last executing test programs: 8m53.926100971s ago: executing program 3 (id=1759): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x89) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd02003200030030000000600000000028290081e949b93897bc3b0000000000007d01ff0200"/53], 0xfdef) 8m53.480108923s ago: executing program 3 (id=1761): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231306080003e7e036042a000827020000008304000000"], 0x0}, 0x0) 8m51.9000414s ago: executing program 3 (id=1768): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r1 = syz_open_pts(r0, 0x141601) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r1, 0x5404, 0x0) 8m50.963628525s ago: executing program 3 (id=1773): mkdir(&(0x7f00000022c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x2) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x8afa89, 0x0) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0xa6d214, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x24000, 0x0) 8m50.902577845s ago: executing program 3 (id=1774): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000140)={0x40, 0x8, 0x49, "aacf154e03e94e03ad3b33c49bb1ed5cf678c0963261b893bdbbefae56a98fbb8b3c86ee443dd90bd860cb2140c560b96316fab2b2eced7938c121b304fc65f452cfe711778a594b9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8m50.520408137s ago: executing program 3 (id=1776): openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) socket(0xa, 0x3, 0x4) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES8, @ANYRES16=r1, @ANYRES16=r5], 0x0) 8m50.225139369s ago: executing program 32 (id=1776): openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) socket(0xa, 0x3, 0x4) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES8, @ANYRES16=r1, @ANYRES16=r5], 0x0) 4.582376388s ago: executing program 0 (id=5900): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="99095e6832c7a6c895793b839cda7493dca72b3b5367a678a054efa01d6fd1bf659cedd9410ff7809777a74ed6b59fa4aac3fd392eb29196537604f9703e98225d9a0f304604d65119ca5f617c79df867f5f6332a3e1dbd6629d85b056531cec0d956fa4", 0x64}], 0x1, 0x0, 0x0, 0x40}], 0x1, 0x8000) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000000000000000004c3a000040000000000100000000200002000a00000000000000fe880000000000000000000000000001000000000d0001007564703a"], 0x6c}}, 0x0) 4.493419078s ago: executing program 0 (id=5901): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r1) sendmsg$NLBL_MGMT_C_ADDDEF(r0, 0x0, 0x40844) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000600)='m ', 0x2}], 0x1}, 0x4000005) getgid() preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) recvmsg$unix(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40012003) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x5, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 3.89851043s ago: executing program 1 (id=5907): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0600000004000000990500000a"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 3.806474281s ago: executing program 1 (id=5908): sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x1, 0x9, 0x401}, 0x14}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c000780"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 3.555963472s ago: executing program 1 (id=5911): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000080)={0x40, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0xa}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000810}, 0x40844) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000600)='m ', 0x2}], 0x1}, 0x4000005) getgid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40012003) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r5}, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x54, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x6}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x100}]}, 0x54}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) 3.518983863s ago: executing program 0 (id=5913): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x2a}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x40000000000000, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10000, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x7600) 3.409514543s ago: executing program 1 (id=5914): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000002"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0xf, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000a00)={r3, &(0x7f0000000800), 0x0}, 0x20) 3.303356593s ago: executing program 4 (id=5916): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000000180)=[{&(0x7f0000001380)="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", 0xc08}, {&(0x7f0000001240)="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", 0x119}], 0x2, &(0x7f00000010c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x29, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3a}}], 0x48}, 0x0) 3.206421114s ago: executing program 1 (id=5917): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x10) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000580), &(0x7f00000005c0)=0x30) 3.194577214s ago: executing program 4 (id=5918): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{r0}, 0x0, &(0x7f00000013c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.101924814s ago: executing program 4 (id=5919): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0xb, "08405af3"}, @local=@item_4]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0xd01c4813, &(0x7f0000000000)={0x3, 0x200, 0x0, 0x0, 0x8, 0x410}) 2.956560195s ago: executing program 1 (id=5920): socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000001040)='net/ip6_mr_vif\x00') socket$netlink(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x30, 0xde, 0xf, 0x10, 0x5dc, 0x1, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x14, [{{0x9, 0x4, 0xa1, 0x5, 0x0, 0x96, 0x91, 0x3a}}]}}]}}, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x8e, &(0x7f0000001140)=ANY=[], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0x1, 0x6) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 2.922547996s ago: executing program 0 (id=5921): sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x1, 0x9, 0x401}, 0x14}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c000780"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 2.879553446s ago: executing program 0 (id=5922): socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x5, 0x6, "78ae0b", 0x4c, 0x2f, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[@fragment={0x2c, 0x0, 0x1, 0x1, 0x0, 0x4, 0x64}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x4, {{0x1, 0x1, 0x2, 0x2, 0x1, 0x0, 0x7, 0x1a}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x1, {{0x4, 0x2, 0xd, 0x1, 0x0, 0x1, 0x3}, 0x2, {0x7d70, 0x1, 0x2, 0x9, 0x0, 0x0, 0x3, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 2.798330166s ago: executing program 0 (id=5923): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r1) sendmsg$NLBL_MGMT_C_ADDDEF(r0, 0x0, 0x40844) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000600)='m ', 0x2}], 0x1}, 0x4000005) getgid() preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) recvmsg$unix(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40012003) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x5, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.85290335s ago: executing program 5 (id=5931): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x2a}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x40000000000000, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10000, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x7600) 1.651586581s ago: executing program 2 (id=5932): sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x54, 0x1, 0x9, 0x401, 0x0, 0x0, {}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_QUEUE_NUM={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c000780"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 1.426905062s ago: executing program 2 (id=5933): socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x5, 0x6, "78ae0b", 0x4c, 0x2f, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[@fragment={0x2c, 0x0, 0x1, 0x1, 0x0, 0x4, 0x64}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x4, {{0x1, 0x1, 0x2, 0x2, 0x1, 0x0, 0x7, 0x1a}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x1, {{0x4, 0x2, 0xd, 0x1, 0x0, 0x1, 0x3}, 0x2, {0x7d70, 0x1, 0x2, 0x9, 0x0, 0x0, 0x3, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 1.300462873s ago: executing program 2 (id=5934): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000009c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c, 0x0}}], 0x1, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000180)={0x6d, 0x2, 0x2, 0x8, r3}, 0x10) 1.230271403s ago: executing program 4 (id=5935): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000080)={0x40, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0xa}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000810}, 0x40844) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000600)='m ', 0x2}], 0x1}, 0x4000005) getgid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40012003) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r5}, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x54, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x6}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x100}]}, 0x54}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) 1.000454215s ago: executing program 4 (id=5936): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x4}}}}}}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000100003eeffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="0001000020010000300012800b0001006d61637365630000200002800c0004000200000100c28000050003000e"], 0x50}}, 0x0) 978.495735ms ago: executing program 5 (id=5937): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev, [], [], 'batadv0\x00', 'lo\x00'}, 0x0, 0xf0, 0x138, 0x0, {0x0, 0x4c00}, [@common=@dst={{0x48}, {0x0, 0x0, 0xbce0257315b3f3d6}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 782.258406ms ago: executing program 5 (id=5938): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000002"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0xf, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000a00)={r3, &(0x7f0000000800), 0x0}, 0x20) 766.829576ms ago: executing program 5 (id=5939): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000000180)=[{&(0x7f0000001380)="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", 0xe09}, {&(0x7f0000001240)="9d7fcf3efc63f4a6a55dba8b4726d7ccaf8a207100e69cfac4377876021d259311d6059f96bd206d4776268ed2a92432e5af7124b22ad5dfc600000000037466d0763e3599c5f14eac32d534bcb534265f6e846284b1ee5bff0ea57d1014756922ca9194dc133a583be05964cfc9f5889bda8261c1040b4aba950c3be35031c36bbbd986ef0f0bc946f95ba82f898595e21881608a6c98d416e4185c957ddb197092ff794c60a90a05651eee7940028f10e91a44001576117f38c877b5ccfc4e8e528bfb593b846378120daca9a58895c2bea3fcdd5cfeab0b0cb322c57553fefb34bf387a506e769689f963a9bd7fa57b0fe2ec54808f458abfb127e37e469a0bd19ae14d294f1f9c3c8caaf2defd6edbbc373b8b7fb91a10", 0x119}], 0x2, &(0x7f00000010c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x29, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3a}}], 0x48}, 0x0) 674.593796ms ago: executing program 5 (id=5940): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{r0}, 0x0, &(0x7f00000013c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 565.792957ms ago: executing program 5 (id=5941): sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x28, 0x6, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x30008080}, 0x20048104) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="00000000000000eaffffff000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) getuid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 276.764328ms ago: executing program 2 (id=5942): sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x54, 0x1, 0x9, 0x401, 0x0, 0x0, {}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_QUEUE_NUM={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c000780"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 141.804059ms ago: executing program 2 (id=5943): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="ad56b6c5820fae9d6d7eb338402b2189bc915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) 31.009639ms ago: executing program 4 (id=5944): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0xb, "08405af3"}, @local=@item_4]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0xd01c4813, &(0x7f0000000000)={0x3, 0x200, 0x0, 0x0, 0x8, 0x410}) 0s ago: executing program 2 (id=5945): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000080)={0x40, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0xa}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000810}, 0x40844) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000600)='m ', 0x2}], 0x1}, 0x4000005) getgid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40012003) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r5}, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x54, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x6}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x100}]}, 0x54}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) kernel console output (not intermixed with test programs): 795] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 832.621192][ T4795] usb 1-1: config 0 interface 41 has no altsetting 0 [ 832.637495][ T4795] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 832.656795][ T4795] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.667115][ T4795] usb 1-1: Product: syz [ 832.694074][ T4795] usb 1-1: Manufacturer: syz [ 832.700356][ T4388] usb 2-1: device descriptor read/64, error -71 [ 832.707949][ T4795] usb 1-1: SerialNumber: syz [ 832.727857][ T4795] usb 1-1: config 0 descriptor?? [ 832.734649][T18826] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 832.745282][ T4795] CoreChips: probe of 1-1:0.41 failed with error -22 [ 832.773623][T18824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 832.788446][T18824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 832.798668][ T4264] Bluetooth: hci2: Unknown advertising packet type: 0x19 [ 832.798700][ T4264] Bluetooth: hci2: Unknown advertising packet type: 0x1f [ 832.806077][ T4264] Bluetooth: hci2: Unknown advertising packet type: 0x31 [ 832.813808][ T4264] Bluetooth: hci2: Malformed LE Event: 0x0d [ 832.820154][ T4795] usb 5-1: USB disconnect, device number 112 [ 832.821983][ T4388] usb usb2-port1: attempt power cycle [ 833.260460][ T4388] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 833.301141][ T4388] usb 2-1: device descriptor read/8, error -71 [ 833.590510][ T4388] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 833.631262][ T4388] usb 2-1: device descriptor read/8, error -71 [ 833.761652][ T4388] usb usb2-port1: unable to enumerate USB device [ 834.000407][ T9458] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 834.190475][ T9458] usb 5-1: Using ep0 maxpacket: 16 [ 834.197790][ T9458] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 834.208262][ T9458] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 834.219120][ T9458] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 834.240410][ T9458] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 834.248449][ T9458] usb 5-1: Manufacturer: syz [ 834.255919][ T9458] usb 5-1: config 0 descriptor?? [ 834.260889][ T4388] usb 3-1: USB disconnect, device number 4 [ 834.440655][ T4389] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 834.622948][ T4389] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 834.634927][ T4389] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 834.655737][ T4389] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 834.673919][ T4389] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 834.683913][ T4389] usb 6-1: Manufacturer: syz [ 834.700680][ T4389] usb 6-1: config 0 descriptor?? [ 834.800535][ T4389] rc_core: IR keymap rc-hauppauge not found [ 834.806635][ T4389] Registered IR keymap rc-empty [ 834.815246][ T4389] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 834.829049][ T4389] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input104 [ 835.080377][ T4795] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 835.118578][ C0] igorplugusb 6-1:0.0: Error: urb status = -32 [ 835.126404][ T4389] usb 6-1: USB disconnect, device number 31 [ 835.191259][ T3582] usb 1-1: USB disconnect, device number 102 [ 835.271405][ T4795] usb 2-1: Using ep0 maxpacket: 16 [ 835.282762][ T4795] usb 2-1: config 0 has an invalid interface number: 161 but max is 0 [ 835.300117][ T4795] usb 2-1: config 0 has no interface number 0 [ 835.314446][ T4795] usb 2-1: config 0 interface 161 has no altsetting 0 [ 835.331364][ T4795] usb 2-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 835.350404][ T4795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.358666][ T4795] usb 2-1: Product: syz [ 835.363232][ T4795] usb 2-1: Manufacturer: syz [ 835.369098][ T4795] usb 2-1: SerialNumber: syz [ 835.388668][ T4795] usb 2-1: config 0 descriptor?? [ 835.418598][ T4795] ums-jumpshot 2-1:0.161: USB Mass Storage device detected [ 835.452316][ T4795] ums-jumpshot 2-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 835.624035][T18868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.633036][T18868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.659271][ T3582] usb 2-1: USB disconnect, device number 121 [ 836.490388][ T3582] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 836.706913][ T3582] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 836.736477][ T3582] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 836.750546][ T3582] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 836.759682][ T3582] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.785843][ T126] usb 5-1: USB disconnect, device number 113 [ 836.799826][ T3582] usb 2-1: config 0 descriptor?? [ 836.863687][ T4795] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 837.020538][ T4795] usb 1-1: device descriptor read/64, error -71 [ 837.302786][ T4795] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 837.460696][ T4795] usb 1-1: device descriptor read/64, error -71 [ 837.520395][ T126] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 837.580573][ T4795] usb usb1-port1: attempt power cycle [ 837.700633][ T126] usb 6-1: Using ep0 maxpacket: 16 [ 837.707929][ T126] usb 6-1: config 0 has an invalid interface number: 161 but max is 0 [ 837.716693][ T126] usb 6-1: config 0 has no interface number 0 [ 837.723233][ T126] usb 6-1: config 0 interface 161 has no altsetting 0 [ 837.732714][ T126] usb 6-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 837.743319][ T126] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.751919][ T126] usb 6-1: Product: syz [ 837.757164][ T126] usb 6-1: Manufacturer: syz [ 837.762015][ T126] usb 6-1: SerialNumber: syz [ 837.768956][ T126] usb 6-1: config 0 descriptor?? [ 837.776834][ T126] ums-jumpshot 6-1:0.161: USB Mass Storage device detected [ 837.786746][ T126] ums-jumpshot 6-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 837.979952][T18919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 837.990961][ T4795] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 837.999579][T18919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.010011][ T4264] Bluetooth: hci1: Unknown advertising packet type: 0x19 [ 838.010091][ T4264] Bluetooth: hci1: Unknown advertising packet type: 0x1f [ 838.017880][ T4264] Bluetooth: hci1: Unknown advertising packet type: 0x31 [ 838.025901][ T4264] Bluetooth: hci1: Malformed LE Event: 0x0d [ 838.027060][ T9458] usb 6-1: USB disconnect, device number 32 [ 838.046818][ T4795] usb 1-1: device descriptor read/8, error -71 [ 838.321188][ T4795] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 838.361965][ T4795] usb 1-1: device descriptor read/8, error -71 [ 838.500692][ T4795] usb usb1-port1: unable to enumerate USB device [ 839.276292][ T4389] usb 2-1: USB disconnect, device number 122 [ 839.695107][T18969] netlink: 'syz.2.5113': attribute type 1 has an invalid length. [ 839.761415][T18969] 8021q: adding VLAN 0 to HW filter on device bond1 [ 839.860588][T18980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5115'. [ 839.902784][T18978] tipc: Started in network mode [ 839.908146][T18978] tipc: Node identity 0000000000004c3a0000400000000001, cluster identity 4711 [ 839.935256][T18978] tipc: Enabling of bearer rejected, failed to enable media [ 840.070376][ T4389] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 840.200376][ T3582] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 840.271013][ T4389] usb 6-1: Using ep0 maxpacket: 16 [ 840.278005][ T4389] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 840.287974][ T4389] usb 6-1: config 0 has no interface number 0 [ 840.294332][ T4389] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 840.304448][ T4389] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 840.315811][ T4389] usb 6-1: config 0 interface 41 has no altsetting 0 [ 840.326752][ T4389] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 840.336273][ T4389] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.344519][ T4389] usb 6-1: Product: syz [ 840.349118][ T4389] usb 6-1: Manufacturer: syz [ 840.354069][ T4389] usb 6-1: SerialNumber: syz [ 840.361425][ T4389] usb 6-1: config 0 descriptor?? [ 840.367150][T18977] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 840.376205][T18977] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 840.387945][ T3582] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 840.402998][ T3582] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 840.428532][ T3582] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 840.445537][ T3582] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.461508][ T3582] usb 3-1: config 0 descriptor?? [ 840.550307][ T9458] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 840.604270][T18977] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 840.611934][T18977] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 840.700459][ T9458] usb 5-1: device descriptor read/64, error -71 [ 840.970403][ T9458] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 841.027386][ T4389] CoreChips: probe of 6-1:0.41 failed with error -32 [ 841.130324][ T9458] usb 5-1: device descriptor read/64, error -71 [ 841.250948][ T9458] usb usb5-port1: attempt power cycle [ 841.670316][ T9458] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 841.701157][ T9458] usb 5-1: device descriptor read/8, error -71 [ 841.970327][ T9458] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 842.011015][ T9458] usb 5-1: device descriptor read/8, error -71 [ 842.130502][ T9458] usb usb5-port1: unable to enumerate USB device [ 842.300307][ T4389] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 842.504202][ T4389] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 842.512877][ T4389] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 842.524023][ T4389] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 842.533499][ T4389] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 842.541839][ T4389] usb 2-1: Manufacturer: syz [ 842.548253][ T4389] usb 2-1: config 0 descriptor?? [ 842.643499][ T4389] rc_core: IR keymap rc-hauppauge not found [ 842.659943][ T4389] Registered IR keymap rc-empty [ 842.665695][ T4389] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 842.684144][ T4389] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input105 [ 842.726439][T19015] netlink: 'syz.0.5128': attribute type 1 has an invalid length. [ 842.787467][T19015] 8021q: adding VLAN 0 to HW filter on device bond3 [ 842.837892][ T9458] usb 6-1: USB disconnect, device number 33 [ 842.896540][T19019] IPv6: sit1: Disabled Multicast RS [ 842.951823][ T4389] usb 3-1: USB disconnect, device number 5 [ 842.966884][ C0] igorplugusb 2-1:0.0: Error: urb status = -32 [ 842.968082][ T4795] usb 2-1: USB disconnect, device number 123 [ 842.973072][ C0] igorplugusb 2-1:0.0: submit urb failed: -19 [ 843.094841][T19025] tipc: Started in network mode [ 843.104459][T19025] tipc: Node identity 0000000000004c3a0000400000000001, cluster identity 4711 [ 843.124283][T19025] tipc: Enabling of bearer rejected, failed to enable media [ 843.619413][T19045] netlink: 'syz.1.5140': attribute type 1 has an invalid length. [ 843.644996][T19045] 8021q: adding VLAN 0 to HW filter on device bond4 [ 843.728748][ T4795] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 843.896318][T19052] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5143'. [ 843.920349][ T4795] usb 5-1: Using ep0 maxpacket: 16 [ 843.927710][ T4795] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 843.945097][ T4795] usb 5-1: config 0 has no interface number 0 [ 843.960307][ T4795] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 843.980403][ T4795] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 844.015858][ T4795] usb 5-1: config 0 interface 41 has no altsetting 0 [ 844.033487][ T4795] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 844.053025][ T4795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.061421][ T4795] usb 5-1: Product: syz [ 844.065750][ T4795] usb 5-1: Manufacturer: syz [ 844.070571][ T4795] usb 5-1: SerialNumber: syz [ 844.082312][ T4795] usb 5-1: config 0 descriptor?? [ 844.088686][T19042] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 844.101521][T19042] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 844.177173][T19060] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5147'. [ 844.181114][ T22] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 844.270791][ T4389] usb 2-1: new full-speed USB device number 124 using dummy_hcd [ 844.329431][T19042] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 844.345882][T19042] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 844.392279][ T22] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 844.402899][ T22] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 844.416442][ T22] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 844.427129][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.438155][ T22] usb 3-1: config 0 descriptor?? [ 844.440432][ T4389] usb 2-1: device descriptor read/64, error -71 [ 844.455005][ T22] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 844.520511][ T3582] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 844.700438][ T3582] usb 6-1: Using ep0 maxpacket: 32 [ 844.709694][ T3582] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 844.727250][ T3582] usb 6-1: config 0 has no interfaces? [ 844.733043][ T4389] usb 2-1: new full-speed USB device number 125 using dummy_hcd [ 844.740931][ T3582] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 844.750294][ T3582] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.759788][ T4795] CoreChips: probe of 5-1:0.41 failed with error -32 [ 844.761386][ T3582] usb 6-1: config 0 descriptor?? [ 844.912380][ T4389] usb 2-1: device descriptor read/64, error -71 [ 845.030613][ T4389] usb usb2-port1: attempt power cycle [ 845.450629][ T4389] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 845.502317][ T4389] usb 2-1: device descriptor read/8, error -71 [ 845.790923][ T4389] usb 2-1: new full-speed USB device number 127 using dummy_hcd [ 845.841101][ T4389] usb 2-1: device descriptor read/8, error -71 [ 845.971218][ T4389] usb usb2-port1: unable to enumerate USB device [ 846.370306][T19086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5156'. [ 846.464905][ T4389] usb 5-1: USB disconnect, device number 118 [ 846.685611][T19093] device batadv0 entered promiscuous mode [ 846.693503][T19093] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 846.703509][T19093] device batadv0 left promiscuous mode [ 846.838060][ T3582] usb 3-1: USB disconnect, device number 6 [ 847.303883][ T3582] usb 6-1: USB disconnect, device number 34 [ 847.504547][T19115] netlink: 'syz.4.5169': attribute type 1 has an invalid length. [ 847.531044][T19115] 8021q: adding VLAN 0 to HW filter on device bond3 [ 847.750656][ T4389] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 847.850442][ T4795] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 847.960581][ T4389] usb 2-1: Using ep0 maxpacket: 16 [ 847.968759][ T4389] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 847.980606][ T4389] usb 2-1: config 0 has no interface number 0 [ 847.986749][ T4389] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 847.998562][ T4389] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 848.013707][ T4389] usb 2-1: config 0 interface 41 has no altsetting 0 [ 848.026544][ T4389] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 848.030345][ T4795] usb 5-1: Using ep0 maxpacket: 16 [ 848.036025][ T4389] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.048238][ T4795] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 848.049136][ T4389] usb 2-1: Product: syz [ 848.063688][ T4389] usb 2-1: Manufacturer: syz [ 848.068399][ T4389] usb 2-1: SerialNumber: syz [ 848.069388][ T4795] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 848.083313][ T4389] usb 2-1: config 0 descriptor?? [ 848.090174][T19112] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 848.099245][T19112] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 848.116419][ T4795] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 848.138577][ T4795] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 848.147985][ T4795] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 848.162504][ T4795] usb 5-1: Manufacturer: syz [ 848.169096][ T4795] usb 5-1: config 0 descriptor?? [ 848.280373][ T22] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 848.313223][T19112] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 848.321027][T19112] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 848.473103][ T22] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 848.483619][ T22] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 848.496729][ T22] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 848.506139][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.528399][ T22] usb 3-1: config 0 descriptor?? [ 848.538220][ T22] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 848.620442][ T4795] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 848.748567][ T4389] CoreChips: probe of 2-1:0.41 failed with error -32 [ 848.780439][ T4795] usb 6-1: device descriptor read/64, error -71 [ 849.050481][ T4795] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 849.200388][ T4795] usb 6-1: device descriptor read/64, error -71 [ 849.320512][ T4795] usb usb6-port1: attempt power cycle [ 849.730396][ T4795] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 849.771278][ T4795] usb 6-1: device descriptor read/8, error -71 [ 850.040408][ T4795] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 850.081263][ T4795] usb 6-1: device descriptor read/8, error -71 [ 850.200516][ T4795] usb usb6-port1: unable to enumerate USB device [ 850.470903][ T4388] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 850.494494][ T4795] usb 2-1: USB disconnect, device number 2 [ 850.618596][ T22] usb 5-1: USB disconnect, device number 119 [ 850.674333][ T4388] usb 1-1: Using ep0 maxpacket: 32 [ 850.681665][ T4388] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 850.698616][ T4388] usb 1-1: config 0 has no interfaces? [ 850.706991][ T4388] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 850.728157][ T4388] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.738591][ T4388] usb 1-1: config 0 descriptor?? [ 850.975431][ T4388] usb 3-1: USB disconnect, device number 7 [ 851.760327][ T4389] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 851.972774][ T4389] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 851.984910][ T4389] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 851.995927][ T4388] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 852.015309][ T4389] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 852.033410][ T4389] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 852.048429][ T4389] usb 6-1: Manufacturer: syz [ 852.061183][ T4389] usb 6-1: config 0 descriptor?? [ 852.190425][ T4388] usb 2-1: Using ep0 maxpacket: 16 [ 852.200971][ T4388] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 852.236494][ T4388] usb 2-1: config 0 has no interface number 0 [ 852.243219][ T4389] rc_core: IR keymap rc-hauppauge not found [ 852.249775][ T4389] Registered IR keymap rc-empty [ 852.265427][ T4389] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 852.276580][ T4388] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 852.292255][ T4388] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 852.305126][ T4389] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input106 [ 852.316602][ T4388] usb 2-1: config 0 interface 41 has no altsetting 0 [ 852.339141][ T4388] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 852.358945][ T4388] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.376282][ T4388] usb 2-1: Product: syz [ 852.386843][ T4388] usb 2-1: Manufacturer: syz [ 852.401910][ T4388] usb 2-1: SerialNumber: syz [ 852.434788][ T4388] usb 2-1: config 0 descriptor?? [ 852.450617][T19170] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 852.457948][T19170] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 