ 474.820792][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 474.820845][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 474.820874][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 474.820902][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 474.820929][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 474.820956][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 474.820983][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 474.821009][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 474.821037][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 474.821064][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 474.933478][ T36] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 474.965295][ T5813] Bluetooth: hci2: command 0x0406 tx timeout [ 474.966543][ T5944] usb 2-1: device descriptor read/64, error -71 [ 475.081048][ T5944] usb usb2-port1: attempt power cycle [ 475.217884][T12186] fido_id[12186]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 475.452449][ T5944] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 475.474706][ T5944] usb 2-1: device descriptor read/8, error -71 [ 475.514234][ T37] audit: type=1326 audit(1770934232.008:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12197 comm="syz.3.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eea4dbf79 code=0x7ffc0000 [ 475.514550][ T37] audit: type=1326 audit(1770934232.008:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12197 comm="syz.3.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eea4dbf79 code=0x7ffc0000 [ 475.561297][ T37] audit: type=1326 audit(1770934232.046:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12197 comm="syz.3.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eea4dbf79 code=0x7ffc0000 [ 475.561496][ T37] audit: type=1326 audit(1770934232.055:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12197 comm="syz.3.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eea4dbf79 code=0x7ffc0000 [ 475.564198][ T37] audit: type=1326 audit(1770934232.055:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12197 comm="syz.3.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f0eea4dbf79 code=0x7ffc0000 [ 475.564546][ T37] audit: type=1326 audit(1770934232.055:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12197 comm="syz.3.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eea4dbf79 code=0x7ffc0000 [ 475.564702][ T37] audit: type=1326 audit(1770934232.055:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12197 comm="syz.3.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eea4dbf79 code=0x7ffc0000 [ 475.565418][ T37] audit: type=1326 audit(1770934232.055:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12197 comm="syz.3.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eea4dbf79 code=0x7ffc0000 [ 475.568950][ T37] audit: type=1326 audit(1770934232.055:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12197 comm="syz.3.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f0eea4dbf79 code=0x7ffc0000 [ 475.568987][ T37] audit: type=1326 audit(1770934232.055:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12197 comm="syz.3.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eea4dbf79 code=0x7ffc0000 [ 475.741385][ T5944] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 475.764758][ T5944] usb 2-1: device descriptor read/8, error -71 [ 475.888805][ T5944] usb usb2-port1: unable to enumerate USB device [ 475.924560][T12206] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2383'. [ 475.943827][T12206] vlan2: entered promiscuous mode [ 475.943848][T12206] syz_tun: entered promiscuous mode [ 476.655696][T12230] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2391'. [ 476.655724][T12230] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2391'. [ 476.655762][T12230] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2391'. [ 476.655807][T12230] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2391'. [ 477.670775][T12252] 9p: Could not find request transport: tcp*por0000000004e22 [ 478.846337][T12290] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2422'. [ 478.846361][T12290] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2422'. [ 479.162138][T12293] syzkaller1: entered promiscuous mode [ 479.162162][T12293] syzkaller1: entered allmulticast mode [ 479.528901][T12309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2427'. [ 479.592652][T12309] vlan2: entered promiscuous mode [ 479.592673][T12309] gretap0: entered promiscuous mode [ 479.737449][T12313] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2429'. [ 480.124540][T12328] hub 8-0:1.0: USB hub found [ 480.125106][T12328] hub 8-0:1.0: 1 port detected [ 481.929381][T12357] sctp: [Deprecated]: syz.3.2445 (pid 12357) Use of struct sctp_assoc_value in delayed_ack socket option. [ 481.929381][T12357] Use struct sctp_sack_info instead [ 482.330742][T12366] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 482.572422][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 482.572445][ T37] audit: type=1326 audit(1770934494.609:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12344 comm="syz.6.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56819bbf79 code=0x7fc00000 [ 482.705555][ T37] audit: type=1326 audit(1770934494.740:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12377 comm="syz.6.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56819bbf79 code=0x7ffc0000 [ 482.706381][ T37] audit: type=1326 audit(1770934494.740:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12377 comm="syz.6.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56819bbf79 code=0x7ffc0000 [ 482.758968][ T37] audit: type=1326 audit(1770934494.786:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12377 comm="syz.6.