last executing test programs: 11.779705178s ago: executing program 1 (id=3538): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402f07002200010000000109022000010100"], 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) 8.814342342s ago: executing program 0 (id=3554): ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000a51000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00003cf000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x100001, 0x329, 0x0, r1}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0, 0x0) io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000b80)) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, r3) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) 8.696713733s ago: executing program 4 (id=3557): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, 0x0, 0x0}}, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00"], 0x13c}, 0x1, 0x0, 0x0, 0x891}, 0x20040880) 8.594571874s ago: executing program 1 (id=3558): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b906, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040f4}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x3, 0x6, @remote}, 0x14) 8.581260576s ago: executing program 4 (id=3559): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x20d6, 0xcb17, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0xff, 0x3, 0x1, 0x3, 0x4, {0x9, 0x21, 0x2, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0x64}}}}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 8.171411462s ago: executing program 1 (id=3564): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x2000005}, 0x1c) 7.909815652s ago: executing program 0 (id=3565): socket$kcm(0x29, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="3d7bc76bdbbda9b84b4fce8176a4fe0b", 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) listen(r0, 0x5) r1 = accept(r0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) shutdown(r1, 0x1) 7.486665927s ago: executing program 2 (id=3566): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x100001, 0x329}) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000500)=0x7) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0, 0x0) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) 7.381813895s ago: executing program 2 (id=3568): openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/module/psmouse/parameters/proto\x00', 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e"], 0x16) 7.186191144s ago: executing program 2 (id=3569): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, 0x0, 0x0}}, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00"], 0x13c}, 0x1, 0x0, 0x0, 0x891}, 0x20040880) 7.134632452s ago: executing program 2 (id=3570): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lsm_get_self_attr(0x64, &(0x7f00000002c0)={0x0, 0x0, 0xcc, 0xac, ""/172}, &(0x7f00000003c0)=0xcc, 0x0) 6.967240853s ago: executing program 0 (id=3571): syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408106050000010000000109021900010100803209040000010a00000007058102"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) 6.91420323s ago: executing program 1 (id=3572): dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="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", @ANYRES64=0x0], 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe, 0xe, 0x5, [@datasec={0x3, 0x0, 0x0, 0xf, 0x2, [], "34aa"}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f00000003c0)=""/143, 0x2d, 0x8f, 0x1}, 0x28) chdir(&(0x7f0000000180)='./file0\x00') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"}) syz_open_dev$tty1(0xc, 0x4, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x20400}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x110000, 0x4, 0x4002004c2, 0x7ff, 0x9, 0x4000000000, 0x400, 0x80, 0x89, 0xd, 0x8, 0x39], 0x100000, 0x241046}) 6.425244951s ago: executing program 4 (id=3573): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(0xffffffffffffffff, 0x9) r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) readv(0xffffffffffffffff, &(0x7f0000000b40)=[{&(0x7f0000000780)=""/172, 0xac}, {0x0}, {0x0}, {0x0}], 0x4) 6.106429901s ago: executing program 4 (id=3574): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 4.859203084s ago: executing program 2 (id=3575): ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000a51000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00003cf000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x100001, 0x329, 0x0, r1}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0, 0x0) io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000b80)) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, r3) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) 3.810223845s ago: executing program 0 (id=3577): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x158}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) accept(r1, 0x0, 0x0) 2.887467506s ago: executing program 0 (id=3580): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'veth0_virt_wifi\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000140)=0x56a4c5c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) write$ppp(r1, &(0x7f0000000a00)='rI', 0x2) 2.782476295s ago: executing program 4 (id=3581): socket$kcm(0x29, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="3d7bc76bdbbda9b84b4fce8176a4fe0b", 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) listen(r0, 0x5) r1 = accept(r0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) shutdown(r1, 0x1) 2.782133848s ago: executing program 3 (id=3582): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x2000005}, 0x1c) 1.988819612s ago: executing program 2 (id=3583): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010102}, {0x2, 0x4a2c, @remote}, {0x2, 0x4e25, @remote}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x9, 0x2}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 1.899349282s ago: executing program 1 (id=3584): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(0xffffffffffffffff, 0x9) r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) readv(0xffffffffffffffff, &(0x7f0000000b40)=[{&(0x7f0000000780)=""/172, 0xac}, {0x0}, {0x0}, {0x0}], 0x4) 1.733068639s ago: executing program 4 (id=3585): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x800400000, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x1, @sdr={0x36314d4e, 0x2}}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) syslog(0x3, &(0x7f0000000240)=""/4096, 0x1000) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x800005}) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000001580)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r2, 0x40045b0a, 0x0) 1.686384423s ago: executing program 3 (id=3586): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1234, 0x4000, 0x40, 0x11, 0x0, @rand_addr=0x1020304, @rand_addr=0x8080808}, {0x1234, 0x5678, 0x8}}}}}, 0x0) 1.606602018s ago: executing program 1 (id=3587): socket$nl_netfilter(0x10, 0x3, 0xc) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa8f94000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x2000000000000) 1.374635192s ago: executing program 3 (id=3588): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r2 = dup(r1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x6}}, 0x20) write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[], 0x32600) write$P9_RWRITE(r2, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x2}, 0xb) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) 1.221609469s ago: executing program 3 (id=3589): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000a51000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00003cf000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x100001, 0x329}) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000500)=0x7) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0, 0x0) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) 1.059970647s ago: executing program 3 (id=3590): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x158}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) accept(r1, 0x0, 0x0) 115.603318ms ago: executing program 3 (id=3591): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 0s ago: executing program 0 (id=3592): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x75, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536", 0x50}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}}], 0x2, 0x2090) sendto$inet(r0, &(0x7f0000001080)="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", 0x2000, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 011000][ T10] usb usb3-port1: unable to enumerate USB device [ 974.080768][T14720] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 974.244340][T14720] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 974.245351][T14720] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 974.245377][T14720] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 974.245397][T14720] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 974.245436][T14720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.253411][T14720] usb 4-1: config 0 descriptor?? [ 974.540507][ T10] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 974.668562][T14720] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 974.668647][T14720] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 974.668672][T14720] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 974.668698][T14720] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 974.668724][T14720] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 974.668751][T14720] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 974.693639][ T10] usb 5-1: New USB device found, idVendor=18d1, idProduct=5044, bcdDevice= 0.00 [ 974.695506][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 974.695535][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 974.695572][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.702048][T14720] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 974.705835][ T10] usb 5-1: config 0 descriptor?? [ 974.707933][T15718] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 974.888626][T14720] usb 4-1: USB disconnect, device number 61 [ 975.151096][ T10] hid-generic 0003:18D1:5044.000C: hidraw0: USB HID v0.00 Device [HID 18d1:5044] on usb-dummy_hcd.4-1/input0 [ 975.331420][T10115] usb 5-1: USB disconnect, device number 74 [ 975.839967][T15752] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 976.642899][T15763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2524'. [ 976.681267][ T10] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 976.798614][T15786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2533'. [ 976.809506][T15786] syz_tun: refused to change device tx_queue_len [ 976.834029][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 976.834839][ T10] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 976.836131][ T10] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 976.836154][ T10] usb 2-1: config 179 has no interface number 0 [ 976.836198][ T10] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 976.836223][ T10] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 976.836249][ T10] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 976.836272][ T10] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 976.836297][ T10] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 976.836321][ T10] usb 2-1: config 179 interface 65 has no altsetting 0 [ 976.836351][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.019074][ T10] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input198 [ 977.070731][ T4968] input input198: unable to receive magic message: -110 [ 977.095663][ T4968] input input198: unable to receive magic message: -32 [ 977.104794][ T4968] input input198: unable to receive magic message: -32 [ 977.153695][ T4968] input input198: unable to receive magic message: -32 [ 977.200521][ T4968] input input198: unable to receive magic message: -32 [ 977.216794][ T4968] input input198: unable to receive magic message: -32 [ 977.286494][T10115] usb 2-1: USB disconnect, device number 76 [ 977.286642][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 977.756524][T15805] netlink: 'syz.3.2541': attribute type 3 has an invalid length. [ 977.765724][T15805] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2541'. [ 978.080986][T14184] Bluetooth: hci0: command 0x0406 tx timeout [ 978.177955][ T52] Bluetooth: hci3: unexpected subevent 0x0a length: 14 < 30 [ 978.210461][T10115] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 978.374833][T10115] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 978.385149][T10115] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 978.396370][T10115] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 978.406298][T10115] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.445779][T10115] usb 1-1: config 0 descriptor?? [ 978.607823][T15836] input: syz0 as /devices/virtual/input/input199 [ 978.629270][T15841] futex_wake_op: syz.3.2557 tries to shift op by 144; fix this program [ 979.072926][T10115] hid-led 0003:27B8:01ED.000D: probe with driver hid-led failed with error -71 [ 979.092548][T10115] usb 1-1: USB disconnect, device number 86 [ 979.195948][ T52] Bluetooth: hci2: unexpected event for opcode 0x0c26 [ 979.341766][ T5683] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 979.431762][ T10] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 979.500642][ T5683] usb 5-1: Using ep0 maxpacket: 8 [ 979.506337][ T5683] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 979.513501][ T5683] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 979.513533][ T5683] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 979.513555][ T5683] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 979.513577][ T5683] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 979.513615][ T5683] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.531980][T14720] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 979.581541][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 979.589247][ T10] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 979.601704][ T10] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 979.601754][ T10] usb 3-1: config 179 has no interface number 0 [ 979.601832][ T10] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 979.601859][ T10] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 979.601884][ T10] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 979.601907][ T10] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 979.601948][ T10] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 979.601972][ T10] usb 3-1: config 179 interface 65 has no altsetting 0 [ 979.602005][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.678147][ T10] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input200 [ 979.683271][T14720] usb 2-1: Using ep0 maxpacket: 8 [ 979.705657][T14720] usb 2-1: unable to get BOS descriptor or descriptor too short [ 979.705754][T14720] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 979.710549][T14720] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 