852.691324][T19170] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 852.699136][T19170] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 852.732638][ T9458] usb 6-1: USB disconnect, device number 39 [ 852.820429][ T4795] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 852.890300][ T4389] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 853.002282][ T4795] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 853.017920][ T4795] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 853.032265][ T4795] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 853.042738][ T4795] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.053993][ T4795] usb 5-1: config 0 descriptor?? [ 853.060559][ T4389] usb 3-1: device descriptor read/64, error -71 [ 853.063402][ T4795] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 853.111969][ T4388] CoreChips: probe of 2-1:0.41 failed with error -32 [ 853.196754][ T4388] usb 1-1: USB disconnect, device number 107 [ 853.356245][ T4389] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 853.520341][ T4389] usb 3-1: device descriptor read/64, error -71 [ 853.640835][ T4389] usb usb3-port1: attempt power cycle [ 854.060563][ T4389] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 854.106196][ T4389] usb 3-1: device descriptor read/8, error -71 [ 854.404818][ T4389] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 854.451030][ T4389] usb 3-1: device descriptor read/8, error -71 [ 854.585972][ T4389] usb usb3-port1: unable to enumerate USB device [ 854.732224][ T9458] usb 2-1: USB disconnect, device number 3 [ 855.010325][ T4795] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 855.202942][ T4795] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 855.215178][ T4795] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 855.239521][ T4795] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 855.255924][ T4795] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 855.266458][ T4795] usb 1-1: Manufacturer: syz [ 855.282640][ T4795] usb 1-1: config 0 descriptor?? [ 855.370352][ T4795] rc_core: IR keymap rc-hauppauge not found [ 855.376546][ T4795] Registered IR keymap rc-empty [ 855.383700][ T4795] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 855.397858][ T4795] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input107 [ 855.574077][ T9458] usb 5-1: USB disconnect, device number 120 [ 855.897910][ T126] usb 1-1: USB disconnect, device number 108 [ 856.390318][ T9458] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 856.440422][ T4389] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 856.600278][ T9458] usb 5-1: Using ep0 maxpacket: 16 [ 856.613945][ T9458] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 856.630315][ T9458] usb 5-1: config 0 has no interface number 0 [ 856.636463][ T9458] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 856.646923][ T9458] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 856.650295][ T4389] usb 2-1: Using ep0 maxpacket: 16 [ 856.656963][ T9458] usb 5-1: config 0 interface 41 has no altsetting 0 [ 856.672162][ T9458] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 856.678588][ T4389] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 856.701067][ T9458] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.706772][ T4389] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 856.709089][ T9458] usb 5-1: Product: syz [ 856.709109][ T9458] usb 5-1: Manufacturer: syz [ 856.709127][ T9458] usb 5-1: SerialNumber: syz [ 856.735583][ T4389] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 856.747088][ T9458] usb 5-1: config 0 descriptor?? [ 856.758946][T19247] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 856.769839][ T4389] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 856.775680][T19247] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 856.790492][ T4389] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 856.810255][ T4389] usb 2-1: Manufacturer: syz [ 856.823198][ T4389] usb 2-1: config 0 descriptor?? [ 856.910466][ T4388] usb 1-1: new full-speed USB device number 109 using dummy_hcd [ 857.011877][T19247] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 857.027958][T19247] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 857.080330][ T4388] usb 1-1: device descriptor read/64, error -71 [ 857.250352][ T4389] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 857.350633][ T4388] usb 1-1: new full-speed USB device number 110 using dummy_hcd [ 857.439776][ T9458] CoreChips: probe of 5-1:0.41 failed with error -32 [ 857.458087][ T4389] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 857.468617][ T4389] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 857.482274][ T4389] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 857.491568][ T4389] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.504323][ T4389] usb 3-1: config 0 descriptor?? [ 857.510405][ T4388] usb 1-1: device descriptor read/64, error -71 [ 857.519880][ T4389] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 857.640640][ T4388] usb usb1-port1: attempt power cycle [ 858.071466][ T4388] usb 1-1: new full-speed USB device number 111 using dummy_hcd [ 858.091612][T19269] netlink: 'syz.5.5229': attribute type 1 has an invalid length. [ 858.111375][ T4388] usb 1-1: device descriptor read/8, error -71 [ 858.118365][T19269] 8021q: adding VLAN 0 to HW filter on device bond3 [ 858.380348][ T4388] usb 1-1: new full-speed USB device number 112 using dummy_hcd [ 858.422456][ T4388] usb 1-1: device descriptor read/8, error -71 [ 858.540794][ T4388] usb usb1-port1: unable to enumerate USB device [ 859.138173][ T9458] usb 5-1: USB disconnect, device number 121 [ 859.186488][ T4388] usb 2-1: USB disconnect, device number 4 [ 859.210739][T19284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5233'. [ 859.548525][T19303] netlink: 'syz.4.5240': attribute type 1 has an invalid length. [ 859.580797][T19303] 8021q: adding VLAN 0 to HW filter on device bond4 [ 859.930351][ T9514] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 860.021442][ T4389] usb 3-1: USB disconnect, device number 12 [ 860.070398][ T4388] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 860.132060][T19332] netlink: 'syz.5.5253': attribute type 1 has an invalid length. [ 860.137229][ T9514] usb 5-1: Using ep0 maxpacket: 16 [ 860.148468][ T9514] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 860.156200][T19332] 8021q: adding VLAN 0 to HW filter on device bond4 [ 860.167451][ T9514] usb 5-1: config 0 has no interface number 0 [ 860.176877][ T9514] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 860.191746][ T9514] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 860.202252][ T9514] usb 5-1: config 0 interface 41 has no altsetting 0 [ 860.211724][ T9514] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 860.222125][ T9514] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.230165][ T9514] usb 5-1: Product: syz [ 860.234618][ T9514] usb 5-1: Manufacturer: syz [ 860.239266][ T9514] usb 5-1: SerialNumber: syz [ 860.253258][ T9514] usb 5-1: config 0 descriptor?? [ 860.260441][T19309] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 860.267687][T19309] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 860.275477][ T4388] usb 1-1: Using ep0 maxpacket: 16 [ 860.283196][ T4388] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 860.293714][ T4394] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 860.302865][ T4388] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 860.314894][ T4388] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 860.329125][ T4388] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 860.338641][ T4388] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 860.346780][ T4388] usb 1-1: Manufacturer: syz [ 860.354004][ T4388] usb 1-1: config 0 descriptor?? [ 860.484774][T19309] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 860.492910][T19309] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 860.500642][ T4394] usb 2-1: Using ep0 maxpacket: 32 [ 860.509170][ T4394] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 860.510477][ T4795] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 860.520226][ T4394] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 860.536694][ T4394] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 860.546151][ T4389] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 860.554389][ T4394] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.567056][ T4394] usb 2-1: config 0 descriptor?? [ 860.720528][ T4389] usb 3-1: device descriptor read/64, error -71 [ 860.722467][ T4795] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 860.736054][ T4795] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 860.750462][ T4795] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 860.759593][ T4795] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 860.767780][ T4795] usb 6-1: Manufacturer: syz [ 860.775084][ T4795] usb 6-1: config 0 descriptor?? [ 860.860574][ T4795] rc_core: IR keymap rc-hauppauge not found [ 860.866552][ T4795] Registered IR keymap rc-empty [ 860.873225][ T4795] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 860.884953][ T4795] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input108 [ 860.907982][ T9514] CoreChips: probe of 5-1:0.41 failed with error -32 [ 860.990411][ T4389] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 861.140652][ T4389] usb 3-1: device descriptor read/64, error -71 [ 861.270675][ T4389] usb usb3-port1: attempt power cycle [ 861.397984][ T4394] usb 6-1: USB disconnect, device number 40 [ 861.690303][ T4389] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 861.720999][ T4389] usb 3-1: device descriptor read/8, error -71 [ 862.000541][ T4389] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 862.042967][ T4389] usb 3-1: device descriptor read/8, error -71 [ 862.170641][ T4389] usb usb3-port1: unable to enumerate USB device [ 862.682814][ T4389] usb 5-1: USB disconnect, device number 122 [ 862.803555][ T4795] usb 1-1: USB disconnect, device number 113 [ 862.894400][T19366] netlink: 'syz.0.5264': attribute type 1 has an invalid length. [ 862.920982][T19366] 8021q: adding VLAN 0 to HW filter on device bond4 [ 863.018663][ T4394] usb 2-1: USB disconnect, device number 5 [ 863.170282][ T4389] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 863.374353][ T4389] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 863.400461][ T4389] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 863.419220][T19386] netlink: 'syz.0.5273': attribute type 10 has an invalid length. [ 863.423888][ T4389] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 863.437076][ T4389] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.455081][ T4389] usb 5-1: config 0 descriptor?? [ 863.474034][ T4389] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 863.481589][ T4388] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 863.499390][T19386] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 863.534486][T19386] team0: Failed to send options change via netlink (err -105) [ 863.542387][T19386] team0: Port device netdevsim0 added [ 863.548521][T19387] netlink: 'syz.0.5273': attribute type 10 has an invalid length. [ 863.562653][T19387] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 863.596731][T19387] team0: Failed to send options change via netlink (err -105) [ 863.605042][T19387] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 863.626927][T19387] team0: Port device netdevsim0 removed [ 863.642960][T19387] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 863.670357][ T9458] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 863.690685][ T4388] usb 6-1: Using ep0 maxpacket: 16 [ 863.697814][ T4388] usb 6-1: config 0 has an invalid interface number: 161 but max is 0 [ 863.720430][ T4388] usb 6-1: config 0 has no interface number 0 [ 863.726581][ T4388] usb 6-1: config 0 interface 161 has no altsetting 0 [ 863.769486][ T4388] usb 6-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 863.789684][ T4388] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.799652][ T4388] usb 6-1: Product: syz [ 863.808592][ T4388] usb 6-1: Manufacturer: syz [ 863.815942][ T4388] usb 6-1: SerialNumber: syz [ 863.846985][ T4388] usb 6-1: config 0 descriptor?? [ 863.860809][ T9458] usb 3-1: Using ep0 maxpacket: 16 [ 863.870526][ T4388] ums-jumpshot 6-1:0.161: USB Mass Storage device detected [ 863.872437][ T9458] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 863.887780][ T9458] usb 3-1: config 0 has no interface number 0 [ 863.894439][ T9458] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 863.909344][ T4388] ums-jumpshot 6-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 863.933778][ T9458] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 863.958196][T19393] netlink: 'syz.0.5275': attribute type 1 has an invalid length. [ 863.967294][ T9458] usb 3-1: config 0 interface 41 has no altsetting 0 [ 863.986723][ T9458] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 864.044262][ T9458] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.065779][T19376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 864.076486][T19393] 8021q: adding VLAN 0 to HW filter on device bond5 [ 864.117244][ T9458] usb 3-1: Product: syz [ 864.137776][T19376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 864.146834][ T9458] usb 3-1: Manufacturer: syz [ 864.160918][ T9458] usb 3-1: SerialNumber: syz [ 864.187473][ T4264] Bluetooth: hci1: Unknown advertising packet type: 0x19 [ 864.187524][ T4264] Bluetooth: hci1: Unknown advertising packet type: 0x1f [ 864.194755][ T4264] Bluetooth: hci1: Unknown advertising packet type: 0x31 [ 864.202219][ T4264] Bluetooth: hci1: Malformed LE Event: 0x0d [ 864.203133][ T9458] usb 3-1: config 0 descriptor?? [ 864.292688][T19383] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 864.299994][T19383] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 864.311434][ T22] usb 6-1: USB disconnect, device number 41 [ 864.552181][T19383] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 864.559635][T19383] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 864.600347][ T4394] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 864.793498][ T4394] usb 1-1: Using ep0 maxpacket: 32 [ 864.811841][ T4394] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 864.827255][ T4394] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 864.836342][ T4394] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 864.845520][ T4394] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.867418][ T4394] usb 1-1: config 0 descriptor?? [ 865.174712][ T9458] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 865.220838][ T22] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 865.380558][ T22] usb 6-1: device descriptor read/64, error -71 [ 865.650311][ T22] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 865.810372][ T22] usb 6-1: device descriptor read/64, error -71 [ 865.828124][ T4394] usb 5-1: USB disconnect, device number 123 [ 865.914946][T19425] netlink: 'syz.4.5287': attribute type 1 has an invalid length. [ 865.931062][ T22] usb usb6-port1: attempt power cycle [ 865.955561][T19425] 8021q: adding VLAN 0 to HW filter on device bond5 [ 866.200621][ T9458] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 866.227204][ T9458] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 866.247716][ T9458] CoreChips: probe of 3-1:0.41 failed with error -71 [ 866.271081][ T9458] usb 3-1: USB disconnect, device number 17 [ 866.342285][ T22] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 866.391656][ T22] usb 6-1: device descriptor read/8, error -71 [ 866.640471][ T126] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 866.670404][ T22] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 866.706536][ T22] usb 6-1: device descriptor read/8, error -71 [ 866.820760][ T126] usb 5-1: Using ep0 maxpacket: 16 [ 866.830694][ T22] usb usb6-port1: unable to enumerate USB device [ 866.839219][ T126] usb 5-1: config 0 has an invalid interface number: 161 but max is 0 [ 866.849139][ T126] usb 5-1: config 0 has no interface number 0 [ 866.855881][ T126] usb 5-1: config 0 interface 161 has no altsetting 0 [ 866.885417][ T126] usb 5-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 866.899990][ T126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.917482][ T126] usb 5-1: Product: syz [ 866.921999][ T126] usb 5-1: Manufacturer: syz [ 866.927062][ T126] usb 5-1: SerialNumber: syz [ 866.936119][ T126] usb 5-1: config 0 descriptor?? [ 866.949074][ T126] ums-jumpshot 5-1:0.161: USB Mass Storage device detected [ 866.960566][ T126] ums-jumpshot 5-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 