last executing test programs: 4m57.668865936s ago: executing program 3 (id=282): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000340)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000010001"], 0x50) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x58f, 0x9410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x3f}}]}}, 0x0) 4m53.578746456s ago: executing program 3 (id=290): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) timer_create(0x2, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r2, 0xe54aef35e9c2845d, &(0x7f0000000280)={{}, {0x0, 0x9}}, 0x0) socket(0x2d, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 4m51.887709461s ago: executing program 3 (id=291): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000001c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) writev(0xffffffffffffffff, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) write$binfmt_script(r2, &(0x7f0000000040)={'#! ', './file0', [{}, {0x20, '#! '}]}, 0x10) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10}}]}}, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)={0x0, 0x30, 0xc, "00004700000040f400bec073"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unshare(0x2c020400) syz_usb_connect$uac1(0x2, 0xa3, &(0x7f0000000080)=ANY=[@ANYBLOB="12010102000000206b1d01014000010203010902910013010140cc0904000000010100000a2401f5ffff020102132406060406040003000300030003000a000705240501030a24040508e53a273e3108240405047b653609040100000102000009040101010102000008240201080200030905010920003b0008072501020510000904020000010200000904020101010220000905820920"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x8) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) ioctl$SG_SET_COMMAND_Q(r6, 0x2271, &(0x7f00000000c0)) r7 = fsopen(&(0x7f0000000580)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r7, 0x3, &(0x7f00000005c0)='\x00', 0x0, r5) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) 4m44.769683685s ago: executing program 0 (id=301): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000b00)=0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000200)=0x1b) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0xb3d) ioctl$TCXONC(r2, 0x540a, 0x2) io_submit(0x0, 0x0, 0x0) r3 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r3, 0xc0044dff, &(0x7f0000000100)=0x9) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, 0x0) 4m44.51775577s ago: executing program 0 (id=302): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000340)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000080)={0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000010001"], 0x50) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x58f, 0x9410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x3f}}]}}, 0x0) 4m44.064208055s ago: executing program 3 (id=303): r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x18, &(0x7f0000000740)={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000400)={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m43.29224818s ago: executing program 3 (id=307): syz_emit_ethernet(0x7c, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0) r0 = getpgrp(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1000, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0xb, 0x1, 0x4f424752, 0x2, 0x11, 0x5, 0x1, 0xa, 0x0, 0x1, 0x0, 0x4}}) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x6]) r5 = socket$rxrpc(0x21, 0x2, 0x2) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) socket(0x10, 0x803, 0x0) getsockname(r5, 0x0, &(0x7f0000000300)) open(&(0x7f0000000040)='./file2\x00', 0x1, 0x104) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)={0x28, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x10, 0x11, 0x0, 0x1, [@nested={0xc, 0x23, 0x0, 0x1, [@typed={0x8, 0x12b, 0x0, 0x0, @pid}]}]}]}, 0x28}], 0x1}, 0x0) 4m41.335351736s ago: executing program 3 (id=310): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/231, 0x37}, 0x275a}], 0x1, 0x60010020, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffd, 0xfffffffc}, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) ioprio_set$pid(0x3, 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r5, 0x0, 0x0) sendfile(r5, r5, &(0x7f0000000080)=0x2, 0x7f03) r6 = socket$pptp(0x18, 0x1, 0x2) sendto$inet6(r4, &(0x7f0000000280)="d9803f88931cbad8757b831ae6dfdc22f6378318d7f71ba0679033bf706d7712d2977b42227cdf388027d7dc15673515e33f576f9c2da4df07180f0c", 0x3c, 0x40000, &(0x7f0000000340)={0xa, 0x4e23, 0x9, @empty, 0x2}, 0x1c) bind$pptp(r6, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r6, &(0x7f0000000140)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) connect$pptp(r6, &(0x7f0000000080)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x45, 0xc3, 0x3f, 0x8, 0x5ac, 0x247, 0xb023, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) 4m41.090440495s ago: executing program 0 (id=311): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x5e354e85433d0937, &(0x7f0000000180)="10000000000000000100000041000000", 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001440)={'\x00', 0x4212}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0x9) ioctl$TUNSETDEBUG(r1, 0x400454c9, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xb, &(0x7f0000000140)={0xd}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000180)=0xb) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x959, 0x0) read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x3ff) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000240)) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r6 = epoll_create1(0x0) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000800)='$\x00', 0x2) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x2}) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x12040d4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) 4m36.851724212s ago: executing program 0 (id=318): syz_emit_ethernet(0x7c, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd61bc550dd1dc2f01fe800000000000bbfe8000000000000000000000800000aa0c2088be000000010000010088a8000086dd080088be000000031c08c5020100000000007b40080022eb0080000223022309020000000000000300ebb41b0800655800000004000000800000000072e984acfb7b69ed51b4cab619f80615a3f47d296a4658e8b7957cc58fd13ee422855854ebd28bfbd69bedfeb92cb21c88f8b6b919fbd1d7bfd3336b1f1ed74a03fd35227e316fe3bf2226645e8b9a8f1e31521003d1e837e406a7a0f89074c741326b10b4c2c2c53dcaf4a610c2f2a3ddb89bc98a5b5416beea91304410af40de4fea76afaa15a9a8cf5f45fc43eedbc04a37797a9d65710b72205fe8abbc693ca79634b97dc050ed18816852bda0a410c3a610f96d3fb3dbe670fb33de9475ba07d8d45716508c7d48e06051630eb8dd38b2522ba27b301205fcc2edd58c57fe31af50520d45f75d95774fc3c37d92ce77a7160ecbaa885587"], 