last executing test programs: 5.676557194s ago: executing program 4 (id=7773): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x9, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 5.624605201s ago: executing program 4 (id=7774): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) add_key(&(0x7f0000000540)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 5.571562526s ago: executing program 4 (id=7775): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x40, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x40}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x8, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 5.508646187s ago: executing program 4 (id=7776): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 3.924520092s ago: executing program 2 (id=7790): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) 3.848034604s ago: executing program 2 (id=7791): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x800}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}}, 0x800) 3.78653444s ago: executing program 2 (id=7793): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x50, 0x0, &(0x7f00000004c0)=""/80}) 2.37903733s ago: executing program 4 (id=7812): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) 2.198307269s ago: executing program 4 (id=7816): ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) r0 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000080)) 2.025172101s ago: executing program 3 (id=7819): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22ffe6) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 1.809732196s ago: executing program 3 (id=7822): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000000)={0x51, 0x6, 0x2, {0x803, 0x5d5}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x9ee, {0x2, 0xf, 0xfffb, 0xa}, 0x0, 0x0}}) 1.58361222s ago: executing program 2 (id=7824): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff30"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pread64(r0, &(0x7f0000002200)=""/4151, 0x1037, 0xa8cf) 1.018005644s ago: executing program 0 (id=7832): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22ffe6) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 670.152504ms ago: executing program 0 (id=7835): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x1f0, 0x288, 0x320, 0x3b8, 0x158, 0x1f0, 0x288, 0x320, 0x3b8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3f0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07, 0xffc1}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 546.003485ms ago: executing program 1 (id=7837): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000a80)=""/1}) 496.698719ms ago: executing program 1 (id=7838): socket$igmp(0x2, 0x3, 0x2) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x9b4, 0xfffffffc}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00", 0x12) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 479.774738ms ago: executing program 0 (id=7839): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000400)={0x5, 0x5, 0x2}) 423.292109ms ago: executing program 1 (id=7840): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x800}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}}, 0x800) 367.63385ms ago: executing program 0 (id=7841): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4004}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa8}}, 0x40) 366.12724ms ago: executing program 1 (id=7842): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 327.214915ms ago: executing program 2 (id=7843): r0 = socket$kcm(0x2, 0x5, 0x84) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004", 0x51}], 0x1, 0x0, 0x0, 0x7}, 0x8084) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x19, &(0x7f0000000000)=r3, 0x8) 310.687912ms ago: executing program 1 (id=7844): socket$l2tp(0x2, 0x2, 0x73) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000000000000800090001"], 0x44}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 300.971123ms ago: executing program 0 (id=7845): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22ffe6) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 207.405467ms ago: executing program 2 (id=7846): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r0, &(0x7f0000001900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/71, 0x47}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/243, 0xf3}, 0x1}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/87, 0x57}, 0x7d}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=""/111, 0x6f}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/41, 0x29}, 0x9}], 0x5, 0x40000002, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='attr/keycreate\x00') r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r4], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x6, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 207.227889ms ago: executing program 3 (id=7847): socket$nl_generic(0x10, 0x3, 0x10) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)=0x8, 0x5, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 191.462629ms ago: executing program 1 (id=7848): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="0022220000009623132742a0be5003e7e036042a0008070200000083"], 0x0}, 0x0) 156.417457ms ago: executing program 3 (id=7849): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000) 94.495572ms ago: executing program 0 (id=7850): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x14, 0x3, 0x1b1c, 0xc10, 0x0, 0x0, "05010900a101150026ff007508951009008102c0"}}, 0x12c) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000500)={0xc, {0xc, '\x00'/12}}, 0x12) nanosleep(0x0, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000700)={0xc, {0x6, '\x00\x00\x00\x00\x00\x00'}}, 0xc) 75.146834ms ago: executing program 3 (id=7851): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x5003, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) 0s ago: executing program 3 (id=7852): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r0, 0xc0145b0e, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x3, 0x2}) kernel console output (not intermixed with test programs): : iptables: counters copy to user failed while replacing table [ 2076.354498][ T551] binder: 550:551 ioctl c0306201 0 returned -14 [ 2076.510994][ T557] netlink: 'syz.2.5667': attribute type 2 has an invalid length. [ 2076.912179][ T563] ip_tables: iptables: counters copy to user failed while replacing table [ 2077.604087][ T589] ip_tables: iptables: counters copy to user failed while replacing table [ 2078.259600][ T619] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2078.259852][ T619] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2078.389845][ T631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5702'. [ 2078.390054][ T631] netlink: 15 bytes leftover after parsing attributes in process `syz.1.5702'. [ 2079.030805][ T663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5717'. [ 2079.650577][T31462] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 2079.734591][ T697] syzkaller0: entered promiscuous mode [ 2079.734617][ T697] syzkaller0: entered allmulticast mode [ 2079.752419][ T697] tipc: Enabled bearer , priority 0 [ 2079.775939][ T697] tipc: Resetting bearer [ 2079.822447][ T697] tipc: Disabling bearer [ 2079.832721][T31462] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2079.836541][T31462] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2079.836576][T31462] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2079.836602][T31462] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2079.836648][T31462] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2079.904434][T31462] usb 3-1: config 0 descriptor?? [ 2080.329205][T31462] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0 [ 2080.329245][T31462] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0 [ 2080.329273][T31462] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0 [ 2080.329301][T31462] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0 [ 2080.329539][T31462] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0 [ 2080.329570][T31462] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0 [ 2080.329598][T31462] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0 [ 2080.329627][T31462] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0 [ 2080.329679][T31462] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0 [ 2080.329706][T31462] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0 [ 2080.469383][T31462] plantronics 0003:047F:FFFF.005D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2080.653320][ T683] usb 3-1: language id specifier not provided by device, defaulting to English [ 2082.254390][ T803] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5779'. [ 2082.369700][ T807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5781'. [ 2082.417590][ T5705] usb 3-1: USB disconnect, device number 18 [ 2082.899162][ T831] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5792'. [ 2082.984264][T23430] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 2083.010610][ T836] netlink: 'syz.3.5794': attribute type 16 has an invalid length. [ 2083.010636][ T836] netlink: 'syz.3.5794': attribute type 17 has an invalid length. [ 2083.079837][ T838] net_ratelimit: 1 callbacks suppressed [ 2083.079943][ T838] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2083.141148][T23430] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2083.142899][T23430] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2083.143304][T23430] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2083.143333][T23430] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2083.143379][T23430] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2083.146583][T23430] usb 2-1: config 0 descriptor?? [ 2083.653928][T23430] plantronics 0003:047F:FFFF.005E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2083.776283][ T864] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5806'. [ 2083.914386][ T826] usb 2-1: language id specifier not provided by device, defaulting to English [ 2083.926563][ T871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5809'. [ 2084.371588][ T884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5810'. [ 2084.498058][ T884] bond1: option lacp_active: invalid value (5) [ 2084.516025][ T884] bond1 (unregistering): Released all slaves [ 2085.002476][ T906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5822'. [ 2085.564280][ T946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5834'. [ 2085.672959][T23430] usb 2-1: USB disconnect, device number 34 [ 2086.287846][ T968] bridge0: port 2(bridge_slave_1) entered disabled state [ 2086.288480][ T968] bridge0: port 1(bridge_slave_0) entered disabled state [ 2086.546946][ T968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2086.575026][ T968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2086.635114][ T990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2086.635143][ T12] IPVS: starting estimator thread 0... [ 2086.721931][ T992] IPVS: using max 37 ests per chain, 88800 per kthread [ 2086.920604][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2086.920656][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2086.920695][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2086.920732][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2087.392526][ T1014] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5862'. [ 2087.529816][ T1023] IPVS: Error connecting to the multicast addr [ 2087.810199][ T1046] macvlan2: entered allmulticast mode [ 2087.883078][ T1050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5877'. [ 2087.960787][ T1055] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5876'. [ 2088.164723][ T1076] ip_tables: iptables: counters copy to user failed while replacing table [ 2088.293137][ T1079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5889'. [ 2088.490238][ T1094] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5891'. [ 2088.502815][ T1095] netlink: 'syz.4.5893': attribute type 9 has an invalid length. [ 2088.506335][ T1095] netlink: 'syz.4.5893': attribute type 9 has an invalid length. [ 2089.129503][ T1131] IPv6: NLM_F_CREATE should be specified when creating new route [ 2089.499157][ T1153] __nla_validate_parse: 2 callbacks suppressed [ 2089.499180][ T1153] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5918'. [ 2089.717972][ T1164] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5924'. [ 2089.781236][ T1168] IPv6: NLM_F_CREATE should be specified when creating new route [ 2089.848173][ T1172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5927'. [ 2090.114071][ T1183] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5931'. [ 2090.318037][ T1195] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5936'. [ 2090.425854][ T1201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5939'. [ 2090.487301][ T1205] IPv6: NLM_F_CREATE should be specified when creating new route [ 2090.556127][ T1207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5943'. [ 2091.251267][ T1236] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5955'. [ 2091.957147][ T1277] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5973'. [ 2092.166656][ T1287] syzkaller1: entered promiscuous mode [ 2092.166684][ T1287] syzkaller1: entered allmulticast mode [ 2092.845731][ T1319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5990'. [ 2094.027770][ T1385] ip_tables: iptables: counters copy to user failed while replacing table [ 2094.737449][ T1417] ip_tables: iptables: counters copy to user failed while replacing table [ 2094.835303][ T1416] netlink: 'syz.1.6032': attribute type 2 has an invalid length. [ 2094.835328][ T1416] netlink: 'syz.1.6032': attribute type 1 has an invalid length. [ 2094.835343][ T1416] netlink: 'syz.1.6032': attribute type 5 has an invalid length. [ 2094.835358][ T1416] __nla_validate_parse: 4 callbacks suppressed [ 2094.835370][ T1416] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6032'. [ 2094.919983][ T1422] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6034'. [ 2095.412652][ T1445] netlink: 'syz.0.6040': attribute type 10 has an invalid length. [ 2095.445250][ T1445] team0: Port device dummy0 added [ 2095.455262][ T1445] netlink: 'syz.0.6040': attribute type 10 has an invalid length. [ 2095.477864][ T1454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6048'. [ 2095.535075][ T1445] team0: Port device dummy0 removed [ 2096.062957][ T1476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6058'. [ 2096.288053][ T1487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6061'. [ 2096.528625][ T1497] batadv0: entered promiscuous mode [ 2096.528879][ T1497] macvlan2: entered promiscuous mode [ 2096.545243][ T1497] macvlan2: entered allmulticast mode [ 2096.545265][ T1497] batadv0: entered allmulticast mode [ 2096.549562][ T1497] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2096.579992][ T1497] batadv0: left allmulticast mode [ 2096.580241][ T1497] batadv0: left promiscuous mode [ 2097.233931][ T1534] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6084'. [ 2097.325074][ T1539] macvlan2: entered allmulticast mode [ 2097.447409][ T1546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6090'. [ 2097.542587][ T972] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 2097.691122][ T972] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2097.692395][ T972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2097.692429][ T972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2097.692455][ T972] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2097.692501][ T972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2097.698192][ T972] usb 4-1: config 0 descriptor?? [ 2098.125842][ T972] hid_parser_main: 20 callbacks suppressed [ 2098.125938][ T972] plantronics 0003:047F:FFFF.005F: unknown main item tag 0x0 [ 2098.125972][ T972] plantronics 0003:047F:FFFF.005F: unknown main item tag 0x0 [ 2098.126002][ T972] plantronics 0003:047F:FFFF.005F: unknown main item tag 0x0 [ 2098.126030][ T972] plantronics 0003:047F:FFFF.005F: unknown main item tag 0x0 [ 2098.126058][ T972] plantronics 0003:047F:FFFF.005F: unknown main item tag 0x0 [ 2098.126086][ T972] plantronics 0003:047F:FFFF.005F: unknown main item tag 0x0 [ 2098.126122][ T972] plantronics 0003:047F:FFFF.005F: unknown main item tag 0x0 [ 2098.126150][ T972] plantronics 0003:047F:FFFF.005F: unknown main item tag 0x0 [ 2098.126180][ T972] plantronics 0003:047F:FFFF.005F: unknown main item tag 0x0 [ 2098.126209][ T972] plantronics 0003:047F:FFFF.005F: unknown main item tag 0x0 [ 2098.221438][ T972] plantronics 0003:047F:FFFF.005F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2098.625494][ T1592] syzkaller0: entered promiscuous mode [ 2098.625513][ T1592] syzkaller0: entered allmulticast mode [ 2098.882898][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.882974][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.248819][ T1618] ip_tables: iptables: counters copy to user failed while replacing table [ 2099.296333][ T1620] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6123'. [ 2099.710208][ T1639] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6132'. [ 2099.783000][ T1644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2099.839283][ T1644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2099.926501][ T1654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6138'. [ 2100.049253][ T1661] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6140'. [ 2100.166277][ T1666] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6146'. [ 2100.227083][T31462] usb 4-1: USB disconnect, device number 28 [ 2100.439487][ T1679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6151'. [ 2100.561569][ T1687] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6155'. [ 2100.605036][ T1689] netlink: 'syz.4.6154': attribute type 2 has an invalid length. [ 2100.605063][ T1689] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6154'. [ 2100.680686][T32435] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 2100.831613][T32435] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2100.833220][T32435] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2100.833253][T32435] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2100.833278][T32435] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2100.833323][T32435] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2100.857054][T32435] usb 3-1: config 0 descriptor?? [ 2101.363849][T32435] plantronics 0003:047F:FFFF.0060: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2102.106071][ T1759] ip_tables: iptables: counters copy to user failed while replacing table [ 2102.826759][ T1788] ip_tables: iptables: counters copy to user failed while replacing table [ 2103.296539][ T1812] ip_tables: iptables: counters copy to user failed while replacing table [ 2103.398397][T32435] usb 3-1: USB disconnect, device number 19 [ 2103.514494][ T1817] netlink: 'syz.1.6211': attribute type 16 has an invalid length. [ 2103.514524][ T1817] netlink: 'syz.1.6211': attribute type 17 has an invalid length. [ 2103.549274][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c6fc000: rx timeout, send abort [ 2103.549600][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807c6fc000: 0x1ff03: (3) A timeout occurred and this is the connection abort to close the session. [ 2103.702903][ T1817] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 2103.726520][ T1817] dummy0: entered allmulticast mode [ 2103.726614][ T1817] dummy0: entered promiscuous mode [ 2103.726718][ T1817] macvlan2: left allmulticast mode [ 2103.726734][ T1817] dummy0: left allmulticast mode [ 2103.821602][ T1827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6210'. [ 2104.261008][ T13] IPVS: starting estimator thread 0... [ 2104.277682][ T1852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6226'. [ 2104.352156][ T1854] IPVS: using max 23 ests per chain, 55200 per kthread [ 2104.811210][ T1881] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6238'. [ 2104.898882][ T1884] ip_tables: iptables: counters copy to user failed while replacing table [ 2105.026856][ T1888] tipc: MTU too low for tipc bearer [ 2105.283207][ T1895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6245'. [ 2105.738565][ T1918] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6255'. [ 2105.783235][ T1912] syzkaller0: entered promiscuous mode [ 2105.783265][ T1912] syzkaller0: entered allmulticast mode [ 2106.080917][T29468] Bluetooth: hci5: command 0x0406 tx timeout [ 2106.476796][ T1931] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6260'. [ 2109.896661][ T1968] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6276'. [ 2109.937746][ T1964] syzkaller0: entered promiscuous mode [ 2109.937776][ T1964] syzkaller0: entered allmulticast mode [ 2113.304135][ T2000] kvm [1999]: vcpu0, guest rIP: 0x9143 Unhandled WRMSR(0x11e) = 0xbe702111 [ 2113.924196][ T2009] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6290'. [ 2114.946038][ T2036] syzkaller0: entered promiscuous mode [ 2114.946076][ T2036] syzkaller0: entered allmulticast mode [ 2115.126595][ T2043] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6303'. [ 2115.163098][ T2045] ip_tables: iptables: counters copy to user failed while replacing table [ 2120.213913][ T2116] syzkaller0: entered promiscuous mode [ 2120.213939][ T2116] syzkaller0: entered allmulticast mode [ 2120.950466][ T25] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 2121.102841][ T25] usb 1-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 2121.104929][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2121.105943][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2121.107001][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2121.107056][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2121.170063][ T25] usb 1-1: config 0 descriptor?? [ 2121.181461][ T25] cdc_acm 1-1:0.0: invalid descriptor buffer length [ 2121.320412][ T5705] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2121.383429][ T25] usb 1-1: USB disconnect, device number 121 [ 2121.472253][ T5705] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2121.475481][ T5705] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2121.475522][ T5705] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2121.475561][ T5705] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2121.475615][ T5705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2121.502956][ T5705] usb 2-1: config 0 descriptor?? [ 2122.047457][ T5705] plantronics 0003:047F:FFFF.0061: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2122.742755][ T2155] syzkaller0: entered promiscuous mode [ 2122.742782][ T2155] syzkaller0: entered allmulticast mode [ 2122.861975][ T2163] tipc: Enabling of bearer rejected, failed to enable media [ 2123.298276][ T2179] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6360'. [ 2123.347512][ T2182] syz.4.6352 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 2123.969976][ T2195] syzkaller0: entered promiscuous mode [ 2123.970004][ T2195] syzkaller0: entered allmulticast mode [ 2124.074775][T32435] usb 2-1: USB disconnect, device number 35 [ 2124.365445][ T2206] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6371'. [ 2124.395924][ T2203] bridge0: port 1(bridge_slave_0) entered disabled state [ 2124.409335][ T2203] bridge0: port 2(bridge_slave_1) entered disabled state [ 2124.542820][ T2203] bridge0: port 3(vlan1) entered disabled state [ 2124.625228][ T2207] vlan2: entered promiscuous mode [ 2124.625253][ T2207] bridge0: entered promiscuous mode [ 2124.625422][ T2207] vlan2: entered allmulticast mode [ 2124.625438][ T2207] bridge0: entered allmulticast mode [ 2124.648126][ T2207] bridge0: port 4(vlan2) entered blocking state [ 2124.648241][ T2207] bridge0: port 4(vlan2) entered disabled state [ 2125.302261][ T2235] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6383'. [ 2125.777370][ T5705] nintendo 0005:057E:2017.0062: hidraw0: BLUETOOTH HID v80.00 Gamepad [syz0] on syz0 [ 2125.830188][ T5705] nintendo 0005:057E:2017.0062: controller MAC = 00:00:00:00:00:00 [ 2125.840963][ T5705] nintendo 0005:057E:2017.0062: assigned player 1 led pattern [ 2126.195561][ T2258] binder: 2257:2258 ioctl c0306201 0 returned -14 [ 2126.380417][ T5705] nintendo 0005:057E:2017.0062: Failed to set players LEDs, skipping registration; ret=-110 [ 2126.537930][ T5705] input: syz0 as /devices/virtual/misc/uhid/0005:057E:2017.0062/input/input120 [ 2126.567053][ T5615] Bluetooth: hci4: command 0x0406 tx timeout [ 2126.651991][ T2275] netdevsim netdevsim3: Direct firmware load for /• failed with error -2 [ 2126.652023][ T2275] netdevsim netdevsim3: Falling back to sysfs fallback for: /• [ 2128.376007][ T2314] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6411'. [ 2128.454150][ T2317] netlink: 'syz.1.6410': attribute type 15 has an invalid length. [ 2128.491199][ T2319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6417'. [ 2129.412865][ T2345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6429'. [ 2129.699125][T29468] Bluetooth: hci5: unexpected event for opcode 0x1002 [ 2129.833216][ T2359] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6437'. [ 2130.875455][ T2385] loop4: detected capacity change from 0 to 524287999 [ 2130.960633][ T2389] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6448'. [ 2132.062324][ T2420] tipc: Started in network mode [ 2132.062361][ T2420] tipc: Node identity ce4f9711c03c, cluster identity 4711 [ 2132.062526][ T2420] tipc: Enabled bearer , priority 0 [ 2132.063663][ T2420] syzkaller0: entered promiscuous mode [ 2132.063704][ T2420] syzkaller0: entered allmulticast mode [ 2132.077597][ T2420] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 2132.182719][ T2420] tipc: Resetting bearer [ 2132.270739][ T2419] tipc: Resetting bearer [ 2132.338497][ T2419] tipc: Disabling bearer [ 2132.349501][ T2435] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6464'. [ 2133.620338][ T2472] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6475'. [ 2134.302556][ T2487] warn_alloc: 2 callbacks suppressed [ 2134.302581][ T2487] syz.3.6481: vmalloc error: size 12288, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2134.302691][ T2487] CPU: 0 UID: 0 PID: 2487 Comm: syz.3.6481 Tainted: G L syzkaller #0 PREEMPT(full) [ 2134.302723][ T2487] Tainted: [L]=SOFTLOCKUP [ 2134.302732][ T2487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2134.302747][ T2487] Call Trace: [ 2134.302757][ T2487] [ 2134.302768][ T2487] dump_stack_lvl+0xe8/0x150 [ 2134.302807][ T2487] warn_alloc+0x24d/0x270 [ 2134.302840][ T2487] ? __pfx_warn_alloc+0x10/0x10 [ 2134.302872][ T2487] ? alloc_pages_mpol+0x12e/0x390 [ 2134.302916][ T2487] __vmalloc_node_range_noprof+0x11a9/0x1540 [ 2134.302971][ T2487] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2134.302994][ T2487] ? rcu_is_watching+0x16/0xb0 [ 2134.303024][ T2487] ? hash_ipportnet_create+0x362/0xf70 [ 2134.303049][ T2487] ? rcu_is_watching+0x16/0xb0 [ 2134.303082][ T2487] ? hash_ipportnet_create+0x362/0xf70 [ 2134.303106][ T2487] __kvmalloc_node_noprof+0x5a1/0x820 [ 2134.303134][ T2487] ? hash_ipportnet_create+0x362/0xf70 [ 2134.303158][ T2487] ? __kmalloc_noprof+0x38c/0x720 [ 2134.303183][ T2487] ? hash_ipportnet_create+0x2f9/0xf70 [ 2134.303206][ T2487] ? hash_ipportnet_create+0x362/0xf70 [ 2134.303241][ T2487] hash_ipportnet_create+0x362/0xf70 [ 2134.303276][ T2487] ? ip_set_create+0x4ef/0x1a50 [ 2134.303309][ T2487] ? __pfx_hash_ipportnet_create+0x10/0x10 [ 2134.303337][ T2487] ip_set_create+0xae8/0x1a50 [ 2134.303363][ T2487] ? ip_set_create+0x4ef/0x1a50 [ 2134.303401][ T2487] ? __pfx_ip_set_create+0x10/0x10 [ 2134.303462][ T2487] nfnetlink_rcv_msg+0xcc2/0x12b0 [ 2134.303488][ T2487] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 2134.303530][ T2487] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 2134.303552][ T2487] ? timerqueue_linked_add+0x2b6/0x2e0 [ 2134.303609][ T2487] ? rcu_is_watching+0x16/0xb0 [ 2134.303643][ T2487] ? __schedule+0x17f1/0x58f0 [ 2134.303684][ T2487] netlink_rcv_skb+0x226/0x4a0 [ 2134.303711][ T2487] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 2134.303737][ T2487] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2134.303774][ T2487] ? bpf_lsm_capable+0x9/0x20 [ 2134.303798][ T2487] ? security_capable+0x7e/0x2c0 [ 2134.303838][ T2487] nfnetlink_rcv+0x2b9/0x28c0 [ 2134.303877][ T2487] ? preempt_schedule_common+0x7f/0xd0 [ 2134.303908][ T2487] ? __dev_queue_xmit+0x29b/0x3920 [ 2134.303933][ T2487] ? preempt_schedule_thunk+0x16/0x40 [ 2134.303966][ T2487] ? __local_bh_enable_ip+0xe9/0x140 [ 2134.303997][ T2487] ? __dev_queue_xmit+0x29b/0x3920 [ 2134.304019][ T2487] ? __dev_queue_xmit+0x1efb/0x3920 [ 2134.304043][ T2487] ? do_syscall_64+0x166/0x520 [ 2134.304081][ T2487] ? __dev_queue_xmit+0x29b/0x3920 [ 2134.304115][ T2487] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2134.304151][ T2487] ? __lock_acquire+0x747/0x2de0 [ 2134.304191][ T2487] ? ref_tracker_free+0x689/0x830 [ 2134.304226][ T2487] ? __pfx_ref_tracker_free+0x10/0x10 [ 2134.304263][ T2487] ? do_raw_spin_lock+0x12b/0x2f0 [ 2134.304315][ T2487] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2134.304348][ T2487] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2134.304379][ T2487] ? rcu_preempt_deferred_qs_irqrestore+0x7b7/0xb90 [ 2134.304427][ T2487] netlink_unicast+0x7bd/0x940 [ 2134.304476][ T2487] netlink_sendmsg+0x813/0xb40 [ 2134.304513][ T2487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2134.304549][ T2487] ? apparmor_socket_sendmsg+0x98/0x360 [ 2134.304582][ T2487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2134.304607][ T2487] sock_sendmsg_nosec+0x13a/0x180 [ 2134.304640][ T2487] ____sys_sendmsg+0x54e/0x850 [ 2134.304684][ T2487] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2134.304730][ T2487] ? import_iovec+0x73/0xa0 [ 2134.304781][ T2487] ___sys_sendmsg+0x2a5/0x360 [ 2134.304816][ T2487] ? __lock_acquire+0x747/0x2de0 [ 2134.304848][ T2487] ? __pfx____sys_sendmsg+0x10/0x10 [ 2134.304888][ T2487] ? futex_wake+0x51b/0x5f0 [ 2134.304955][ T2487] ? __fget_files+0x2a/0x420 [ 2134.304990][ T2487] ? __fget_files+0x3a2/0x420 [ 2134.305036][ T2487] __x64_sys_sendmsg+0x1b1/0x290 [ 2134.305076][ T2487] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2134.305135][ T2487] do_syscall_64+0x166/0x520 [ 2134.305168][ T2487] ? trace_irq_disable+0x3b/0x140 [ 2134.305193][ T2487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2134.305218][ T2487] ? clear_bhb_loop+0x70/0xc0 [ 2134.305247][ T2487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2134.305272][ T2487] RIP: 0033:0x7f9d2799e199 [ 2134.305301][ T2487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2134.305323][ T2487] RSP: 002b:00007f9d2888a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2134.305348][ T2487] RAX: ffffffffffffffda RBX: 00007f9d27c25fa0 RCX: 00007f9d2799e199 [ 2134.305366][ T2487] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 2134.305381][ T2487] RBP: 00007f9d27a350b8 R08: 0000000000000000 R09: 0000000000000000 [ 2134.305397][ T2487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2134.305412][ T2487] R13: 00007f9d27c26038 R14: 00007f9d27c25fa0 R15: 00007f9d27d4fa48 [ 2134.305448][ T2487] [ 2134.340906][ T2487] Mem-Info: [ 2134.340958][ T2487] active_anon:32247 inactive_anon:1 isolated_anon:0 [ 2134.340958][ T2487] active_file:597 inactive_file:59324 isolated_file:0 [ 2134.340958][ T2487] unevictable:0 dirty:261 writeback:0 [ 2134.340958][ T2487] slab_reclaimable:7465 slab_unreclaimable:105468 [ 2134.340958][ T2487] mapped:36215 shmem:27243 pagetables:1512 [ 2134.340958][ T2487] sec_pagetables:0 bounce:0 [ 2134.340958][ T2487] kernel_misc_reclaimable:0 [ 2134.340958][ T2487] free:1252139 free_pcp:7371 free_cma:0 [ 2134.341118][ T2487] Node 0 active_anon:128988kB inactive_anon:4kB active_file:2388kB inactive_file:237084kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:144800kB dirty:1044kB writeback:0kB shmem:108972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12376kB pagetables:5688kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 2134.341311][ T2487] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:360kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 2134.341484][ T2487] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2134.341662][ T2487] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 2134.341785][ T2487] Node 0 DMA32 free:1061660kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:128988kB inactive_anon:4kB active_file:2388kB inactive_file:237084kB unevictable:0kB writepending:1044kB zspages:0kB present:3129332kB managed:2546828kB mlocked:0kB bounce:0kB free_pcp:29484kB local_pcp:19924kB free_cma:0kB [ 2134.342157][ T2487] lowmem_reserve[]: 0 0 0 0 0 [ 2134.342293][ T2487] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2134.342457][ T2487] lowmem_reserve[]: 0 0 0 0 0 [ 2134.345534][ T2487] Node 1 Normal free:3931536kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2134.345767][ T2487] lowmem_reserve[]: 0 0 0 0 0 [ 2134.345881][ T2487] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2134.346064][ T2487] Node 0 DMA32: 3057*4kB (UM) 1422*8kB (UME) 3396*16kB (UME) 3031*32kB (UME) 1914*64kB (UME) 858*128kB (UME) 320*256kB (UME) 90*512kB (UME) 24*1024kB (UME) 11*2048kB (UM) 117*4096kB (UM) = 1061588kB [ 2134.346285][ T2487] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2134.348975][ T2487] Node 1 Normal: 6*4kB (UM) 7*8kB (UM) 12*16kB (U) 14*32kB (UM) 15*64kB (U) 6*128kB (UM) 2*256kB (M) 3*512kB (UM) 3*1024kB (UM) 2*2048kB (M) 957*4096kB (UM) = 3931536kB [ 2134.350846][ T2487] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2134.350900][ T2487] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 2134.350953][ T2487] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2134.350998][ T2487] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2134.351043][ T2487] 87185 total pagecache pages [ 2134.351072][ T2487] 0 pages in swap cache [ 2134.351094][ T2487] Free swap = 124992kB [ 2134.351116][ T2487] Total swap = 124996kB [ 2134.351146][ T2487] 2097051 pages RAM [ 2134.351169][ T2487] 0 pages HighMem/MovableOnly [ 2134.351190][ T2487] 428728 pages reserved [ 2134.351212][ T2487] 0 pages cma reserved [ 2135.447203][ T2500] ip_tables: iptables: counters copy to user failed while replacing table [ 2135.733399][ T2508] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6488'. [ 2136.152628][ T2484] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2136.629939][ T2536] ip_tables: iptables: counters copy to user failed while replacing table [ 2137.327943][ T2555] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6504'. [ 2137.526328][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2137.526442][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2137.526538][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2137.603767][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2137.603892][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2137.682739][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2137.682847][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2137.765376][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2137.765500][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2138.053431][ T2594] ip_tables: iptables: counters copy to user failed while replacing table [ 2139.580998][ T2658] ip_tables: iptables: counters copy to user failed while replacing table [ 2140.125479][ T2675] syz.2.6549 (2675): drop_caches: 2 [ 2140.127372][ T2675] syz.2.6549 (2675): drop_caches: 2 [ 2140.419808][ T2683] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6547'. [ 2141.211363][ C1] sctp_transport_update_pmtu: 72 callbacks suppressed [ 2141.211389][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2141.292130][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2141.441892][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2141.442010][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2141.442102][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2141.522450][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2141.522615][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2141.611631][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2141.682087][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2141.682214][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2142.602352][ T2744] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6565'. [ 2143.376010][T32435] input: syz0 as /devices/virtual/misc/uhid/0003:1B1C:0000.0063/input/input122 [ 2143.416566][T32435] hid-generic 0003:1B1C:0000.0063: input,hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 2143.637088][ T2780] fido_id[2780]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2143.723155][ T2788] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6585'. [ 2143.802908][ T2790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6586'. [ 2146.241236][ C1] sctp_transport_update_pmtu: 47 callbacks suppressed [ 2146.241264][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2146.241372][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2146.640996][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2146.881256][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2147.020579][ T2828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6598'. [ 2147.043338][T29468] Bluetooth: hci0: command 0x0406 tx timeout [ 2147.043665][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2147.121442][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2147.281015][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2147.441033][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2147.522378][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2147.522498][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2148.205055][ T2872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6611'. [ 2149.627843][ T2904] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6618'. [ 2151.361167][ C1] sctp_transport_update_pmtu: 24 callbacks suppressed [ 2151.361193][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2152.002302][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2152.002419][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2152.002512][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2152.002606][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2152.168572][T29468] Bluetooth: hci1: command 0x0406 tx timeout [ 2152.200851][ T2925] binder: 2924:2925 ioctl c0306201 0 returned -14 [ 2152.640980][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2152.808078][ T2917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6622'. [ 2153.283963][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2153.934469][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2153.934569][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2154.572226][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2155.399158][ T2907] Set syz0 is full, maxelem 65536 reached [ 2155.498783][ T2959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6639'. [ 2155.831578][ T5615] Bluetooth: hci5: unexpected event for opcode 0x0c56 [ 2155.929820][ T2979] trusted_key: encrypted_key: key user:syz not found [ 2156.015112][ T2982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6647'. [ 2157.277919][ T3009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6659'. [ 2158.443473][ T3030] ip_tables: iptables: counters copy to user failed while replacing table [ 2158.580610][T31462] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 2158.756065][T31462] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2158.757415][T31462] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 2158.757469][T31462] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2158.758514][T31462] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2158.758542][T31462] usb 4-1: Manufacturer: syz [ 2158.784781][T31462] usb 4-1: config 0 descriptor?? [ 2158.817579][ T3041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6670'. [ 2158.925590][T31462] rc_core: IR keymap rc-hauppauge not found [ 2158.925609][T31462] Registered IR keymap rc-empty [ 2158.926518][T31462] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 2158.949143][T31462] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input123 [ 2159.079984][T31462] usb 4-1: USB disconnect, device number 29 [ 2159.670771][ T3066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6680'. [ 2159.670814][ T3066] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2160.334930][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.334996][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.977567][ T2986] Set syz0 is full, maxelem 65536 reached [ 2161.501007][ T3116] ip_tables: iptables: counters copy to user failed while replacing table [ 2161.944260][ T3128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2161.960331][ T3128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2162.140463][T18303] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2162.140510][T18303] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2162.140545][T18303] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2162.140579][T18303] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2162.915954][ T3149] kvm: emulating exchange as write [ 2162.935044][ T3151] ip_tables: iptables: counters copy to user failed while replacing table [ 2163.330517][ T3162] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6718'. [ 2163.360913][ T25] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 2163.511218][ T25] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 2163.512503][ T25] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 2163.512530][ T25] usb 3-1: config 1 has no interface number 0 [ 2163.516044][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2163.516071][ T25] usb 3-1: Product: syz [ 2163.516091][ T25] usb 3-1: Manufacturer: syz [ 2163.516102][ T25] usb 3-1: SerialNumber: syz [ 2163.570799][ T25] usb 3-1: 3:0 : does not exist [ 2163.570826][ T25] usb 3-1: 3:0 : does not exist [ 2163.846394][ T25] usb 3-1: USB disconnect, device number 20 [ 2164.746714][ T3199] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6729'. [ 2166.444662][ T3222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6736'. [ 2166.689840][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056f76000: rx timeout, send abort [ 2167.189924][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056f76000: abort rx timeout. Force session deactivation [ 2167.193878][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056f76c00: rx timeout, send abort [ 2167.530206][ T5615] Bluetooth: hci2: command 0x0406 tx timeout [ 2167.694058][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056f76c00: abort rx timeout. Force session deactivation [ 2168.282497][ T3245] kvm: user requested TSC rate below hardware speed [ 2168.787332][ T3257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6741'. [ 2169.580911][ T3267] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6749'. [ 2169.683478][ T3272] fuse: Bad value for 'user_id' [ 2169.683502][ T3272] fuse: Bad value for 'user_id' [ 2169.976634][ T3285] netlink: 540 bytes leftover after parsing attributes in process `syz.4.6757'. [ 2173.440873][ T972] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 2173.590335][ T972] usb 3-1: Using ep0 maxpacket: 8 [ 2173.591245][ T972] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 2173.594421][ T972] usb 3-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 2173.594448][ T972] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2173.594471][ T972] usb 3-1: config 1 has no interface number 0 [ 2173.594522][ T972] usb 3-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 2173.594551][ T972] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x8C has an invalid bInterval 93, changing to 7 [ 2173.594580][ T972] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x8C has invalid maxpacket 9440, setting to 1024 [ 2173.597500][ T972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2173.597529][ T972] usb 3-1: Product: syz [ 2173.597546][ T972] usb 3-1: Manufacturer: syz [ 2173.597561][ T972] usb 3-1: SerialNumber: syz [ 2174.344741][T31462] usb 3-1: USB disconnect, device number 21 [ 2174.526669][ T3416] udevd[3416]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2175.673062][ T3467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6833'. [ 2176.827383][ T3526] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 2177.573582][ T3567] syzkaller0: entered promiscuous mode [ 2177.573609][ T3567] syzkaller0: entered allmulticast mode [ 2177.577112][ T3568] binder: BINDER_SET_CONTEXT_MGR already set [ 2177.577128][ T3568] binder: 3565:3568 ioctl 4018620d 200000004a80 returned -16 [ 2177.984561][ T3581] netlink: 272 bytes leftover after parsing attributes in process `syz.3.6888'. [ 2178.127688][ T3585] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2178.157183][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880568bb000: rx timeout, send abort [ 2178.157410][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880568bb000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 2178.495099][ T3594] syzkaller0: entered promiscuous mode [ 2178.495127][ T3594] syzkaller0: entered allmulticast mode [ 2179.103611][ T3620] syzkaller0: entered promiscuous mode [ 2179.103639][ T3620] syzkaller0: entered allmulticast mode [ 2179.288463][ T3630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6914'. [ 2179.494762][ T3644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6919'. [ 2180.660894][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e06c800: rx timeout, send abort [ 2180.661137][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807e06c800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 2180.858404][ T3711] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 