867.154269][T19434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 867.165109][T19434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 867.177332][ T4264] Bluetooth: hci2: Malformed LE Event: 0x0d [ 867.204240][ T4388] usb 5-1: USB disconnect, device number 124 [ 867.381517][ T126] usb 1-1: USB disconnect, device number 114 [ 868.264717][ T4394] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 868.395765][T19494] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5317'. [ 868.422185][T19494] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5317'. [ 868.449420][T19494] device batadv0 entered promiscuous mode [ 868.455477][ T4394] usb 5-1: Using ep0 maxpacket: 32 [ 868.462919][ T4394] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 868.475209][T19494] device erspan0 entered promiscuous mode [ 868.487800][ T4394] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 868.509461][ T4394] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 868.515654][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 868.528985][ T4394] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.562817][ T4394] usb 5-1: config 0 descriptor?? [ 868.830480][ T126] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 868.940350][ T4394] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 869.020677][ T126] usb 1-1: Using ep0 maxpacket: 16 [ 869.030296][ T4388] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 869.032824][ T126] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 869.058067][ T126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 869.078360][ T126] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 869.103246][ T126] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 869.112427][ T126] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 869.120779][ T126] usb 1-1: Manufacturer: syz [ 869.127567][ T126] usb 1-1: config 0 descriptor?? [ 869.152214][ T4394] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 869.168599][ T4394] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 869.189069][ T4394] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 869.199926][ T4394] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 869.215529][ T4394] usb 6-1: Manufacturer: syz [ 869.221558][ T4388] usb 2-1: no configurations [ 869.226292][ T4388] usb 2-1: can't read configurations, error -22 [ 869.238193][ T4394] usb 6-1: config 0 descriptor?? [ 869.340348][ T4394] rc_core: IR keymap rc-hauppauge not found [ 869.346311][ T4394] Registered IR keymap rc-empty [ 869.352367][ T4394] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 869.364130][ T4394] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input109 [ 869.390354][ T4388] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 869.611129][ T4388] usb 2-1: no configurations [ 869.615814][ T4388] usb 2-1: can't read configurations, error -22 [ 869.623080][ T4388] usb usb2-port1: attempt power cycle [ 869.876615][ T9514] usb 6-1: USB disconnect, device number 46 [ 870.023247][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.029673][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.040746][ T4388] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 870.081391][ T4388] usb 2-1: no configurations [ 870.086213][ T4388] usb 2-1: can't read configurations, error -22 [ 870.240364][ T4388] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 870.294295][ T4388] usb 2-1: no configurations [ 870.298948][ T4388] usb 2-1: can't read configurations, error -22 [ 870.305749][ T4388] usb usb2-port1: unable to enumerate USB device [ 871.020479][ T9514] usb 5-1: USB disconnect, device number 125 [ 871.589074][ T126] usb 1-1: USB disconnect, device number 115 [ 871.810315][ T9514] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 871.950446][ T9458] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 872.002122][ T9514] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 872.020378][ T9514] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 872.037999][ T9514] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 872.055489][ T9514] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 872.060426][ T126] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 872.067203][ T9514] usb 5-1: Manufacturer: syz [ 872.095111][ T9514] usb 5-1: config 0 descriptor?? [ 872.153136][ T9458] usb 6-1: Using ep0 maxpacket: 32 [ 872.165461][ T9458] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 872.179534][ T9458] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 872.189967][ T9458] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.200543][ T9514] rc_core: IR keymap rc-hauppauge not found [ 872.202665][ T9458] usb 6-1: config 0 descriptor?? [ 872.206490][ T9514] Registered IR keymap rc-empty [ 872.238577][ T9514] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 872.251875][ T126] usb 1-1: Using ep0 maxpacket: 16 [ 872.263862][ T126] usb 1-1: config 0 has an invalid interface number: 161 but max is 0 [ 872.269458][ T9514] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input110 [ 872.275672][ T126] usb 1-1: config 0 has no interface number 0 [ 872.292398][ T126] usb 1-1: config 0 interface 161 has no altsetting 0 [ 872.313686][ T126] usb 1-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 872.328351][ T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.338463][ T126] usb 1-1: Product: syz [ 872.352239][ T126] usb 1-1: Manufacturer: syz [ 872.363630][ T126] usb 1-1: SerialNumber: syz [ 872.378021][ T126] usb 1-1: config 0 descriptor?? [ 872.388371][ T126] ums-jumpshot 1-1:0.161: USB Mass Storage device detected [ 872.433561][ T126] ums-jumpshot 1-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 872.602161][T19570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 872.632053][T19570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 872.655713][ T4264] Bluetooth: hci3: Malformed LE Event: 0x0d [ 872.687275][ T9514] usb 1-1: USB disconnect, device number 116 [ 872.758208][ T126] usb 5-1: USB disconnect, device number 126 [ 873.160486][ T9458] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 873.270468][ T4795] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 873.340370][ T9458] usb 3-1: Using ep0 maxpacket: 16 [ 873.348304][ T9458] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 873.360129][ T9458] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 873.372980][ T9458] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 873.401837][ T9458] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 873.411023][ T9458] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 873.419347][ T9458] usb 3-1: Manufacturer: syz [ 873.433821][ T9458] usb 3-1: config 0 descriptor?? [ 873.450857][ T4795] usb 2-1: no configurations [ 873.455534][ T4795] usb 2-1: can't read configurations, error -22 [ 873.541352][ T4389] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 873.620880][ T4795] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 873.761851][ T4389] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 873.775134][ T4389] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 873.785044][ T4389] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.796888][ T4389] usb 1-1: config 0 descriptor?? [ 873.811118][ T4795] usb 2-1: no configurations [ 873.817098][ T4795] usb 2-1: can't read configurations, error -22 [ 873.822708][ T4389] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 873.830141][ T4795] usb usb2-port1: attempt power cycle [ 874.260512][ T4795] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 874.291733][ T4795] usb 2-1: no configurations [ 874.296481][ T4795] usb 2-1: can't read configurations, error -22 [ 874.450475][ T4795] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 874.491715][ T4795] usb 2-1: no configurations [ 874.496396][ T4795] usb 2-1: can't read configurations, error -22 [ 874.510958][ T4795] usb usb2-port1: unable to enumerate USB device [ 874.700326][ T9514] usb 6-1: USB disconnect, device number 47 [ 875.120732][ T9514] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 875.310454][ T9514] usb 6-1: Using ep0 maxpacket: 16 [ 875.318605][ T9514] usb 6-1: config 0 has an invalid interface number: 161 but max is 0 [ 875.336453][ T9514] usb 6-1: config 0 has no interface number 0 [ 875.345049][ T9514] usb 6-1: config 0 interface 161 has no altsetting 0 [ 875.360480][ T9514] usb 6-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 875.369807][ T9514] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.378092][ T9514] usb 6-1: Product: syz [ 875.384115][ T9514] usb 6-1: Manufacturer: syz [ 875.388755][ T9514] usb 6-1: SerialNumber: syz [ 875.405127][ T9514] usb 6-1: config 0 descriptor?? [ 875.415384][ T9514] ums-jumpshot 6-1:0.161: USB Mass Storage device detected [ 875.427455][ T9514] ums-jumpshot 6-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 875.617024][ T4264] Bluetooth: hci1: Unknown advertising packet type: 0x19 [ 875.617060][ T4264] Bluetooth: hci1: Unknown advertising packet type: 0x1f [ 875.624427][ T4264] Bluetooth: hci1: Unknown advertising packet type: 0x31 [ 875.631671][ T4264] Bluetooth: hci1: Malformed LE Event: 0x0d [ 875.645858][ T9458] usb 6-1: USB disconnect, device number 48 [ 875.865351][T19643] ip6gretap0 speed is unknown, defaulting to 1000 [ 875.927043][ T9458] usb 3-1: USB disconnect, device number 18 [ 876.244889][ T22] usb 1-1: USB disconnect, device number 117 [ 876.460561][ T9458] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 876.650496][ T9458] usb 6-1: Using ep0 maxpacket: 32 [ 876.657535][ T9458] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 876.669819][ T9458] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 876.679112][ T9458] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.701242][ T9458] usb 6-1: config 0 descriptor?? [ 876.761492][T19674] tipc: Enabling of bearer rejected, failed to enable media [ 877.090290][ T4388] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 877.300611][ T4388] usb 5-1: Using ep0 maxpacket: 16 [ 877.309223][ T4388] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 877.325226][ T4388] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 877.349109][ T4388] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 877.380662][ T4388] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 877.420074][ T4388] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 877.430503][ T4388] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 877.440256][ T4388] usb 5-1: Manufacturer: syz [ 877.460021][ T4388] usb 5-1: config 0 descriptor?? [ 877.558012][T19699] tipc: Started in network mode [ 877.563121][T19699] tipc: Node identity 0000000000004c3a0000400000000001, cluster identity 4711 [ 877.581880][T19699] tipc: Enabling of bearer rejected, failed to enable media [ 879.214557][ T9458] usb 6-1: USB disconnect, device number 49 [ 879.838328][ T9458] usb 5-1: USB disconnect, device number 127 [ 880.211387][ T9514] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 880.400637][ T9514] usb 2-1: Using ep0 maxpacket: 32 [ 880.414578][ T9514] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 880.432416][ T9514] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 880.450786][ T9514] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.518949][ T9514] usb 2-1: config 0 descriptor?? [ 880.850343][ T22] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 880.870390][ T126] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 881.040368][ T22] usb 5-1: Using ep0 maxpacket: 16 [ 881.047953][ T22] usb 5-1: config 0 has an invalid interface number: 161 but max is 0 [ 881.056526][ T126] usb 1-1: Using ep0 maxpacket: 16 [ 881.065521][ T22] usb 5-1: config 0 has no interface number 0 [ 881.073225][ T22] usb 5-1: config 0 interface 161 has no altsetting 0 [ 881.080617][ T126] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 881.091441][ T126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 881.102760][ T126] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 881.114289][ T126] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 881.128266][ T22] usb 5-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 881.137832][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.146222][ T22] usb 5-1: Product: syz [ 881.150801][ T126] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 881.159867][ T126] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 881.168003][ T22] usb 5-1: Manufacturer: syz [ 881.173936][ T22] usb 5-1: SerialNumber: syz [ 881.180426][ T22] usb 5-1: config 0 descriptor?? [ 881.185449][ T126] usb 1-1: Manufacturer: syz [ 881.193843][ T22] ums-jumpshot 5-1:0.161: USB Mass Storage device detected [ 881.207293][ T126] usb 1-1: config 0 descriptor?? [ 881.225131][ T22] ums-jumpshot 5-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 881.399277][ T4264] Bluetooth: hci2: Unknown advertising packet type: 0x19 [ 881.399304][ T4264] Bluetooth: hci2: Unknown advertising packet type: 0x1f [ 881.406730][ T4264] Bluetooth: hci2: Unknown advertising packet type: 0x31 [ 881.414642][ T4264] Bluetooth: hci2: Malformed LE Event: 0x0d [ 881.447117][ T9514] usb 5-1: USB disconnect, device number 2 [ 883.334301][ T126] usb 2-1: USB disconnect, device number 14 [ 883.353982][ T4389] usb 1-1: USB disconnect, device number 118 [ 883.770665][ T22] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 883.960571][ T22] usb 3-1: Using ep0 maxpacket: 16 [ 883.967640][ T22] usb 3-1: config 0 has an invalid interface number: 161 but max is 0 [ 883.998171][ T22] usb 3-1: config 0 has no interface number 0 [ 884.018076][ T22] usb 3-1: config 0 interface 161 has no altsetting 0 [ 884.049959][ T22] usb 3-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 884.076174][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.098411][ T22] usb 3-1: Product: syz [ 884.107627][ T22] usb 3-1: Manufacturer: syz [ 884.119337][ T22] usb 3-1: SerialNumber: syz [ 884.146776][ T22] usb 3-1: config 0 descriptor?? [ 884.177369][ T22] ums-jumpshot 3-1:0.161: USB Mass Storage device detected [ 884.210064][ T22] ums-jumpshot 3-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 884.387312][T19910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.406137][T19910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.419417][ T4264] Bluetooth: hci5: Unknown advertising packet type: 0xff00 [ 884.454940][ T126] usb 3-1: USB disconnect, device number 19 [ 885.270298][ T22] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 885.338290][ T9458] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 885.470482][ T22] usb 1-1: Using ep0 maxpacket: 32 [ 885.480798][ T22] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 885.497212][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.522025][ T22] usb 1-1: config 0 descriptor?? [ 885.537184][ T9458] usb 3-1: Using ep0 maxpacket: 16 [ 885.547622][ T9458] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 885.561924][ T22] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 885.569281][ T9458] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 885.581460][ T9458] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 885.592670][ T9458] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 885.601798][T20005] netlink: 'syz.5.5502': attribute type 4 has an invalid length. [ 885.607817][ T9458] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 885.623054][ T9458] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 885.631254][ T9458] usb 3-1: Manufacturer: syz [ 885.648323][ T9458] usb 3-1: config 0 descriptor?? [ 885.936444][ T22] gspca_nw80x: reg_r err -32 [ 885.942393][ T22] nw80x: probe of 1-1:0.0 failed with error -32 [ 885.959276][ T22] usb 1-1: USB disconnect, device number 119 [ 886.030503][ T4388] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 886.220484][ T4388] usb 6-1: Using ep0 maxpacket: 16 [ 886.235823][ T4388] usb 6-1: config 0 has an invalid interface number: 161 but max is 0 [ 886.244883][ T4388] usb 6-1: config 0 has no interface number 0 [ 886.251232][ T4388] usb 6-1: config 0 interface 161 has no altsetting 0 [ 886.260078][ T4388] usb 6-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 886.269324][ T4388] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.280486][ T4388] usb 6-1: Product: syz [ 886.284707][ T4388] usb 6-1: Manufacturer: syz [ 886.289701][ T4388] usb 6-1: SerialNumber: syz [ 886.305835][ T4388] usb 6-1: config 0 descriptor?? [ 886.317542][ T4388] ums-jumpshot 6-1:0.161: USB Mass Storage device detected [ 886.334091][ T4388] ums-jumpshot 6-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 886.519042][T20007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 886.539985][T20007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 