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56819bbf79 code=0x7ffc0000 [ 482.788860][ T37] audit: type=1326 audit(1770934494.814:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12377 comm="syz.6.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56819bbf79 code=0x7ffc0000 [ 482.788916][ T37] audit: type=1326 audit(1770934494.786:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12377 comm="syz.6.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f56819bbf79 code=0x7ffc0000 [ 482.788964][ T37] audit: type=1326 audit(1770934494.814:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12377 comm="syz.6.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56819bbf79 code=0x7ffc0000 [ 482.792356][ T37] audit: type=1326 audit(1770934494.814:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12377 comm="syz.6.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56819bbf79 code=0x7ffc0000 [ 482.792413][ T37] audit: type=1326 audit(1770934494.814:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12377 comm="syz.6.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f56819bbf79 code=0x7ffc0000 [ 482.808907][ T37] audit: type=1326 audit(1770934494.814:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12377 comm="syz.6.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56819bbf79 code=0x7ffc0000 [ 483.215197][T12388] netlink: 'syz.5.2459': attribute type 1 has an invalid length. [ 483.215220][T12388] netlink: 'syz.5.2459': attribute type 2 has an invalid length. [ 483.976194][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2473'. [ 483.976222][T12417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2473'. [ 485.550094][T12447] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2485'. [ 485.550119][T12447] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2485'. [ 485.593706][ T5944] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 485.772609][ T5944] usb 2-1: config 0 has an invalid interface number: 7 but max is 0 [ 485.772640][ T5944] usb 2-1: config 0 has no interface number 0 [ 485.778783][ T5944] usb 2-1: New USB device found, idVendor=0f3d, idProduct=68a3, bcdDevice=2c.18 [ 485.778816][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.778838][ T5944] usb 2-1: Product: syz [ 485.778853][ T5944] usb 2-1: Manufacturer: syz [ 485.778868][ T5944] usb 2-1: SerialNumber: syz [ 485.843752][ T5944] usb 2-1: config 0 descriptor?? [ 485.861831][ T5944] usb 2-1: Expected 3 endpoints, found: 0 [ 485.948707][T12429] netlink: 'syz.4.2474': attribute type 1 has an invalid length. [ 485.948726][T12429] netlink: 'syz.4.2474': attribute type 2 has an invalid length. [ 486.222512][ T36] usb 2-1: USB disconnect, device number 19 [ 487.343602][T12469] syzkaller0: entered promiscuous mode [ 487.343632][T12469] syzkaller0: entered allmulticast mode [ 487.873352][T12491] hub 8-0:1.0: USB hub found [ 487.873701][T12491] hub 8-0:1.0: 1 port detected [ 488.029341][T12495] loop2: detected capacity change from 0 to 7 [ 488.068221][T12495] Dev loop2: unable to read RDB block 7 [ 488.068255][T12495] loop2: unable to read partition table [ 488.068397][T12495] loop2: partition table beyond EOD, truncated [ 488.068446][T12495] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 489.411681][T12517] syzkaller0: entered promiscuous mode [ 489.411711][T12517] syzkaller0: entered allmulticast mode [ 491.838299][T12547] syzkaller1: entered promiscuous mode [ 491.838328][T12547] syzkaller1: entered allmulticast mode [ 493.532112][T12566] 9p: Could not find request transport: tcp*por0000000004e22 [ 495.670485][T12609] loop2: detected capacity change from 0 to 7 [ 495.681914][T12609] Dev loop2: unable to read RDB block 7 [ 495.681963][T12609] loop2: AHDI p1 p2 p3 [ 495.681996][T12609] loop2: partition table partially beyond EOD, truncated [ 495.682291][T12609] loop2: p1 start 1601398130 is beyond EOD, truncated [ 495.682314][T12609] loop2: p2 start 1702059890 is beyond EOD, truncated [ 496.579936][T12613] 9p: Could not find request transport: tcp*por0000000004e22 [ 500.522780][T12679] tipc: Enabled bearer , priority 0 [ 500.524853][T12679] syzkaller0: entered promiscuous mode [ 500.524876][T12679] syzkaller0: entered allmulticast mode [ 500.555532][T12679] tipc: Resetting bearer [ 500.842941][T12677] tipc: Resetting bearer [ 501.138854][T12677] tipc: Disabling bearer [ 501.611779][T12713] netlink: 'syz.4.2592': attribute type 1 has an invalid length. [ 501.611803][T12713] netlink: 'syz.4.2592': attribute type 2 has an invalid length. [ 501.757136][T12721] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2596'. [ 501.757573][T12721] 8021q: VLANs not supported on ip6gre0 [ 504.800921][T12773] 9p: Could not find request transport: tcp*por0000000004e22 [ 505.723013][T12785] tipc: Enabled bearer , priority 0 [ 505.723990][T12785] syzkaller0: entered promiscuous mode [ 505.724014][T12785] syzkaller0: entered allmulticast mode [ 505.819311][T12785] tipc: Resetting bearer [ 506.129200][T12784] tipc: Resetting bearer [ 506.500232][T12784] tipc: Disabling bearer [ 507.379661][ T5809] Bluetooth: hci0: command 0x0406 tx timeout [ 507.950589][T12814] 9p: Could not find request transport: tcp*por0000000004e22 [ 508.230358][T12820] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2630'. [ 508.381099][T12822] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2632'. [ 508.452135][T12826] netlink: 'syz.3.2635': attribute type 2 has an invalid length. [ 508.452160][T12826] netlink: 'syz.3.2635': attribute type 1 has an invalid length. [ 508.777802][T12836] program syz.6.2639 