2181.083706][T23430] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 2181.118273][ T3723] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6951'. [ 2181.234094][T23430] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2181.238763][T23430] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2181.238834][T23430] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 2181.238881][T23430] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2181.315513][T23430] usb 3-1: config 0 descriptor?? [ 2181.342327][T23430] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2181.704524][ T3740] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 2181.779599][ T3745] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6962'. [ 2181.896085][ T3753] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6965'. [ 2182.407903][ T3778] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 2182.977425][ T3790] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6978'. [ 2183.372579][ T3805] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 2183.580516][ T3814] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6990'. [ 2183.875903][ T972] usb 3-1: USB disconnect, device number 22 [ 2184.498024][ C1] vcan0: j1939_tp_rxtimer: 0xffff888027686400: rx timeout, send abort [ 2184.500585][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888027686400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 2184.743157][ T3847] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7001'. [ 2184.872991][ T3854] netlink: 'syz.0.7003': attribute type 5 has an invalid length. [ 2184.873018][ T3854] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7003'. [ 2185.016046][ T3858] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7006'. [ 2185.092012][T25248] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 2185.253346][T25248] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2185.254535][T25248] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2185.254585][T25248] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 2185.254631][T25248] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2185.296696][T25248] usb 3-1: config 0 descriptor?? [ 2185.315398][T25248] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2185.740529][ T3885] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7017'. [ 2186.016486][ T3893] xt_hl: Unknown TTL match mode: 56 [ 2186.639882][ T3916] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7030'. [ 2186.946079][ T3924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7033'. [ 2187.350323][ T3934] netlink: 'syz.1.7036': attribute type 33 has an invalid length. [ 2187.350361][ T3934] lo: entered promiscuous mode [ 2187.352291][ T3934] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2187.915215][ T972] usb 3-1: USB disconnect, device number 23 [ 2188.610384][T25248] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 2188.761119][T25248] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2188.762383][T25248] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2188.762439][T25248] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 2188.762488][T25248] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2188.764999][T25248] usb 2-1: config 0 descriptor?? [ 2188.770086][T25248] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2189.161417][ T3997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7064'. [ 2189.192716][ T3997] bridge0: port 2(bridge_slave_1) entered disabled state [ 2189.193667][ T3997] bridge0: port 1(bridge_slave_0) entered disabled state [ 2189.896156][ T4034] No such timeout policy "syz1" [ 2190.240379][T23430] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 2190.399094][T23430] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2190.399151][T23430] usb 3-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 2190.414819][T23430] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2190.415037][T23430] usb 3-1: too many endpoints for config 1 interface 0 altsetting 1: 255, using maximum allowed: 30 [ 2190.415147][T23430] usb 3-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 2190.434559][T23430] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2190.434633][T23430] usb 3-1: Product: syz [ 2190.434682][T23430] usb 3-1: Manufacturer: syz [ 2190.434734][T23430] usb 3-1: SerialNumber: syz [ 2190.572834][ T4049] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2190.698849][T23430] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2190.727973][T23430] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 2190.885957][T23430] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 2190.894638][T23430] usb 3-1: USB disconnect, device number 24 [ 2190.999482][ T4063] udevd[4063]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2191.431734][T25248] usb 2-1: USB disconnect, device number 36 [ 2191.540388][T23430] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 2191.691149][T23430] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2191.694735][T23430] usb 3-1: config index 0 descriptor too short (expected 65535, got 92) [ 2191.694767][T23430] usb 3-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 2191.694789][T23430] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 2191.694808][T23430] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 2191.704773][T23430] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2191.704854][T23430] usb 3-1: Product: syz [ 2191.704897][T23430] usb 3-1: Manufacturer: syz [ 2191.704940][T23430] usb 3-1: SerialNumber: syz [ 2192.026746][ T972] usb 3-1: USB disconnect, device number 25 [ 2192.234130][ T4090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7100'. [ 2193.983884][ T4132] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2195.935921][ T4203] binder: 4201:4203 ioctl 4018620d 0 returned -22 [ 2195.937305][ T4203] binder: 4201:4203 ioctl c0306201 0 returned -14 [ 2195.937887][ T4203] binder: 4201:4203 ioctl c0306201 2000000008c0 returned -14 [ 2196.270366][T31462] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2196.421333][T31462] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2196.423593][T31462] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2196.423649][T31462] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 2196.423684][T31462] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2196.428331][T31462] usb 2-1: config 0 descriptor?? [ 2196.487973][T31462] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2196.812784][T31462] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 2196.960468][T31462] usb 1-1: Using ep0 maxpacket: 32 [ 2196.961258][T31462] usb 1-1: New USB device found, idVendor=0421, idProduct=042f, bcdDevice=1a.7c [ 2196.962575][T31462] usb 1-1: config 87 has an invalid interface number: 229 but max is 1 [ 2196.962603][T31462] usb 1-1: config 87 has no interface number 1 [ 2196.962646][T31462] usb 1-1: config 87 interface 229 has no altsetting 0 [ 2196.965362][T31462] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2196.965390][T31462] usb 1-1: Product: syz [ 2196.965407][T31462] usb 1-1: Manufacturer: syz [ 2196.965424][T31462] usb 1-1: SerialNumber: syz [ 2197.282609][T31462] rndis_host 1-1:87.229: slave class 0 [ 2197.309803][T31462] usb 1-1: USB disconnect, device number 122 [ 2197.850538][ T972] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 2198.003778][ T972] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice= 0.02 [ 2198.005301][ T972] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2198.005354][ T972] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 27 [ 2198.006466][ T972] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2198.006545][ T972] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 27 [ 2198.007811][ T972] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2198.007859][ T972] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 27 [ 2198.007904][ T972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2198.035503][ T972] usb 3-1: config 0 descriptor?? [ 2198.065465][ T972] rndis_host 3-1:0.0: rndis: master #0/ffff888034fc5000 slave #1/0000000000000000 [ 2198.262067][ T4243] gre1: entered promiscuous mode [ 2198.276475][ T4243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2198.278131][ T4243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2198.300519][T23430] usb 3-1: USB disconnect, device number 26 [ 2199.086438][T25248] usb 2-1: USB disconnect, device number 37 [ 2199.835249][ T4322] binder: 4321:4322 ioctl c0306201 200000000180 returned -14 [ 2199.835503][ T4322] binder: 4321:4322 ioctl c0306201 0 returned -14 [ 2200.872887][T25248] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 2201.021956][T25248] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2201.023224][T25248] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2201.023258][T25248] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2201.023291][T25248] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2201.023337][T25248] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2201.049057][T25248] usb 3-1: config 0 descriptor?? [ 2201.401816][ T4369] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7215'. [ 2201.485002][T25248] hid_parser_main: 20 callbacks suppressed [ 2201.485032][T25248] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 2201.485067][T25248] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 2201.485096][T25248] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 2201.485126][T25248] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 2201.485156][T25248] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 2201.485184][T25248] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 2201.485213][T25248] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 2201.485242][T25248] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 2201.485271][T25248] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 2201.485308][T25248] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 2201.573846][T25248] plantronics 0003:047F:FFFF.0064: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2201.810817][ T31] audit: type=1326 audit(1791208938.789:3189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4371 comm="syz.3.7216" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d2799e199 code=0x0 [ 2204.231623][ T31] audit: type=1326 audit(1791208941.209:3190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4438 comm="syz.1.7242" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9df9e199 code=0x7ffc0000 [ 2204.233248][ T31] audit: type=1326 audit(1791208941.209:3191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4438 comm="syz.1.7242" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9df9e199 code=0x7ffc0000 [ 2204.233303][ T31] audit: type=1326 audit(1791208941.209:3192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4438 comm="syz.1.7242" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9df9e199 code=0x7ffc0000 [ 2204.233352][ T31] audit: type=1326 audit(1791208941.209:3193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4438 comm="syz.1.7242" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fbe9df9e199 code=0x7ffc0000 [ 2204.233718][ T31] audit: type=1326 audit(1791208941.209:3194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4438 comm="syz.1.7242" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9df9e199 code=0x7ffc0000 [ 2204.368349][ T31] audit: type=1326 audit(1791208941.339:3195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4438 comm="syz.1.7242" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9df9e199 code=0x7ffc0000 [ 2204.368547][ T31] audit: type=1326 audit(1791208941.339:3196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4438 comm="syz.1.7242" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbe9df9df02 code=0x7ffc0000 [ 2204.368917][ T31] audit: type=1326 audit(1791208941.339:3197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4438 comm="syz.1.7242" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fbe9df9df97 code=0x7ffc0000 [ 2204.370068][ T31] audit: type=1326 audit(1791208941.339:3199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4438 comm="syz.1.7242" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9df9e199 code=0x7ffc0000 [ 2204.630369][ T972] usb 3-1: reset high-speed USB device number 27 using dummy_hcd [ 2204.639613][ T972] usb 3-1: device reset changed ep0 maxpacket size! [ 2204.654386][ T995] usb 3-1: USB disconnect, device number 27 [ 2204.830354][ T995] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 2204.980501][ T995] usb 3-1: Using ep0 maxpacket: 16 [ 2204.981304][ T995] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0569, bcdDevice= 0.5b [ 2204.982664][ T995] usb 3-1: config 32 has an invalid interface number: 64 but max is 0 [ 2204.982691][ T995] usb 3-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 2204.982713][ T995] usb 3-1: config 32 has no interface number 0 [ 2204.982758][ T995] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2205.024939][ T995] uvcvideo 3-1:32.64: Found UVC 0.00 device (0bd3:0569) [ 2205.024979][ T995] uvcvideo 3-1:32.64: No valid video chain found. [ 2205.190684][ T995] usb 3-1: USB disconnect, device number 28 [ 2206.032078][ T4475] ip_tables: iptables: counters copy to user failed while replacing table [ 2206.270505][ T4483] bridge0: port 3(syz_tun) entered blocking state [ 2206.270777][ T4483] bridge0: port 3(syz_tun) entered disabled state [ 2206.270941][ T4483] syz_tun: entered allmulticast mode [ 2206.323257][ T4483] syz_tun: entered promiscuous mode [ 2207.267198][ T4522] netlink: 'syz.2.7271': attribute type 7 has an invalid length. [ 2207.376345][ T4526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7275'. [ 2207.766903][ T4547] ip_tables: iptables: counters copy to user failed while replacing table [ 2208.567304][ T4585] syzkaller0: entered promiscuous mode [ 2208.567330][ T4585] syzkaller0: entered allmulticast mode [ 2208.883054][ T4601] TCP: TCP_TX_DELAY enabled [ 2209.053195][ T4598] kvm [4597]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x400000000000e6b4 [ 2209.143261][ T995] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 2209.185218][ T4616] ip_tables: iptables: counters copy to user failed while replacing table [ 2209.300342][ T995] usb 2-1: Using ep0 maxpacket: 8 [ 2209.301187][ T995] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 2209.302433][ T995] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2209.302459][ T995] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2209.302483][ T995] usb 2-1: config 1 has no interface number 0 [ 2209.302527][ T995] usb 2-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 2209.304861][ T995] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2209.304887][ T995] usb 2-1: Product: syz [ 2209.304904][ T995] usb 2-1: Manufacturer: syz [ 2209.304920][ T995] usb 2-1: SerialNumber: syz [ 2209.735542][ T995] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 2209.847917][ T3957] udevd[3957]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2209.947575][ T4646] ip_tables: iptables: counters copy to user failed while replacing table [ 2211.908488][T25248] usb 2-1: USB disconnect, device number 38 [ 2213.402521][ T995] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 2213.561643][ T995] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2213.563629][ T995] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2213.563662][ T995] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2213.563688][ T995] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2213.563733][ T995] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2213.567796][ T995] usb 2-1: config 0 descriptor?? [ 2213.861336][ T4792] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns [ 2213.861366][ T4792] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 2214.449828][ T995] usbhid 2-1:0.0: can't add hid device: -71 [ 2214.449944][ T995] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2214.472668][ T995] usb 2-1: USB disconnect, device number 39 [ 2214.822610][ T25] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 2215.196124][ T25] usb 3-1: New USB device found, idVendor=05ac, idProduct=12a8, bcdDevice= 0.01 [ 2215.347011][ T4826] syzkaller0: entered promiscuous mode [ 2215.347040][ T4826] syzkaller0: entered allmulticast mode [ 2215.416281][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2215.891770][ T4848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2217.320150][ T25] usb 3-1: string descriptor 0 read error: -71 [ 2217.320795][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2217.346464][ T25] apple-mfi-fastcharge 3-1: can't set config #1, error -71 [ 2217.479930][ T25] apple-mfi-fastcharge 3-1: USB disconnect, device number 29 [ 2217.685686][ T4906] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 2217.813684][ T995] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 2217.849939][ T4914] ip_tables: iptables: counters copy to user failed while replacing table [ 2217.961261][ T995] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2217.962939][ T995] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 2217.962969][ T995] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2217.966317][ T995] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2217.966346][ T995] usb 1-1: Manufacturer: syz [ 2218.028584][ T995] usb 1-1: config 0 descriptor?? [ 2218.054022][ T995] igorplugusb 1-1:0.0: incorrect number of endpoints [ 2218.319749][T23430] usb 1-1: USB disconnect, device number 123 [ 2218.564973][ T4937] netlink: 'syz.4.7441': attribute type 61 has an invalid length. [ 2219.095298][ T4949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2219.194324][ T4953] ip_tables: iptables: counters copy to user failed while replacing table [ 2219.990361][T23430] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 2220.142386][T23430] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2220.144202][T23430] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 2220.144232][T23430] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2220.145718][T23430] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2220.145746][T23430] usb 4-1: Manufacturer: syz [ 2220.196168][T23430] usb 4-1: config 0 descriptor?? [ 2220.211831][T23430] igorplugusb 4-1:0.0: incorrect number of endpoints [ 2220.285072][ T4995] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 2220.411957][ T25] usb 4-1: USB disconnect, device number 30 [ 2220.560689][T29468] Bluetooth: hci5: command 0x0406 tx timeout [ 2220.563733][ T4922] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 2220.563777][ T4922] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 2221.040323][ T4922] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2221.040352][ T4922] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 2221.171884][ T4922] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2221.171909][ T4922] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 2221.173679][ T5009] syzkaller1: entered promiscuous mode [ 2221.173702][ T5009] syzkaller1: entered allmulticast mode [ 2221.303590][ T5015] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7474'. [ 2221.382694][ T4922] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2221.382720][ T4922] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 2221.415102][ T4922] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2221.415136][ T4922] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 2221.529269][ T5018] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 2221.744445][ T5029] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7479'. [ 2221.762247][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.762310][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 2221.792278][ T5029] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7479'. [ 2222.101238][T32435] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 2222.254172][T32435] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2222.255910][T32435] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 2222.255939][T32435] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2222.257334][T32435] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2222.257361][T32435] usb 2-1: Manufacturer: syz [ 2222.279435][T32435] usb 2-1: config 0 descriptor?? [ 2222.319278][T32435] igorplugusb 2-1:0.0: incorrect number of endpoints [ 2222.524956][T31462] usb 2-1: USB disconnect, device number 40 [ 2222.998361][ T5060] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 2223.010708][ T5056] sch_tbf: burst 0 is lower than device lo mtu (1296) ! [ 2223.036667][ T5059] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 2223.451927][ T5080] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7501'. [ 2223.734023][ T5100] bridge0: port 3(syz_tun) entered blocking state [ 2223.734160][ T5100] bridge0: port 3(syz_tun) entered disabled state [ 2223.734307][ T5100] syz_tun: entered allmulticast mode [ 2223.736921][ T5100] syz_tun: entered promiscuous mode [ 2223.880762][ T25] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 2224.041296][ T25] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2224.042658][ T25] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 2224.042689][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2224.042743][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2224.043787][ T25] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2224.043814][ T25] usb 1-1: Manufacturer: syz [ 2224.047481][ T25] usb 1-1: config 0 descriptor?? [ 2224.083173][ T25] igorplugusb 1-1:0.0: incorrect number of endpoints [ 2224.264594][T23430] usb 1-1: USB disconnect, device number 124 [ 2225.079449][ T5163] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7540'. [ 2225.339573][ T5177] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7546'. [ 2225.405125][ T5179] tipc: New replicast peer: 172.20.20.187 [ 2225.406073][ T5179] tipc: Enabled bearer , priority 10 [ 2225.480757][T32435] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 2225.502406][ T5185] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2225.631188][T32435] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2225.632568][T32435] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 2225.632603][T32435] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2225.632653][T32435] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2225.634059][T32435] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2225.634099][T32435] usb 4-1: Manufacturer: syz [ 2225.637502][T32435] usb 4-1: config 0 descriptor?? [ 2225.707066][T32435] igorplugusb 4-1:0.0: incorrect number of endpoints [ 2225.864209][ T25] usb 4-1: USB disconnect, device number 31 [ 2225.965321][ T5206] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7560'. [ 2226.066949][ T5208] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2226.094159][ T5210] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7562'. [ 2226.350571][ T5220] tipc: Enabling of bearer rejected, already enabled [ 2226.402578][ T25] tipc: Node number set to 242456337 [ 2226.608137][ T5230] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7571'. [ 2226.703344][ T5235] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7573'. [ 2227.259041][ T5257] syzkaller1: entered promiscuous mode [ 2227.259070][ T5257] syzkaller1: entered allmulticast mode [ 2227.410590][ T5266] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7587'. [ 2227.855252][ T5294] ip_tables: iptables: counters copy to user failed while replacing table [ 2227.978170][ T5296] syzkaller0: entered promiscuous mode [ 2227.978195][ T5296] syzkaller0: entered allmulticast mode [ 2228.559955][ T5315] binder: 5314:5315 ioctl c0306201 200000000180 returned -14 [ 2228.648950][ T5319] ip_tables: iptables: counters copy to user failed while replacing table [ 2228.650408][ T5319] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 2229.059179][ T5333] binder: 5332:5333 ioctl c0306201 0 returned -14 [ 2229.348887][ T5343] tipc: Started in network mode [ 2229.348923][ T5343] tipc: Node identity ac1414aa, cluster identity 4711 [ 2229.349190][ T5343] tipc: New replicast peer: 172.20.20.187 [ 2229.349420][ T5343] tipc: Enabled bearer , priority 10 [ 2229.388757][ T5344] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 2229.567741][ T5351] ip_tables: iptables: counters copy to user failed while replacing table [ 2230.225225][ T5368] x_tables: duplicate entry at hook 3 [ 2230.417119][ T5378] tipc: Enabling of bearer rejected, already enabled [ 2230.465692][T31462] tipc: Node number set to 2886997162 [ 2230.487984][ T5380] ip_tables: iptables: counters copy to user failed while replacing table [ 2230.719153][ T5391] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7637'. [ 2230.720071][ T5391] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7637'. [ 2230.795467][ T5394] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2231.060846][T32435] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 2231.110364][T23430] usb 1-1: new full-speed USB device number 125 using dummy_hcd [ 2231.180339][ T25] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 2231.211036][T32435] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 2231.212088][T32435] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2231.212126][T32435] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2231.212166][T32435] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2231.215844][T32435] usb 4-1: config 0 descriptor?? [ 2231.253653][ T995] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 2231.279310][T23430] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2231.279833][T23430] usb 1-1: not running at top speed; connect to a high speed hub [ 2231.279867][T23430] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 2231.312435][T23430] usb 1-1: config 114 has an invalid interface number: 240 but max is 0 [ 2231.312467][T23430] usb 1-1: config 114 has no interface number 0 [ 2231.312509][T23430] usb 1-1: config 114 interface 240 altsetting 232 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 2231.312571][T23430] usb 1-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 2231.312591][T23430] usb 1-1: config 114 interface 240 has no altsetting 0 [ 2231.315746][T23430] usb 1-1: string descriptor 0 read error: -22 [ 2231.315879][T23430] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2231.342606][ T25] usb 2-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 2231.346084][ T25] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2231.346191][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2231.364682][ T5398] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2231.384682][ T25] usb 2-1: config 0 descriptor?? [ 2231.428976][T23430] ir_usb 1-1:114.240: IR Dongle converter detected [ 2231.440321][ T995] usb 3-1: Using ep0 maxpacket: 16 [ 2231.441107][ T995] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 2231.442545][ T995] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2231.442617][ T995] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 2231.442647][ T995] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 2231.442693][ T995] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2231.448267][ T5396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2231.448893][ T5396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2231.477193][ T995] usb 3-1: config 0 descriptor?? [ 2231.570947][ T5410] ip_tables: iptables: counters copy to user failed while replacing table [ 2231.606214][T23430] usb 1-1: IR Dongle converter now attached to ttyUSB0 [ 2231.722854][ T5396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2231.725723][ T5396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2231.825718][ T25] hid_parser_main: 5 callbacks suppressed [ 2231.825746][ T25] acrux 0003:1A34:F705.0065: unknown main item tag 0x3 [ 2231.829204][ T25] acrux 0003:1A34:F705.0065: Force Feedback for ACRUX game controllers by Sergei Kolzun [ 2231.861110][ T25] input: HID 1a34:f705 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:1A34:F705.0065/input/input124 [ 2231.889493][ T25] acrux 0003:1A34:F705.0065: input,hidraw0: USB HID v0.00 Joystick [HID 1a34:f705] on usb-dummy_hcd.1-1/input0 [ 2231.952206][ T995] nintendo 0003:057E:2019.0066: hidraw1: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.2-1/input0 [ 2232.043138][T31462] usb 2-1: USB disconnect, device number 41 [ 2232.147021][T32435] arvo 0003:1E7D:30D4.0067: unknown main item tag 0x0 [ 2232.160489][T32435] arvo 0003:1E7D:30D4.0067: unknown main item tag 0x0 [ 2232.160525][T32435] arvo 0003:1E7D:30D4.0067: unknown main item tag 0x0 [ 2232.160584][T32435] arvo 0003:1E7D:30D4.0067: unknown main item tag 0x0 [ 2232.160613][T32435] arvo 0003:1E7D:30D4.0067: unknown main item tag 0x0 [ 2232.160641][T32435] arvo 0003:1E7D:30D4.0067: unknown main item tag 0x0 [ 2232.160670][T32435] arvo 0003:1E7D:30D4.0067: unknown main item tag 0x0 [ 2232.178515][ T5419] fido_id[5419]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 2232.239430][T32435] arvo 0003:1E7D:30D4.0067: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 2232.367191][T32435] arvo 0003:1E7D:30D4.0067: couldn't init struct arvo_device [ 2232.367282][T32435] arvo 0003:1E7D:30D4.0067: couldn't install keyboard [ 2232.392912][T32435] arvo 0003:1E7D:30D4.0067: probe with driver arvo failed with error -32 [ 2232.410524][T32435] usb 4-1: USB disconnect, device number 32 [ 2232.432270][ T5423] fido_id[5423]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 2232.732975][ T995] nintendo 0003:057E:2019.0066: Failed to get joycon info; ret=-71 [ 2232.733006][ T995] nintendo 0003:057E:2019.0066: Failed to retrieve controller info; ret=-71 [ 2232.733131][ T995] nintendo 0003:057E:2019.0066: Failed to initialize controller; ret=-71 [ 2232.766440][ T995] nintendo 0003:057E:2019.0066: probe - fail = -71 [ 2232.766700][ T995] nintendo 0003:057E:2019.0066: probe with driver nintendo failed with error -71 [ 2232.786997][ T995] usb 3-1: USB disconnect, device number 30 [ 2232.860697][T31462] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 2233.020609][T31462] usb 2-1: Using ep0 maxpacket: 32 [ 2233.021370][T31462] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2233.022533][T31462] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2233.022566][T31462] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2233.022606][T31462] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2233.025964][T31462] usb 2-1: config 0 descriptor?? [ 2233.058616][T31462] hub 2-1:0.0: USB hub found [ 2233.243267][T31462] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 