979.710601][T14720] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 979.710618][T14720] usb 2-1: config 4 has no interface number 0 [ 979.738505][T14720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.738531][T14720] usb 2-1: Product: syz [ 979.738545][T14720] usb 2-1: Manufacturer: syz [ 979.738559][T14720] usb 2-1: SerialNumber: syz [ 979.760679][ T5683] usb 5-1: usb_control_msg returned -32 [ 979.760727][ T5683] usbtmc 5-1:16.0: can't read capabilities [ 979.816043][ T5683] usb 5-1: USB disconnect, device number 75 [ 979.865403][ T10] usb 3-1: USB disconnect, device number 76 [ 979.865511][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 979.979875][ T52] Bluetooth: hci0: unexpected event for opcode 0x0404 [ 980.642093][T14720] uvcvideo 2-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 980.642222][T14720] uvcvideo 2-1:4.147: Entity type for entity Output 33019 was not initialized! [ 980.642277][T14720] uvcvideo 2-1:4.147: Failed to create links for entity 33019 [ 980.642293][T14720] uvcvideo 2-1:4.147: Failed to register entities (-22). [ 980.660328][T14720] usb 2-1: USB disconnect, device number 77 [ 980.680996][ T25] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 980.832605][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 980.840550][ T25] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 980.851785][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 980.863059][ T25] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 980.876204][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.884346][ T25] usb 1-1: Product: syz [ 980.884366][ T25] usb 1-1: Manufacturer: syz [ 980.884378][ T25] usb 1-1: SerialNumber: syz [ 980.972332][T15905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2578'. [ 981.332068][ T25] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 981.352959][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 981.443138][ T25] usb 1-1: USB disconnect, device number 87 [ 981.535042][ T8383] udevd[8383]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 981.971806][ T6224] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 982.082400][T15931] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2598'. [ 982.094524][T15931] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 982.132980][ T6224] usb 4-1: Using ep0 maxpacket: 8 [ 982.140619][ T6224] usb 4-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 982.151372][ T6224] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 982.157369][T14720] hid_parser_main: 12 callbacks suppressed [ 982.157469][T14720] hid-generic 0006:0008:0008.000E: unknown main item tag 0x0 [ 982.157506][T14720] hid-generic 0006:0008:0008.000E: unknown main item tag 0x0 [ 982.157531][T14720] hid-generic 0006:0008:0008.000E: unknown main item tag 0x0 [ 982.157569][T14720] hid-generic 0006:0008:0008.000E: unknown main item tag 0x0 [ 982.157594][T14720] hid-generic 0006:0008:0008.000E: unknown main item tag 0x0 [ 982.157619][T14720] hid-generic 0006:0008:0008.000E: unknown main item tag 0x0 [ 982.157644][T14720] hid-generic 0006:0008:0008.000E: unknown main item tag 0x0 [ 982.157669][T14720] hid-generic 0006:0008:0008.000E: unknown main item tag 0x0 [ 982.157694][T14720] hid-generic 0006:0008:0008.000E: unknown main item tag 0x0 [ 982.157719][T14720] hid-generic 0006:0008:0008.000E: unknown main item tag 0x0 [ 982.161862][ T6224] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 982.226520][ T6224] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.226545][ T6224] usb 4-1: Product: syz [ 982.226558][ T6224] usb 4-1: Manufacturer: syz [ 982.226571][ T6224] usb 4-1: SerialNumber: syz [ 982.302986][T14720] hid-generic 0006:0008:0008.000E: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz1 [ 982.323368][T15935] netlink: 'syz.4.2599': attribute type 4 has an invalid length. [ 982.375768][T15939] netlink: 'syz.4.2599': attribute type 4 has an invalid length. [ 982.632764][ T6224] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 982.659962][ T6224] usb 4-1: USB disconnect, device number 62 [ 982.737279][ T8336] udevd[8336]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 982.767029][T15948] vlan2: entered promiscuous mode [ 982.767057][T15948] hsr0: entered promiscuous mode [ 982.773362][T15948] vlan2: entered allmulticast mode [ 982.773380][T15948] hsr0: entered allmulticast mode [ 982.773391][T15948] hsr_slave_0: entered allmulticast mode [ 982.773406][T15948] hsr_slave_1: entered allmulticast mode [ 982.850297][T15948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2603'. [ 982.863290][T15948] hsr_slave_0: left promiscuous mode [ 982.873066][T15948] hsr_slave_1: left promiscuous mode [ 982.991636][T15953] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 982.991654][T15953] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 983.010062][T15953] vhci_hcd vhci_hcd.0: Device attached [ 983.043099][T15957] vhci_hcd: connection closed [ 983.058428][ T59] vhci_hcd vhci_hcd.1: stop threads [ 983.060474][ T59] vhci_hcd vhci_hcd.1: release socket [ 983.060510][ T59] vhci_hcd vhci_hcd.1: disconnect device [ 983.254367][T15965] netlink: 'syz.3.2610': attribute type 1 has an invalid length. [ 983.259072][T15965] netlink: 'syz.3.2610': attribute type 1 has an invalid length. [ 983.349396][T15967] syzkaller0: entered promiscuous mode [ 983.509308][T15973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2614'. [ 986.572088][ T9743] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 986.590275][T16061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2650'. [ 986.721386][ T9743] usb 1-1: Using ep0 maxpacket: 8 [ 986.723112][ T9743] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 986.724325][ T9743] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 986.724352][ T9743] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 986.724374][ T9743] usb 1-1: config 0 interface 0 has no altsetting 0 [ 986.724404][ T9743] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.732652][ T9743] usb 1-1: config 0 descriptor?? [ 986.744068][T14720] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 986.891133][T14720] usb 5-1: Using ep0 maxpacket: 8 [ 986.893906][T14720] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 986.898298][T14720] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 986.898345][T14720] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 986.898366][T14720] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 986.898411][T14720] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 986.898432][T14720] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 986.898470][T14720] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.121356][T14720] usb 5-1: GET_CAPABILITIES returned 0 [ 987.121446][T14720] usbtmc 5-1:16.0: can't read capabilities [ 987.161261][ T9743] mcp2221 0003:04D8:00DD.000F: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 987.250814][ T5683] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 987.361824][T14720] usb 1-1: USB disconnect, device number 88 [ 987.402055][ T5683] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 987.403406][ T5683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 987.403435][ T5683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 987.403456][ T5683] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 987.403494][ T5683] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.419341][ T5683] usb 3-1: config 0 descriptor?? [ 987.525160][ T25] usb 5-1: USB disconnect, device number 76 [ 987.849880][ T5683] usbhid 3-1:0.0: can't add hid device: -71 [ 987.850003][ T5683] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 987.864325][ T5683] usb 3-1: USB disconnect, device number 77 [ 987.897862][T16074] netlink: 'syz.3.2655': attribute type 10 has an invalid length. [ 987.968304][T16077] loop0: detected capacity change from 0 to 3904 [ 987.978902][T16074] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 987.989860][T16074] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 988.022497][T16077] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 988.022538][T16077] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 988.022566][T16077] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 988.022726][T16077] loop0: [ 988.184426][T16081] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2661'. [ 988.255169][T16085] loop0: detected capacity change from 0 to 3904 [ 988.295163][T16085] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 988.295207][T16085] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 988.295269][T16085] loop0: [ 988.446715][ T31] audit: type=1804 audit(1788547899.870:21): pid=16093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2662" name="bus" dev="ramfs" ino=67140 res=1 errno=0 [ 988.461188][ T31] audit: type=1804 audit(1788547899.890:22): pid=16093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2662" name="bus" dev="ramfs" ino=67140 res=1 errno=0 [ 989.124675][T16101] syzkaller1: entered promiscuous mode [ 989.133750][T16101] syzkaller1: entered allmulticast mode [ 989.157033][T16101] AppArmor: change_hat: Invalid input '' [ 989.400734][ T5683] usb 1-1: new low-speed USB device number 89 using dummy_hcd [ 989.554346][ T5683] usb 1-1: unable to get BOS descriptor or descriptor too short [ 989.554411][ T5683] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29 [ 989.555883][ T5683] usb 1-1: config 8 has an invalid interface number: 109 but max is 0 [ 989.555906][ T5683] usb 1-1: config 8 has no interface number 0 [ 989.555942][ T5683] usb 1-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 989.555967][ T5683] usb 1-1: config 8 interface 109 altsetting 0 endpoint 0x8E has invalid maxpacket 19095, setting to 8 [ 989.555990][ T5683] usb 1-1: config 8 interface 109 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 989.559419][ T5683] usb 1-1: string descriptor 0 read error: -22 [ 989.559544][ T5683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.571493][T16101] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 989.578626][ T5683] metro_usb 1-1:8.109: Metrologic USB to Serial converter detected [ 989.612386][ T5683] usb 1-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 989.743013][T16124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 989.787453][T16101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 989.787866][T16101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 989.803455][ T5683] usb 1-1: USB disconnect, device number 89 [ 989.829008][ T5683] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 989.830293][ T5683] metro_usb 1-1:8.109: device disconnected [ 991.214763][ T25] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 991.383024][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 991.388617][ T25] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 991.399017][ T25] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 991.399110][ T25] usb 3-1: config 179 has no interface number 0 [ 991.399160][ T25] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 991.399185][ T25] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 991.399212][ T25] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 991.399236][ T25] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 991.399257][ T25] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 991.399281][ T25] usb 3-1: config 179 interface 65 has no altsetting 0 [ 991.399313][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.474904][ T25] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input202 [ 991.696763][ T9743] usb 3-1: USB disconnect, device number 78 [ 991.696763][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 993.194584][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.194659][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.363042][T16220] loop0: detected capacity change from 0 to 3904 [ 993.406676][T16220] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 993.406726][T16220] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 993.406755][T16220] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 993.406801][T16220] loop0: [ 993.770083][T16231] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 993.770111][T16231] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 993.789297][T16231] vhci_hcd vhci_hcd.0: Device attached [ 994.028361][T16233] vhci_hcd: connection closed [ 994.028900][T14424] vhci_hcd vhci_hcd.4: stop threads [ 994.028937][T14424] vhci_hcd vhci_hcd.4: release socket [ 994.041294][ T9743] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 994.059025][T14424] vhci_hcd vhci_hcd.4: disconnect device [ 994.102809][T16245] loop2: detected capacity change from 0 to 2640 [ 994.147217][T16245] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 994.152145][T16245] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 994.152171][T16245] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 994.152192][T16245] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 994.152214][T16245] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 994.152235][T16245] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 994.152257][T16245] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 994.152279][T16245] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 994.152298][T16245] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 994.152317][T16245] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 994.486304][T16254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2722'. [ 994.538203][T16254] veth7: entered promiscuous mode [ 994.725205][T16260] netlink: 'syz.4.2723': attribute type 1 has an invalid length. [ 994.907362][T16260] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2723'. [ 994.923947][T16269] input: syz1 as /devices/virtual/input/input203 [ 995.009163][T16267] bond1: (slave veth3): Enslaving as an active interface with a down link [ 995.026229][T16260] 8021q: adding VLAN 0 to HW filter on device bond1 [ 995.540820][T14720] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 995.580501][T16288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2734'. [ 995.694305][T16293] netlink: 'syz.3.2737': attribute type 10 has an invalid length. [ 995.702764][T14720] usb 2-1: Using ep0 maxpacket: 16 [ 995.716238][T14720] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 995.716735][T16293] syz_tun: entered promiscuous mode [ 995.733517][T14720] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 995.733562][T14720] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 995.733597][T14720] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 995.733644][T14720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.784083][T14720] usb 2-1: config 0 descriptor?? [ 995.784497][T16293] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 995.791301][ T59] bond0: (slave bond_slave_0): interface is now down [ 995.791331][ T59] bond0: (slave bond_slave_1): interface is now down [ 995.791344][ T59] bond0: (slave netdevsim1): interface is now down [ 995.812219][ T59] bond0: (slave bond_slave_0): interface is now down [ 995.812241][ T59] bond0: (slave bond_slave_1): interface is now down [ 995.812253][ T59] bond0: (slave netdevsim1): interface is now down [ 995.812264][ T59] bond0: (slave syz_tun): interface is now down [ 995.844904][ T59] bond0: now running without any active interface! [ 996.293856][T14720] usbhid 2-1:0.0: can't add hid device: -71 [ 996.293972][T14720] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 996.329761][T14720] usb 2-1: USB disconnect, device number 78 [ 996.833087][T16322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2747'. [ 997.578040][T16357] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2762'. [ 998.260936][ T25] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 998.414811][ T25] usb 4-1: unable to get BOS descriptor or descriptor too short [ 998.414878][ T25] usb 4-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 998.419269][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 998.419293][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 998.419332][ T25] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 998.422847][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 998.422871][ T25] usb 4-1: Product: syz [ 998.422891][ T25] usb 4-1: Manufacturer: syz [ 998.450942][ T25] uvcvideo 4-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 998.450974][ T25] uvcvideo 4-1:1.0: No valid video chain found. [ 998.662751][T10115] usb 4-1: USB disconnect, device number 63 [ 998.733111][ T52] Bluetooth: hci2: unexpected event for opcode 0x2029 [ 999.183923][ T9743] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 999.250628][T14720] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 999.412632][T14720] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 999.422996][T14720] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 999.423033][T14720] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 999.449489][T14720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.449522][T14720] usb 3-1: Product: syz [ 999.449564][T14720] usb 3-1: Manufacturer: syz [ 999.449576][T14720] usb 3-1: SerialNumber: syz [ 999.585616][ T52] Bluetooth: hci3: unexpected event for opcode 0x2029 [ 999.725242][T14720] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 79 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 999.766750][ T52] Bluetooth: hci1: unexpected subevent 0x37 length: 25 > 13 [ 999.787472][T16433] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.2792'. [ 1001.108645][T16480] syzkaller0: entered promiscuous mode [ 1001.108685][T16480] syzkaller0: entered allmulticast mode [ 1001.497861][T16488] netlink: 'syz.3.2815': attribute type 21 has an invalid length. [ 1001.497945][T16488] netlink: 'syz.3.2815': attribute type 6 has an invalid length. [ 1001.497971][T16488] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2815'. [ 1002.109009][ T25] usb 3-1: USB disconnect, device number 79 [ 1002.142778][ T25] usblp0: removed [ 1002.252879][T16508] netlink: 'syz.0.2823': attribute type 29 has an invalid length. [ 1002.274731][T16508] netlink: 'syz.0.2823': attribute type 29 has an invalid length. [ 1002.294038][T16508] netlink: 'syz.0.2823': attribute type 29 has an invalid length. [ 1003.004068][T16533] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2833'. [ 1003.519232][T16537] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.521097][T16537] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.683547][T16549] netlink: 'syz.0.2839': attribute type 10 has an invalid length. [ 1004.000153][T16537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1004.088649][T16537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1004.677747][T16549] syz_tun: entered promiscuous mode [ 1004.709515][T16549] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1004.720742][ T38] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.720801][ T38] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.739154][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.739227][ T38] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.554990][T16606] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2860'. [ 1005.555964][T16606] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2860'. [ 1005.556434][T16606] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2860'. [ 1005.690776][ T5696] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1005.852822][ T5696] usb 4-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.40 [ 1005.866743][ T5696] usb 4-1: too many endpoints for config 1 interface 0 altsetting 13: 255, using maximum allowed: 30 [ 1005.866801][ T5696] usb 4-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1005.866851][ T5696] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1005.906751][ T5696] usb 4-1: string descriptor 0 read error: -22 [ 1005.906901][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.177258][ T52] Bluetooth: hci1: unexpected cc 0x203e length: 2 > 1 [ 1006.179360][ T52] Bluetooth: hci1: unexpected event for opcode 0x203e [ 1006.383100][ T5696] hid_parser_main: 12 callbacks suppressed [ 1006.389031][ T5696] hid-udraw 0003:20D6:CB17.0010: unknown main item tag 0x0 [ 1006.389080][ T5696] hid-udraw 0003:20D6:CB17.0010: unknown main item tag 0x0 [ 1006.423949][ T5696] hid-udraw 0003:20D6:CB17.0010: unknown main item tag 0x0 [ 1006.423987][ T5696] hid-udraw 0003:20D6:CB17.0010: unknown main item tag 0x0 [ 1006.424021][ T5696] hid-udraw 0003:20D6:CB17.0010: unknown main item tag 0x0 [ 1006.424046][ T5696] hid-udraw 0003:20D6:CB17.0010: unknown main item tag 0x0 [ 1006.424062][ T5696] hid-udraw 0003:20D6:CB17.0010: unknown main item tag 0x0 [ 1006.424077][ T5696] hid-udraw 0003:20D6:CB17.0010: unknown main item tag 0x0 [ 1006.424093][ T5696] hid-udraw 0003:20D6:CB17.0010: unknown main item tag 0x0 [ 1006.424108][ T5696] hid-udraw 0003:20D6:CB17.0010: unknown main item tag 0x0 [ 1006.629582][ T5696] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:20D6:CB17.0010/input/input204 [ 1006.732031][ T5696] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:20D6:CB17.0010/input/input205 [ 1006.800815][ T5696] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:20D6:CB17.0010/input/input206 [ 1006.908042][ T5696] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:20D6:CB17.0010/input/input207 [ 1007.018459][ T5696] hid-udraw 0003:20D6:CB17.0010: hidraw0: USB HID v0.02 Device [HID 20d6:cb17] on usb-dummy_hcd.3-1/input0 [ 1007.106572][ T5696] usb 4-1: USB disconnect, device number 64 [ 1007.270270][T16635] fido_id[16635]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1007.292769][ T52] Bluetooth: hci3: unexpected event for opcode 0x0c1b [ 1008.074516][T16669] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2873'. [ 1008.249984][ T52] Bluetooth: hci3: unexpected cc 0x203e length: 2 > 1 [ 1008.257007][ T52] Bluetooth: hci3: unexpected event for opcode 0x203e [ 1009.448008][T16699] netlink: 'syz.4.2883': attribute type 10 has an invalid length. [ 1009.465348][T16699] syz_tun: entered promiscuous mode [ 1009.500968][T16699] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1009.545805][T16654] bond0: (slave bond_slave_0): interface is now down [ 1009.560477][T16654] bond0: (slave bond_slave_1): interface is now down [ 1009.560525][T16654] bond0: (slave syz_tun): interface is now down [ 1009.586134][T16654] bond0: now running without any active interface! [ 1009.679346][T16703] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2886'. [ 1010.230609][ T52] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1010.230752][ T52] Bluetooth: hci1: Injecting HCI hardware error event [ 1010.234215][ T52] Bluetooth: hci1: hardware error 0x00 [ 1010.720504][ T5696] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1010.874220][ T5696] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1010.876966][ T5696] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1010.877003][ T5696] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.879604][ T5696] usb 1-1: config 0 descriptor?? [ 1011.116463][T16617] Set syz0 is full, maxelem 65536 reached [ 1011.913151][T16762] tipc: Started in network mode [ 1011.923275][T16762] tipc: Node identity 4edf9abd11e2, cluster identity 4711 [ 1011.924132][T16762] tipc: Enabled bearer , priority 0 [ 1011.924913][T16762] syzkaller0: entered promiscuous mode [ 1011.924932][T16762] syzkaller0: entered allmulticast mode [ 1011.937336][T16760] tipc: Resetting bearer [ 1011.981525][T16760] tipc: Disabling bearer [ 1012.312966][T14184] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1012.312978][ T52] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1012.313034][T14184] Bluetooth: hci3: Injecting HCI hardware error event [ 1012.314392][ T52] Bluetooth: hci3: hardware error 0x00 [ 1012.456983][T16772] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2913'. [ 1012.550336][T16776] netlink: 'syz.1.2915': attribute type 1 has an invalid length. [ 1012.679877][T16781] veth9: entered allmulticast mode [ 1012.688895][T16781] bond1: (slave veth9): Enslaving as an active interface with a down link [ 1012.728122][T16783] syzkaller0: entered promiscuous mode [ 1012.728149][T16783] syzkaller0: entered allmulticast mode [ 1012.783009][T16776] macvlan2: entered promiscuous mode [ 1012.783037][T16776] macvlan2: entered allmulticast mode [ 1012.784839][T16776] bond1: entered promiscuous mode [ 1012.809881][T16776] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1012.828106][T16776] bond1: left promiscuous mode [ 1013.172453][T10108] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1013.174345][T10108] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1013.193359][T10108] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1013.225081][T10108] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1013.225509][T10108] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1014.158210][T10115] usb 1-1: USB disconnect, device number 90 [ 1014.392157][ T52] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1014.746528][T10363] bond0: (slave syz_tun): Releasing backup interface [ 1014.773915][T16824] hub 8-0:1.0: USB hub found [ 1014.774309][T16824] hub 8-0:1.0: 1 port detected [ 1015.227666][T16790] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.227774][T16790] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.243046][T16790] bridge_slave_0: entered allmulticast mode [ 1015.256466][T16790] bridge_slave_0: entered promiscuous mode [ 1015.271001][ T52] Bluetooth: hci5: command tx timeout [ 1015.310743][T16790] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.318874][T16790] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.326666][T16790] bridge_slave_1: entered allmulticast mode [ 1015.336929][T16790] bridge_slave_1: entered promiscuous mode [ 1015.391424][T16790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1015.406082][T16790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1015.457166][T16790] team0: Port device team_slave_0 added [ 1015.465782][T16790] team0: Port device team_slave_1 added [ 1015.509248][T16790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1015.516970][T16790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1015.543456][T16790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1015.557393][T16790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1015.564977][T16790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1015.623612][T16790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1015.897209][T16790] hsr_slave_0: entered promiscuous mode [ 1015.922684][T16790] hsr_slave_1: entered promiscuous mode [ 1015.923403][T16790] debugfs: 'hsr0' already exists in 'hsr' [ 1015.923423][T16790] Cannot create hsr debugfs directory [ 1016.734411][T16790] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.891116][T16857] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 1016.977262][T16790] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.100339][T16863] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2945'. [ 1017.235885][T16790] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.350963][ T52] Bluetooth: hci5: command tx timeout [ 1017.557603][T16790] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.721096][ T5696] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1017.880472][ T5696] usb 4-1: Using ep0 maxpacket: 32 [ 1017.886790][ T5696] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1017.897182][ T5696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.909050][ T5696] usb 4-1: config 0 descriptor?? [ 1018.155921][ T5696] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1018.186480][T16790] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1018.203604][ T5696] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1018.214719][ T5696] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1018.222173][ T5696] usb 4-1: media controller created [ 1018.243736][ T5696] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1018.379970][ T5696] az6027: usb out operation failed. (-71) [ 1018.391059][T16790] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1018.391926][T16790] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1018.409258][ T5696] az6027: usb out operation failed. (-71) [ 1018.429494][ T5696] stb0899_attach: Driver disabled by Kconfig [ 1018.429635][ T5696] az6027: no front-end attached [ 1018.429635][ T5696] [ 1018.444356][T16790] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1018.445463][ T5696] az6027: usb out operation failed. (-71) [ 1018.445480][ T5696] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1018.446872][T16790] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1018.490059][ T5696] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input208 [ 1018.507307][ T5696] dvb-usb: schedule remote query interval to 400 msecs. [ 1018.515246][ T5696] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1018.528489][ T5696] usb 4-1: USB disconnect, device number 65 [ 1018.535894][T16790] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1018.539580][T16790] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1018.585134][T16790] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1018.669877][ T5696] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1018.737067][T16898] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2957'. [ 1018.826590][T16790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1018.856937][T16790] 8021q: adding VLAN 0 to HW filter on device team0 [ 1018.882922][T16654] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.883036][T16654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1018.911594][T16653] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.911687][T16653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1019.176167][T16790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1019.319062][T16790] veth0_vlan: entered promiscuous mode [ 1019.361044][T16790] veth1_vlan: entered promiscuous mode [ 1019.432559][ T52] Bluetooth: hci5: command tx timeout [ 1019.444639][T16790] veth0_macvtap: entered promiscuous mode [ 1019.459763][T16790] veth1_macvtap: entered promiscuous mode [ 