0x0) r0 = getpgrp(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1000, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) semop(0x0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) r5 = syz_open_dev$video(&(0x7f0000000180), 0x3, 0x1) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0xb, 0x1, 0x4f424752, 0x2, 0x11, 0x5, 0x1, 0xa, 0x0, 0x1, 0x0, 0x4}}) socket$rxrpc(0x21, 0x2, 0x2) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) 4m34.54091326s ago: executing program 0 (id=319): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) 4m26.113219668s ago: executing program 32 (id=310): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/231, 0x37}, 0x275a}], 0x1, 0x60010020, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffd, 0xfffffffc}, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) ioprio_set$pid(0x3, 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r5, 0x0, 0x0) sendfile(r5, r5, &(0x7f0000000080)=0x2, 0x7f03) r6 = socket$pptp(0x18, 0x1, 0x2) sendto$inet6(r4, &(0x7f0000000280)="d9803f88931cbad8757b831ae6dfdc22f6378318d7f71ba0679033bf706d7712d2977b42227cdf388027d7dc15673515e33f576f9c2da4df07180f0c", 0x3c, 0x40000, &(0x7f0000000340)={0xa, 0x4e23, 0x9, @empty, 0x2}, 0x1c) bind$pptp(r6, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r6, &(0x7f0000000140)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) connect$pptp(r6, &(0x7f0000000080)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x45, 0xc3, 0x3f, 0x8, 0x5ac, 0x247, 0xb023, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) 4m25.681311461s ago: executing program 0 (id=335): syz_usb_connect(0x5, 0xe4, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d200010000400009046a"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0d, 0xffffffff}, 0x0) syz_open_dev$vim2m(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x4, 0x0, 0x0, 0x8}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000580)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000600)=[@sack_perm], 0x8cbd752) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x28bd, 0x933, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000200)={0x14, &(0x7f00000002c0)={0x20, 0xd, 0x9, {0x9, 0x11, "16966f071ab99d"}}, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000040)={0x6f, 0x20, 0x4, 0x3, "d80004000000000000957f00003d4a100a000000000020020661e6e66b8b37ff"}) getsockopt$inet_tcp_buf(r2, 0x6, 0xb, 0x0, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) 4m9.887023658s ago: executing program 33 (id=335): syz_usb_connect(0x5, 0xe4, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d200010000400009046a"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0d, 0xffffffff}, 0x0) syz_open_dev$vim2m(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x4, 0x0, 0x0, 0x8}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000580)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000600)=[@sack_perm], 0x8cbd752) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x28bd, 0x933, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000200)={0x14, &(0x7f00000002c0)={0x20, 0xd, 0x9, {0x9, 0x11, "16966f071ab99d"}}, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000040)={0x6f, 0x20, 0x4, 0x3, "d80004000000000000957f00003d4a100a000000000020020661e6e66b8b37ff"}) getsockopt$inet_tcp_buf(r2, 0x6, 0xb, 0x0, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) 26.151197132s ago: executing program 4 (id=642): r0 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_KEEPCAPS(0x59616d61, 0x1ffffffffffffff) write$dsp(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x2000c0d5) syz_emit_ethernet(0x5a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x8, 0x4, 0x0, 0x3c, 0x4c, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@ssrr={0x89, 0x7, 0x1e, [@multicast1]}, @lsrr={0x83, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x10, 0x7f, 0x20000a30, 0x0, 0x0, 0x4, 0x7, 0x0, 0x6}}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x0) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000840)={0x2, 0x3, 0x0, 0x5, 0x9, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0xe, @in6={0xa, 0x4e21, 0x3, @mcast1, 0x6}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}]}, 0x48}}, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f00000025c0)={0xd, @meta={0x4531434d, 0x4d58ec72, 0x1a68, 0xfb1e, 0x79e6895}}) r6 = socket(0x11, 0x2, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) setsockopt$RXRPC_SECURITY_KEY(r6, 0x110, 0x1, &(0x7f0000000140)=']\x91%.\x00', 0x5) syz_usb_connect(0x0, 0x41, &(0x7f0000000440)={{0x12, 0x1, 0x310, 0xfd, 0x3d, 0xc3, 0x8, 0x499, 0x5002, 0x5505, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x8, 0x5, 0x80, 0x10}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) 15.062428694s ago: executing program 4 (id=656): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x0, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x2c}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x3, 0x0, 0x24}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{0x0}], 0x1) 14.904270824s ago: executing program 4 (id=657): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, 0x0, 0x2c2) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000340)={0x28, 0x0, 0x2710, @host}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) 7.800366081s ago: executing program 1 (id=669): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x9) setsockopt$inet_int(r1, 0x0, 0x18, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000780), 0x0, 0x8, 0xfffffffe) syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) capset(0x0, 0x0) 6.948804741s ago: executing program 1 (id=671): r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) mmap$snddsp_status(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x1000000, 0x110, 0xffffffffffffffff, 0x82000000) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x28e08a7aa33ba155) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, 0x0) close(r5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x1d, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac1414", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) read$FUSE(r6, 