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 509.755000][T12863] program syz.3.2650 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 510.327166][ T10] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 510.491951][ T10] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 510.491982][ T10] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 510.492008][ T10] usb 2-1: config 0 has no interface number 0 [ 510.492032][ T10] usb 2-1: too many endpoints for config 0 interface 146 altsetting 255: 255, using maximum allowed: 30 [ 510.492061][ T10] usb 2-1: config 0 interface 146 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 510.492081][ T10] usb 2-1: config 0 interface 146 has no altsetting 0 [ 510.504176][ T10] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 510.504275][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.504331][ T10] usb 2-1: Product: syz [ 510.504358][ T10] usb 2-1: Manufacturer: syz [ 510.504374][ T10] usb 2-1: SerialNumber: syz [ 510.591489][ T10] usb 2-1: config 0 descriptor?? [ 510.731423][ T6576] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 510.833178][ T10] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out. [ 510.894240][ T6576] usb 7-1: config 7 has an invalid interface number: 252 but max is 0 [ 510.894271][ T6576] usb 7-1: config 7 has no interface number 0 [ 510.894317][ T6576] usb 7-1: config 7 interface 252 altsetting 8 endpoint 0xF has an invalid bInterval 232, changing to 4 [ 510.894348][ T6576] usb 7-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid maxpacket 64, setting to 0 [ 510.894376][ T6576] usb 7-1: config 7 interface 252 has no altsetting 0 [ 510.898514][ T6576] usb 7-1: string descriptor 0 read error: -22 [ 510.898659][ T6576] usb 7-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 510.898686][ T6576] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.984938][ T6576] idmouse 7-1:7.252: Unable to find bulk-in endpoint. [ 511.050583][T12860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.051184][T12860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.071858][ T10] usb 2-1: USB disconnect, device number 20 [ 511.208544][T12878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.209118][T12878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.240310][T12878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.241004][T12878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.291261][ T5944] usb 7-1: USB disconnect, device number 2 [ 511.752913][T12899] 9p: Could not find request transport: tcp*por0000000004e22 [ 512.559634][T12922] tipc: Enabled bearer , priority 0 [ 512.561670][T12922] syzkaller0: entered promiscuous mode [ 512.561698][T12922] syzkaller0: entered allmulticast mode [ 512.807993][T12932] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2679'. [ 512.848356][T12920] tipc: Resetting bearer [ 513.109852][T12920] tipc: Disabling bearer [ 513.399686][T12941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2683'. [ 514.199019][T12964] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2695'. [ 514.232263][T12965] tipc: Enabled bearer , priority 0 [ 514.233094][T12965] syzkaller0: entered promiscuous mode [ 514.233118][T12965] syzkaller0: entered allmulticast mode [ 514.330154][T12969] sctp: [Deprecated]: syz.5.2697 (pid 12969) Use of struct sctp_assoc_value in delayed_ack socket option. [ 514.330154][T12969] Use struct sctp_sack_info instead [ 514.600235][T12963] tipc: Resetting bearer [ 514.825955][ T5806] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 514.988948][ T5806] usb 6-1: config 0 has an invalid interface number: 7 but max is 0 [ 514.988980][ T5806] usb 6-1: config 0 has no interface number 0 [ 515.017343][ T5806] usb 6-1: New USB device found, idVendor=0f3d, idProduct=68a3, bcdDevice=2c.18 [ 515.017376][ T5806] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.017404][ T5806] usb 6-1: Product: syz [ 515.017420][ T5806] usb 6-1: Manufacturer: syz [ 515.017436][ T5806] usb 6-1: SerialNumber: syz [ 515.058532][ T5806] usb 6-1: config 0 descriptor?? [ 515.079805][T12963] tipc: Disabling bearer [ 515.080166][ T5806] usb 6-1: Expected 3 endpoints, found: 0 [ 515.506972][ T5806] usb 6-1: USB disconnect, device number 2 [ 515.578400][ T31] tipc: Node number set to 1 [ 516.147191][T13005] sctp: [Deprecated]: syz.3.2710 (pid 13005) Use of struct sctp_assoc_value in delayed_ack socket option. [ 516.147191][T13005] Use struct sctp_sack_info instead [ 517.849341][T13027] 9p: Could not find request transport: tcp*por0000000004e22 [ 517.964511][T13024] tipc: Enabled bearer , priority 0 [ 518.599717][ T36] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 518.678898][T13023] tipc: Disabling bearer [ 518.793725][ T36] usb 6-1: config 0 has an invalid interface number: 7 but max is 0 [ 518.793755][ T36] usb 6-1: config 0 has no interface number 0 [ 518.796242][ T36] usb 6-1: New USB device found, idVendor=0f3d, idProduct=68a3, bcdDevice=2c.18 [ 518.796274][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.796296][ T36] usb 6-1: Product: syz [ 518.796313][ T36] usb 6-1: Manufacturer: syz [ 518.796328][ T36] usb 6-1: SerialNumber: syz [ 518.859529][ T36] usb 6-1: config 0 descriptor?? [ 518.876022][ T36] usb 6-1: Expected 3 endpoints, found: 0 [ 518.942249][T13041] sctp: [Deprecated]: syz.3.2724 (pid 13041) Use of struct sctp_assoc_value in delayed_ack socket option. [ 518.942249][T13041] Use struct sctp_sack_info instead [ 519.209644][ T5806] usb 6-1: USB disconnect, device number 3 [ 519.238067][T13052] program syz.1.2730 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 520.432463][T13069] 9p: Could not find request transport: tcp*por0000000004e22 [ 520.780553][ T5806] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 520.833765][T13075] sctp: [Deprecated]: syz.5.2738 (pid 13075) Use of struct sctp_assoc_value in delayed_ack socket option. [ 520.833765][T13075] Use struct sctp_sack_info instead [ 520.924571][T13074] tipc: Enabled bearer , priority 0 [ 520.928742][T13074] syzkaller0: entered promiscuous mode [ 520.928766][T13074] syzkaller0: entered allmulticast mode [ 520.948325][ T5806] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 520.948355][ T5806] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 520.948377][ T5806] usb 4-1: config 0 has no interface number 0 [ 520.948424][ T5806] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC [ 520.948452][ T5806] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 520.948476][ T5806] usb 4-1: config 0 interface 146 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 520.963502][ T5806] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 520.963533][ T5806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.963556][ T5806] usb 4-1: Product: syz [ 520.963571][ T5806] usb 4-1: Manufacturer: syz [ 520.963587][ T5806] usb 4-1: SerialNumber: syz [ 521.101072][ T5806] usb 4-1: config 0 descriptor?? [ 521.138700][ T5806] microtek usb (rev 0.4.3): expecting 3 got 1 endpoints! Bailing out. [ 521.221613][T13072] tipc: Resetting bearer [ 521.501394][T13072] tipc: Disabling bearer [ 521.728879][T13094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.729471][T13094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.916870][T13103] 9p: Could not find request transport: tcp*por0000000004e22 [ 523.111969][ T36] usb 4-1: USB disconnect, device number 26 [ 523.495140][T13118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2754'. [ 523.675659][T13122] tipc: Enabled bearer , priority 0 [ 523.684938][T13122] syzkaller0: entered promiscuous mode [ 523.684983][T13122] syzkaller0: entered allmulticast mode [ 524.143462][T13120] tipc: Resetting bearer [ 525.713890][T13120] tipc: Disabling bearer [ 527.248376][T13131] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 528.084966][T13203] hub 8-0:1.0: USB hub found [ 528.085518][T13203] hub 8-0:1.0: 1 port detected [ 529.204169][T13205] 9p: Could not find request transport: tcp*por0000000004e22 [ 529.640854][T13231] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2799'. [ 530.251180][T13242] loop2: detected capacity change from 0 to 7 [ 531.182217][T13242] Dev loop2: unable to read RDB block 7 [ 531.182251][T13242] loop2: AHDI p1 p2 p3 [ 531.182280][T13242] loop2: partition table partially beyond EOD, truncated [ 531.202127][T13242] loop2: p1 start 1601398130 is beyond EOD, truncated [ 531.202157][T13242] loop2: p2 start 1702059890 is beyond EOD, truncated [ 531.597065][T13248] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 531.761437][T13252] hub 8-0:1.0: USB hub found [ 531.761834][T13252] hub 8-0:1.0: 1 port detected [ 532.351645][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 532.351725][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 532.736669][T13255] 9p: Could not find request transport: tcp*por0000000004e22 [ 533.229479][ T5809] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 533.243008][ T5809] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 533.245583][ T5809] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 533.274314][ T5809] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 533.275130][ T5809] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 533.636819][T13266] lo speed is unknown, defaulting to 1000 [ 533.971221][T13288] hub 8-0:1.0: USB hub found [ 533.971582][T13288] hub 8-0:1.0: 1 port detected [ 534.863565][T13293] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2822'. [ 535.331192][T13299] 9p: Could not find request transport: tcp*por0000000004e22 [ 535.480182][ T5809] Bluetooth: hci5: command tx timeout [ 535.626443][T13313] loop2: detected capacity change from 0 to 7 [ 535.642252][T13313] Dev loop2: unable to read RDB block 7 [ 535.642301][T13313] loop2: unable to read partition table [ 535.642527][T13313] loop2: partition table beyond EOD, truncated [ 535.642564][T13313] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 536.187249][ T3480] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.571305][T13337] siw: device registration error -23 [ 537.484915][T13339] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2833'. [ 537.703847][ T5809] Bluetooth: hci5: command tx timeout [ 537.793609][T13347] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2834'. [ 537.827652][ T3480] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.099844][T13266] chnl_net:caif_netlink_parms(): no params data found [ 538.467178][ T3480] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.767442][ T3480] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.940817][T13378] lo speed is unknown, defaulting to 1000 [ 539.086738][T13266] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.087004][T13266] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.087347][T13266] bridge_slave_0: entered allmulticast mode [ 539.090284][T13386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2847'. [ 539.126114][T13266] bridge_slave_0: entered promiscuous mode [ 539.164916][T13266] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.165062][T13266] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.165361][T13266] bridge_slave_1: entered allmulticast mode [ 539.168167][T13266] bridge_slave_1: entered promiscuous mode [ 539.168494][T13387] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2847'. [ 