1019.498103][T16923] syzkaller0: entered promiscuous mode [ 1019.498151][T16923] syzkaller0: entered allmulticast mode [ 1019.518015][T16790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1019.572598][T16790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1019.745776][T16654] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.746812][T16654] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.764005][T16653] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.767098][T16654] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.027208][T16654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1020.041071][T16654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1020.249024][T16653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1020.257773][T16653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1020.384068][T16939] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 1020.655021][T16943] netlink: 'syz.4.2918': attribute type 39 has an invalid length. [ 1020.829216][T16947] ip_tables: iptables: counters copy to user failed while replacing table [ 1020.848320][T16947] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 1020.966743][T10108] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1020.983587][T10108] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1020.995026][T10108] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1021.004006][T10108] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1021.011118][T10108] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1021.335085][T16951] syzkaller0: entered promiscuous mode [ 1021.335130][T16951] syzkaller0: entered allmulticast mode [ 1021.510909][T10108] Bluetooth: hci5: command tx timeout [ 1022.377785][T16973] binder: 16971:16973 ioctl 402c5828 2000000003c0 returned -22 [ 1023.110862][T10108] Bluetooth: hci1: command tx timeout [ 1023.877157][T17022] loop0: detected capacity change from 0 to 3904 [ 1023.912213][T17022] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1023.922712][T17022] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1023.922796][T17022] loop0: [ 1024.124563][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.165515][T17027] netlink: 'syz.4.3008': attribute type 10 has an invalid length. [ 1024.352707][T16654] bond0: (slave bond_slave_0): interface is now down [ 1024.353472][T16654] bond0: (slave bond_slave_1): interface is now down [ 1024.403654][T16654] bond0: now running without any active interface! [ 1024.636737][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.661712][T16953] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.670289][T16953] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.678758][T16953] bridge_slave_0: entered allmulticast mode [ 1024.687883][T16953] bridge_slave_0: entered promiscuous mode [ 1024.698798][T16953] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.707928][T16953] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.716163][T16953] bridge_slave_1: entered allmulticast mode [ 1024.730023][T16953] bridge_slave_1: entered promiscuous mode [ 1024.762162][ T9743] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 1024.970115][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.006185][T16953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1025.009905][T16953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1025.170653][ T25] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1025.191254][T10108] Bluetooth: hci1: command tx timeout [ 1025.246981][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.277544][T16953] team0: Port device team_slave_0 added [ 1025.287933][T16953] team0: Port device team_slave_1 added [ 1025.320683][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 1025.326530][ T25] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1025.337081][ T25] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 1025.337160][ T25] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1025.337187][ T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1025.337209][ T25] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1025.337235][ T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1025.337256][ T25] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1025.337299][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.454463][T16953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1025.454501][T16953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1025.454525][T16953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1025.465355][T16953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1025.465372][T16953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1025.465396][T16953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1025.588107][T16953] hsr_slave_0: entered promiscuous mode [ 1025.595959][T16953] hsr_slave_1: entered promiscuous mode [ 1025.596685][T16953] debugfs: 'hsr0' already exists in 'hsr' [ 1025.596703][T16953] Cannot create hsr debugfs directory [ 1025.616038][T10115] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1025.627775][ T25] usb 1-1: GET_CAPABILITIES returned 0 [ 1025.627837][ T25] usbtmc 1-1:16.0: can't read capabilities [ 1025.732509][T17063] netlink: 'syz.3.3021': attribute type 10 has an invalid length. [ 1025.774563][T10115] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1025.774631][T10115] usb 2-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 1025.793395][T10115] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.793439][T10115] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1025.793497][T10115] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1025.828019][T10115] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1025.828060][T10115] usb 2-1: Product: syz [ 1025.828089][T10115] usb 2-1: Manufacturer: syz [ 1025.837615][ T5683] usb 1-1: USB disconnect, device number 91 [ 1025.880306][T10115] uvcvideo 2-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 1025.881028][T10115] uvcvideo 2-1:1.0: No valid video chain found. [ 1026.037141][ T49] bridge_slave_1: left allmulticast mode [ 1026.043751][ T49] bridge_slave_1: left promiscuous mode [ 1026.052536][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.062824][ T49] bridge_slave_0: left allmulticast mode [ 1026.068527][ T49] bridge_slave_0: left promiscuous mode [ 1026.076406][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.082582][ T4513] usb 2-1: USB disconnect, device number 79 [ 1026.692425][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1026.707805][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1026.728894][ T49] bond0 (unregistering): Released all slaves [ 1027.275342][T10108] Bluetooth: hci1: command tx timeout [ 1027.488779][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1027.849928][T17122] netlink: 'syz.0.3032': attribute type 10 has an invalid length. [ 1027.894510][T17124] netlink: 'syz.1.3033': attribute type 4 has an invalid length. [ 1028.243679][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1028.333796][ T49] hsr_slave_0: left promiscuous mode [ 1028.342724][ T49] hsr_slave_1: left promiscuous mode [ 1028.349078][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1028.357617][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1028.398068][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1028.405914][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1028.442331][ T49] veth1_macvtap: left promiscuous mode [ 1028.448167][ T49] veth1_vlan: left promiscuous mode [ 1028.453884][ T49] veth0_vlan: left promiscuous mode [ 1028.603621][T17149] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3043'. [ 1028.972158][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1028.982055][ T49] team0 (unregistering): Port device team_slave_0 removed [ 1029.358433][T10108] Bluetooth: hci1: command tx timeout [ 1029.740222][T16953] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1029.757337][T16953] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1029.758504][T16953] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1029.765828][ T4513] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1029.789012][T16953] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1029.789969][T16953] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1029.804695][ T49] IPVS: stop unused estimator thread 0... [ 1029.826291][T16953] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1029.828063][T16953] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1029.838847][T16953] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1029.880836][ T25] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1029.931249][ T4513] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1029.941441][ T4513] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1029.941495][ T4513] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1029.941529][ T4513] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1029.941572][ T4513] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.986757][ T4513] usb 2-1: config 0 descriptor?? [ 1030.030921][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 1030.031729][ T25] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1030.032906][ T25] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 1030.032929][ T25] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1030.032947][ T25] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1030.032965][ T25] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1030.032983][ T25] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1030.033001][ T25] usb 1-1: config 0 has no interface number 0 [ 1030.033044][ T25] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1030.033069][ T25] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1030.033089][ T25] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1030.033119][ T25] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1030.033142][ T25] usb 1-1: config 0 interface 125 has no altsetting 0 [ 1030.033159][ T25] usb 1-1: config 0 interface 125 has no altsetting 2 [ 1030.038314][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.038338][ T25] usb 1-1: Product: syz [ 1030.038351][ T25] usb 1-1: Manufacturer: syz [ 1030.038365][ T25] usb 1-1: SerialNumber: syz [ 1030.047298][ T25] usb 1-1: config 0 descriptor?? [ 1030.073664][ T25] usb 1-1: selecting invalid altsetting 2 [ 1030.159296][T16953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1030.265520][T17182] netlink: 'syz.3.3054': attribute type 10 has an invalid length. [ 1030.275083][T16953] 8021q: adding VLAN 0 to HW filter on device team0 [ 1030.290300][T17168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1030.298382][T17168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1030.308550][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.308681][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1030.361546][ T2998] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.363150][ T2998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1030.494309][ T4513] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1030.613453][T16953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1030.741682][T16953] veth0_vlan: entered promiscuous mode [ 1030.762596][T16953] veth1_vlan: entered promiscuous mode [ 1030.880038][T16953] veth0_macvtap: entered promiscuous mode [ 1030.898291][T16953] veth1_macvtap: entered promiscuous mode [ 1031.009621][T16953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1031.060206][T16953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1031.111525][ T2998] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.122503][ T154] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.132800][ T154] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.146256][ C1] usb 1-1: async_complete: urb error -71 [ 1031.147232][ T25] get_1284_register: usb error -71 [ 1031.184808][ T25] usb 1-1: USB disconnect, device number 92 [ 1031.243833][ T2998] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.408163][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1031.416559][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1031.478181][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1031.478213][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1031.815218][ C1] plantronics 0003:047F:FFFF.0011: usb_submit_urb(ctrl) failed: -1 [ 1032.069306][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1032.093531][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1032.104662][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1032.113022][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1032.122852][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1032.610537][ T25] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1032.614328][ T10] usb 2-1: USB disconnect, device number 80 [ 1032.770454][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 1032.776568][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1032.793183][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1032.793214][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1032.793248][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.827598][ T25] usb 5-1: config 0 descriptor?? [ 1032.873785][ T25] hub 5-1:0.0: USB hub found [ 1033.152673][ T25] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1033.604989][ T25] hid_parser_main: 4007 callbacks suppressed [ 1033.613343][ T25] hid-generic 0003:046D:C31C.0012: unknown main item tag 0x0 [ 1033.636308][ T25] hid-generic 0003:046D:C31C.0012: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 1033.786297][T17205] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.786471][T17205] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.786625][T17205] bridge_slave_0: entered allmulticast mode [ 1033.820669][T17205] bridge_slave_0: entered promiscuous mode [ 1033.869679][T17205] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.874256][T17205] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.874418][T17205] bridge_slave_1: entered allmulticast mode [ 1033.901602][T17205] bridge_slave_1: entered promiscuous mode [ 1034.076739][T17205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1034.079798][T17205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1034.154982][T17205] team0: Port device team_slave_0 added [ 1034.166060][T17205] team0: Port device team_slave_1 added [ 1034.230909][T10108] Bluetooth: hci2: command tx timeout [ 1034.298869][T11736] bond0: (slave syz_tun): Releasing backup interface [ 1034.344474][T17205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1034.354631][T17205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1034.354686][T17205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1034.395593][T17205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1034.395610][T17205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1034.395633][T17205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1034.546999][T17209] usb 5-1: reset high-speed USB device number 77 using dummy_hcd [ 1034.679069][T17205] hsr_slave_0: entered promiscuous mode [ 1034.680156][T17205] hsr_slave_1: entered promiscuous mode [ 