0x0, 0x0) 4.83716494s ago: executing program 1 (id=672): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, &(0x7f0000000400)) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018}, './file1\x00'}) r3 = timerfd_create(0x8, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400808d}, 0x240000c4) 4.816268414s ago: executing program 2 (id=673): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x26004885) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000009b80)=""/102392, 0x18ff8) iopl(0x3) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 4.814670784s ago: executing program 4 (id=674): socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x18a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r2, @ANYRES64=r0], 0x0) 2.798748617s ago: executing program 1 (id=675): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0xa) 2.288429843s ago: executing program 2 (id=676): socket$netlink(0x10, 0x3, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 2.028448459s ago: executing program 1 (id=677): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000340)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="000000000000000001"], 0x50) 1.822402354s ago: executing program 2 (id=678): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xa, 0x2, 0x8, 0x2}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_init_net_socket$rose(0xb, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07, 0x1e3, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x3}) 1.77040326s ago: executing program 1 (id=679): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) 939.703678ms ago: executing program 2 (id=680): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}]}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000180)="484a1e9f0a296a1edda568735b175adba4a3682cabf4e8373bb7e7daf0dce87850ec769df0796230b08ed89fce6abe202dec401a3a8e7b87d7eaa3fda0984550f74589859ef7a5f516a584fa15cfcb2e45c1bb2c33905d9b03fec894fdb285c03c99a80e1e8f4a0401b76c6328d378f237ee3370dd0d60ffabbca116eb882e12e042b371f637108a6b2bbb5fd7e8464ed528b333bf1d959d3b92511f72de2f6990a0e22652b82e3d17a4bbe4", &(0x7f0000000300)=""/137, &(0x7f00000003c0), 0x0, 0x1}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)}], 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="ef16", 0x0}, 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 477.311884ms ago: executing program 4 (id=681): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e28, 0x8, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 172.373822ms ago: executing program 2 (id=682): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000050000090900010073797a310000000054000000030a03000000000000000000050000030900010073797a31000000000900030073797a3200000000280004800800014000000001080002400a7b1af2140003006970766c616e31000000000000000000140000"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4085}, 0x20000004) 25.399167ms ago: executing program 4 (id=683): r0 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160"], 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=684): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x26004885) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000009b80)=""/102392, 0x18ff8) iopl(0x3) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) kernel console output (not intermixed with test programs): 1528 failed with error -71 [ 264.011590][ T10] usb 3-1: USB disconnect, device number 20 [ 264.137555][ T5941] usb 2-1: Using ep0 maxpacket: 16 [ 264.139750][ T5941] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.139803][ T5941] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b29, bcdDevice= 0.00 [ 264.139841][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.144287][ T5941] usb 2-1: config 0 descriptor?? [ 264.198879][ T5941] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 264.421162][ T36] usb 2-1: USB disconnect, device number 29 [ 266.236621][ T10] usb 1-1: USB disconnect, device number 17 [ 266.606360][ T1746] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 267.206569][ T6874] ======================================================= [ 267.206569][ T6874] WARNING: The mand mount option has been deprecated and [ 267.206569][ T6874] and is ignored by this kernel. Remove the mand [ 267.206569][ T6874] option from the mount to silence this warning. [ 267.206569][ T6874] ======================================================= [ 268.031466][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 268.033111][ T1746] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 268.033136][ T1746] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.033157][ T1746] usb 3-1: config 0 has no interface number 0 [ 268.033195][ T1746] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 268.033253][ T1746] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.081453][ T1746] usb 3-1: config 0 descriptor?? [ 268.139638][ T1746] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 268.176978][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 268.182203][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.182259][ T10] usb 1-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 268.182283][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.195034][ T10] usb 1-1: config 0 descriptor?? [ 268.250560][ T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 268.441314][ T10] usb 1-1: USB disconnect, device number 18 [ 269.698362][ T6888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.698936][ T6888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.825679][ T12] usb 3-1: Failed to submit usb control message: -110 [ 269.825718][ T12] usb 3-1: unable to send the bmi data to the device: -110 [ 269.825737][ T12] usb 3-1: unable to get target info from device [ 269.825753][ T12] usb 3-1: could not get target info (-110) [ 269.825771][ T12] usb 3-1: could not probe fw (-110) [ 270.710357][ T6901] binder: 6900:6901 ioctl 4018620d 0 returned -22 [ 270.797685][ T6903] usb usb8: usbfs: process 6903 (syz.1.251) did not claim interface 0 before use [ 270.804577][ T6903] netlink: 32 bytes leftover after parsing attributes in process `syz.1.251'. [ 270.879352][ T6905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.256'. [ 270.881370][ T6905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.256'. [ 