539.469580][T13266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.524850][T13266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.754749][T13397] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2852'. [ 539.923178][T13266] team0: Port device team_slave_0 added [ 539.928373][ T5809] Bluetooth: hci5: command tx timeout [ 539.950373][T13266] team0: Port device team_slave_1 added [ 540.250243][T13266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.250261][T13266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.250289][T13266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.298672][ T3480] bridge_slave_1: left allmulticast mode [ 540.304256][ T3480] bridge_slave_1: left promiscuous mode [ 540.352758][ T3480] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.265674][ T3480] bridge_slave_0: left allmulticast mode [ 541.265724][ T3480] bridge_slave_0: left promiscuous mode [ 541.265804][T13412] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2857'. [ 541.265999][ T3480] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.329455][T13415] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2857'. [ 542.551113][ T5809] Bluetooth: hci5: command tx timeout [ 542.855470][T13435] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2863'. [ 544.076114][ T3480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 544.141328][ T3480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 544.163492][ T3480] bond0 (unregistering): Released all slaves [ 544.441529][T13266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.441548][T13266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.441586][T13266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.515739][ T3480] tipc: Disabling bearer [ 544.520547][ T3480] tipc: Left network mode [ 544.906436][T13448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2868'. [ 544.931571][T13448] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2868'. [ 546.343595][T13462] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2873'. [ 546.498194][T13457] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 546.676656][T13474] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2877'. [ 546.676697][T13474] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2877'. [ 546.845577][T13477] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2878'. [ 547.414702][T13266] hsr_slave_0: entered promiscuous mode [ 547.416120][T13266] hsr_slave_1: entered promiscuous mode [ 547.429029][T13266] debugfs: 'hsr0' already exists in 'hsr' [ 547.429138][T13266] Cannot create hsr debugfs directory [ 549.141697][T13496] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2885'. [ 549.302027][T13500] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2887'. [ 549.302056][T13500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2887'. [ 549.429486][T13504] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2888'. [ 549.487393][T13504] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2888'. [ 549.656002][ T3480] hsr_slave_0: left promiscuous mode [ 549.698896][ T3480] hsr_slave_1: left promiscuous mode [ 549.700199][ T3480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.700225][ T3480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.758083][ T3480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 549.758115][ T3480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.878412][ T3480] veth1_macvtap: left promiscuous mode [ 549.878521][ T3480] veth0_macvtap: left promiscuous mode [ 549.878689][ T3480] veth1_vlan: left promiscuous mode [ 549.878877][ T3480] veth0_vlan: left promiscuous mode [ 553.427490][T13526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2896'. [ 554.693800][ T3480] team0 (unregistering): Port device team_slave_1 removed [ 554.948631][ T3480] team0 (unregistering): Port device team_slave_0 removed [ 557.180534][T13526] macvlan0: left allmulticast mode [ 557.180781][T13526] netlink: 'syz.1.2896': attribute type 1 has an invalid length. [ 557.180800][T13526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2896'. [ 557.498402][T13539] syzkaller0: entered promiscuous mode [ 557.498430][T13539] syzkaller0: entered allmulticast mode [ 558.797886][T13554] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2907'. [ 559.150227][T13559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2910'. [ 559.586877][T13554] netlink: 'syz.6.2907': attribute type 1 has an invalid length. [ 559.586903][T13554] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2907'. [ 561.069292][ T3480] IPVS: stop unused estimator thread 0... [ 561.639905][T13266] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 561.669148][T13266] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 561.854054][ T31] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 561.939939][T13266] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 561.990271][T13266] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 562.027051][ T31] usb 4-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 562.027116][ T31] usb 4-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 562.027148][ T31] usb 4-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 562.030320][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 562.030349][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 562.030370][ T31] usb 4-1: SerialNumber: syz [ 562.335644][ T31] rndis_host 4-1:253.0: RNDIS init failed, -71 [ 562.335894][ T31] rndis_host 4-1:253.0: probe with driver rndis_host failed with error -71 [ 562.395429][ T31] usb 4-1: USB disconnect, device number 27 [ 562.474952][T13653] netlink: 4172 bytes leftover after parsing attributes in process `syz.5.2934'. [ 