1034.731018][T17205] debugfs: 'hsr0' already exists in 'hsr' [ 1034.731050][T17205] Cannot create hsr debugfs directory [ 1034.958757][T17209] usbhid 5-1:0.0: reset_resume error -1 [ 1035.237114][T16568] usb 5-1: USB disconnect, device number 77 [ 1035.592671][T17205] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.932397][T17205] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.061197][T17205] bond0: (slave netdevsim1): Releasing backup interface [ 1036.108807][T17205] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.301313][T17205] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.311674][T10108] Bluetooth: hci2: command tx timeout [ 1036.512783][ T4513] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1036.681365][ T4513] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.40 [ 1036.691910][ T4513] usb 2-1: too many endpoints for config 1 interface 0 altsetting 13: 255, using maximum allowed: 30 [ 1036.691965][ T4513] usb 2-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1036.692010][ T4513] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1036.734508][ T4513] usb 2-1: string descriptor 0 read error: -22 [ 1036.741890][ T4513] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.806238][T17288] tipc: Started in network mode [ 1036.806286][T17288] tipc: Node identity 76cac2f0d10c, cluster identity 4711 [ 1036.806505][T17288] tipc: Enabled bearer , priority 0 [ 1036.823390][T17205] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1036.848817][T17205] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1036.851424][T17205] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1036.852267][T17293] netlink: 'syz.4.3092': attribute type 10 has an invalid length. [ 1036.867719][T17205] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1036.868550][T17205] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1036.893729][T17205] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1036.896468][T17288] tipc: Resetting bearer [ 1036.908129][T17285] tipc: Disabling bearer [ 1036.929776][T17205] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1036.946300][T17205] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1037.198388][T17205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1037.248184][T17205] 8021q: adding VLAN 0 to HW filter on device team0 [ 1037.266446][T16652] bridge0: port 1(bridge_slave_0) entered blocking state [ 1037.266569][T16652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1037.291413][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1037.291550][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1037.375139][ T4513] usbhid 2-1:1.0: can't add hid device: -71 [ 1037.381763][ T4513] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 1037.405009][ T4513] usb 2-1: USB disconnect, device number 81 [ 1037.578042][T17205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1037.719490][T17205] veth0_vlan: entered promiscuous mode [ 1037.752032][T17205] veth1_vlan: entered promiscuous mode [ 1037.879980][T17205] veth0_macvtap: entered promiscuous mode [ 1037.888919][T17330] netlink: 'syz.4.3104': attribute type 10 has an invalid length. [ 1037.918209][T17205] veth1_macvtap: entered promiscuous mode [ 1037.934754][T10108] Bluetooth: hci0: unexpected event for opcode 0x080c [ 1037.953139][T17205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1037.972012][T17205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1038.079834][ T2998] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.090838][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.091257][T16652] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.091519][T16652] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.243808][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1038.243849][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.390802][T10108] Bluetooth: hci2: command tx timeout [ 1038.467827][ T2998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1038.467866][ T2998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.579069][T17356] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3115'. [ 1039.628416][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1039.641626][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1039.649917][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1039.671379][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1039.678973][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1040.128858][T17392] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3129'. [ 1040.474500][ T52] Bluetooth: hci2: command tx timeout [ 1041.192944][T17385] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.193129][T17385] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.193750][T17385] bridge_slave_0: entered allmulticast mode [ 1041.195447][T17385] bridge_slave_0: entered promiscuous mode [ 1041.198571][T17385] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.198726][T17385] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.198839][T17385] bridge_slave_1: entered allmulticast mode [ 1041.200881][T17385] bridge_slave_1: entered promiscuous mode [ 1041.233017][T17385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1041.235986][T17385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1041.264514][T17385] team0: Port device team_slave_0 added [ 1041.267357][T17385] team0: Port device team_slave_1 added [ 1041.311207][T17385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1041.311399][T17385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1041.311423][T17385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1041.315261][T17385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1041.315276][T17385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1041.315299][T17385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1041.510294][T17385] hsr_slave_0: entered promiscuous mode [ 1041.517286][T17385] hsr_slave_1: entered promiscuous mode [ 1041.517734][T17385] debugfs: 'hsr0' already exists in 'hsr' [ 1041.517751][T17385] Cannot create hsr debugfs directory [ 1041.761651][ T52] Bluetooth: hci3: command tx timeout [ 1043.006411][T17453] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1043.018155][T17453] block device autoloading is deprecated and will be removed. [ 1043.080561][ T25] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1043.207242][T17456] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.207636][T17456] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.242518][ T25] usb 4-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 1043.245066][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.458827][ T25] usb 4-1: NFC: Reader power on cmd error 0 [ 1043.458876][ T25] pn533_usb 4-1:1.0: NFC: Couldn't poweron the reader (error -22) [ 1043.459322][ T25] pn533_usb 4-1:1.0: probe with driver pn533_usb failed with error -22 [ 1043.487448][ T25] usb 4-1: USB disconnect, device number 67 [ 1043.718648][T17456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1043.756470][T17456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1043.831162][ T52] Bluetooth: hci3: command tx timeout [ 1044.047993][T16654] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.048059][T16654] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.048106][T16654] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.048139][T16654] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.927052][T17385] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1044.955357][T17385] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1044.956249][T17385] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1044.978461][T17513] netlink: 'syz.3.3169': attribute type 4 has an invalid length. [ 1044.981850][T17385] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1044.990134][T17385] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1045.009438][T17385] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1045.029050][T17385] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1045.047688][T17513] netlink: 'syz.3.3169': attribute type 4 has an invalid length. [ 1045.055514][T17385] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1045.100635][T16564] usb 3-1: new full-speed USB device number 80 using dummy_hcd [ 1045.273396][T16564] usb 3-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 1045.292996][T16564] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 1045.293042][T16564] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1045.293083][T16564] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1045.293118][T16564] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.312174][T17385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1045.347382][T16564] usb 3-1: config 0 descriptor?? [ 1045.354021][T17510] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1045.357138][T17385] 8021q: adding VLAN 0 to HW filter on device team0 [ 1045.383310][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.383451][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1045.408644][ T2998] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.408740][ T2998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1045.571328][T17385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1045.653417][T17385] veth0_vlan: entered promiscuous mode [ 1045.677338][T17385] veth1_vlan: entered promiscuous mode [ 1045.727669][T17385] veth0_macvtap: entered promiscuous mode [ 1045.744589][T17385] veth1_macvtap: entered promiscuous mode [ 1045.768940][T17385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1045.780898][T16564] kye 0003:0458:501A.0013: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1045.798872][T17385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1045.809211][T16564] kye 0003:0458:501A.0013: unknown main item tag 0x7 [ 1045.833157][T16564] kye 0003:0458:501A.0013: hidraw0: USB HID v0.0c Device [HID 0458:501a] on usb-dummy_hcd.2-1/input0 [ 1045.843942][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.844271][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.844307][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.844349][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.880323][T16564] kye 0003:0458:501A.0013: tablet-enabling feature report not found [ 1045.888456][T16564] kye 0003:0458:501A.0013: tablet enabling failed [ 1045.910893][ T52] Bluetooth: hci3: command tx timeout [ 1046.038440][T10115] usb 3-1: USB disconnect, device number 80 [ 1046.052612][T17537] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3176'. [ 1046.099900][T17533] fido_id[17533]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1046.173568][ T2998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1046.182533][ T2998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1046.240263][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1046.240295][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1047.172501][T10108] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1047.189719][T10108] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1047.197696][T10108] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1047.208093][T10108] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1047.217873][T10108] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1047.976756][T17562] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1047.990958][T10108] Bluetooth: hci3: command tx timeout [ 1049.098859][T10817] bond0: (slave syz_tun): Releasing backup interface [ 1049.230036][T17569] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.242317][T17569] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.257355][T17569] bridge_slave_0: entered allmulticast mode [ 1049.274295][T17569] bridge_slave_0: entered promiscuous mode [ 1049.298233][T17569] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.298399][T17569] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.298561][T17569] bridge_slave_1: entered allmulticast mode [ 1049.350510][T10108] Bluetooth: hci4: command tx timeout [ 1049.364096][T17569] bridge_slave_1: entered promiscuous mode [ 1049.552166][T17569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1049.568416][T17569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1049.745542][T17569] team0: Port device team_slave_0 added [ 1049.755374][T17569] team0: Port device team_slave_1 added [ 1049.955839][T17569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1049.955875][T17569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1049.977784][T17569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1050.011191][T17569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1050.011216][T17569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1050.011262][T17569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1050.385358][T17625] syzkaller0: entered promiscuous mode [ 1050.385390][T17625] syzkaller0: entered allmulticast mode [ 1051.444289][T10108] Bluetooth: hci4: command tx timeout [ 1053.290870][T17569] hsr_slave_0: entered promiscuous mode [ 1053.292044][T17569] hsr_slave_1: entered promiscuous mode [ 1053.293087][T17569] debugfs: 'hsr0' already exists in 'hsr' [ 1053.293107][T17569] Cannot create hsr debugfs directory [ 1053.510852][T10108] Bluetooth: hci4: command tx timeout [ 1053.586974][T17671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3225'. [ 1053.992943][T16562] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 1054.163348][T16562] usb 2-1: not running at top speed; connect to a high speed hub [ 1054.165854][T17688] tipc: Enabling of bearer rejected, failed to enable media [ 1054.180517][T16562] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 1054.192070][T16562] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1054.209825][T16562] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.209879][T16562] usb 2-1: Product: syz [ 1054.209898][T16562] usb 2-1: Manufacturer: syz [ 1054.209915][T16562] usb 2-1: SerialNumber: syz [ 1054.247758][T16562] keyspan 2-1:1.0: Keyspan 4 port adapter converter detected [ 1054.274643][T16562] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1054.288916][T16562] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1054.301831][T16562] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1054.317919][T16562] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1054.619809][T17698] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3235'. [ 1054.635885][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.635962][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.679251][T16568] usb 2-1: USB disconnect, device number 82 [ 1054.729560][T16568] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1054.735084][T17569] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1054.755731][T16568] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1054.774767][T17569] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1054.775796][T17569] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1054.776987][T16568] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1054.792857][T16568] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1054.799219][T17569] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1054.800135][T17569] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1054.802191][T16568] keyspan 