2233.610501][T23430] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 2233.648081][T31462] hid-generic 0003:046D:C31C.0068: unknown main item tag 0x0 [ 2233.667695][T31462] hid-generic 0003:046D:C31C.0068: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 2233.762621][T23430] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2233.762689][T23430] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 2233.763895][T23430] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2233.763921][T23430] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2233.767078][T23430] usb 3-1: string descriptor 0 read error: -22 [ 2233.767255][T23430] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2233.831497][T23430] usb 3-1: selecting invalid altsetting 1 [ 2233.833236][T23430] usb 3-1: unit 6 not found! [ 2233.897822][ T995] usb 1-1: USB disconnect, device number 125 [ 2233.924566][ T995] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 2233.938967][ T995] ir_usb 1-1:114.240: device disconnected [ 2234.034694][T23430] usb 3-1: 2:0: cannot get min/max values for control 1 (id 2) [ 2234.094056][ T25] usb 2-1: USB disconnect, device number 42 [ 2234.176705][T23430] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2234.196064][ T5449] ip_tables: iptables: counters copy to user failed while replacing table [ 2234.242504][T23430] usb 3-1: USB disconnect, device number 31 [ 2234.580410][ T25] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 2234.600622][T31462] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 2234.740388][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 2234.741241][ T25] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2234.742602][ T25] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 2234.742663][ T25] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2234.742702][ T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2234.742731][ T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2234.742761][ T25] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2234.742812][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2234.750498][T31462] usb 4-1: Using ep0 maxpacket: 8 [ 2234.765637][T31462] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 2234.829405][T31462] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2234.829483][T31462] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 1029, setting to 1024 [ 2234.878241][T31462] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2234.878309][T31462] usb 4-1: Product: syz [ 2234.878329][T31462] usb 4-1: Manufacturer: syz [ 2234.878348][T31462] usb 4-1: SerialNumber: syz [ 2234.905698][T31462] usb 4-1: config 0 descriptor?? [ 2234.906866][ T5456] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2234.958344][ T25] usb 1-1: GET_CAPABILITIES returned 0 [ 2234.958387][ T25] usbtmc 1-1:16.0: can't read capabilities [ 2234.963302][ T5705] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 2235.030323][T31462] rc_core: IR keymap rc-streamzap not found [ 2235.030345][T31462] Registered IR keymap rc-empty [ 2235.031709][T31462] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 2235.061982][T31462] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input125 [ 2235.078630][ T5463] netlink: 'syz.2.7664': attribute type 10 has an invalid length. [ 2235.078874][ T5463] syz_tun: left allmulticast mode [ 2235.079099][ T5463] bridge0: port 3(syz_tun) entered disabled state [ 2235.111960][ T5463] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2235.161532][ T5705] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2235.164996][ T5705] usb 2-1: not running at top speed; connect to a high speed hub [ 2235.165035][ T5705] usb 2-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 2235.198088][ T5705] usb 2-1: config 8 has an invalid interface number: 43 but max is 1 [ 2235.198119][ T5705] usb 2-1: config 8 has an invalid interface number: 35 but max is 1 [ 2235.198143][ T5705] usb 2-1: config 8 has no interface number 0 [ 2235.198234][ T5705] usb 2-1: config 8 has no interface number 1 [ 2235.198286][ T5705] usb 2-1: config 8 interface 43 altsetting 17 has an endpoint descriptor with address 0xE5, changing to 0x85 [ 2235.198320][ T5705] usb 2-1: config 8 interface 43 has no altsetting 0 [ 2235.198340][ T5705] usb 2-1: config 8 interface 35 has no altsetting 0 [ 2235.283323][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2235.285556][ T5454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2235.286022][ T5454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2235.288428][T23430] usb 1-1: USB disconnect, device number 126 [ 2235.345208][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2235.345241][ T5705] usb 2-1: Product: syz [ 2235.345333][ T5705] usb 2-1: Manufacturer: syz [ 2235.345351][ T5705] usb 2-1: SerialNumber: syz [ 2235.420899][T31462] usb 4-1: USB disconnect, device number 33 [ 2235.644727][ T5458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2235.645129][ T5458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2235.648892][ T5458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2235.649233][ T5458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2235.687624][ T5458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2235.688012][ T5458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2235.712375][ T5458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2235.712755][ T5458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2235.749860][ T5458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2235.760566][ T5458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2235.809594][ T5705] ums-alauda 2-1:8.43: USB Mass Storage device detected [ 2235.848327][ T5705] scsi host1: usb-storage 2-1:8.43 [ 2235.891292][ T5705] hub 2-1:8.35: Invalid hub with more than one config or interface [ 2235.891325][ T5705] hub 2-1:8.35: probe with driver hub failed with error -22 [ 2235.891965][ T5705] ums-alauda 2-1:8.35: USB Mass Storage device detected [ 2235.951468][ T5477] ip_tables: iptables: counters copy to user failed while replacing table [ 2236.033973][ T5705] usb 2-1: USB disconnect, device number 43 [ 2236.162183][ T5483] netlink: NAT attribute has 8 unknown bytes [ 2236.162238][ T5483] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2236.490395][T23430] usb 4-1: new low-speed USB device number 34 using dummy_hcd [ 2236.641140][T23430] usb 4-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= 0.40 [ 2236.642307][T23430] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0 [ 2236.642349][T23430] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 32, setting to 0 [ 2236.682561][T23430] usb 4-1: string descriptor 0 read error: -22 [ 2236.682711][T23430] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2236.830612][ T972] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 2236.912698][T23430] usb 4-1: failed to read device descriptor: -71 [ 2236.912768][T23430] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 2236.953575][T23430] usb 4-1: invalid MIDI EP [ 2236.953593][T23430] usb 4-1: snd-bcd2000: error during probing [ 2236.978141][T23430] snd-bcd2000 4-1:1.0: probe with driver snd-bcd2000 failed with error -22 [ 2236.993257][ T972] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 2237.013166][ T972] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2237.013188][ T972] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 2237.013218][ T972] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2237.019289][T23430] usb 4-1: invalid MIDI EP [ 2237.019309][T23430] usb 4-1: snd-bcd2000: error during probing [ 2237.020056][T23430] snd-bcd2000 4-1:1.1: probe with driver snd-bcd2000 failed with error -22 [ 2237.100771][ T972] idmouse 1-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 2237.109224][T23430] usb 4-1: invalid MIDI EP [ 2237.109246][T23430] usb 4-1: snd-bcd2000: error during probing [ 2237.109867][T23430] snd-bcd2000 4-1:1.2: probe with driver snd-bcd2000 failed with error -22 [ 2237.142242][ T5705] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 2237.166448][T23430] usb 4-1: USB disconnect, device number 34 [ 2237.301310][ T5705] usb 2-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 2237.303087][ T5705] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2237.303122][ T5705] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2237.303179][ T5705] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2237.303215][ T5705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2237.331233][ T5705] usb 2-1: config 0 descriptor?? [ 2237.370787][ T5501] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 2237.400506][ T5506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2237.401329][ T5506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2237.403085][ T5506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2237.405120][ T5506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2237.408288][ T5506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2237.409647][ T5506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2237.421668][ T5506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2237.424424][ T5506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2237.572082][ T5508] ip_tables: iptables: counters copy to user failed while replacing table [ 2237.637094][ T5506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2237.638645][ T5506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2237.707551][ T5510] netlink: 'syz.3.7682': attribute type 61 has an invalid length. [ 2237.793147][ T5501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2237.793862][ T5501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2237.795843][ T5501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2237.799690][ T5501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2237.856922][ T5514] netlink: NAT attribute type 0 has unexpected length (4 != 0) [ 2237.856963][ T5514] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2238.038939][ T5501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2238.039453][ T5501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2238.077995][ T5705] hid-u2fzero 0003:20A0:4287.0069: hidraw0: USB HID v0.8b Joystick [HID 20a0:4287] on usb-dummy_hcd.1-1/input0 [ 2238.133547][ T5705] hid-u2fzero 0003:20A0:4287.0069: NitroKey U2F LED initialised [ 2238.133795][ T5705] hid-u2fzero 0003:20A0:4287.0069: NitroKey U2F RNG initialised [ 2238.254285][ T972] usb 2-1: USB disconnect, device number 44 [ 2238.325491][ T25] usb 1-1: USB disconnect, device number 127 [ 2238.343532][ T25] idmouse 1-1:1.0: disconnected [ 2238.440345][ T5705] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 2238.590520][ T5705] usb 3-1: Using ep0 maxpacket: 8 [ 2238.592271][ T5705] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 2238.593363][ T5705] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1536, setting to 64 [ 2238.593405][ T5705] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2238.597130][ T5705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2238.597149][ T5705] usb 3-1: Product: syz [ 2238.597163][ T5705] usb 3-1: Manufacturer: syz [ 2238.597174][ T5705] usb 3-1: SerialNumber: syz [ 2238.657183][ T5705] usb 3-1: config 0 descriptor?? [ 2238.672533][ T5705] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 2238.800493][ T972] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 2238.877102][ T5705] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 2238.881194][ T5705] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 2238.921120][ T5531] ip_tables: iptables: counters copy to user failed while replacing table [ 2238.954125][ T5533] netlink: 'syz.0.7693': attribute type 61 has an invalid length. [ 2238.963254][ T972] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 2238.969075][ T972] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 2238.969167][ T972] usb 4-1: Product: syz [ 2238.998694][ T972] usb 4-1: config 0 descriptor?? [ 2239.012808][ T972] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 2239.016265][ T972] usb 4-1: Detected FT232H [ 2239.034308][ T5535] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7694'. [ 2239.073113][ T5519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2239.073764][ T5519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2239.076958][ T5519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2239.077434][ T5519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2239.079159][ T5519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2239.079665][ T5519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2239.147401][ T995] usb 3-1: USB disconnect, device number 32 [ 2239.211712][ T972] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 2239.212125][ T972] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2239.214801][ T972] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 2239.216961][ T972] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2239.239446][ T972] usb 4-1: USB disconnect, device number 35 [ 2239.270064][ T972] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2239.276583][ T972] ftdi_sio 4-1:0.0: device disconnected [ 2239.380512][ T5705] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 2239.530387][ T5705] usb 1-1: Using ep0 maxpacket: 8 [ 2239.531162][ T5705] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2239.532178][ T5705] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 2239.532232][ T5705] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2239.532257][ T5705] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2239.532295][ T5705] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2239.532312][ T5705] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2239.532344][ T5705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2239.752624][ T5705] usb 1-1: usb_control_msg returned -32 [ 2239.752682][ T5705] usbtmc 1-1:16.0: can't read capabilities [ 2240.062002][ T995] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 2240.090484][ T5705] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 2240.210499][ T995] usb 4-1: Using ep0 maxpacket: 8 [ 2240.211621][ T995] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2240.212724][ T995] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 2240.212752][ T995] usb 4-1: config 179 has no interface number 0 [ 2240.212795][ T995] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2240.212827][ T995] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2240.212847][ T995] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2240.212867][ T995] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2240.212886][ T995] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2240.212917][ T995] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2240.216040][ T5548] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2240.328528][ T5705] usb 3-1: Using ep0 maxpacket: 32 [ 2240.330443][ T5705] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 2240.349386][ T5705] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 2240.349415][ T5705] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2240.349438][ T5705] usb 3-1: config 0 has no interface number 0 [ 2240.349480][ T5705] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC [ 2240.349509][ T5705] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 