562.517869][T13266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.550280][T13266] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.566729][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.566967][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.601277][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.601452][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.745421][T13657] syz_tun: entered allmulticast mode [ 562.912388][ T31] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 563.015868][T13266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 563.082058][ T31] usb 4-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 563.082124][ T31] usb 4-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 563.082159][ T31] usb 4-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 563.083866][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 563.083940][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 563.084011][ T31] usb 4-1: SerialNumber: syz [ 563.368863][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 563.369283][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 563.369695][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 563.403789][ T31] rndis_host 4-1:253.0: RNDIS init failed, -71 [ 563.407309][ T31] rndis_host 4-1:253.0: probe with driver rndis_host failed with error -71 [ 563.467978][ T31] usb 4-1: USB disconnect, device number 28 [ 563.665044][T13266] veth0_vlan: entered promiscuous mode [ 563.678496][T13266] veth1_vlan: entered promiscuous mode [ 563.742146][T13266] veth0_macvtap: entered promiscuous mode [ 563.757099][T13266] veth1_macvtap: entered promiscuous mode [ 563.783274][T13266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 563.802816][T13266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 563.824914][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.825141][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.825198][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.825236][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.246416][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.246439][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.334958][ T1411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.334980][ T1411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.206440][T13732] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2962'. [ 565.222759][ T5813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 565.255866][ T5813] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 565.265491][T13732] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2962'. [ 565.265839][ T5813] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 565.275443][ T5813] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 565.276847][ T5813] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 565.523680][T13728] lo speed is unknown, defaulting to 1000 [ 565.807544][T13747] loop2: detected capacity change from 0 to 7 [ 565.812568][T13747] Dev loop2: unable to read RDB block 7 [ 565.812721][T13747] loop2: unable to read partition table [ 565.813306][T13747] loop2: partition table beyond EOD, truncated [ 565.813393][T13747] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 566.168376][T13757] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2974'. [ 566.224273][T13761] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2974'. [ 566.586624][T13776] loop2: detected capacity change from 0 to 7 [ 566.603261][T13776] Dev loop2: unable to read RDB block 7 [ 566.603311][T13776] loop2: unable to read partition table [ 566.603540][T13776] loop2: partition table beyond EOD, truncated [ 566.609510][T13776] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 567.226224][T13802] loop2: detected capacity change from 0 to 7 [ 567.227163][T13802] Dev loop2: unable to read RDB block 7 [ 567.227204][T13802] loop2: unable to read partition table [ 567.227566][T13802] loop2: partition table beyond EOD, truncated [ 567.227613][T13802] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 567.313419][T13728] chnl_net:caif_netlink_parms(): no params data found [ 567.477093][ T5813] Bluetooth: hci1: command tx timeout [ 567.873443][T13826] syz.6.3001 (13826) used greatest stack depth: 18368 bytes left [ 568.028425][T13728] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.028636][T13728] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.028825][T13728] bridge_slave_0: entered allmulticast mode [ 568.062061][T13728] bridge_slave_0: entered promiscuous mode [ 568.124386][T13728] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.124508][T13728] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.124758][T13728] bridge_slave_1: entered allmulticast mode [ 568.127598][T13728] bridge_slave_1: entered promiscuous mode [ 568.279475][T13844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3009'. [ 568.560075][T13728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.629551][T13728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.943344][T13728] team0: Port device team_slave_0 added [ 568.959216][T13728] team0: Port device team_slave_1 added [ 569.309931][ T31] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 569.470015][ T31] usb 5-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 569.470066][ T31] usb 5-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 569.470097][ T31] usb 5-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 569.471758][ T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 569.471789][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 569.471811][ T31] usb 5-1: SerialNumber: syz [ 569.690176][ T5813] Bluetooth: hci1: command tx timeout [ 569.810673][ T31] rndis_host 5-1:253.0: RNDIS init failed, -71 [ 569.811118][ T31] rndis_host 5-1:253.0: probe with driver rndis_host failed with error -71 [ 569.869001][ T31] usb 5-1: USB disconnect, device number 10 [ 570.342292][ T31] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 570.516585][ T31] usb 5-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 570.516772][ T31] usb 5-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 570.516807][ T31] usb 5-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 570.518267][ T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 570.518295][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 570.518321][ T31] usb 5-1: SerialNumber: syz [ 570.639757][ T1411] bond0 (unregistering): Released all slaves [ 570.764262][ T31] rndis_host 5-1:253.0: RNDIS init failed, -71 [ 570.764563][ T31] rndis_host 5-1:253.0: probe with driver rndis_host failed with error -71 [ 570.819744][ T31] usb 5-1: USB disconnect, device number 11 [ 571.043805][T13728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.043819][T13728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.043838][T13728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.631035][T13728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.631054][T13728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.631083][T13728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.935113][ T5813] Bluetooth: hci1: command tx timeout [ 572.323517][T13950] loop9: detected capacity change from 0 to 7 [ 572.331351][T13950] Buffer I/O error on dev loop9, logical block 0, async page read [ 572.331401][T13950] Buffer I/O error on dev loop9, logical block 0, async page read [ 572.331438][T13950] Buffer I/O error on dev loop9, logical block 0, async page read [ 572.331471][T13950] Buffer I/O error on dev loop9, logical block 0, async page read [ 572.331525][T13950] Buffer I/O error on dev loop9, logical block 0, async page read [ 572.331573][T13950] Buffer I/O error on dev loop9, logical block 0, async page read [ 572.331607][T13950] Buffer I/O error on dev loop9, logical block 0, async page read [ 572.331629][T13950] ldm_validate_partition_table(): Disk read failed. [ 572.331657][T13950] Buffer I/O error on dev loop9, logical block 0, async page read [ 572.331691][T13950] Buffer I/O error on dev loop9, logical block 0, async page read [ 572.331724][T13950] Buffer I/O error on dev loop9, logical block 0, async page read [ 572.331763][T13950] Dev loop9: unable to read RDB block 0 [ 572.331836][T13950] loop9: unable to read partition table [ 572.337466][T13950] loop9: partition table beyond EOD, truncated [ 572.337510][T13950] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 572.337510][T13950] ) failed (rc=-5) [ 572.668202][T13728] hsr_slave_0: entered promiscuous mode [ 572.691175][T13728] hsr_slave_1: entered promiscuous mode [ 572.693919][T13728] debugfs: 'hsr0' already exists in 'hsr' [ 572.693950][T13728] Cannot create hsr debugfs directory [ 572.734042][T13961] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3053'. [ 572.823428][T13961] netlink: 'syz.6.3053': attribute type 1 has an invalid length. [ 572.823454][T13961] netlink: 'syz.6.3053': attribute type 2 has an invalid length. [ 572.960472][T13963] hub 8-0:1.0: USB hub found [ 572.960864][T13963] hub 8-0:1.0: 1 port detected [ 573.763671][ T1411] hsr_slave_0: left promiscuous mode [ 573.812700][ T1411] hsr_slave_1: left promiscuous mode [ 573.995207][T13987] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3066'. [ 574.296906][ T5813] Bluetooth: hci1: command tx timeout [ 578.884116][ T5944] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 579.053412][ T5944] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 579.053446][ T5944] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 579.053476][ T5944] usb 6-1: config 0 has no interface number 0 [ 579.053524][ T5944] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC [ 579.053553][ T5944] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 579.053579][ T5944] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 579.053607][ T5944] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 579.053636][ T5944] usb 6-1: config 0 interface 146 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 579.145115][ T5944] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 579.145151][ T5944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.145175][ T5944] usb 6-1: Product: syz [ 579.145191][ T5944] usb 6-1: Manufacturer: syz [ 579.145206][ T5944] usb 6-1: SerialNumber: syz [ 579.187217][ T5944] usb 6-1: config 0 descriptor?? [ 579.215882][T14029] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 579.222762][ T5944] microtek usb (rev 0.4.3): expecting 3 got 2 endpoints! Bailing out. [ 579.824407][T14041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.835490][T14041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.850178][T13696] usb 6-1: USB disconnect, device number 4 [ 582.847620][T13987] netlink: 'syz.6.3066': attribute type 1 has an invalid length. [ 582.847643][T13987] netlink: 'syz.6.3066': attribute type 2 has an invalid length. [ 583.136722][T14061] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3093'. [ 584.812948][T13696] ------------[ cut here ]------------ [ 584.812970][T13696] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 584.812995][T13696] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x357/0x500, CPU#1: kworker/1:2/13696 [ 584.813137][T13696] Modules linked in: [ 584.813158][T13696] CPU: 1 UID: 0 PID: 13696 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 584.813184][T13696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 584.813199][T13696] Workqueue: events