886.564249][ T4264] Bluetooth: hci1: Unknown advertising packet type: 0xff00 [ 886.580654][ T9458] usb 6-1: USB disconnect, device number 50 [ 887.222183][T20052] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5521'. [ 887.560470][ T4389] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 887.570609][ T126] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 887.750286][ T126] usb 5-1: Using ep0 maxpacket: 32 [ 887.755792][ T4389] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 887.758016][ T126] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 887.776976][ T4389] usb 6-1: config 0 has no interfaces? [ 887.792963][ T4389] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 887.799872][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.821465][ T126] usb 5-1: config 0 descriptor?? [ 887.829725][ T4389] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.838303][ T4389] usb 6-1: Product: syz [ 887.838959][ T126] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 887.849314][ T4389] usb 6-1: Manufacturer: syz [ 887.854353][ T4389] usb 6-1: SerialNumber: syz [ 887.871008][ T4389] usb 6-1: config 0 descriptor?? [ 887.934795][T20079] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5533'. [ 888.075778][ T4389] usb 3-1: USB disconnect, device number 20 [ 888.092609][ T9514] usb 6-1: USB disconnect, device number 51 [ 888.130499][ T4388] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 888.180442][ T4266] Bluetooth: hci1: command tx timeout [ 888.236497][ T126] gspca_nw80x: reg_r err -32 [ 888.254607][ T126] nw80x: probe of 5-1:0.0 failed with error -32 [ 888.267563][ T126] usb 5-1: USB disconnect, device number 3 [ 888.330436][ T4388] usb 1-1: Using ep0 maxpacket: 16 [ 888.345830][ T4388] usb 1-1: config 0 has an invalid interface number: 161 but max is 0 [ 888.355152][ T4388] usb 1-1: config 0 has no interface number 0 [ 888.361993][ T4388] usb 1-1: config 0 interface 161 has no altsetting 0 [ 888.371434][ T4388] usb 1-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 888.380772][ T4388] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.388888][ T4388] usb 1-1: Product: syz [ 888.393708][ T4388] usb 1-1: Manufacturer: syz [ 888.398464][ T4388] usb 1-1: SerialNumber: syz [ 888.408797][ T4388] usb 1-1: config 0 descriptor?? [ 888.418753][ T4388] ums-jumpshot 1-1:0.161: USB Mass Storage device detected [ 888.449797][ T4388] ums-jumpshot 1-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 888.621503][T20075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.639194][T20075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.657828][ T4266] Bluetooth: hci3: Unknown advertising packet type: 0xff00 [ 888.663606][ T9458] usb 1-1: USB disconnect, device number 120 [ 888.680669][ T9514] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 888.870456][ T9514] usb 6-1: Using ep0 maxpacket: 16 [ 888.878784][ T9514] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 888.901987][ T9514] usb 6-1: config 0 has no interfaces? [ 888.910649][ T9514] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 888.921448][ T9514] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.940455][ T9514] usb 6-1: Product: syz [ 888.946950][ T9514] usb 6-1: Manufacturer: syz [ 888.960405][ T9514] usb 6-1: SerialNumber: syz [ 888.967234][ T9514] usb 6-1: config 0 descriptor?? [ 889.148500][T20113] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5544'. [ 889.580591][ T22] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 889.770381][ T22] usb 2-1: Using ep0 maxpacket: 16 [ 889.779629][ T22] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 889.843641][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 889.906836][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 889.960370][ T22] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 890.005615][ T22] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 890.065295][ T22] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 890.108499][ T22] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 890.169089][ T22] usb 2-1: Manufacturer: syz [ 890.201735][ T22] usb 2-1: config 0 descriptor?? [ 890.522139][ T4388] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 890.720320][ T4388] usb 5-1: Using ep0 maxpacket: 32 [ 890.727366][ T4388] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 890.746886][ T4388] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.758555][ T4388] usb 5-1: config 0 descriptor?? [ 890.768678][ T4388] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 890.813903][T20145] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5555'. [ 890.898534][T20148] netlink: 'syz.2.5556': attribute type 3 has an invalid length. [ 890.949622][ T126] usb 6-1: USB disconnect, device number 52 [ 891.178450][ T4388] gspca_nw80x: reg_r err -32 [ 891.187977][ T4388] nw80x: probe of 5-1:0.0 failed with error -32 [ 891.197024][ T4388] usb 5-1: USB disconnect, device number 4 [ 891.280378][ T9514] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 891.490273][ T9514] usb 3-1: Using ep0 maxpacket: 16 [ 891.501553][ T9514] usb 3-1: config 0 has an invalid interface number: 161 but max is 0 [ 891.509789][ T9514] usb 3-1: config 0 has no interface number 0 [ 891.530415][ T9514] usb 3-1: config 0 interface 161 has no altsetting 0 [ 891.542409][ T9514] usb 3-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 891.560367][ T9514] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.568446][ T9514] usb 3-1: Product: syz [ 891.580288][ T9514] usb 3-1: Manufacturer: syz [ 891.584938][ T9514] usb 3-1: SerialNumber: syz [ 891.602101][ T9514] usb 3-1: config 0 descriptor?? [ 891.618854][ T9514] ums-jumpshot 3-1:0.161: USB Mass Storage device detected [ 891.659209][ T9514] ums-jumpshot 3-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 891.814489][T20150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 891.842371][T20150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 891.924761][ T4266] Bluetooth: hci5: adv larger than maximum supported [ 891.924791][ T4266] Bluetooth: hci5: Malformed LE Event: 0x0d [ 892.238345][T20178] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5566'. [ 892.650467][ T22] rc_core: IR keymap rc-hauppauge not found [ 892.656665][ T22] Registered IR keymap rc-empty [ 892.679939][ T22] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 892.740756][ T22] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 892.770962][ T22] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 892.821891][ T22] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input111 [ 892.859833][ T22] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 892.900516][ T22] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 892.940503][ T22] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 892.980581][ T22] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 893.020376][ T22] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 893.051233][ T22] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 893.100409][ T22] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 893.130537][ T22] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 893.155368][T20207] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5577'. [ 893.164833][ T22] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 893.200674][ T22] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 893.210348][ T4394] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 893.231531][ T22] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 893.241680][ T22] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 893.260612][ T22] usb 2-1: USB disconnect, device number 15 [ 893.400506][ T4394] usb 5-1: Using ep0 maxpacket: 32 [ 893.409084][ T4394] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 893.418446][ T4394] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.435449][ T4394] usb 5-1: config 0 descriptor?? [ 893.443281][ T4394] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 893.630291][ T22] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 893.820390][ T22] usb 2-1: Using ep0 maxpacket: 16 [ 893.827614][ T22] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 893.844544][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 893.858199][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 893.862333][ T4394] gspca_nw80x: reg_r err -32 [ 893.869849][ T22] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 893.885171][ T22] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 893.891012][ T4394] nw80x: probe of 5-1:0.0 failed with error -32 [ 893.910485][ T22] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 893.926987][ T22] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 893.930678][ T4394] usb 5-1: USB disconnect, device number 5 [ 893.936355][ T22] usb 2-1: Manufacturer: syz [ 893.964232][ T22] usb 2-1: config 0 descriptor?? [ 894.036861][ T4795] usb 3-1: USB disconnect, device number 21 [ 894.275545][T20225] tipc: Started in network mode [ 894.285788][T20225] tipc: Node identity 0000000000004c3a0000400000000001, cluster identity 4711 [ 894.304386][T20225] tipc: Enabling of bearer rejected, failed to enable media [ 894.613526][T20240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5589'. [ 895.000377][ T4795] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 895.190315][ T4795] usb 6-1: Using ep0 maxpacket: 16 [ 895.198172][ T4795] usb 6-1: config 0 has an invalid interface number: 161 but max is 0 [ 895.207368][ T4795] usb 6-1: config 0 has no interface number 0 [ 895.213930][ T9458] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 895.222334][ T4795] usb 6-1: config 0 interface 161 has no altsetting 0 [ 895.234148][ T4795] usb 6-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 895.243400][ T4795] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.251513][ T4795] usb 6-1: Product: syz [ 895.255827][ T4795] usb 6-1: Manufacturer: syz [ 895.260559][ T4795] usb 6-1: SerialNumber: syz [ 895.267696][ T4795] usb 6-1: config 0 descriptor?? [ 895.274894][ T4795] ums-jumpshot 6-1:0.161: USB Mass Storage device detected [ 895.284511][ T4795] ums-jumpshot 6-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 895.410344][ T9458] usb 1-1: Using ep0 maxpacket: 32 [ 895.418100][ T9458] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 895.427651][ T9458] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.439039][ T9458] usb 1-1: config 0 descriptor?? [ 895.448773][ T9458] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 895.486483][T20248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 895.508720][T20248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 895.583032][ T4266] Bluetooth: hci1: adv larger than maximum supported [ 895.583060][ T4266] Bluetooth: hci1: Malformed LE Event: 0x0d [ 895.730395][ T22] rc_core: IR keymap rc-hauppauge not found [ 895.748476][ T22] Registered IR keymap rc-empty [ 895.771197][ T22] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 895.830517][ T22] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 895.859811][ T9458] gspca_nw80x: reg_r err -32 [ 895.871544][ T9458] nw80x: probe of 1-1:0.0 failed with error -32 [ 895.878097][ T22] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 895.901359][ T9458] usb 1-1: USB disconnect, device number 121 [ 895.919869][ T22] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input112 [ 895.965373][ T22] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 895.994785][T20279] netlink: 'syz.2.5602': attribute type 3 has an invalid length. [ 896.005017][ T22] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 896.040331][ T22] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 896.070340][ T22] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 896.110561][ T22] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 896.140443][ T22] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 896.149629][T20285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5604'. [ 896.170341][ T22] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 896.200475][ T22] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 896.230527][ T22] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 896.265975][ T22] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 896.301886][ T22] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 896.330295][ T22] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 896.350501][ T22] usb 2-1: USB disconnect, device number 16 [ 896.770481][ T4388] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 896.960368][ T4388] usb 3-1: Using ep0 maxpacket: 16 [ 896.974529][ T4388] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 896.994172][ T4388] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 897.009257][ T4388] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 897.019229][ T4388] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 897.029581][ T4388] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 897.045411][ T4388] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 897.054826][ T4388] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 897.063255][ T4388] usb 3-1: Manufacturer: syz [ 897.070881][ T4388] usb 3-1: config 0 descriptor?? [ 897.371444][T20318] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5616'. [ 897.769847][ T9514] usb 6-1: USB disconnect, device number 53 [ 897.916370][ T22] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 898.100988][ T22] usb 2-1: Using ep0 maxpacket: 32 [ 898.112603][ T22] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 898.130745][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.143548][ T22] usb 2-1: config 0 descriptor?? [ 898.150562][ T9458] usb 1-1: new full-speed USB device number 122 using dummy_hcd [ 898.172073][ T22] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 898.208910][T20353] 8021q: adding VLAN 0 to HW filter on device bond6 [ 898.355258][ T9458] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 898.366442][ T9458] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 898.379275][ T9458] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 898.389200][ T9458] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.397404][ T9458] usb 1-1: Product: syz [ 898.401866][ T9458] usb 1-1: Manufacturer: syz [ 898.406548][ T9458] usb 1-1: SerialNumber: syz [ 898.427408][ T9458] usb 1-1: config 0 descriptor?? [ 898.556712][ T22] gspca_nw80x: reg_r err -32 [ 898.563155][ T22] nw80x: probe of 2-1:0.0 failed with error -32 [ 898.571706][ T22] usb 2-1: USB disconnect, device number 17 [ 898.639510][ T9514] usb 1-1: USB disconnect, device number 122 [ 899.250266][ T9514] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 899.460856][ T9514] usb 1-1: Using ep0 maxpacket: 16 [ 899.477190][ T9514] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 899.521476][ T9514] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 899.560083][ T9514] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 899.600275][ T9514] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.632992][ T9514] usb 1-1: Product: syz [ 899.649493][ T9514] usb 1-1: Manufacturer: syz [ 899.665682][ T9514] usb 1-1: SerialNumber: syz [ 899.686499][ T9514] usb 1-1: config 0 descriptor?? [ 899.727091][T20375] delete_channel: no stack [ 899.736885][ T4264] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 899.765165][ T4264] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 899.780872][ T4264] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 899.791072][ T4264] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 899.801353][ T4264] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 899.812932][ T4264] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 899.876276][T20373] ip6gretap0 speed is unknown, defaulting to 1000 [ 899.900485][ T4388] rc_core: IR keymap rc-hauppauge not found [ 899.906676][ T4388] Registered IR keymap rc-empty [ 899.912628][ T4388] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 899.960958][ T4388] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 899.991155][ T4388] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 900.008438][ T4388] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input113 [ 900.045136][ T4388] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 900.089094][T20381] 8021q: adding VLAN 0 to HW filter on device bond5 [ 900.092855][ T4388] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 900.140395][ T4388] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 900.194381][T20389] netlink: 'syz.1.5642': attribute type 3 has an invalid length. [ 900.215420][ T4388] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 900.264186][ T4388] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 900.322768][ T4388] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 900.322769][T19778] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.352801][T20373] chnl_net:caif_netlink_parms(): no params data found [ 900.377769][ T4388] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 900.427532][ T4388] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 900.460797][ T4388] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 900.462702][T19778] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.517952][T20373] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.519368][ T4388] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 900.528668][T20373] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.550732][T20373] device bridge_slave_0 entered promiscuous mode [ 900.593531][T19778] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.594415][ T4388] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 900.620512][ T4388] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 900.621498][T20373] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.648468][T20373] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.653905][ T4388] usb 3-1: USB disconnect, device number 22 [ 900.657860][T20373] device bridge_slave_1 entered promiscuous mode [ 900.738001][T19778] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.759450][T20373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 900.772806][T20373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 900.819120][T20373] team0: Port device team_slave_0 added [ 900.831898][T20373] team0: Port device team_slave_1 added [ 900.852598][ T9514] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 900.877417][T20373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 900.884802][T20373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 900.910795][ C1] vkms_vblank_simulate: vblank timer overrun [ 900.917163][T20373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 900.929866][T20373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 900.968068][T20373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 900.994165][ C1] vkms_vblank_simulate: vblank timer overrun [ 901.015262][ T4388] usb 1-1: USB disconnect, device number 123 [ 901.022529][T20373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 901.040768][ T9514] usb 6-1: Using ep0 maxpacket: 16 [ 901.067372][ T9514] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 901.106604][ T9514] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 901.130498][ T9514] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 901.158189][ T9514] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 901.175441][ T9514] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 901.199777][ T9514] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 901.220504][ T9514] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 901.228822][ T9514] usb 6-1: Manufacturer: syz [ 901.236460][ T9514] usb 6-1: config 0 descriptor?? [ 901.311539][T20373] device hsr_slave_0 entered promiscuous mode [ 901.327614][T20373] device hsr_slave_1 entered promiscuous mode [ 901.349658][T20373] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 901.367308][T20373] Cannot create hsr debugfs directory [ 901.423462][T20419] 8021q: adding VLAN 0 to HW filter on device bond5 [ 901.556196][T19778] tipc: Left network mode [ 901.819549][T20428] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 901.870420][ T4266] Bluetooth: hci4: command tx timeout [ 902.350555][ T4388] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 902.582627][ T4388] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.593820][ T4388] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 902.604312][ T4388] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 902.618189][ T4388] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 902.627809][ T4388] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.654630][ T4388] usb 2-1: config 0 descriptor?? [ 902.761412][ T22] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 902.953210][ T22] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 902.974167][ T22] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 902.990338][T20373] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 903.004442][ T22] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 903.017246][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.026000][ T22] usb 3-1: Product: syz [ 903.030580][ T22] usb 3-1: Manufacturer: syz [ 903.035347][ T22] usb 3-1: SerialNumber: syz [ 903.053335][ T22] usb 3-1: config 0 descriptor?? [ 903.076434][ T4388] usbhid 2-1:0.0: can't add hid device: -71 [ 903.086339][ T4388] usbhid: probe of 2-1:0.0 failed with error -71 [ 903.118477][ T4388] usb 2-1: USB disconnect, device number 18 [ 903.235242][T20373] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 903.272682][ T22] usb 3-1: USB disconnect, device number 23 [ 903.274804][T20373] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 903.330547][T20373] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 903.499751][T20470] 8021q: adding VLAN 0 to HW filter on device bond6 [ 903.565772][T19778] device hsr_slave_0 left promiscuous mode [ 903.598014][T19778] device hsr_slave_1 left promiscuous mode [ 903.621742][T19778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 903.629463][T19778] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 903.647449][T19778] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 903.655375][T19778] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 903.673630][T19778] device bridge_slave_1 left promiscuous mode [ 903.689536][T19778] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.718764][T20476] delete_channel: no stack [ 903.756991][T19778] device bridge_slave_0 left promiscuous mode [ 903.772018][T19778] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.780657][ T22] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 903.845512][ T9514] rc_core: IR keymap rc-hauppauge not found [ 903.851659][ T9514] Registered IR keymap rc-empty [ 903.865296][ T9514] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 903.873124][T19778] device veth1_macvtap left promiscuous mode [ 903.884478][T19778] device veth0_macvtap left promiscuous mode [ 903.891637][T19778] device veth1_vlan left promiscuous mode [ 903.897564][T19778] device veth0_vlan left promiscuous mode [ 903.903762][ T9514] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 903.940783][ T4266] Bluetooth: hci4: command tx timeout [ 903.947360][ T9514] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 903.962930][ T9514] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input114 [ 903.980461][ T22] usb 3-1: Using ep0 maxpacket: 16 [ 903.992802][ T22] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 904.011558][ T9514] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 904.014613][ T22] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 904.031503][ T22] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 904.041030][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.049221][ T22] usb 3-1: Product: syz [ 904.051030][ T9514] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 904.054475][ T22] usb 3-1: Manufacturer: syz [ 904.069082][ T22] usb 3-1: SerialNumber: syz [ 904.090597][ T9514] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 904.091125][ T22] usb 3-1: config 0 descriptor?? [ 904.120354][ T9514] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 904.170511][ T9514] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 904.210491][ T9514] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 904.240394][ T9514] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 904.270354][ T9514] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 904.310557][ T9514] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 904.320019][T19778] bond6 (unregistering): Released all slaves [ 904.360508][ T9514] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 904.401679][ T9514] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 904.422285][ T9514] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 904.434555][ T9514] usb 6-1: USB disconnect, device number 54 [ 904.537108][T19778] bond5 (unregistering): Released all slaves [ 904.859447][T19778] bond4 (unregistering): Released all slaves [ 905.049874][T19778] bond3 (unregistering): Released all slaves [ 905.062741][T19778] bond2 (unregistering): Released all slaves [ 905.074827][T19778] bond1 (unregistering): Released all slaves [ 905.507557][ T22] usb 3-1: USB disconnect, device number 24 [ 905.620702][T19778] team0 (unregistering): Port device team_slave_1 removed [ 905.669540][T19778] team0 (unregistering): Port device team_slave_0 removed [ 905.722066][T19778] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 905.786281][T19778] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 905.953779][ T22] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 906.021725][ T4266] Bluetooth: hci4: command tx timeout [ 906.152216][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 906.163709][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 906.173782][ T22] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 906.186878][ T22] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 906.196069][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.213302][ T22] usb 3-1: config 0 descriptor?? [ 906.433939][T19778] bond0 (unregistering): Released all slaves [ 906.639257][ T22] usbhid 3-1:0.0: can't add hid device: -71 [ 906.647895][ T22] usbhid: probe of 3-1:0.0 failed with error -71 [ 906.677234][ T22] usb 3-1: USB disconnect, device number 25 [ 906.753121][T20373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 906.823293][T20505] 8021q: adding VLAN 0 to HW filter on device bond7 [ 906.847614][T19770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 906.871709][T19770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 906.932972][T20373] 8021q: adding VLAN 0 to HW filter on device team0 [ 906.978564][T19768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 906.997866][T19768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 907.028702][T19768] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.035973][T19768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 907.044369][ T9458] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 907.072036][T19768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 907.098095][T19768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 907.122830][T19768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 907.153862][T19768] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.161137][T19768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 907.199064][T19768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 907.211159][T19768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 907.230343][ T9458] usb 6-1: Using ep0 maxpacket: 16 [ 907.237340][ T9458] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 907.273401][T19770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 907.278178][ T9458] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 907.295179][T19770] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 907.337140][ T9458] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 907.342518][T19770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 907.364765][T19770] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 907.367988][ T9458] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 907.382670][T19770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 907.383475][T19770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 907.409985][T19770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 907.419642][T19770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 907.436327][ T9458] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 907.438751][T20373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 907.479719][ T9458] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 907.480357][T19770] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 907.508123][ T9458] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 907.523688][ T9458] usb 6-1: Manufacturer: syz [ 907.559839][ T9458] usb 6-1: config 0 descriptor?? [ 907.707681][T20534] 8021q: adding VLAN 0 to HW filter on device bond2 [ 907.900310][ T4694] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 908.090355][ T4694] usb 1-1: Using ep0 maxpacket: 32 [ 908.108031][T19770] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 908.112807][ T4694] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 908.116146][ T4266] Bluetooth: hci4: command tx timeout [ 908.150093][T19770] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 908.174729][ T4694] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.205832][T20373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 908.231060][ T4694] usb 1-1: config 0 descriptor?? [ 908.248934][ T4694] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 908.750542][ T126] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 908.761749][T19774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 908.773046][T19774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 908.783026][T20558] netlink: 'syz.1.5693': attribute type 4 has an invalid length. [ 908.806029][T19768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 908.823013][T19768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 908.837136][T19768] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 908.847802][T19768] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 908.851261][ T4694] gspca_nw80x: reg_w err -71 [ 908.866565][ T4694] nw80x: probe of 1-1:0.0 failed with error -71 [ 908.886233][ T4694] usb 1-1: USB disconnect, device number 124 [ 908.895473][T20373] device veth0_vlan entered promiscuous mode [ 908.926063][T20373] device veth1_vlan entered promiscuous mode [ 908.962266][ T126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.986587][T19768] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 908.990541][ T126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 909.003084][T19768] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 909.004017][ T126] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 909.013575][T19768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 909.033517][ T126] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 909.035328][T19768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 909.043632][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.066109][T20373] device veth0_macvtap entered promiscuous mode [ 909.081417][ T126] usb 3-1: config 0 descriptor?? [ 909.095743][T20373] device veth1_macvtap entered promiscuous mode [ 909.130874][T20373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 909.144069][T20373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.154504][T20373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 909.166202][T20373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.176548][T20373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 909.187681][T20373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.198114][T20373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 909.216859][T20373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.226991][T20373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 909.243219][T20373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.257002][T20373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 909.269318][T20373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 909.280557][T20373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.290707][T20373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 909.304850][T20373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.320052][T20373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 909.333311][T20373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.343386][T20373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 909.354039][T20373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.364026][T20373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 909.390367][T20373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.409511][T20373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 909.417386][T20564] netlink: 'syz.1.5696': attribute type 1 has an invalid length. [ 909.463077][T20564] 8021q: adding VLAN 0 to HW filter on device bond6 [ 909.479775][T19770] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 909.492839][T19770] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 909.503043][T19770] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 909.529178][T19770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 909.536980][ T126] usbhid 3-1:0.0: can't add hid device: -71 [ 909.548463][T19770] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 909.552219][ T126] usbhid: probe of 3-1:0.0 failed with error -71 [ 909.567471][ T126] usb 3-1: USB disconnect, device number 26 [ 909.574807][T19770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 909.617541][T20373] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.648919][T20373] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.677213][T20373] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.695323][T20373] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.940322][ T9458] rc_core: IR keymap rc-hauppauge not found [ 909.948404][ T9458] Registered IR keymap rc-empty [ 909.970589][ T9458] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 910.000773][ T9458] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 910.039660][ T9458] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 910.111046][ T9458] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input115 [ 910.229567][T19774] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 910.229622][ T9458] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 910.250503][ T9458] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 910.280525][ T9458] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 910.295588][T19774] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 910.330761][ T9458] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 910.344178][T19764] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 910.360579][ T9458] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 910.375659][T19774] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 910.379181][T20594] netlink: 'syz.1.5708': attribute type 1 has an invalid length. [ 910.396684][T19774] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 910.400764][ T9458] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 910.448533][T20594] 8021q: adding VLAN 0 to HW filter on device bond7 [ 910.455483][ T9458] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 910.490602][ T9458] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 910.506079][T19764] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 910.553821][ T9458] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 910.602159][ T9458] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 910.642164][ T9458] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 910.653710][ T9458] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 910.701861][ T9458] usb 6-1: USB disconnect, device number 55 [ 910.850477][ T126] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 910.880377][ T22] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 910.981917][ T4395] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 911.040976][ T126] usb 3-1: Using ep0 maxpacket: 16 [ 911.048982][ T126] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 911.059443][ T126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 911.070690][ T22] usb 5-1: Using ep0 maxpacket: 16 [ 911.076474][ T126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 911.086594][ T9458] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 911.094686][ T126] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 911.105790][ T22] usb 5-1: config 0 has an invalid interface number: 161 but max is 0 [ 911.114194][ T22] usb 5-1: config 0 has no interface number 0 [ 911.121650][ T126] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 911.134799][ T22] usb 5-1: config 0 interface 161 has no altsetting 0 [ 911.145095][ T126] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 911.154614][ T126] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 911.163219][ T22] usb 5-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 911.172412][ T126] usb 3-1: Manufacturer: syz [ 911.177885][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.183028][ T4395] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 911.188797][ T126] usb 3-1: config 0 descriptor?? [ 911.202409][ T22] usb 5-1: Product: syz [ 911.206601][ T22] usb 5-1: Manufacturer: syz [ 911.207831][ T4395] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 911.211563][ T22] usb 5-1: SerialNumber: syz [ 911.227477][ T22] usb 5-1: config 0 descriptor?? [ 911.233349][ T4395] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 911.242691][ T22] ums-jumpshot 5-1:0.161: USB Mass Storage device detected [ 911.253624][ T4395] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 911.253663][ T4395] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.276405][ T4395] usb 2-1: config 0 descriptor?? [ 911.290707][ T22] ums-jumpshot 5-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 911.300649][ T9458] usb 6-1: Using ep0 maxpacket: 32 [ 911.310518][ T9458] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 911.319635][ T9458] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.331043][ T9458] usb 6-1: config 0 descriptor?? [ 911.358533][ T9458] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 911.446605][T20605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 911.456686][T20605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 911.525900][ T4264] Bluetooth: hci4: adv larger than maximum supported [ 911.526022][ T4264] Bluetooth: hci4: Malformed LE Event: 0x0d [ 911.698131][ T4395] usbhid 2-1:0.0: can't add hid device: -71 [ 911.704766][ T4395] usbhid: probe of 2-1:0.0 failed with error -71 [ 911.719320][ T4395] usb 2-1: USB disconnect, device number 19 [ 911.962306][ T4395] usb 6-1: USB disconnect, device number 56 [ 912.294900][T20630] netlink: 'syz.1.5722': attribute type 1 has an invalid length. [ 912.365780][T20630] 8021q: adding VLAN 0 to HW filter on device bond8 [ 913.100154][T20654] netlink: 'syz.1.5733': attribute type 1 has an invalid length. [ 913.136635][T20654] 8021q: adding VLAN 0 to HW filter on device bond9 [ 913.680158][T20672] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5736'. [ 913.712980][ T9458] usb 5-1: USB disconnect, device number 6 [ 913.750303][ T126] rc_core: IR keymap rc-hauppauge not found [ 913.756389][ T126] Registered IR keymap rc-empty [ 913.800337][ T126] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 913.830712][ T126] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 913.860949][ T126] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 913.886070][ T126] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input116 [ 913.915896][ T126] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 913.978570][ T126] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 914.010546][ T126] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 914.060304][ T126] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 914.090453][ T126] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 914.127452][ T126] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 914.166818][ T126] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 914.212220][ T126] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 914.249557][T20695] netlink: 'syz.2.5744': attribute type 1 has an invalid length. [ 914.260667][ T126] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 914.305048][ T126] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 914.351554][ T126] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 914.353709][T20695] 8021q: adding VLAN 0 to HW filter on device bond3 [ 914.359622][ T126] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 914.376628][ T126] usb 3-1: USB disconnect, device number 27 [ 914.730416][ T4395] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 914.790351][ T9458] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 914.940259][ T4395] usb 5-1: Using ep0 maxpacket: 16 [ 914.949141][ T4395] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 914.974999][ T4395] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 914.985777][ T9458] usb 2-1: Using ep0 maxpacket: 16 [ 914.995402][ T9458] usb 2-1: config 0 has an invalid interface number: 161 but max is 0 [ 915.002621][ T4395] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 915.023911][ T4395] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 915.031269][ T9458] usb 2-1: config 0 has no interface number 0 [ 915.044455][ T4395] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 915.072038][ T9458] usb 2-1: config 0 interface 161 has no altsetting 0 [ 915.090310][ T4395] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 915.104239][ T9458] usb 2-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 915.117570][ T9458] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.122156][ T4395] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 915.136326][ T9458] usb 2-1: Product: syz [ 915.146442][ T9458] usb 2-1: Manufacturer: syz [ 915.156559][ T9458] usb 2-1: SerialNumber: syz [ 915.156603][ T4395] usb 5-1: Manufacturer: syz [ 915.171964][ T9458] usb 2-1: config 0 descriptor?? [ 915.184614][ T9458] ums-jumpshot 2-1:0.161: USB Mass Storage device detected [ 915.198483][ T4395] usb 5-1: config 0 descriptor?? [ 915.213392][ T9458] ums-jumpshot 2-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 915.393493][T20703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 915.423138][T20703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 915.570457][ T4395] rc_core: IR keymap rc-hauppauge not found [ 915.576456][ T4395] Registered IR keymap rc-empty [ 915.590506][ T4395] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 915.632779][ T4395] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 915.670957][ T4395] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 915.696017][ T4395] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input117 [ 915.739431][ T4395] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 915.790678][ T4395] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 915.836970][ T4395] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 915.859128][T20735] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5754'. [ 915.869759][T20735] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5754'. [ 915.881424][ T4395] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 915.920386][ T4395] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 915.958203][ T4395] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 916.000849][ T4395] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 916.040390][ T4395] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 916.070352][ T4395] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 916.102961][ T4395] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 916.141930][ T4395] mceusb 5-1:0.0: Registered р with mce emulator interface version 1 [ 916.150163][ T4395] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 916.182133][ T4395] usb 5-1: USB disconnect, device number 7 [ 916.260384][ T126] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 916.458709][ T126] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 916.481570][ T126] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 916.520628][ T126] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.528695][ T126] usb 6-1: Product: syz [ 916.541638][ T126] usb 6-1: Manufacturer: syz [ 916.546572][ T126] usb 6-1: SerialNumber: syz [ 916.564111][ T126] usb 6-1: config 0 descriptor?? [ 916.776882][ T4394] usb 6-1: USB disconnect, device number 57 [ 917.360499][ T4394] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 917.550682][ T4394] usb 6-1: Using ep0 maxpacket: 16 [ 917.565330][ T4394] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 917.581700][ T4395] usb 2-1: USB disconnect, device number 20 [ 917.589846][ T4394] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 917.646100][ T4394] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.659514][ T4394] usb 6-1: Product: syz [ 917.673548][ T4394] usb 6-1: Manufacturer: syz [ 917.678214][ T4394] usb 6-1: SerialNumber: syz [ 917.707744][ T4394] usb 6-1: config 0 descriptor?? [ 917.900408][ T9458] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 918.090311][ T9458] usb 1-1: Using ep0 maxpacket: 16 [ 918.097800][ T9458] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 918.120894][ T9458] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 918.144569][ T9458] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 918.172504][ T9458] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 918.206411][ T9458] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 918.242277][ T9458] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 918.258456][ T9458] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 918.273464][ T9458] usb 1-1: Manufacturer: syz [ 918.288188][ T9458] usb 1-1: config 0 descriptor?? [ 918.630343][ T9458] rc_core: IR keymap rc-hauppauge not found [ 918.636337][ T9458] Registered IR keymap rc-empty [ 918.658908][ T9458] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 918.700421][ T9458] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 918.716635][T20798] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5781'. [ 918.751298][ T9458] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 918.784317][ T9458] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input118 [ 918.807226][ T9458] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 918.840455][ T9458] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 918.880316][ T9458] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 918.910415][ T9458] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 918.940530][ T9458] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 918.970591][ T9458] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 919.004778][ T9458] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 919.028838][ T4394] usb 6-1: USB disconnect, device number 58 [ 919.040575][ T9458] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 919.050426][ T4395] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 919.090661][ T9458] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 919.130390][ T9458] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 919.161956][ T9458] mceusb 1-1:0.0: Registered р with mce emulator interface version 1 [ 919.180482][ T9458] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 919.206310][ T9458] usb 1-1: USB disconnect, device number 125 [ 919.250395][ T4395] usb 2-1: Using ep0 maxpacket: 16 [ 919.261730][ T4395] usb 2-1: config 0 has an invalid interface number: 161 but max is 0 [ 919.278618][ T4395] usb 2-1: config 0 has no interface number 0 [ 919.297653][ T4395] usb 2-1: config 0 interface 161 has no altsetting 0 [ 919.323842][ T4395] usb 2-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 919.348803][ T4395] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.368035][ T4395] usb 2-1: Product: syz [ 919.373083][ T4395] usb 2-1: Manufacturer: syz [ 919.377914][ T4395] usb 2-1: SerialNumber: syz [ 919.386842][ T4395] usb 2-1: config 0 descriptor?? [ 919.395329][ T4395] ums-jumpshot 2-1:0.161: USB Mass Storage device detected [ 919.406710][ T4395] ums-jumpshot 2-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 919.490076][T20827] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5791'. [ 919.526864][T20827] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5791'. [ 919.600714][T20800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 919.612144][T20800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 920.570373][ T4395] usb 1-1: new full-speed USB device number 126 using dummy_hcd [ 920.775800][ T4395] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 920.796116][ T4395] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 920.813862][ T4395] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.828853][ T4395] usb 1-1: Product: syz [ 920.837564][ T4395] usb 1-1: Manufacturer: syz [ 920.846854][ T4395] usb 1-1: SerialNumber: syz [ 920.858324][ T4395] usb 1-1: config 0 descriptor?? [ 921.086631][ T22] usb 1-1: USB disconnect, device number 126 [ 921.650334][ T22] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 921.803519][ T4395] usb 2-1: USB disconnect, device number 21 [ 921.830483][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 921.843860][ T22] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 921.871447][ T22] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 921.889793][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.916389][ T22] usb 1-1: Product: syz [ 921.931174][ T22] usb 1-1: Manufacturer: syz [ 921.941317][ T22] usb 1-1: SerialNumber: syz [ 921.962303][ T22] usb 1-1: config 0 descriptor?? [ 921.995670][T20906] delete_channel: no stack [ 923.342247][ T22] usb 1-1: USB disconnect, device number 127 [ 923.817809][T20971] tipc: Started in network mode [ 923.826824][T20971] tipc: Node identity 48c4, cluster