2240.349533][ T5705] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 2240.349560][ T5705] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 2240.349588][ T5705] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 2240.349617][ T5705] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 2240.349643][ T5705] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 2240.349671][ T5705] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 193 [ 2240.408277][ T972] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 2240.476066][ T5705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2240.476098][ T5705] usb 3-1: Product: syz [ 2240.476114][ T5705] usb 3-1: Manufacturer: syz [ 2240.476130][ T5705] usb 3-1: SerialNumber: syz [ 2240.493732][ T5705] usb 3-1: config 0 descriptor?? [ 2240.509014][ T5550] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 2240.509172][ T5550] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 2240.530648][ T5705] usb 3-1: will this work? Command EP is not usually 12 [ 2240.530676][ T5705] usb 3-1: will this work? Response EP is not usually 3 [ 2240.530695][ T5705] usb 3-1: will this work? Image data EP is not usually 2 [ 2240.542349][ T5705] scsi host1: microtekX6 [ 2240.576131][ T5556] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 2240.591586][ T972] usb 2-1: Using ep0 maxpacket: 32 [ 2240.593275][ T972] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 2240.599179][T31507] usb 3-1: error -90 submitting URB [ 2240.625158][ T972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2240.625187][ T972] usb 2-1: Product: syz [ 2240.625199][ T972] usb 2-1: Manufacturer: syz [ 2240.625210][ T972] usb 2-1: SerialNumber: syz [ 2240.634494][ T26] usb 3-1: error -90 submitting URB [ 2240.644540][ T972] usb 2-1: config 0 descriptor?? [ 2240.670476][ T26] usb 3-1: error -90 submitting URB [ 2240.711036][ T26] usb 3-1: error -90 submitting URB [ 2240.743458][T23430] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input126 [ 2240.780583][ T5550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2240.781068][ T5550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2240.793295][ T5705] usb 1-1: USB disconnect, device number 2 [ 2240.815610][ T5550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2240.848092][ T5550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2240.861576][T23430] usb 4-1: USB disconnect, device number 36 [ 2240.861637][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2240.861687][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2240.869288][ T5550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2240.869787][ T5550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2240.931551][ T5550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2240.932111][ T5550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2240.999760][ T25] usb 3-1: USB disconnect, device number 33 [ 2241.140877][ T972] airspy 2-1:0.0: Board ID: 00 [ 2241.140903][ T972] airspy 2-1:0.0: Firmware version: [ 2241.436312][ T5560] ip_tables: iptables: counters copy to user failed while replacing table [ 2241.529213][ T5564] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7706'. [ 2241.740324][T31462] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 2241.891266][T31462] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2241.892514][T31462] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2241.892565][T31462] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2241.892611][T31462] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2241.895830][T31462] usb 4-1: config 0 descriptor?? [ 2241.903630][T31462] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2241.956179][ T995] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 2242.101079][ T995] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 2242.102488][ T995] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2242.102541][ T995] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 2242.102608][ T995] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 2242.102653][ T995] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2242.164923][ T972] airspy 2-1:0.0: usb_control_msg() failed -71 request 10 [ 2242.180732][ T972] airspy 2-1:0.0: Registered as swradio24 [ 2242.180756][ T972] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 2242.189314][ T972] usb 2-1: USB disconnect, device number 45 [ 2242.500682][ T5583] netlink: 'syz.4.7713': attribute type 10 has an invalid length. [ 2242.503274][ T5583] syz_tun: left allmulticast mode [ 2242.503558][ T5583] bridge0: port 3(syz_tun) entered disabled state [ 2242.539473][ T5583] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2242.603240][T32435] usb 4-1: USB disconnect, device number 37 [ 2242.723608][ T5587] ip_tables: iptables: counters copy to user failed while replacing table [ 2242.742324][ T5572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2242.748005][ T5572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2242.772238][ T5572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2242.775848][ T5572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2242.799245][ T5572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2242.811563][ T5572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2242.834298][ T995] cxacru_cm: 51 callbacks suppressed [ 2242.834409][ T995] cxacru 3-1:1.0: send of cm 0x84 failed (-71) [ 2242.834476][ T995] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 2242.836742][ T995] cxacru 3-1:1.0: send of cm 0x88 failed (-71) [ 2242.836816][ T995] ATM dev 0: poll status: error -71 [ 2242.836899][ T995] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 2242.836942][ T995] ATM dev 0: usbatm_submit_urb: urb 0xffff88807a286f00 submission failed (-8)! [ 2242.837296][ T995] ATM dev 0: usbatm_submit_urb: urb 0xffff88807a286200 submission failed (-8)! [ 2242.837325][ T995] ATM dev 0: usbatm_submit_urb: urb 0xffff88807a286d00 submission failed (-8)! [ 2242.837348][ T995] ATM dev 0: usbatm_submit_urb: urb 0xffff88807a286100 submission failed (-8)! [ 2242.924209][ T995] usb 3-1: USB disconnect, device number 34 [ 2242.990141][ T5591] netlink: NAT attribute has 8 unknown bytes [ 2242.990168][ T5591] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2243.591782][ T5619] ip_tables: iptables: counters copy to user failed while replacing table [ 2243.616302][ T5620] netlink: NAT attribute has 8 unknown bytes [ 2243.616341][ T5620] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2243.791137][ T995] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 2243.920378][ T972] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 2243.930827][T31462] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 2243.946996][ T995] usb 2-1: Using ep0 maxpacket: 32 [ 2243.947788][ T995] usb 2-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 2243.948897][ T995] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 2243.948985][ T995] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2243.950590][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 2243.995293][ T995] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2243.995323][ T995] usb 2-1: Product: syz [ 2243.995340][ T995] usb 2-1: Manufacturer: syz [ 2243.995356][ T995] usb 2-1: SerialNumber: syz [ 2243.998726][ T995] usb 2-1: config 0 descriptor?? [ 2244.029621][ T995] keyspan 2-1:0.0: Keyspan 1 port adapter converter detected [ 2244.029855][ T995] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 2244.029912][ T995] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 2244.057466][ T995] keyspan 2-1:0.0: unsupported endpoint type 0 [ 2244.057632][ T995] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 2244.057717][ T995] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 2244.057794][ T995] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 2244.057922][ T995] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 2244.059509][ T995] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2244.093380][T31462] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2244.113721][T31462] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2244.113813][T31462] usb 3-1: Product: syz [ 2244.113850][T31462] usb 3-1: Manufacturer: syz [ 2244.113887][T31462] usb 3-1: SerialNumber: syz [ 2244.130021][ T25] usb 1-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 2244.144415][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2244.155704][ T972] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2244.155757][ T972] usb 4-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=c4.d3 [ 2244.157651][ T972] usb 4-1: config 137 has an invalid interface number: 9 but max is 0 [ 2244.157678][ T972] usb 4-1: config 137 has no interface number 0 [ 2244.157708][ T972] usb 4-1: config 137 interface 9 has no altsetting 0 [ 2244.204558][ T972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2244.204594][ T972] usb 4-1: Product: syz [ 2244.204618][ T972] usb 4-1: Manufacturer: syz [ 2244.204635][ T972] usb 4-1: SerialNumber: syz [ 2244.270263][ T5616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2244.275948][ T5616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2244.304825][ T5616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2244.308792][ T5616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2244.327611][ T5705] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2244.453989][ T5624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2244.454664][ T5624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2244.459124][ T5624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2244.464287][ T5624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2244.487718][ T5624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2244.488571][ T5624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2244.505809][ T5624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2244.515891][ T5624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2244.525160][ T25] usb 1-1: NFC: Reader power on cmd error 0 [ 2244.525324][ T25] pn533_usb 1-1:1.0: NFC: Couldn't poweron the reader (error -22) [ 2244.526045][ T25] pn533_usb 1-1:1.0: probe with driver pn533_usb failed with error -22 [ 2244.559077][ T5624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2244.576330][ T5616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2244.577018][ T5616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2244.577865][ T5624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2244.579598][ T5616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2244.615845][ T5616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2244.616191][ T5626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2244.625036][ T5626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2244.656028][ T5626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2244.658194][ T5626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2244.686818][ T5626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2244.693616][ T5626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2244.713317][ T5626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2244.714162][ T5626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2244.717266][ T5626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2244.717924][ T5626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2244.758190][ T995] usb 1-1: USB disconnect, device number 3 [ 2244.838534][T23430] usb 3-1: USB disconnect, device number 35 [ 2244.859524][ T5616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2244.860027][ T5616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2244.877344][ T25] usb 2-1: USB disconnect, device number 46 [ 2244.897840][ T25] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2244.919074][ T25] keyspan 2-1:0.0: device disconnected [ 2245.065793][ T972] kl5kusb105 4-1:137.9: KL5KUSB105D / PalmConnect converter detected [ 2245.068516][ T972] usb 4-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 2245.088919][ T972] usb 4-1: USB disconnect, device number 38 [ 2245.098380][ T972] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 2245.098945][ T972] kl5kusb105 4-1:137.9: device disconnected [ 2245.450610][ T5705] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2245.450806][ T5705] ath9k_htc: Failed to initialize the device [ 2245.451668][T23430] usb 3-1: ath9k_htc: USB layer deinitialized [ 2245.650386][ T972] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 2245.694332][ T5646] ip_tables: iptables: counters copy to user failed while replacing table [ 2245.763813][ T5648] netlink: NAT attribute has 8 unknown bytes [ 2245.763850][ T5648] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2245.786912][T23430] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 2245.800664][ T972] usb 1-1: Using ep0 maxpacket: 32 [ 2245.801384][ T972] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2245.804108][ T972] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2245.808580][ T972] usb 1-1: config 0 descriptor?? [ 2245.853874][ T972] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 2245.940415][T23430] usb 3-1: Using ep0 maxpacket: 32 [ 2245.941187][T23430] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2245.942589][T23430] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 2245.942616][T23430] usb 3-1: config 0 has no interface number 0 [ 2245.942689][T23430] usb 3-1: config 0 interface 184 has no altsetting 0 [ 2245.945408][T23430] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2245.945434][T23430] usb 3-1: Product: syz [ 2245.945479][T23430] usb 3-1: Manufacturer: syz [ 2245.945497][T23430] usb 3-1: SerialNumber: syz [ 2245.949452][T23430] usb 3-1: config 0 descriptor?? [ 2246.140359][T32435] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 2246.291263][T32435] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2246.291345][T32435] usb 2-1: too many configurations: 87, using maximum allowed: 8 [ 2246.318360][T32435] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2246.318381][T32435] usb 2-1: Product: syz [ 2246.318393][T32435] usb 2-1: Manufacturer: syz [ 2246.318405][T32435] usb 2-1: SerialNumber: syz [ 2246.430348][ T25] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 2246.581879][ T25] usb 4-1: New USB device found, idVendor=0a12, idProduct=0001, bcdDevice= 0.00 [ 2246.583008][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2246.583034][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2246.588277][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2246.588304][ T25] usb 4-1: Product: syz [ 2246.588320][ T25] usb 4-1: Manufacturer: syz [ 2246.588336][ T25] usb 4-1: SerialNumber: syz [ 2246.733131][ T5673] ip_tables: iptables: counters copy to user failed while replacing table [ 2246.758548][T32435] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2246.758701][T32435] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2246.816094][ T5662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2246.816948][ T5662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2247.046601][ T5662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2247.047163][ T5662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2247.049146][ T5662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2247.049656][ T5662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2247.053109][ T5662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2247.054382][ T5662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2247.258631][ T5662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2247.259198][ T5662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2247.449192][T23430] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): EEPROM is busy [ 2247.466702][ T995] usb 4-1: USB disconnect, device number 39 [ 2247.466921][T29468] Bluetooth: hci3: CSR: Local version failed (-71) [ 2247.651149][T23430] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 2247.651224][T23430] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 2247.651250][T23430] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 2247.651273][T23430] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 2247.651676][T23430] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 2247.665149][T23430] usb 3-1: USB disconnect, device number 36 [ 2248.677957][ T5704] ip_tables: iptables: counters copy to user failed while replacing table [ 2248.950404][ T973] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 2248.990322][ T995] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 2249.102608][ T973] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2249.102647][ T973] usb 4-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 2249.103703][ T973] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2249.105265][ T973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 2249.105284][ T973] usb 4-1: Product: syz [ 2249.105296][ T973] usb 4-1: Manufacturer: syz [ 2249.106614][ T972] gspca_vc032x: reg_r err -71 [ 2249.106732][ T972] gspca_vc032x: I2c Bus Busy Wait 00 [ 2249.106746][ T972] gspca_vc032x: I2c Bus Busy Wait 00 [ 2249.106756][ T972] gspca_vc032x: I2c Bus Busy Wait 00 [ 2249.106767][ T972] gspca_vc032x: I2c Bus Busy Wait 00 [ 2249.106777][ T972] gspca_vc032x: I2c Bus Busy Wait 00 [ 2249.106787][ T972] gspca_vc032x: I2c Bus Busy Wait 00 [ 2249.106798][ T972] gspca_vc032x: I2c Bus Busy Wait 00 [ 2249.106809][ T972] gspca_vc032x: I2c Bus Busy Wait 00 [ 2249.106820][ T972] gspca_vc032x: I2c Bus Busy Wait 00 [ 2249.106831][ T972] gspca_vc032x: I2c Bus Busy Wait 00 [ 2249.106841][ T972] gspca_vc032x: I2c Bus Busy Wait 00 [ 2249.106878][ T972] gspca_vc032x: I2c Bus Busy Wait 00 [ 2249.106889][ T972] gspca_vc032x: I2c Bus Busy Wait 00 [ 2249.106899][ T972] gspca_vc032x: I2c Bus Busy Wait 00 [ 2249.106910][ T972] gspca_vc032x: I2c Bus Busy Wait 00 [ 2249.106919][ T972] gspca_vc032x: I2c Bus Busy Wait 00 [ 2249.106930][ T972] gspca_vc032x: I2c Bus Busy Wait 00 [ 2249.106941][ T972] gspca_vc032x: Unknown sensor... [ 2249.107041][ T972] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 2249.122196][ T972] usb 1-1: USB disconnect, device number 4 [ 2249.140692][ T995] usb 3-1: Using ep0 maxpacket: 16 [ 2249.175189][ T995] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2249.187716][ T995] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2249.201701][ T973] uvcvideo 4-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 2249.245574][ T995] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2249.245656][ T995] usb 3-1: Product: syz [ 2249.245773][ T995] usb 3-1: Manufacturer: syz [ 2249.245822][ T995] usb 3-1: SerialNumber: syz [ 2249.337081][ T995] usb 3-1: config 0 descriptor?? [ 2249.355381][ T995] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2249.355431][ T995] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 2249.553019][ T973] uvcvideo 4-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 2249.557752][ T973] videodev: could not get a free minor [ 2249.557767][ T973] uvcvideo 4-1:1.1: Failed to register meta-cap device (-23). [ 2249.955559][ T995] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 2250.265002][ T5731] ip_tables: iptables: counters copy to user failed while replacing table [ 2250.370990][ T995] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2250.371027][ T995] em28xx 3-1:0.0: board has no eeprom [ 2250.411877][T32435] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000094. ret = -EPROTO [ 2250.411943][T32435] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2250.412929][T32435] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2250.419269][T32435] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 2250.450172][T32435] usb 2-1: USB disconnect, device number 47 [ 2250.700347][ T995] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2250.700473][ T995] em28xx 3-1:0.0: dvb set to bulk mode. [ 2250.702834][T32435] em28xx 3-1:0.0: Binding DVB extension [ 2250.838196][ T995] usb 3-1: USB disconnect, device number 37 [ 2250.852742][ T5709] em28xx 3-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 2250.857639][ T995] em28xx 3-1:0.0: Disconnecting em28xx [ 2250.984643][T32435] em28xx 3-1:0.0: Registering input extension [ 2250.986536][ T995] em28xx 3-1:0.0: Closing input extension [ 2251.091407][ T25] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 2251.095836][ T995] em28xx: Freeing device [ 2251.241059][ T25] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 2251.242030][ T25] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 2251.242056][ T25] usb 1-1: config 1 has no interface number 0 [ 2251.244134][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2251.244161][ T25] usb 1-1: Product: syz [ 2251.244177][ T25] usb 1-1: Manufacturer: syz [ 2251.244192][ T25] usb 1-1: SerialNumber: syz [ 2251.306819][ T25] usb 1-1: 3:0 : does not exist [ 2251.306838][ T25] usb 1-1: 3:0 : does not exist [ 2251.508019][ T995] usb 1-1: USB disconnect, device number 5 [ 2251.665445][ T5757] ip_tables: iptables: counters copy to user failed while replacing table [ 2251.735120][ T25] usb 4-1: USB disconnect, device number 40 [ 2252.020098][ T5770] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7792'. [ 2252.124493][ T5774] binder: 5773:5774 ioctl 4018620d 0 returned -22 [ 2252.178801][ T5778] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2253.245947][ T5807] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2254.320401][ T995] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 2254.440722][ T25] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 2254.470616][ T995] usb 4-1: Using ep0 maxpacket: 8 [ 2254.472725][ T995] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2254.474884][ T995] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 2254.474913][ T995] usb 4-1: config 179 has no interface number 0 [ 2254.474962][ T995] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2254.474982][ T995] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2254.475003][ T995] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2254.475022][ T995] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2254.475041][ T995] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2254.475072][ T995] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2254.481619][ T5835] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2254.661197][ T25] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 2254.662223][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2254.662257][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2254.662283][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2254.664856][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2254.664885][ T25] usb 3-1: Product: syz [ 2254.664903][ T25] usb 3-1: Manufacturer: syz [ 2254.664920][ T25] usb 3-1: SerialNumber: syz [ 2254.668802][ T25] usb 3-1: config 0 descriptor?? [ 2254.826772][ T973] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input128 [ 2254.928005][ T25] adutux 3-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 2254.943153][ T25] usb 3-1: USB disconnect, device number 38 [ 2254.987859][ T973] usb 4-1: USB disconnect, device number 41 [ 2254.987905][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2254.987940][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2255.804923][ T995] corsair-cpro 0003:1B1C:0C10.006A: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 2255.836270][ T5897] [ 2255.838665][ T5897] ================================ [ 2255.843805][ T5897] WARNING: inconsistent lock state [ 2255.849020][ T5897] syzkaller #0 Tainted: G L [ 2255.855029][ T5897] -------------------------------- [ 2255.860253][ T5897] inconsistent {IN-SOFTIRQ-W} -> {SOFTIRQ-ON-W} usage. [ 2255.867216][ T5897] syz.0.7850/5897 [HC0[0]:SC0[0]:HE1:SE1] takes: [ 2255.873627][ T5897] ffff888084953868 (&ccp->wait_input_report_lock){+.?.}-{3:3}, at: ccp_raw_event+0x51/0x110 [ 2255.883901][ T5897] {IN-SOFTIRQ-W} state was registered at: [ 2255.889673][ T5897] lock_acquire+0x115/0x350 [ 2255.894314][ T5897] _raw_spin_lock+0x2e/0x40 [ 2255.898955][ T5897] ccp_raw_event+0x51/0x110 [ 2255.903602][ T5897] __hid_input_report+0x41c/0x580 [ 2255.908766][ T5897] hid_irq_in+0x492/0x710 [ 2255.913250][ T5897] __usb_hcd_giveback_urb+0x378/0x540 [ 2255.918766][ T5897] dummy_timer+0xa91/0x4cc0 [ 2255.923411][ T5897] __hrtimer_run_queues+0x3bc/0xa10 [ 2255.928746][ T5897] hrtimer_run_softirq+0x1e3/0x2e0 [ 2255.934005][ T5897] handle_softirqs+0x226/0x860 [ 2255.938891][ T5897] __irq_exit_rcu+0xcb/0x220 [ 2255.943652][ T5897] irq_exit_rcu+0x9/0x30 [ 2255.948011][ T5897] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2255.953796][ T5897] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2255.959914][ T5897] finish_task_switch+0x413/0xc60 [ 2255.965068][ T5897] __schedule+0x17e3/0x58f0 [ 2255.969701][ T5897] preempt_schedule_irq+0x4b/0x90 [ 2255.974846][ T5897] irqentry_exit+0x14f/0x920 [ 2255.979557][ T5897] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2255.985127][ T5897] __import_iovec+0x466/0x7e0 [ 2255.989921][ T5897] import_iovec+0x73/0xa0 [ 2255.994371][ T5897] ___sys_recvmsg+0x4c9/0x5a0 [ 2255.999157][ T5897] do_recvmmsg+0x31a/0x7f0 [ 2256.003675][ T5897] __x64_sys_recvmmsg+0x198/0x250 [ 2256.008819][ T5897] do_syscall_64+0x166/0x520 [ 2256.013526][ T5897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2256.019526][ T5897] irq event stamp: 43 [ 2256.023543][ T5897] hardirqs last enabled at (43): [] _raw_spin_unlock_irqrestore+0x30/0x80 [ 2256.033725][ T5897] hardirqs last disabled at (42): [] _raw_spin_lock_irqsave+0x1a/0x60 [ 2256.043538][ T5897] softirqs last enabled at (0): [] copy_process+0xd16/0x4400 [ 2256.052661][ T5897] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 2256.059850][ T5897] [ 2256.059850][ T5897] other info that might help us debug this: [ 2256.067932][ T5897] Possible unsafe locking scenario: [ 2256.067932][ T5897] [ 2256.075404][ T5897] CPU0 [ 2256.078707][ T5897] ---- [ 2256.082075][ T5897] lock(&ccp->wait_input_report_lock); [ 2256.087664][ T5897] [ 2256.091147][ T5897] lock(&ccp->wait_input_report_lock); [ 2256.096976][ T5897] [ 2256.096976][ T5897] *** DEADLOCK *** [ 2256.096976][ T5897] [ 2256.105226][ T5897] locks held by syz.0.7850/5897: 1, last CPU#0: [ 2256.111503][ T5897] #0: ffff88806a3e8060 (&uhid->devlock){+.+.}-{4:4}, at: uhid_char_write+0x7a/0xc90 [ 2256.121084][ T5897] [ 2256.121084][ T5897] stack backtrace: [ 2256.127097][ T5897] CPU: 0 UID: 0 PID: 5897 Comm: syz.0.7850 Tainted: G L syzkaller #0 PREEMPT(full) [ 2256.137989][ T5897] Tainted: [L]=SOFTLOCKUP [ 2256.142338][ T5897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2256.152437][ T5897] Call Trace: [ 2256.155733][ T5897] [ 2256.158685][ T5897] dump_stack_lvl+0xe8/0x150 [ 2256.163311][ T5897] print_usage_bug+0x28c/0x2e0 [ 2256.168138][ T5897] valid_state+0xbe/0xf0 [ 2256.172406][ T5897] mark_lock_irq+0x36/0x380 [ 2256.176938][ T5897] ? __lock_acquire+0x747/0x2de0 [ 2256.181899][ T5897] mark_lock+0x117/0x190 [ 2256.186175][ T5897] __lock_acquire+0xaab/0x2de0 [ 2256.190962][ T5897] ? __lock_acquire+0x747/0x2de0 [ 2256.195940][ T5897] lock_acquire+0x115/0x350 [ 2256.200465][ T5897] ? ccp_raw_event+0x51/0x110 [ 2256.205177][ T5897] _raw_spin_lock+0x2e/0x40 [ 2256.209805][ T5897] ? ccp_raw_event+0x51/0x110 [ 2256.214533][ T5897] ccp_raw_event+0x51/0x110 [ 2256.219072][ T5897] __hid_input_report+0x41c/0x580 [ 2256.224122][ T5897] ? __pfx_ccp_raw_event+0x10/0x10 [ 2256.229260][ T5897] uhid_dev_input2+0xbc/0x150 [ 2256.233971][ T5897] uhid_char_write+0x4a1/0xc90 [ 2256.238771][ T5897] ? __pfx_uhid_char_write+0x10/0x10 [ 2256.244086][ T5897] vfs_write+0x296/0xba0 [ 2256.248360][ T5897] ? __pfx_vfs_write+0x10/0x10 [ 2256.253141][ T5897] ? __fget_files+0x2a/0x420 [ 2256.257763][ T5897] ? __fget_files+0x2a/0x420 [ 2256.262387][ T5897] ? __fget_files+0x3a2/0x420 [ 2256.267096][ T5897] ? __fget_files+0x2a/0x420 [ 2256.271715][ T5897] ksys_write+0x150/0x270 [ 2256.276076][ T5897] ? __pfx_ksys_write+0x10/0x10 [ 2256.280947][ T5897] ? __pfx_kcov_ioctl+0x10/0x10 [ 2256.285822][ T5897] do_syscall_64+0x166/0x520 [ 2256.290440][ T5897] ? trace_irq_disable+0x3b/0x140 [ 2256.295489][ T5897] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2256.301597][ T5897] ? clear_bhb_loop+0x70/0xc0 [ 2256.306296][ T5897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2256.312211][ T5897] RIP: 0033:0x7f6eb8d9e199 [ 2256.316646][ T5897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2256.336279][ T5897] RSP: 002b:00007f6eb9c2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2256.344726][ T5897] RAX: ffffffffffffffda RBX: 00007f6eb9026090 RCX: 00007f6eb8d9e199 [ 2256.352814][ T5897] RDX: 0000000000000012 RSI: 0000200000000500 RDI: 0000000000000003 [ 2256.360840][ T5897] RBP: 00007f6eb8e350b8 R08: 0000000000000000 R09: 0000000000000000 [ 2256.368864][ T5897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2256.376863][ T5897] R13: 00007f6eb9026128 R14: 00007f6eb9026090 R15: 00007f6eb914fa48 [ 2256.384885][ T5897] [ 2256.412560][ T995] corsair-cpro 0003:1B1C:0C10.006A: probe with driver corsair-cpro failed with error -71 [ 2256.450263][ T973] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 2256.600425][ T973] usb 2-1: Using ep0 maxpacket: 16 [ 2256.601541][ T973] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2256.602597][ T973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2256.602619][ T973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2256.602635][ T973] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2256.602664][ T973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2256.604071][ T973] usb 2-1: config 0 descriptor?? [ 2257.010612][ T973] microsoft 0003:045E:07DA.006B: unknown main item tag 0x0 [ 2257.011374][ T973] microsoft 0003:045E:07DA.006B: unknown main item tag 0x0 [ 2257.011406][ T973] microsoft 0003:045E:07DA.006B: unknown main item tag 0x0 [ 2257.011435][ T973] microsoft 0003:045E:07DA.006B: unknown main item tag 0x0 [ 2257.011463][ T973] microsoft 0003:045E:07DA.006B: unknown main item tag 0x0 [ 2257.011492][ T973] microsoft 0003:045E:07DA.006B: unknown main item tag 0x0 [ 2257.011520][ T973] microsoft 0003:045E:07DA.006B: unknown main item tag 0x0 [ 2257.011547][ T973] microsoft 0003:045E:07DA.006B: unknown main item tag 0x0 [ 2257.011575][ T973] microsoft 0003:045E:07DA.006B: unknown main item tag 0x0 [ 2257.015170][ T973] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.006B/input/input129 [ 2257.101368][ T973] microsoft 0003:045E:07DA.006B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 2257.213196][ T25] usb 2-1: USB disconnect, device number 48