2-1:1.0: device disconnected [ 1054.850266][T17569] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1054.859427][T17569] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1054.885651][T17569] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1055.049300][T17569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1055.100054][T17569] 8021q: adding VLAN 0 to HW filter on device team0 [ 1055.118287][ T2998] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.118398][ T2998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1055.142944][T16653] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.143054][T16653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1055.248260][T17569] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1055.355943][T17569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1055.392388][T17722] tipc: Enabling of bearer rejected, failed to enable media [ 1055.441225][T17569] veth0_vlan: entered promiscuous mode [ 1055.458367][T17569] veth1_vlan: entered promiscuous mode [ 1055.495762][T17569] veth0_macvtap: entered promiscuous mode [ 1055.509380][T17569] veth1_macvtap: entered promiscuous mode [ 1055.533134][T17569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1055.570208][T17569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1055.590918][T10108] Bluetooth: hci4: command tx timeout [ 1055.622143][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.622484][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.622520][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.622550][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.868875][T16653] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1055.868908][T16653] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1055.945308][ T2998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1055.945348][ T2998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1056.097038][T17746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3252'. [ 1056.097077][T17746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3252'. [ 1056.300450][T14720] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1056.351801][T17752] tipc: Enabling of bearer rejected, failed to enable media [ 1056.460528][T14720] usb 1-1: Using ep0 maxpacket: 16 [ 1056.467944][T14720] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1056.468019][T14720] usb 1-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= 0.40 [ 1056.491648][T14720] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 127, changing to 7 [ 1056.508364][T14720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.517450][T14720] usb 1-1: Product: syz [ 1056.522779][T14720] usb 1-1: Manufacturer: syz [ 1056.522823][T14720] usb 1-1: SerialNumber: syz [ 1056.764775][T14720] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 1056.785905][T17763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3260'. [ 1056.882970][T14720] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1056.908636][T14720] usb 1-1: invalid MIDI EP [ 1056.915215][T14720] usb 1-1: snd-bcd2000: error during probing [ 1056.925414][T14720] snd-bcd2000 1-1:1.0: probe with driver snd-bcd2000 failed with error -22 [ 1056.954322][T14720] usb 1-1: invalid MIDI EP [ 1056.954361][T14720] usb 1-1: snd-bcd2000: error during probing [ 1056.967276][T14720] snd-bcd2000 1-1:1.1: probe with driver snd-bcd2000 failed with error -22 [ 1056.993789][T14720] usb 1-1: invalid MIDI EP [ 1056.998956][T14720] usb 1-1: snd-bcd2000: error during probing [ 1057.005846][T14720] snd-bcd2000 1-1:1.2: probe with driver snd-bcd2000 failed with error -22 [ 1057.019719][T14720] usb 1-1: USB disconnect, device number 93 [ 1057.087472][ T8336] udevd[8336]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1057.166205][T17777] tipc: Enabling of bearer rejected, failed to enable media [ 1057.271526][T16561] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1057.361141][T16564] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1057.428610][T17789] batman_adv: batadv0: Adding interface: veth0 [ 1057.428659][T17789] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1057.428687][T17789] batman_adv: batadv0: Interface activated: veth0 [ 1057.435221][T16561] usb 2-1: Using ep0 maxpacket: 8 [ 1057.437871][T17789] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3272'. [ 1057.437893][T17789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1057.437910][T17789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1057.461896][T16561] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 1057.469680][T17789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1057.469704][T17789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1057.474906][T17789] batman_adv: batadv0: Interface deactivated: veth0 [ 1057.474927][T17789] batman_adv: batadv0: Removing interface: veth0 [ 1057.498668][T16561] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.547552][T16561] usb 2-1: config 0 descriptor?? [ 1057.556211][T16561] usb 2-1: probing VID:PID(0424:012C) [ 1057.567591][T16561] usb 2-1: vub300 testing BULK IN EndPoint(0) 81 [ 1057.567630][T16561] usb 2-1: vub300 testing BULK OUT EndPoint(1) 02 [ 1057.567647][T16561] usb 2-1: vub300 testing BULK IN EndPoint(2) 83 [ 1057.567662][T16561] usb 2-1: vub300 testing BULK OUT EndPoint(3) 04 [ 1057.567683][T16561] usb 2-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 1057.592314][T16564] usb 5-1: Using ep0 maxpacket: 16 [ 1057.593688][T16564] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1057.597755][T16564] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 1057.597779][T16564] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1057.597821][T16564] usb 5-1: config 8 has no interface number 0 [ 1057.597858][T16564] usb 5-1: config 8 interface 223 altsetting 0 bulk endpoint 0xC has invalid maxpacket 32 [ 1057.597888][T16564] usb 5-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1057.604353][T16564] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.604399][T16564] usb 5-1: Product: syz [ 1057.604414][T16564] usb 5-1: Manufacturer: syz [ 1057.604428][T16564] usb 5-1: SerialNumber: syz [ 1057.614716][T17775] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1057.828169][T16564] usb 5-1: USB disconnect, device number 78 [ 1057.963547][T16561] usb 2-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 1058.165314][T16561] usb 2-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 1058.377190][T17804] ip_tables: iptables: counters copy to user failed while replacing table [ 1058.745423][T17819] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3286'. [ 1058.903823][T17825] syzkaller1: entered promiscuous mode [ 1058.903857][T17825] syzkaller1: entered allmulticast mode [ 1059.322453][T17836] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.3294'. [ 1059.492991][T17845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3299'. [ 1059.493052][T17845] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3299'. [ 1059.493095][T17845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3299'. [ 1059.735583][T17850] loop0: detected capacity change from 0 to 3904 [ 1059.797451][T17854] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3303'. [ 1059.972362][T16562] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 1060.068540][T17862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3306'. [ 1060.126493][T16562] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1060.127542][T16562] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1060.127565][T16562] usb 5-1: config 0 has no interface number 0 [ 1060.127601][T16562] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1060.127624][T16562] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1060.127644][T16562] usb 5-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1060.127669][T16562] usb 5-1: config 0 interface 1 has no altsetting 0 [ 1060.127699][T16562] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.135468][T16562] usb 5-1: config 0 descriptor?? [ 1060.422112][T17874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3311'. [ 1060.533544][T17878] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3314'. [ 1060.560575][T16562] usbhid 5-1:0.1: can't add hid device: -71 [ 1060.560688][T16562] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 1060.569926][T16562] usb 5-1: USB disconnect, device number 79 [ 1060.627458][T17882] tipc: Enabling of bearer rejected, failed to enable media [ 1060.717670][T17884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3316'. [ 1060.717713][T17884] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 1060.717713][T17884] Please contact the netfilter-devel mailing list or update your nftables rules. [ 1060.756687][T17886] netlink: zone id is out of range [ 1060.937565][T16564] usb 2-1: USB disconnect, device number 83 [ 1060.971834][T16563] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 1061.080503][T16568] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1061.234591][T16568] usb 1-1: Using ep0 maxpacket: 16 [ 1061.241084][T16568] usb 1-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 1061.250926][T16562] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1061.262338][T16568] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1061.274045][T16568] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1061.284020][T16568] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.284091][T16568] usb 1-1: Product: syz [ 1061.284109][T16568] usb 1-1: Manufacturer: syz [ 1061.284131][T16568] usb 1-1: SerialNumber: syz [ 1061.321203][T16568] usb 1-1: config 0 descriptor?? [ 1061.403768][T16562] usb 4-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 1061.406356][T16562] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.455399][T17907] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 1061.578395][ C1] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1061.600073][T16568] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input209 [ 1061.632705][T16568] imon:send_packet: packet tx failed (-71) [ 1061.650960][T16568] imon 1-1:0.0: panel buttons/knobs setup failed [ 1061.751656][T16568] rc_core: IR keymap rc-imon-pad not found [ 1061.757619][T16568] Registered IR keymap rc-empty [ 1061.762892][T16568] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1061.774546][T16568] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1061.784179][T16568] imon:send_packet: packet tx failed (-71) [ 1061.800721][T16568] imon 1-1:0.0: remote input dev register failed [ 1061.800901][T16568] imon 1-1:0.0: imon_init_intf0: rc device setup failed [ 1061.895530][T16568] imon 1-1:0.0: unable to initialize intf0, err 0 [ 1061.903893][T16568] imon:imon_probe: failed to initialize context! [ 1061.903938][T16568] imon 1-1:0.0: unable to register, err -19 [ 1061.927562][T16568] usb 1-1: USB disconnect, device number 94 [ 1062.213859][T17931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1062.224951][T17931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1062.233282][T16568] usb 1-1: new full-speed USB device number 95 using dummy_hcd [ 1062.253803][T17931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1062.254342][T17931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1062.391329][T16568] usb 1-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 1062.403596][T16568] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1062.403658][T16568] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 1062.403687][T16568] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1062.435839][T16568] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.445391][T16568] usb 1-1: Product: syz [ 1062.445436][T16568] usb 1-1: Manufacturer: syz [ 1062.445454][T16568] usb 1-1: SerialNumber: syz [ 1062.463090][T16568] usb 1-1: config 0 descriptor?? [ 1062.469270][T17892] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1062.576489][T16562] usb 4-1: NFC: Unable to get FW version [ 1062.590977][T16562] pn533_usb 4-1:1.0: probe with driver pn533_usb failed with error -71 [ 1062.596247][T16562] usb 4-1: USB disconnect, device number 68 [ 1062.611885][T10115] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1062.681387][ C1] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1062.683659][T16568] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input211 [ 1062.770481][T10115] usb 5-1: Using ep0 maxpacket: 16 [ 1062.771352][T10115] usb 5-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 1062.772777][T10115] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1062.772805][T10115] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1062.775674][T10115] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.775695][T10115] usb 5-1: Product: syz [ 1062.775709][T10115] usb 5-1: Manufacturer: syz [ 1062.775722][T10115] usb 5-1: SerialNumber: syz [ 1062.787129][T10115] usb 5-1: config 0 descriptor?? [ 1062.940587][T16568] rc_core: IR keymap rc-imon-pad not found [ 1062.940633][T16568] Registered IR keymap rc-empty [ 1062.941108][T16568] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1062.941127][T16568] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1063.004772][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1063.007685][T10115] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input213 [ 1063.012095][T10115] imon:send_packet: packet tx failed (-71) [ 1063.032982][T10115] imon 5-1:0.0: panel buttons/knobs setup failed [ 1063.090473][T10115] rc_core: IR keymap rc-imon-pad not found [ 1063.090516][T10115] Registered IR keymap rc-empty [ 1063.090808][T10115] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1063.090853][T10115] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1063.091170][T10115] imon:send_packet: packet tx failed (-71) [ 1063.102703][T16568] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1063.106203][T16568] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input212 [ 1063.111026][T10115] imon 5-1:0.0: remote input dev register failed [ 1063.111205][T10115] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 1063.111332][T16568] imon 1-1:0.0: iMON device (15c2:0045, intf0) on usb<1:95> initialized [ 1063.243966][T10115] imon 5-1:0.0: unable to initialize intf0, err 0 [ 1063.244016][T10115] imon:imon_probe: failed to initialize context! [ 1063.244045][T10115] imon 5-1:0.0: unable to register, err -19 [ 1063.272950][T10115] usb 5-1: USB disconnect, device number 80 [ 1063.442640][T17949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.455108][T17949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1063.642827][T10115] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 1063.797202][T10115] usb 5-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 1063.798393][T10115] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1063.798444][T10115] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 1063.798469][T10115] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1063.804340][T10115] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.804364][T10115] usb 