identity 4711 [ 923.854006][T20971] tipc: Node number set to 18628 [ 924.318946][T20991] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5860'. [ 924.500525][ T22] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 924.571818][T21001] device syzkaller0 entered promiscuous mode [ 924.689025][ T22] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 924.715445][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.730707][ T22] usb 6-1: Product: syz [ 924.734978][ T22] usb 6-1: Manufacturer: syz [ 924.739627][ T22] usb 6-1: SerialNumber: syz [ 924.766829][ T22] usb 6-1: config 0 descriptor?? [ 924.977485][ T22] dvb_usb_dtv5100: probe of 6-1:0.0 failed with error -71 [ 925.011811][ T22] usb 6-1: USB disconnect, device number 59 [ 925.808792][T21020] raw_sendmsg: syz.5.5869 forgot to set AF_INET. Fix it! [ 927.337721][T21033] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5874'. [ 928.570519][ T4397] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 928.767063][ T4397] usb 3-1: Using ep0 maxpacket: 16 [ 928.775799][ T4397] usb 3-1: config 0 has an invalid interface number: 161 but max is 0 [ 928.801358][ T4397] usb 3-1: config 0 has no interface number 0 [ 928.807589][ T4397] usb 3-1: config 0 interface 161 has no altsetting 0 [ 928.831442][ T4397] usb 3-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 928.849529][ T4397] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.866080][ T4397] usb 3-1: Product: syz [ 928.874006][ T4397] usb 3-1: Manufacturer: syz [ 928.878651][ T4397] usb 3-1: SerialNumber: syz [ 928.896839][ T4397] usb 3-1: config 0 descriptor?? [ 928.917116][ T4397] ums-jumpshot 3-1:0.161: USB Mass Storage device detected [ 928.946201][ T4397] ums-jumpshot 3-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 929.120016][T21049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 929.154347][T21049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 929.234059][ T4264] Bluetooth: hci5: adv larger than maximum supported [ 929.234088][ T4264] Bluetooth: hci5: Malformed LE Event: 0x0d [ 929.298894][T21082] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5890'. [ 929.690410][ T4394] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 929.894615][ T4394] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 929.904022][ T4394] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.916852][ T4394] usb 2-1: Product: syz [ 929.921317][ T4394] usb 2-1: Manufacturer: syz [ 929.926026][ T4394] usb 2-1: SerialNumber: syz [ 929.940714][ T4394] usb 2-1: config 0 descriptor?? [ 930.160122][ T4394] dvb_usb_dtv5100: probe of 2-1:0.0 failed with error -71 [ 930.175899][ T4394] usb 2-1: USB disconnect, device number 22 [ 931.358732][ T4395] usb 3-1: USB disconnect, device number 28 [ 931.378695][T21130] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5908'. [ 931.466663][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.473528][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.562941][T21135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5910'. [ 931.648440][T21142] tipc: Enabling of bearer rejected, failed to enable media [ 932.280583][ T22] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 932.430589][ T4395] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 932.492671][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 932.510374][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 932.530255][ T22] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 932.553242][ T22] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 932.569070][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.591656][ T22] usb 5-1: config 0 descriptor?? [ 932.630602][ T4395] usb 2-1: Using ep0 maxpacket: 16 [ 932.647929][ T4395] usb 2-1: config 0 has an invalid interface number: 161 but max is 0 [ 932.674354][ T4395] usb 2-1: config 0 has no interface number 0 [ 932.693070][ T4395] usb 2-1: config 0 interface 161 has no altsetting 0 [ 932.717322][ T4395] usb 2-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 932.740069][ T4395] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.760674][T21179] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 932.772662][ T4395] usb 2-1: Product: syz [ 932.776948][ T4395] usb 2-1: Manufacturer: syz [ 932.782820][ T4395] usb 2-1: SerialNumber: syz [ 932.795522][ T4395] usb 2-1: config 0 descriptor?? [ 932.813971][ T4395] ums-jumpshot 2-1:0.161: USB Mass Storage device detected [ 932.842675][ T4395] ums-jumpshot 2-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 933.016559][T21165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.037704][T21165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 933.230772][ T22] usbhid 5-1:0.0: can't add hid device: -71 [ 933.236941][ T22] usbhid: probe of 5-1:0.0 failed with error -71 [ 933.278246][ T22] usb 5-1: USB disconnect, device number 8 [ 933.521660][T21197] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5932'. [ 933.878618][ T4266] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 933.891281][ T4266] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 933.900415][ T4266] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 933.909451][ T4266] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 933.919211][ T4266] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 933.926823][ T4266] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 934.095428][T21202] ip6gretap0 speed is unknown, defaulting to 1000 [ 934.156555][T19768] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.257617][T19768] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.286343][T21215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5936'. [ 934.384285][T19768] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.478500][T19768] bond0: (slave netdevsim0): Releasing backup interface [ 934.509630][T19768] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.548259][T21202] chnl_net:caif_netlink_parms(): no params data found [ 934.774817][T21202] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.782587][T21202] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.800051][T21202] device bridge_slave_0 entered promiscuous mode [ 934.810417][T21202] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.817792][T21202] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.826843][T21202] device bridge_slave_1 entered promiscuous mode [ 934.875251][T21231] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5942'. [ 934.997817][T19768] bond1: (slave ip6gretap2): Releasing active interface [ 935.129655][ T4397] ip6gretap0 speed is unknown, defaulting to 1000 [ 935.143641][ T4397] ================================================================== [ 935.151750][ T4397] BUG: KASAN: use-after-free in siw_query_port+0x342/0x430 [ 935.158990][ T4397] Read of size 4 at addr ffff88806738c0e0 by task kworker/0:17/4397 [ 935.166975][ T4397] [ 935.169337][ T4397] CPU: 0 PID: 4397 Comm: kworker/0:17 Not tainted 6.1.117-syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 935.177603][ T4397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 935.187686][ T4397] Workqueue: infiniband ib_cache_event_task [ 935.193640][ T4397] Call Trace: [ 935.196943][ T4397] [ 935.199895][ T4397] dump_stack_lvl+0x1e3/0x2cb [ 935.204603][ T4397] ? nf_tcp_handle_invalid+0x642/0x642 [ 935.210093][ T4397] ? panic+0x764/0x764 [ 935.214191][ T4397] ? _printk+0xd1/0x111 [ 935.218370][ T4397] ? __virt_addr_valid+0x17f/0x530 [ 935.223517][ T4397] ? __virt_addr_valid+0x17f/0x530 [ 935.228666][ T4397] print_report+0x15f/0x4f0 [ 935.233191][ T4397] ? __virt_addr_valid+0x17f/0x530 [ 935.238315][ T4397] ? __virt_addr_valid+0x17f/0x530 [ 935.243439][ T4397] ? __virt_addr_valid+0x45b/0x530 [ 935.248563][ T4397] ? __phys_addr+0xb6/0x170 [ 935.253519][ T4397] ? siw_query_port+0x342/0x430 [ 935.258378][ T4397] kasan_report+0x136/0x160 [ 935.262887][ T4397] ? siw_query_port+0x342/0x430 [ 935.267747][ T4397] siw_query_port+0x342/0x430 [ 935.272455][ T4397] ? ib_query_port+0x344/0x7c0 [ 935.277237][ T4397] ib_cache_update+0x1a8/0xaf0 [ 935.282017][ T4397] ? ib_cache_setup_one+0x5b0/0x5b0 [ 935.287225][ T4397] ? read_lock_is_recursive+0x10/0x10 [ 935.292614][ T4397] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 935.298613][ T4397] ? print_irqtrace_events+0x210/0x210 [ 935.304081][ T4397] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 935.309987][ T4397] ib_cache_event_task+0xef/0x1e0 [ 935.315025][ T4397] ? process_one_work+0x7a9/0x11d0 [ 935.320141][ T4397] process_one_work+0x8a9/0x11d0 [ 935.325096][ T4397] ? worker_detach_from_pool+0x260/0x260 [ 935.330749][ T4397] ? _raw_spin_lock_irqsave+0x120/0x120 [ 935.336304][ T4397] ? kthread_data+0x4e/0xc0 [ 935.340819][ T4397] ? wq_worker_running+0x97/0x190 [ 935.345866][ T4397] worker_thread+0xa47/0x1200 [ 935.350553][ T4397] ? _raw_spin_unlock+0x40/0x40 [ 935.355414][ T4397] kthread+0x28d/0x320 [ 935.359483][ T4397] ? worker_clr_flags+0x190/0x190 [ 935.364609][ T4397] ? kthread_blkcg+0xd0/0xd0 [ 935.369200][ T4397] ret_from_fork+0x1f/0x30 [ 935.373629][ T4397] [ 935.376649][ T4397] [ 935.378971][ T4397] Allocated by task 13914: [ 935.383417][ T4397] kasan_set_track+0x4b/0x70 [ 935.388026][ T4397] __kasan_kmalloc+0x97/0xb0 [ 935.392618][ T4397] __kmalloc_node+0xb3/0x230 [ 935.397227][ T4397] kvmalloc_node+0x6e/0x180 [ 935.401739][ T4397] alloc_netdev_mqs+0x85/0xeb0 [ 935.406512][ T4397] rtnl_create_link+0x2e9/0xa30 [ 935.411389][ T4397] rtnl_newlink+0x1403/0x2050 [ 935.416074][ T4397] rtnetlink_rcv_msg+0x818/0xff0 [ 935.421011][ T4397] netlink_rcv_skb+0x1cd/0x410 [ 935.425803][ T4397] netlink_unicast+0x7d8/0x970 [ 935.430593][ T4397] netlink_sendmsg+0xa26/0xd60 [ 935.435391][ T4397] __sys_sendto+0x480/0x600 [ 935.440016][ T4397] __x64_sys_sendto+0xda/0xf0 [ 935.444716][ T4397] do_syscall_64+0x3b/0xb0 [ 935.449139][ T4397] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 935.455046][ T4397] [ 935.457367][ T4397] Freed by task 19768: [ 935.461433][ T4397] kasan_set_track+0x4b/0x70 [ 935.466037][ T4397] kasan_save_free_info+0x27/0x40 [ 935.471083][ T4397] ____kasan_slab_free+0xd6/0x120 [ 935.476190][ T4397] __kmem_cache_free+0x25c/0x3c0 [ 935.481129][ T4397] device_release+0x91/0x1c0 [ 935.485719][ T4397] kobject_put+0x224/0x460 [ 935.490154][ T4397] netdev_run_todo+0xe56/0xf40 [ 935.494946][ T4397] ip6gre_exit_batch_net+0x41a/0x460 [ 935.500246][ T4397] cleanup_net+0x763/0xb60 [ 935.504681][ T4397] process_one_work+0x8a9/0x11d0 [ 935.509630][ T4397] worker_thread+0xa47/0x1200 [ 935.514345][ T4397] kthread+0x28d/0x320 [ 935.518412][ T4397] ret_from_fork+0x1f/0x30 [ 935.522840][ T4397] [ 935.525165][ T4397] The buggy address belongs to the object at ffff88806738c000 [ 935.525165][ T4397] which belongs to the cache kmalloc-cg-4k of size 4096 [ 935.539480][ T4397] The buggy address is located 224 bytes inside of [ 935.539480][ T4397] 4096-byte region [ffff88806738c000, ffff88806738d000) [ 935.552847][ T4397] [ 935.555169][ T4397] The buggy address belongs to the physical page: [ 935.561677][ T4397] page:ffffea00019ce200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x67388 [ 935.571826][ T4397] head:ffffea00019ce200 order:3 compound_mapcount:0 compound_pincount:0 [ 935.580145][ T4397] memcg:ffff88803027e8c1 [ 935.584384][ T4397] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 935.592379][ T4397] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017c4c280 [ 935.600965][ T4397] raw: 0000000000000000 0000000000040004 00000001ffffffff ffff88803027e8c1 [ 935.609543][ T4397] page dumped because: kasan: bad access detected [ 935.615963][ T4397] page_owner tracks the page as allocated [ 935.621687][ T4397] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 13914, tgid 13914 (syz-executor), ts 630322325229, free_ts 630035059780 [ 935.644797][ T4397] post_alloc_hook+0x18d/0x1b0 [ 935.649569][ T4397] get_page_from_freelist+0x3731/0x38d0 [ 935.655117][ T4397] __alloc_pages+0x28d/0x770 [ 935.659709][ T4397] alloc_slab_page+0x6a/0x150 [ 935.664396][ T4397] new_slab+0x84/0x2d0 [ 935.668470][ T4397] ___slab_alloc+0xc20/0x1270 [ 935.673150][ T4397] __kmem_cache_alloc_node+0x19f/0x260 [ 935.678614][ T4397] kmalloc_trace+0x26/0xe0 [ 935.683041][ T4397] ipv6_add_dev+0x5a7/0x1180 [ 935.687641][ T4397] addrconf_notify+0x7a6/0xf60 [ 935.692408][ T4397] raw_notifier_call_chain+0xd0/0x170 [ 935.697783][ T4397] call_netdevice_notifiers+0x145/0x1b0 [ 935.703329][ T4397] register_netdevice+0x12f2/0x1720 [ 935.708534][ T4397] tun_set_iff+0x861/0xe80 [ 935.712957][ T4397] __tun_chr_ioctl+0x78e/0x2430 [ 935.717816][ T4397] __se_sys_ioctl+0xf1/0x160 [ 935.722405][ T4397] page last free stack trace: [ 935.727069][ T4397] free_unref_page_prepare+0xf63/0x1120 [ 935.732617][ T4397] free_unref_page+0x33/0x3e0 [ 935.737296][ T4397] __vunmap+0x834/0x9a0 [ 935.741461][ T4397] kcov_close+0x27/0x50 [ 935.745654][ T4397] __fput+0x3f6/0x8d0 [ 935.749643][ T4397] task_work_run+0x246/0x300 [ 935.754243][ T4397] do_exit+0xa73/0x26a0 [ 935.758460][ T4397] do_group_exit+0x202/0x2b0 [ 935.763056][ T4397] get_signal+0x16f7/0x17d0 [ 935.767578][ T4397] arch_do_signal_or_restart+0xb0/0x1a10 [ 935.773234][ T4397] exit_to_user_mode_loop+0x6a/0x100 [ 935.778520][ T4397] exit_to_user_mode_prepare+0xb1/0x140 [ 935.784070][ T4397] syscall_exit_to_user_mode+0x60/0x270 [ 935.789627][ T4397] do_syscall_64+0x47/0xb0 [ 935.794048][ T4397] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 935.799950][ T4397] [ 935.802272][ T4397] Memory state around the buggy address: [ 935.807907][ T4397] ffff88806738bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 935.815965][ T4397] ffff88806738c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 935.824028][ T4397] >ffff88806738c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 935.832170][ T4397] ^ [ 935.839380][ T4397] ffff88806738c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 935.847441][ T4397] ffff88806738c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 935.855500][ T4397] ================================================================== [ 935.863577][ C0] vkms_vblank_simulate: vblank timer overrun [ 935.874648][ T126] usb 2-1: USB disconnect, device number 23 [ 935.952169][ T4694] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 936.020401][ T4264] Bluetooth: hci2: command tx timeout [ 936.128200][ T4397] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 936.135456][ T4397] CPU: 0 PID: 4397 Comm: kworker/0:17 Not tainted 6.1.117-syzkaller #0 [ 936.143710][ T4397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 936.153780][ T4397] Workqueue: infiniband ib_cache_event_task [ 936.159678][ T4397] Call Trace: [ 936.162957][ T4397] [ 936.165907][ T4397] dump_stack_lvl+0x1e3/0x2cb [ 936.170618][ T4397] ? nf_tcp_handle_invalid+0x642/0x642 [ 936.176103][ T4397] ? panic+0x764/0x764 [ 936.180185][ T4397] ? preempt_schedule_common+0xa6/0xd0 [ 936.185664][ T4397] ? vscnprintf+0x59/0x80 [ 936.190012][ T4397] panic+0x318/0x764 [ 936.193926][ T4397] ? check_panic_on_warn+0x1d/0xa0 [ 936.199047][ T4397] ? memcpy_page_flushcache+0xfc/0xfc [ 936.204428][ T4397] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 936.210436][ T4397] ? _raw_spin_unlock+0x40/0x40 [ 936.215300][ T4397] ? print_report+0x4a3/0x4f0 [ 936.219990][ T4397] check_panic_on_warn+0x7e/0xa0 [ 936.224963][ T4397] ? siw_query_port+0x342/0x430 [ 936.229824][ T4397] end_report+0x66/0x110 [ 936.234079][ T4397] kasan_report+0x143/0x160 [ 936.238582][ T4397] ? siw_query_port+0x342/0x430 [ 936.243451][ T4397] siw_query_port+0x342/0x430 [ 936.248145][ T4397] ? ib_query_port+0x344/0x7c0 [ 936.252929][ T4397] ib_cache_update+0x1a8/0xaf0 [ 936.257734][ T4397] ? ib_cache_setup_one+0x5b0/0x5b0 [ 936.262968][ T4397] ? read_lock_is_recursive+0x10/0x10 [ 936.268378][ T4397] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 936.274378][ T4397] ? print_irqtrace_events+0x210/0x210 [ 936.279865][ T4397] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 936.285832][ T4397] ib_cache_event_task+0xef/0x1e0 [ 936.290875][ T4397] ? process_one_work+0x7a9/0x11d0 [ 936.296002][ T4397] process_one_work+0x8a9/0x11d0 [ 936.300982][ T4397] ? worker_detach_from_pool+0x260/0x260 [ 936.306635][ T4397] ? _raw_spin_lock_irqsave+0x120/0x120 [ 936.312195][ T4397] ? kthread_data+0x4e/0xc0 [ 936.316724][ T4397] ? wq_worker_running+0x97/0x190 [ 936.321756][ T4397] worker_thread+0xa47/0x1200 [ 936.326443][ T4397] ? _raw_spin_unlock+0x40/0x40 [ 936.331343][ T4397] kthread+0x28d/0x320 [ 936.335415][ T4397] ? worker_clr_flags+0x190/0x190 [ 936.340458][ T4397] ? kthread_blkcg+0xd0/0xd0 [ 936.345065][ T4397] ret_from_fork+0x1f/0x30 [ 936.349503][ T4397] [ 936.352951][ T4397] Kernel Offset: disabled [ 936.357286][ T4397] Rebooting in 86400 seconds..