271.082648][ T31] usb 3-1: USB disconnect, device number 21 [ 271.106422][ T10] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 271.239147][ T6910] Bluetooth: MGMT ver 1.23 [ 271.282503][ T10] usb 2-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 271.282532][ T10] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 271.285401][ T10] usb 2-1: New USB device found, idVendor=04bb, idProduct=0930, bcdDevice= e.5d [ 271.285448][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.285470][ T10] usb 2-1: Product: syz [ 271.285485][ T10] usb 2-1: Manufacturer: syz [ 271.285500][ T10] usb 2-1: SerialNumber: syz [ 271.476382][ T5882] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 271.591490][ T36] usb 2-1: USB disconnect, device number 30 [ 271.637721][ T5882] usb 1-1: Using ep0 maxpacket: 8 [ 271.648241][ T5882] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.648398][ T5882] usb 1-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 271.648477][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.672995][ T5882] usb 1-1: config 0 descriptor?? [ 271.697237][ T5882] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 271.886000][ T31] usb 1-1: USB disconnect, device number 19 [ 274.816345][ T31] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 274.936412][ T36] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 274.967773][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 274.970418][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.970478][ T31] usb 5-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 274.970501][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.018372][ T31] usb 5-1: config 0 descriptor?? [ 275.043560][ T31] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 275.118379][ T36] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 275.118409][ T36] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.118434][ T36] usb 1-1: config 0 has no interface number 0 [ 275.118479][ T36] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 275.118495][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.141678][ T36] usb 1-1: config 0 descriptor?? [ 275.223242][ T36] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 275.225267][ T809] usb 5-1: USB disconnect, device number 23 [ 275.256419][ T31] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 275.414772][ T31] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 275.414800][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.414819][ T31] usb 3-1: config 0 has no interface number 0 [ 275.414866][ T31] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 275.414891][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.466955][ T31] usb 3-1: config 0 descriptor?? [ 275.530546][ T31] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 275.907797][ T6946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.908869][ T6946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.268810][ T1209] usb 1-1: Failed to submit usb control message: -110 [ 276.268850][ T1209] usb 1-1: unable to send the bmi data to the device: -110 [ 276.268869][ T1209] usb 1-1: unable to get target info from device [ 276.268885][ T1209] usb 1-1: could not get target info (-110) [ 276.268902][ T1209] usb 1-1: could not probe fw (-110) [ 276.587364][ T3611] usb 3-1: Failed to submit usb control message: -110 [ 276.587404][ T3611] usb 3-1: unable to send the bmi data to the device: -110 [ 276.587423][ T3611] usb 3-1: unable to get target info from device [ 276.587438][ T3611] usb 3-1: could not get target info (-110) [ 276.587456][ T3611] usb 3-1: could not probe fw (-110) [ 279.357039][ T31] usb 3-1: USB disconnect, device number 22 [ 281.526120][ T5882] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 281.551743][ T5911] usb 1-1: USB disconnect, device number 20 [ 283.463360][ T5882] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.463388][ T5882] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 283.463435][ T5882] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 283.749011][ T6981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.278'. [ 285.502180][ T5882] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 285.502212][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.539539][ T5882] usb 4-1: can't set config #1, error -71 [ 285.558667][ T5882] usb 4-1: USB disconnect, device number 21 [ 285.877931][ T5911] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 286.308951][ T5882] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 286.586351][ T5911] usb 2-1: Using ep0 maxpacket: 16 [ 286.595254][ T5911] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 286.595282][ T5911] usb 2-1: config 0 has no interface number 0 [ 286.605918][ T5911] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 286.605950][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.605970][ T5911] usb 2-1: Product: syz [ 286.605985][ T5911] usb 2-1: Manufacturer: syz [ 286.606000][ T5911] usb 2-1: SerialNumber: syz [ 286.668548][ T5911] usb 2-1: config 0 descriptor?? [ 286.755785][ T5911] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 286.938797][ T5911] gspca_spca1528: reg_w err -71 [ 286.956492][ T5911] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 286.990152][ T5911] usb 2-1: USB disconnect, device number 31 [ 289.086385][ T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 289.270122][ T5882] usb 4-1: Using ep0 maxpacket: 8 [ 289.272577][ T5882] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.272634][ T5882] usb 4-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 289.272659][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.284072][ T5882] usb 4-1: config 0 descriptor?? [ 289.299146][ T5882] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 289.373751][ T5882] usb 4-1: USB disconnect, device number 22 [ 289.377513][ T10] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 289.377538][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.377559][ T10] usb 1-1: config 0 has no interface number 0 [ 289.377607][ T10] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 289.377639][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.522126][ T10] usb 1-1: config 0 descriptor?? [ 289.594957][ T10] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 289.746419][ T5801] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 290.862694][ T43] usb 1-1: Failed to submit usb control message: -110 [ 290.862731][ T43] usb 1-1: unable to send the bmi data to the device: -110 [ 290.862749][ T43] usb 1-1: unable to get target info from device [ 290.862764][ T43] usb 1-1: could not get target info (-110) [ 290.862781][ T43] usb 1-1: could not probe fw (-110) [ 290.911913][ T5801] usb 5-1: Using ep0 maxpacket: 32 [ 290.968642][ T5801] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.968662][ T5801] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 291.009323][ T5801] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 291.009360][ T5801] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.009375][ T5801] usb 5-1: Product: syz [ 291.009386][ T5801] usb 5-1: Manufacturer: syz [ 291.009396][ T5801] usb 5-1: SerialNumber: syz [ 291.058185][ T5801] usb 5-1: config 0 descriptor?? [ 291.426629][ T5882] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 291.584109][ T7025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.599950][ T7025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.636520][ T5882] usb 2-1: Using ep0 maxpacket: 32 [ 291.646962][ T5882] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.647034][ T5882] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 291.687144][ T5882] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 291.687167][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.687182][ T5882] usb 2-1: Product: syz [ 291.687196][ T5882] usb 2-1: Manufacturer: syz [ 291.687206][ T5882] usb 2-1: SerialNumber: syz [ 291.714920][ T5882] usb 2-1: config 0 descriptor?? [ 293.156373][ T5882] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 293.448631][ T5882] usb 4-1: Using ep0 maxpacket: 32 [ 293.460661][ T5882] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.460738][ T5882] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 293.492436][ T5868] usb 1-1: USB disconnect, device number 21 [ 293.617359][ T5882] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 293.617382][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.617397][ T5882] usb 4-1: Product: syz [ 293.617408][ T5882] usb 4-1: Manufacturer: syz [ 293.617418][ T5882] usb 4-1: SerialNumber: syz [ 293.704462][ T5882] usb 4-1: config 0 descriptor?? [ 294.978840][ T7049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.979761][ T7049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.488331][ T5868] usb 5-1: USB disconnect, device number 24 [ 295.703839][ T7053] usb usb8: usbfs: process 7053 (syz.4.294) did not claim interface 0 before use [ 295.705010][ T7053] netlink: 12 bytes leftover after parsing attributes in process `syz.4.294'. [ 295.849082][ T7053] netlink: 12 bytes leftover after parsing attributes in process `syz.4.294'. [ 295.928551][ T31] usb 2-1: USB disconnect, device number 32 [ 296.056870][ T5868] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 296.137732][ T7053] netlink: 12 bytes leftover after parsing attributes in process `syz.4.294'. [ 296.218834][ T5868] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 296.218856][ T5868] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 296.221179][ T5868] usb 5-1: New USB device found, idVendor=04bb, idProduct=0930, bcdDevice= e.5d [ 296.221200][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.221214][ T5868] usb 5-1: Product: syz [ 296.221227][ T5868] usb 5-1: Manufacturer: syz [ 296.221237][ T5868] usb 5-1: SerialNumber: syz [ 296.493102][ T10] usb 5-1: USB disconnect, device number 25 [ 298.714518][ T7022] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 298.856412][ T7022] usb 5-1: Using ep0 maxpacket: 8 [ 298.858431][ T7022] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.858488][ T7022] usb 5-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 298.858513][ T7022] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.864225][ T7022] usb 5-1: config 0 descriptor?? [ 298.937350][ T7022] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 299.006373][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 299.027047][ T7022] usb 4-1: USB disconnect, device number 23 [ 299.070146][ T5801] usb 5-1: USB disconnect, device number 26 [ 299.166366][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 299.176962][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.177021][ T10] usb 1-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 299.177046][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.214305][ T10] usb 1-1: config 0 descriptor?? [ 299.242148][ T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 299.419376][ T10] usb 1-1: USB disconnect, device number 22 [ 299.778578][ T7084] netlink: 12 bytes leftover after parsing attributes in process `syz.4.305'. [ 303.476364][ T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 303.483843][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.309'. [ 303.659071][ T7103] tap0: tun_chr_ioctl cmd 1074025673 [ 306.196342][ T5882] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 306.368643][ T5882] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 306.368719][ T5882] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 306.368743][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.812883][ T5882] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 308.630651][ T5882] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 308.634891][ T5882] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 308.634914][ T5882] stv0680 2-1:4.0: last error: 86, command = 0x0 [ 308.834312][ T5801] usb 2-1: USB disconnect, device number 33 [ 309.386361][ T36] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 309.497587][ T5801] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 309.776369][ T36] usb 5-1: Using ep0 maxpacket: 8 [ 310.958878][ T36] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.958908][ T36] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 310.990667][ T36] usb 5-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 310.990700][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.990721][ T36] usb 5-1: Product: syz [ 310.990736][ T36] usb 5-1: Manufacturer: syz [ 310.990751][ T36] usb 5-1: SerialNumber: syz [ 311.000255][ T36] usb 5-1: config 0 descriptor?? [ 314.196170][ T36] usb 5-1: USB disconnect, device number 27 [ 316.376375][ T5801] usb 4-1: device descriptor read/all, error -110 [ 316.558822][ T5801] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 316.708022][ T5801] usb 4-1: device descriptor read/64, error -32 [ 316.826825][ T5801] usb usb4-port1: attempt power cycle [ 317.159874][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.159927][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.196391][ T5801] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 317.216722][ T5801] usb 4-1: device descriptor read/8, error -32 [ 317.346375][ T5882] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 317.466320][ T5801] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 317.486557][ T5801] usb 4-1: device descriptor read/8, error -32 [ 317.496388][ T5882] usb 2-1: Using ep0 maxpacket: 16 [ 317.513943][ T5882] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 317.513968][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 317.596646][ T5801] raw-gadget.1 gadget.3: failed to queue suspend event [ 317.596903][ T5801] usb usb4-port1: unable to enumerate USB device [ 317.621395][ T5882] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 317.621423][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.621440][ T5882] usb 2-1: Product: syz [ 317.621453][ T5882] usb 2-1: Manufacturer: syz [ 317.621465][ T5882] usb 2-1: SerialNumber: syz [ 317.702766][ T5113] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 317.729150][ T5113] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 317.729757][ T5882] usb 2-1: config 0 descriptor?? [ 317.732879][ T5113] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 317.784248][ T5882] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 317.784275][ T5882] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 317.812509][ T5113] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 317.813722][ T5113] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 318.127271][ T5868] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 318.156457][ T31] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 318.288617][ T5868] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 318.288645][ T5868] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.288663][ T5868] usb 1-1: config 0 has no interface number 0 [ 318.288756][ T5868] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 318.288773][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.342850][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.342868][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 318.373877][ T5868] usb 1-1: config 0 descriptor?? [ 318.418059][ T31] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 318.418083][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 318.418098][ T31] usb 5-1: SerialNumber: syz [ 318.418645][ T5882] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 318.419631][ T5882] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 318.546700][ T5868] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 318.959884][ T31] usb 5-1: skipping empty audio interface (v1) [ 319.026103][ T5882] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 319.042766][ T5882] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 319.056339][ T5882] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 319.087970][ T5882] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 319.093880][ T5882] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 319.126060][ T5882] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 319.351182][ T5882] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 319.351225][ T5882] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 319.351251][ T5882] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 319.351268][ T5882] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 319.351293][ T5882] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 319.433541][ T5882] usb 2-1: USB disconnect, device number 34 [ 320.219111][ T5113] Bluetooth: hci5: command tx timeout [ 320.236364][ T1436] usb 1-1: Failed to submit usb control message: -110 [ 320.236403][ T1436] usb 1-1: unable to send the bmi data to the device: -110 [ 320.237090][ T1436] usb 1-1: unable to get target info from device [ 320.237123][ T1436] usb 1-1: could not get target info (-110) [ 320.237141][ T1436] usb 1-1: could not probe fw (-110) [ 320.538881][ T31] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 320.606407][ T31] usb 5-1: USB disconnect, device number 28 [ 320.691865][ T7196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.725470][ T6573] udevd[6573]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 320.786518][ T7196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.856495][ T5113] Bluetooth: hci5: command tx timeout [ 325.216294][ T60] Bluetooth: hci5: command tx timeout [ 327.426788][ T60] Bluetooth: hci5: command tx timeout [ 330.615825][ T7183] chnl_net:caif_netlink_parms(): no params data found [ 330.666383][ T5882] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 330.801370][ T7132] raw-gadget.1 gadget.3: failed to queue disconnect event [ 331.622418][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 331.622783][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 331.623125][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 331.623249][ T5882] usb 5-1: device descriptor read/all, error -32 [ 331.686458][ T5867] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 331.686724][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 331.746338][ T5882] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 331.746612][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 331.816368][ T5867] usb 3-1: device descriptor read/64, error -32 [ 331.917136][ T5882] usb 5-1: device descriptor read/64, error -32 [ 332.027240][ T5882] usb usb5-port1: attempt power cycle [ 332.078311][ T5867] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 332.078639][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 332.206289][ T5867] usb 3-1: device descriptor read/64, error -32 [ 332.557294][ T5867] usb usb3-port1: attempt power cycle [ 332.656392][ T5882] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 332.865900][ T5882] usb 5-1: Using ep0 maxpacket: 8 [ 332.899045][ T5867] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 333.003033][ T5882] usb 5-1: unable to get BOS descriptor or descriptor too short [ 333.014346][ T5882] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 