drm_fb_helper_damage_work [ 584.813245][T13696] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 584.813269][T13696] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 da ee db fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 584.813290][T13696] RSP: 0018:ffffc900050b78e0 EFLAGS: 00010246 [ 584.813309][T13696] RAX: 1ffff110049e1400 RBX: ffffffff8f53f3f0 RCX: 0000000000000000 [ 584.813326][T13696] RDX: ffffffff8b9eec00 RSI: ffffffff8ba0aa40 RDI: ffffffff8f53f3f0 [ 584.813343][T13696] RBP: ffffc900050b79c8 R08: 0000000000000000 R09: 0000000000000000 [ 584.813357][T13696] R10: dffffc0000000000 R11: fffffbfff1e9250f R12: ffffffff8ba0aa40 [ 584.813374][T13696] R13: ffff888024f0a000 R14: 0000000000000000 R15: ffffffff8b9eec00 [ 584.813391][T13696] FS: 0000000000000000(0000) GS:ffff888126695000(0000) knlGS:0000000000000000 [ 584.813410][T13696] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 584.813425][T13696] CR2: 0000001b2da1cff8 CR3: 000000005b3f8000 CR4: 00000000003526f0 [ 584.813446][T13696] Call Trace: [ 584.813455][T13696] [ 584.813470][T13696] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 584.813496][T13696] ? __pfx_autoremove_wake_function+0x10/0x10 [ 584.813543][T13696] ? rt_spin_unlock+0x160/0x200 [ 584.813626][T13696] ? drm_vblank_get+0x147/0x260 [ 584.813685][T13696] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 584.813722][T13696] drm_fb_helper_damage_work+0x131/0x6f0 [ 584.813748][T13696] ? process_scheduled_works+0xa0f/0x17a0 [ 584.813782][T13696] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 584.813806][T13696] ? preempt_schedule_thunk+0x16/0x30 [ 584.813836][T13696] ? process_scheduled_works+0xa0f/0x17a0 [ 584.813862][T13696] ? process_scheduled_works+0xa0f/0x17a0 [ 584.813891][T13696] process_scheduled_works+0xaec/0x17a0 [ 584.813951][T13696] ? __pfx_process_scheduled_works+0x10/0x10 [ 584.813994][T13696] ? assign_work+0x3d5/0x5e0 [ 584.814026][T13696] worker_thread+0xa50/0xfc0 [ 584.814088][T13696] kthread+0x388/0x470 [ 584.814121][T13696] ? __pfx_worker_thread+0x10/0x10 [ 584.814146][T13696] ? __pfx_kthread+0x10/0x10 [ 584.814180][T13696] ret_from_fork+0x51e/0xb90 [ 584.814228][T13696] ? __pfx_ret_from_fork+0x10/0x10 [ 584.814256][T13696] ? __switch_to+0xc7d/0x1400 [ 584.814297][T13696] ? __pfx_kthread+0x10/0x10 [ 584.814331][T13696] ret_from_fork_asm+0x1a/0x30 [ 584.814385][T13696] [ 584.814404][T13696] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 584.814420][T13696] CPU: 1 UID: 0 PID: 13696 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 584.814445][T13696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 584.814459][T13696] Workqueue: events drm_fb_helper_damage_work [ 584.814480][T13696] Call Trace: [ 584.814489][T13696] [ 584.814498][T13696] vpanic+0x1e0/0x670 [ 584.814547][T13696] panic+0xc5/0xd0 [ 584.814578][T13696] ? __pfx_panic+0x10/0x10 [ 584.814621][T13696] ? ret_from_fork_asm+0x1a/0x30 [ 584.814662][T13696] __warn+0x315/0x4a0 [ 584.814692][T13696] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 584.814717][T13696] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 584.814741][T13696] __report_bug+0x29a/0x540 [ 584.814820][T13696] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 584.814844][T13696] ? __pfx___report_bug+0x10/0x10 [ 584.814896][T13696] report_bug_entry+0x19a/0x290 [ 584.814934][T13696] ? drm_crtc_wait_one_vblank+0x4b6/0x500 [ 584.814962][T13696] ? drm_crtc_wait_one_vblank+0x4bb/0x500 [ 584.814984][T13696] handle_bug+0xca/0x200 [ 584.815019][T13696] exc_invalid_op+0x1a/0x50 [ 584.815051][T13696] asm_exc_invalid_op+0x1a/0x20 [ 584.815074][T13696] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 584.815097][T13696] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 da ee db fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 584.815117][T13696] RSP: 0018:ffffc900050b78e0 EFLAGS: 00010246 [ 584.815136][T13696] RAX: 1ffff110049e1400 RBX: ffffffff8f53f3f0 RCX: 0000000000000000 [ 584.815152][T13696] RDX: ffffffff8b9eec00 RSI: ffffffff8ba0aa40 RDI: ffffffff8f53f3f0 [ 584.815169][T13696] RBP: ffffc900050b79c8 R08: 0000000000000000 R09: 0000000000000000 [ 584.815183][T13696] R10: dffffc0000000000 R11: fffffbfff1e9250f R12: ffffffff8ba0aa40 [ 584.815200][T13696] R13: ffff888024f0a000 R14: 0000000000000000 R15: ffffffff8b9eec00 [ 584.815241][T13696] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 584.815266][T13696] ? __pfx_autoremove_wake_function+0x10/0x10 [ 584.815297][T13696] ? rt_spin_unlock+0x160/0x200 [ 584.815323][T13696] ? drm_vblank_get+0x147/0x260 [ 584.815360][T13696] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 584.815395][T13696] drm_fb_helper_damage_work+0x131/0x6f0 [ 584.815422][T13696] ? process_scheduled_works+0xa0f/0x17a0 [ 584.815453][T13696] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 584.815478][T13696] ? preempt_schedule_thunk+0x16/0x30 [ 584.815506][T13696] ? process_scheduled_works+0xa0f/0x17a0 [ 584.815531][T13696] ? process_scheduled_works+0xa0f/0x17a0 [ 584.815559][T13696] process_scheduled_works+0xaec/0x17a0 [ 584.815620][T13696] ? __pfx_process_scheduled_works+0x10/0x10 [ 584.815656][T13696] ? assign_work+0x3d5/0x5e0 [ 584.815689][T13696] worker_thread+0xa50/0xfc0 [ 584.815748][T13696] kthread+0x388/0x470 [ 584.815781][T13696] ? __pfx_worker_thread+0x10/0x10 [ 584.815807][T13696] ? __pfx_kthread+0x10/0x10 [ 584.815844][T13696] ret_from_fork+0x51e/0xb90 [ 584.815875][T13696] ? __pfx_ret_from_fork+0x10/0x10 [ 584.815902][T13696] ? __switch_to+0xc7d/0x1400 [ 584.815930][T13696] ? __pfx_kthread+0x10/0x10 [ 584.815971][T13696] ret_from_fork_asm+0x1a/0x30 [ 584.816022][T13696] [ 584.816189][T13696] Kernel Offset: disabled