5-1: Product: syz [ 1063.804377][T10115] usb 5-1: Manufacturer: syz [ 1063.804391][T10115] usb 5-1: SerialNumber: syz [ 1063.811781][T10115] usb 5-1: config 0 descriptor?? [ 1063.812524][T17938] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1064.055626][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1064.060293][T10115] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input215 [ 1064.086886][T17969] __nla_validate_parse: 4 callbacks suppressed [ 1064.087043][T17969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3351'. [ 1064.371858][T10115] rc_core: IR keymap rc-imon-pad not found [ 1064.373793][T10115] Registered IR keymap rc-empty [ 1064.373862][T10115] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1064.373879][T10115] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1064.473281][T10115] rc rc1: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1 [ 1064.477366][T10115] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1/input216 [ 1064.484253][T10115] imon 5-1:0.0: iMON device (15c2:0045, intf0) on usb<5:81> initialized [ 1064.756287][T17892] imon:send_packet: task interrupted [ 1064.756330][T17892] imon:send_packet: packet tx failed (-512) [ 1064.757785][T17892] imon:lcd_write: send packet failed! [ 1064.758137][T17947] imon:lcd_write: invalid payload size: 0 (expected 8) [ 1064.787172][T10115] usb 1-1: USB disconnect, device number 95 [ 1064.946289][T17481] usb 5-1: USB disconnect, device number 81 [ 1065.804077][T18003] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3364'. [ 1066.494390][T16562] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1066.650556][T16562] usb 4-1: Using ep0 maxpacket: 16 [ 1066.657243][T16562] usb 4-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 1066.667904][T16562] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1066.667957][T16562] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1066.688230][T16562] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.696534][T16562] usb 4-1: Product: syz [ 1066.700870][T16562] usb 4-1: Manufacturer: syz [ 1066.700889][T16562] usb 4-1: SerialNumber: syz [ 1066.713727][T16562] usb 4-1: config 0 descriptor?? [ 1066.933934][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1066.948557][T16562] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input217 [ 1066.965177][T16562] imon:send_packet: packet tx failed (-71) [ 1066.990484][T16562] imon 4-1:0.0: panel buttons/knobs setup failed [ 1067.062353][T16562] rc_core: IR keymap rc-imon-pad not found [ 1067.068537][T16562] Registered IR keymap rc-empty [ 1067.076527][T16562] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1067.076548][T16562] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1067.099572][T16562] imon:send_packet: packet tx failed (-71) [ 1067.110584][T16562] imon 4-1:0.0: remote input dev register failed [ 1067.110752][T16562] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 1067.150491][T14720] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1067.173646][T16562] imon 4-1:0.0: unable to initialize intf0, err 0 [ 1067.180264][T16562] imon:imon_probe: failed to initialize context! [ 1067.180285][T16562] imon 4-1:0.0: unable to register, err -19 [ 1067.198338][T16562] usb 4-1: USB disconnect, device number 69 [ 1067.320572][T14720] usb 5-1: Using ep0 maxpacket: 16 [ 1067.326486][T14720] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1067.328753][T14720] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 1067.328775][T14720] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1067.328793][T14720] usb 5-1: config 8 has no interface number 0 [ 1067.328829][T14720] usb 5-1: config 8 interface 223 altsetting 0 bulk endpoint 0xC has invalid maxpacket 32 [ 1067.328851][T14720] usb 5-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1067.331515][T14720] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.331537][T14720] usb 5-1: Product: syz [ 1067.331551][T14720] usb 5-1: Manufacturer: syz [ 1067.331564][T14720] usb 5-1: SerialNumber: syz [ 1067.337086][T18020] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1067.522334][T16562] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 1067.538236][T18031] loop0: detected capacity change from 0 to 3904 [ 1067.559825][T14720] usb 5-1: USB disconnect, device number 82 [ 1067.575225][T18031] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1067.575268][T18031] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1067.575316][T18031] loop0: [ 1067.599146][ T49] wlan1: IBSS 50:50:50:50:50:50 switches to unsupported channel (2484 MHz, width:0, CF1/2: 2484/0 MHz), disconnecting [ 1067.673214][T16562] usb 4-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 1067.675465][T16562] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1067.675496][T16562] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 1067.675520][T16562] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1067.677223][ T49] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 1067.682573][T16562] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.682595][T16562] usb 4-1: Product: syz [ 1067.682609][T16562] usb 4-1: Manufacturer: syz [ 1067.682622][T16562] usb 4-1: SerialNumber: syz [ 1067.694136][T16562] usb 4-1: config 0 descriptor?? [ 1067.694960][T18011] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1067.917134][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1067.921942][T16562] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input219 [ 1068.191055][T16562] rc_core: IR keymap rc-imon-pad not found [ 1068.191087][T16562] Registered IR keymap rc-empty [ 1068.191174][T16562] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1068.191207][T16562] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1068.333940][T16562] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1068.336766][T16562] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input220 [ 1068.341533][T16562] imon 4-1:0.0: iMON device (15c2:0045, intf0) on usb<4:70> initialized [ 1068.363794][T17481] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1068.513714][T17481] usb 3-1: device descriptor read/64, error -71 [ 1068.643420][T18060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1068.655425][T18060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.752618][T17481] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1068.890468][T17481] usb 3-1: device descriptor read/64, error -71 [ 1069.001187][T17481] usb usb3-port1: attempt power cycle [ 1069.340618][T17481] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1069.361373][T17481] usb 3-1: device descriptor read/8, error -71 [ 1069.600494][T17481] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1069.643298][T17481] usb 3-1: device descriptor read/8, error -71 [ 1069.752929][T17481] usb usb3-port1: unable to enumerate USB device [ 1069.796327][T18106] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3390'. [ 1069.812947][T18106] netlink: 'syz.0.3390': attribute type 10 has an invalid length. [ 1069.824232][T18106] syz_tun: entered promiscuous mode [ 1069.851284][T18106] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1069.872870][T18011] imon:send_packet: task interrupted [ 1069.872912][T18011] imon:send_packet: packet tx failed (-512) [ 1069.872952][T18011] imon:lcd_write: send packet failed! [ 1069.876854][T18057] imon:lcd_write: invalid payload size: 0 (expected 8) [ 1069.941895][T16562] usb 4-1: USB disconnect, device number 70 [ 1070.179759][T18113] Cannot find add_set index 4 as target [ 1070.693316][T18129] tipc: Started in network mode [ 1070.698489][T18129] tipc: Node identity 427493437f5e, cluster identity 4711 [ 1070.706948][T18129] tipc: Enabled bearer , priority 0 [ 1070.717988][T18129] tipc: Resetting bearer [ 1070.726130][T18128] tipc: Disabling bearer [ 1072.270019][T18180] tipc: Enabled bearer , priority 0 [ 1072.281939][T18180] tipc: Resetting bearer [ 1072.295981][T18179] tipc: Disabling bearer [ 1072.344545][T18184] syzkaller0: entered promiscuous mode [ 1072.350294][T18184] syzkaller0: entered allmulticast mode [ 1072.713297][T16561] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1072.850672][T16561] usb 3-1: device descriptor read/64, error -71 [ 1073.097350][T16561] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1073.230949][T16561] usb 3-1: device descriptor read/64, error -71 [ 1073.344967][T16561] usb usb3-port1: attempt power cycle [ 1073.691523][T16561] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1073.711201][T16561] usb 3-1: device descriptor read/8, error -71 [ 1073.950542][T16561] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1073.981063][T16561] usb 3-1: device descriptor read/8, error -71 [ 1074.101526][T16561] usb usb3-port1: unable to enumerate USB device [ 1074.987608][T18250] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1075.803296][T18271] syzkaller0: entered promiscuous mode [ 1075.803347][T18271] syzkaller0: entered allmulticast mode [ 1076.700499][T17481] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1076.851630][T17481] usb 1-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 0.00 [ 1076.863094][T17481] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1076.874189][T17481] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1076.885023][T17481] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1076.885052][T17481] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1076.929541][T17481] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1076.929579][T17481] usb 1-1: Product: syz [ 1076.929607][T17481] usb 1-1: Manufacturer: syz [ 1076.954068][T17481] hso 1-1:1.0: Can't find BULK endpoints [ 1077.163306][T16561] usb 1-1: USB disconnect, device number 96 [ 1077.907223][T18306] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3441'. [ 1077.961600][T18308] netlink: 'syz.4.3441': attribute type 10 has an invalid length. [ 1077.980562][T17479] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1078.110597][T17479] usb 1-1: device descriptor read/64, error -71 [ 1078.350522][T17479] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1078.480607][T17479] usb 1-1: device descriptor read/64, error -71 [ 1078.591017][T17479] usb usb1-port1: attempt power cycle [ 1078.930512][T17479] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1078.954771][T17479] usb 1-1: device descriptor read/8, error -71 [ 1079.201181][T17479] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1079.223877][T17479] usb 1-1: device descriptor read/8, error -71 [ 1079.333037][T17479] usb usb1-port1: unable to enumerate USB device [ 1081.160552][T14720] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1081.320632][T14720] usb 1-1: Using ep0 maxpacket: 16 [ 1081.321779][T14720] usb 1-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 1081.323195][T14720] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1081.323223][T14720] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1081.327404][T14720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.327449][T14720] usb 1-1: Product: syz [ 1081.327462][T14720] usb 1-1: Manufacturer: syz [ 1081.327476][T14720] usb 1-1: SerialNumber: syz [ 1081.333650][T14720] usb 1-1: config 0 descriptor?? [ 1081.425594][T18383] netlink: 'syz.4.3467': attribute type 39 has an invalid length. [ 1081.553769][ C0] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1081.560195][T14720] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input221 [ 1081.567858][T14720] imon:send_packet: packet tx failed (-71) [ 1081.582246][T14720] imon 1-1:0.0: panel buttons/knobs setup failed [ 1081.731908][T14720] rc_core: IR keymap rc-imon-pad not found [ 1081.731942][T14720] Registered IR keymap rc-empty [ 1081.732030][T14720] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1081.732051][T14720] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1081.732823][T14720] imon:send_packet: packet tx failed (-71) [ 1081.763067][T14720] imon 1-1:0.0: remote input dev register failed [ 1081.763225][T14720] imon 1-1:0.0: imon_init_intf0: rc device setup failed [ 1081.801161][T14720] imon 1-1:0.0: unable to initialize intf0, err 0 [ 1081.801205][T14720] imon:imon_probe: failed to initialize context! [ 1081.801234][T14720] imon 1-1:0.0: unable to register, err -19 [ 1081.808244][T14720] usb 1-1: USB disconnect, device number 101 [ 1082.122527][T14720] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 1082.182556][T18395] sctp: Trying to GSO but underlying device doesn't support it. [ 1082.286353][T14720] usb 1-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 1082.287509][T14720] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1082.287538][T14720] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 1082.287562][T14720] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1082.289754][T14720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.289776][T14720] usb 1-1: Product: syz [ 1082.289788][T14720] usb 1-1: Manufacturer: syz [ 1082.289801][T14720] usb 1-1: SerialNumber: syz [ 1082.298257][T14720] usb 1-1: config 0 descriptor?? [ 1082.308765][T18369] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1082.438141][T18397] loop0: detected capacity change from 0 to 3904 [ 1082.481104][T18397] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1082.481155][T18397] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1082.481244][T18397] loop0: [ 1082.540150][ C0] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1082.554823][T14720] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input223 [ 1082.892684][T14720] rc_core: IR keymap rc-imon-pad not found [ 1082.894648][T14720] Registered IR keymap rc-empty [ 1082.894718][T14720] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1082.894735][T14720] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1082.962084][T14720] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1082.981510][T14720] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input224 [ 1082.997235][T14720] imon 1-1:0.0: iMON device (15c2:0045, intf0) on usb<1:102> initialized [ 1083.204470][T18406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3475'. [ 1083.273553][T18412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1083.273974][T18412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1083.315093][T18409] imon:lcd_write: invalid payload size: 0 (expected 8) [ 1083.388246][T18406] veth3: entered promiscuous mode [ 1083.484018][T16562] usb 1-1: USB disconnect, device number 102 [ 1084.400848][T10115] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1084.483152][T18439] loop0: detected capacity change from 0 to 3904 [ 1084.551544][T10115] usb 3-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 1084.552568][T18439] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1084.552587][T18439] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1084.552638][T18439] loop0: [ 1084.585227][T10115] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.692622][T16562] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1084.850672][T16562] usb 5-1: Using ep0 maxpacket: 16 [ 1084.858097][T16562] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1084.858175][T16562] usb 5-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= 0.40 [ 1084.879562][T16562] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1084.879615][T16562] usb 5-1: can't read configurations, error -71 [ 1085.181795][T18452] openvswitch: netlink: IP tunnel dst address not specified [ 1085.376515][T18453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1085.389164][T18453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1085.405999][T18453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1085.410253][T18453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1085.734377][T10115] usb 3-1: NFC: Unable to get FW version [ 1085.765102][T10115] pn533_usb 3-1:1.0: probe with driver pn533_usb failed with error -71 [ 1085.844218][T18462] syzkaller0: entered promiscuous mode [ 1085.844258][T18462] syzkaller0: entered allmulticast mode [ 1085.868754][T10115] usb 3-1: USB disconnect, device number 89 [ 1086.570533][T10115] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1086.670541][T16562] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1086.700585][T10115] usb 1-1: device descriptor read/64, error -71 [ 1086.820633][T16562] usb 3-1: Using ep0 maxpacket: 16 [ 1086.828880][T16562] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1086.836879][T16562] usb 3-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= 0.40 [ 1086.847802][T16562] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1086.855733][T16562] usb 3-1: can't read configurations, error -71 [ 1086.940576][T10115] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1087.072236][T10115] usb 1-1: device descriptor read/64, error -71 [ 1087.183544][T10115] usb usb1-port1: attempt power cycle [ 1087.520454][T10115] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1087.542098][T10115] usb 1-1: device descriptor read/8, error -71 [ 1087.781092][T10115] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1087.802992][T10115] usb 1-1: device descriptor read/8, error -71 [ 1087.920724][T10115] usb usb1-port1: unable to enumerate USB device [ 1088.156610][T18515] tipc: Enabled bearer , priority 0 [ 1088.164688][T18515] syzkaller0: entered promiscuous mode [ 1088.170327][T18515] syzkaller0: entered allmulticast mode [ 1088.202613][T18515] tipc: Resetting bearer [ 1088.211350][T18514] tipc: Resetting bearer [ 1088.232642][T18514] tipc: Disabling bearer [ 1088.558162][T18519] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1088.592248][T16562] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1088.751323][T16562] usb 3-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 1088.764719][T16562] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1088.774705][T16562] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1088.774753][T16562] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.811458][T16562] usb 3-1: NFC: Reader power on cmd error -90 [ 1088.819362][T16562] pn533_usb 3-1:1.0: NFC: Couldn't poweron the reader (error -90) [ 1088.828842][T16562] pn533_usb 3-1:1.0: probe with driver pn533_usb failed with error -90 [ 1089.033966][T10115] usb 3-1: USB disconnect, device number 92 [ 1089.347191][T18536] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3526'. [ 1089.360255][T18536] netlink: 'syz.4.3526': attribute type 10 has an invalid length. [ 1089.790650][T14720] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1089.960975][T14720] usb 1-1: Using ep0 maxpacket: 16 [ 1089.968033][T14720] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1089.979216][T14720] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1089.979257][T14720] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1089.979292][T14720] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1089.979334][T14720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.031116][T14720] usb 1-1: config 0 descriptor?? [ 1090.545506][T14720] usbhid 1-1:0.0: can't add hid device: -71 [ 1090.545629][T14720] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1090.558329][T14720] usb 1-1: USB disconnect, device number 107 [ 1091.770959][T10115] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1091.925576][T10115] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1091.928507][T10115] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.928532][T10115] usb 3-1: Product: syz [ 1091.928546][T10115] usb 3-1: Manufacturer: syz [ 1091.928559][T10115] usb 3-1: SerialNumber: syz [ 1092.210508][T17479] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 1092.362094][T17479] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1092.369026][T17479] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.369052][T17479] usb 5-1: Product: syz [ 1092.369066][T17479] usb 5-1: Manufacturer: syz [ 1092.369099][T17479] usb 5-1: SerialNumber: syz [ 1092.373526][T17479] usb 5-1: config 0 descriptor?? [ 1092.460616][T16562] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1092.549311][T10115] (unnamed net_device) (uninitialized): Assigned a random MAC address: f2:a8:4e:31:47:8d [ 1092.599340][T17479] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1092.601306][T10115] rtl8150 3-1:1.0: eth1: rtl8150 is detected [ 1092.613679][T10115] usb 3-1: USB disconnect, device number 93 [ 1092.620584][T16562] usb 1-1: Using ep0 maxpacket: 8 [ 1092.627501][T16562] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 1092.639209][T16562] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 1092.639255][T16562] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 1092.639295][T16562] usb 1-1: config 0 has no interface number 0 [ 1092.639341][T16562] usb 1-1: config 0 interface 21 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1092.676657][T16562] usb 1-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 1092.676697][T16562] usb 1-1: Product: syz [ 1092.676750][T16562] usb 1-1: Manufacturer: syz [ 1092.698979][T16562] usb 1-1: config 0 descriptor?? [ 1092.729800][T18583] usb usb7: check_ctrlrecip: process 18583 (syz.3.3542) requesting ep 01 but needs 81 [ 1093.027426][T10115] usb 1-1: USB disconnect, device number 108 [ 1093.418110][T18574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1093.418720][T18574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1093.700653][T14720] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1093.825614][T18574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1093.826272][T18574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1093.861444][T14720] usb 3-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 1093.872254][T14720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1093.885340][T14720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.897946][T14720] usb 3-1: config 0 descriptor?? [ 1093.905916][T18587] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1094.031707][T17479] usb 5-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 1094.032191][T17479] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 1094.032238][T17479] usb 5-1: media controller created [ 1094.034997][T17479] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1094.087617][T17479] i2c i2c-1: Added multiplexed i2c bus 2 [ 1094.087663][T17479] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 1094.089136][T17479] usb 5-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 1094.089403][T17479] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 1094.138283][T17479] DVB: Unable to find symbol fc0013_attach() [ 1094.263030][T17479] usb 5-1: USB disconnect, device number 85 [ 1094.335096][T14720] wacom 0003:056A:0084.0014: unknown main item tag 0x0 [ 1094.343707][T14720] wacom 0003:056A:0084.0014: unknown main item tag 0x0 [ 1094.343765][T14720] wacom 0003:056A:0084.0014: unknown main item tag 0x0 [ 1094.343797][T14720] wacom 0003:056A:0084.0014: unknown main item tag 0x0 [ 1094.343827][T14720] wacom 0003:056A:0084.0014: unknown main item tag 0x0 [ 1094.343856][T14720] wacom 0003:056A:0084.0014: unknown main item tag 0x0 [ 1094.343886][T14720] wacom 0003:056A:0084.0014: unknown main item tag 0x0 [ 1094.343914][T14720] wacom 0003:056A:0084.0014: unknown main item tag 0x0 [ 1094.343943][T14720] wacom 0003:056A:0084.0014: unknown main item tag 0x0 [ 1094.343971][T14720] wacom 0003:056A:0084.0014: unknown main item tag 0x0 [ 1094.411694][T14720] wacom 0003:056A:0084.0014: reserved main item tag 0xd [ 1094.424754][T14720] wacom 0003:056A:0084.0014: hidraw0: USB HID v7f.fd Device [HID 056a:0084] on usb-dummy_hcd.2-1/input0 [ 1094.537614][T14720] usb 3-1: USB disconnect, device number 94 [ 1094.868618][T18618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3556'. [ 1095.027251][T18622] syzkaller0: entered promiscuous mode [ 1095.034123][T18622] syzkaller0: entered allmulticast mode [ 1095.260534][T17479] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1095.412235][T17479] usb 5-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.40 [ 1095.414954][T17479] usb 5-1: too many endpoints for config 1 interface 0 altsetting 13: 255, using maximum allowed: 30 [ 1095.414994][T17479] usb 5-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1095.415018][T17479] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1095.418519][T17479] usb 5-1: string descriptor 0 read error: -22 [ 1095.418649][T17479] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.434643][T17479] usbhid 5-1:1.0: can't add hid device: -71 [ 1096.457309][T17479] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1096.626624][T17479] usb 5-1: USB disconnect, device number 86 [ 1096.782076][T14720] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 1096.943539][T14720] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1096.981008][T14720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.981050][T14720] usb 4-1: Product: syz [ 1096.981080][T14720] usb 4-1: Manufacturer: syz [ 1096.981098][T14720] usb 4-1: SerialNumber: syz [ 1097.017702][T14720] usb 4-1: config 0 descriptor?? [ 1097.252349][T14720] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1097.544541][T16561] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1097.701561][T16561] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 1097.739578][T16561] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1097.739622][T16561] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1097.739699][T16561] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.816202][T16561] idmouse 1-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 1098.090953][T18650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1098.100274][T18650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1098.745539][T14720] usb 4-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 1098.745977][T14720] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 1098.746064][T14720] usb 4-1: media controller created [ 1098.784732][T14720] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1098.995115][T14720] i2c i2c-1: Added multiplexed i2c bus 2 [ 1098.995179][T14720] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 1098.995747][T14720] usb 4-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 1098.995943][T14720] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 1099.115144][T16561] usb 1-1: USB disconnect, device number 109 [ 1099.137627][T16561] idmouse 1-1:1.0: disconnected [ 1099.208457][T14720] DVB: Unable to find symbol fc0013_attach() [ 1099.314075][T14720] usb 4-1: USB disconnect, device number 71 [ 1099.331950][ T8336] udevd[8336]: setting mode of /dev/bus/usb/004/071 to 020664 failed: No such file or directory [ 1099.347282][ T8336] udevd[8336]: setting owner of /dev/bus/usb/004/071 to uid=0, gid=0 failed: No such file or directory [ 1099.736976][T17479] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 1100.254244][T17479] usb 5-1: device descriptor read/64, error -71 [ 1101.612229][T18691] syzkaller1: entered promiscuous mode [ 1101.617955][T18691] syzkaller1: entered allmulticast mode [ 1102.340416][ C1] sched: DL replenish lagged too much [ 1105.078466][T17479] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1116.310771][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.428907][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1139.698326][T10108] Bluetooth: hci5: command 0x0406 tx timeout [ 1144.309916][T10108] Bluetooth: hci1: command 0x0406 tx timeout [ 1159.617611][T10126] Bluetooth: hci2: command 0x0406 tx timeout [ 1177.688437][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.801046][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1232.232906][ T32] INFO: task kworker/0:14:16563 blocked for more than 153 seconds. [ 1232.252787][ T32] Tainted: G L syzkaller #0 [ 1232.271919][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1232.288888][ T32] task:kworker/0:14 state:D stack:26328 pid:16563 tgid:16563 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1232.324115][ T32] Workqueue: events_freezable mmc_rescan [ 1232.362132][ T32] Call Trace: [ 1232.380338][ T32] [ 1232.417525][ T32] __schedule+0x17db/0x58f0 [ 1232.435948][ T32] ? __pfx___schedule+0x10/0x10 [ 1232.455584][ T32] ? __pfx___schedule+0x10/0x10 [ 1232.474333][ T32] ? schedule+0x90/0x2b0 [ 1232.492277][ T32] schedule+0x164/0x2b0 [ 1232.510267][ T32] schedule_timeout+0xc0/0x2c0 [ 1234.810171][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 1234.829124][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 1234.847289][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 1234.865237][ T32] ? wait_for_completion+0x272/0x5e0 [ 1234.883281][ T32] wait_for_completion+0x2ca/0x5e0 [ 1234.902702][ T32] ? __pfx_wait_for_completion+0x10/0x10 [ 1234.921686][ T32] ? vub300_mmc_request+0x1000/0x1910 [ 1234.939800][ T32] ? trace_mmc_request_start+0x81/0x1e0 [ 1234.957797][ T32] mmc_wait_for_req_done+0x37/0x490 [ 1234.976514][ T32] ? mmc_start_request+0x202/0x2d0 [ 1234.994592][ T32] ? mmc_wait_for_req+0x1b5/0x240 [ 1235.013722][ T32] mmc_wait_for_cmd+0x183/0x2a0 [ 1235.032668][ T32] ? debug_object_free+0x29c/0x340 [ 1235.772932][ T32] ? __pfx_mmc_wait_for_cmd+0x10/0x10 [ 1235.772989][ T32] ? __pfx_mmc_wait_done+0x10/0x10 [ 1235.773021][ T32] ? ktime_get+0x1f5/0x220 [ 1235.773067][ T32] ? usleep_range_state+0x95/0x180 [ 1235.773107][ T32] mmc_go_idle+0x12c/0x2a0 [ 1235.773187][ T32] ? __pfx_mmc_go_idle+0x10/0x10 [ 1235.773221][ T32] ? mmc_power_up+0x5d/0x650 [ 1235.773240][ T32] ? mmc_attach_sd_uhs2+0x5e/0x900 [ 1235.773273][ T32] mmc_rescan+0x6fe/0x1040 [ 1235.773315][ T32] ? process_scheduled_works+0x97a/0x1630 [ 1235.773357][ T32] process_scheduled_works+0xc3d/0x1630 [ 1240.019432][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.035793][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.316730][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 1241.316778][ T32] ? assign_work+0x3cf/0x5d0 [ 1241.316808][ T32] worker_thread+0xa47/0xfb0 [ 1241.316861][ T32] kthread+0x38b/0x480 [ 1241.316881][ T32] ? __pfx_worker_thread+0x10/0x10 [ 1241.316903][ T32] ? __pfx_kthread+0x10/0x10 [ 1241.316924][ T32] ret_from_fork+0x514/0xb70