333.014376][ T5882] usb 5-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 333.065143][ T7254] No control pipe specified [ 333.073429][ T5867] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.073621][ T5867] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 333.073978][ T5867] usb 3-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=b0.23 [ 333.074155][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.166344][ T5882] usb 5-1: New USB device found, idVendor=0499, idProduct=5002, bcdDevice=55.05 [ 333.166376][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.166398][ T5882] usb 5-1: Product: syz [ 333.166413][ T5882] usb 5-1: Manufacturer: syz [ 333.166428][ T5882] usb 5-1: SerialNumber: syz [ 333.258588][ T5867] usb 3-1: config 0 descriptor?? [ 336.261816][ T5113] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 336.285493][ T5113] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 336.319284][ T5113] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 336.346474][ T5113] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 336.368235][ T5113] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 336.531089][ T3611] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.649964][ T7183] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.650159][ T7183] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.650454][ T7183] bridge_slave_0: entered allmulticast mode [ 336.678750][ T7183] bridge_slave_0: entered promiscuous mode [ 336.692987][ T7183] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.693209][ T7183] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.693465][ T7183] bridge_slave_1: entered allmulticast mode [ 336.721742][ T7183] bridge_slave_1: entered promiscuous mode [ 337.189846][ T3611] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.316552][ T7183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.369145][ T7183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.017609][ T3611] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.234838][ T809] usb 3-1: USB disconnect, device number 26 [ 338.436358][ T5113] Bluetooth: hci2: command tx timeout [ 339.162887][ T7183] team0: Port device team_slave_0 added [ 339.480172][ T3611] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.592115][ T7183] team0: Port device team_slave_1 added [ 339.977249][ T7183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.977263][ T7183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.977283][ T7183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.096875][ T7183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.096894][ T7183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.096922][ T7183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.460557][ T809] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 340.506297][ T5113] Bluetooth: hci2: command tx timeout [ 340.652830][ T809] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 340.654411][ T809] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 340.654431][ T809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 340.654446][ T809] usb 3-1: SerialNumber: syz [ 340.733413][ T809] usb 3-1: bad CDC descriptors [ 341.256379][ T809] usb 5-1: USB disconnect, device number 31 [ 341.513994][ T7183] hsr_slave_0: entered promiscuous mode [ 341.514930][ T7183] hsr_slave_1: entered promiscuous mode [ 341.529098][ T7183] debugfs: 'hsr0' already exists in 'hsr' [ 341.529125][ T7183] Cannot create hsr debugfs directory [ 341.817717][ T809] usb 1-1: USB disconnect, device number 23 [ 342.050623][ T3611] bridge_slave_1: left allmulticast mode [ 342.054976][ T3611] bridge_slave_1: left promiscuous mode [ 342.081911][ T3611] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.194989][ T3611] bridge_slave_0: left allmulticast mode [ 342.195023][ T3611] bridge_slave_0: left promiscuous mode [ 342.195215][ T3611] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.587519][ T5113] Bluetooth: hci2: command tx timeout [ 343.226973][ T3611] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.307023][ T3611] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.332650][ T3611] bond0 (unregistering): Released all slaves [ 343.461986][ T5941] usb 3-1: USB disconnect, device number 27 [ 344.006317][ T809] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 344.046443][ T5801] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 344.167664][ T809] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 344.167695][ T809] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.167715][ T809] usb 5-1: config 0 has no interface number 0 [ 344.167755][ T809] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 344.167776][ T809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.237147][ T809] usb 5-1: config 0 descriptor?? [ 344.260095][ T809] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 344.426383][ T5801] usb 3-1: Using ep0 maxpacket: 8 [ 344.443354][ T5801] usb 3-1: unable to get BOS descriptor or descriptor too short [ 344.458482][ T5801] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 344.458568][ T5801] usb 3-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 344.464479][ T5801] usb 3-1: New USB device found, idVendor=0499, idProduct=5002, bcdDevice=55.05 [ 344.464509][ T5801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.464584][ T5801] usb 3-1: Product: syz [ 344.464599][ T5801] usb 3-1: Manufacturer: syz [ 344.464614][ T5801] usb 3-1: SerialNumber: syz [ 344.672343][ T5113] Bluetooth: hci2: command tx timeout [ 345.309563][ T43] usb 5-1: Failed to submit usb control message: -110 [ 345.311614][ T43] usb 5-1: unable to send the bmi data to the device: -110 [ 345.311639][ T43] usb 5-1: unable to get target info from device [ 345.311655][ T43] usb 5-1: could not get target info (-110) [ 345.311674][ T43] usb 5-1: could not probe fw (-110) [ 345.316463][ T7301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.340150][ T7301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.638358][ T5867] usb 5-1: USB disconnect, device number 32 [ 346.077096][ T809] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 346.103155][ T7260] chnl_net:caif_netlink_parms(): no params data found [ 346.238449][ T809] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 346.241459][ T809] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 346.241488][ T809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 346.241510][ T809] usb 2-1: SerialNumber: syz [ 346.321164][ T809] usb 2-1: bad CDC descriptors [ 347.146839][ T7309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.365'. [ 349.302293][ T5868] usb 2-1: USB disconnect, device number 35 [ 349.560614][ T3611] hsr_slave_0: left promiscuous mode [ 349.597757][ T3611] hsr_slave_1: left promiscuous mode [ 349.601752][ T3611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.601839][ T3611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.698336][ T3611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.698360][ T3611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.756605][ T5882] usb 3-1: USB disconnect, device number 28 [ 349.819543][ T3611] veth1_macvtap: left promiscuous mode [ 349.819707][ T3611] veth0_macvtap: left promiscuous mode [ 349.819889][ T3611] veth1_vlan: left promiscuous mode [ 349.821394][ T3611] veth0_vlan: left promiscuous mode [ 351.390971][ T7325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.366'. [ 352.124357][ T7324] orangefs_mount: mount request failed with -4 [ 352.687235][ T3611] team0 (unregistering): Port device team_slave_1 removed [ 352.807782][ T3611] team0 (unregistering): Port device team_slave_0 removed [ 353.964084][ T5882] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 354.117337][ T5882] usb 5-1: Using ep0 maxpacket: 32 [ 354.133540][ T5882] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.133570][ T5882] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 354.138564][ T5882] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 354.138595][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.138609][ T5882] usb 5-1: Product: syz [ 354.138619][ T5882] usb 5-1: Manufacturer: syz [ 354.138629][ T5882] usb 5-1: SerialNumber: syz [ 354.217441][ T5868] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 354.224130][ T5882] usb 5-1: config 0 descriptor?? [ 354.365544][ T7260] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.365627][ T7260] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.365788][ T7260] bridge_slave_0: entered allmulticast mode [ 354.386496][ T5868] usb 3-1: Using ep0 maxpacket: 32 [ 354.387892][ T7260] bridge_slave_0: entered promiscuous mode [ 354.389031][ T5868] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 354.389057][ T5868] usb 3-1: config 0 has no interface number 0 [ 354.389119][ T5868] usb 3-1: config 0 interface 89 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 354.389143][ T5868] usb 3-1: config 0 interface 89 has no altsetting 0 [ 354.392435][ T5868] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 354.392462][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.392482][ T5868] usb 3-1: Product: syz [ 354.392496][ T5868] usb 3-1: Manufacturer: syz [ 354.392509][ T5868] usb 3-1: SerialNumber: syz [ 354.428019][ T7260] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.473215][ T7260] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.474122][ T7260] bridge_slave_1: entered allmulticast mode [ 354.518512][ T5868] usb 3-1: config 0 descriptor?? [ 354.519191][ T7260] bridge_slave_1: entered promiscuous mode [ 354.555716][ T7183] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 354.608515][ T1746] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 354.725100][ T7183] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 354.784496][ T1746] usb 2-1: Using ep0 maxpacket: 8 [ 354.798542][ T1746] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 354.798569][ T1746] usb 2-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 354.830437][ T1746] usb 2-1: New USB device found, idVendor=19d2, idProduct=1105, bcdDevice=71.4e [ 354.830459][ T1746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.830473][ T1746] usb 2-1: Product: syz [ 354.830483][ T1746] usb 2-1: Manufacturer: syz [ 354.830493][ T1746] usb 2-1: SerialNumber: syz [ 354.984407][ T7183] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 355.100249][ T7346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.103964][ T7346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.179790][ T7260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.180119][ T7183] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 355.250159][ T1746] usb 2-1: USB disconnect, device number 36 [ 355.332609][ T7260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.567828][ T7260] team0: Port device team_slave_0 added [ 355.584800][ T7260] team0: Port device team_slave_1 added [ 356.008146][ T7260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.008161][ T7260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.008182][ T7260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.015887][ T7260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.015900][ T7260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.015919][ T7260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.299992][ T1746] usb 5-1: USB disconnect, device number 33 [ 357.453759][ T5868] usb 3-1: USB disconnect, device number 29 [ 357.553700][ T7260] hsr_slave_0: entered promiscuous mode [ 357.555024][ T7260] hsr_slave_1: entered promiscuous mode [ 357.555923][ T7260] debugfs: 'hsr0' already exists in 'hsr' [ 357.555945][ T7260] Cannot create hsr debugfs directory [ 358.356041][ T5868] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 358.365112][ T5882] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 358.392934][ T3611] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.525417][ T5868] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 358.525444][ T5868] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.525462][ T5868] usb 3-1: config 0 has no interface number 0 [ 358.525522][ T5868] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 358.525544][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.571791][ T5882] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 358.571818][ T5882] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 358.571866][ T5882] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 358.709931][ T5882] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 358.709972][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.709994][ T5882] usb 2-1: Product: syz [ 358.710009][ T5882] usb 2-1: Manufacturer: syz [ 358.710026][ T5882] usb 2-1: SerialNumber: syz [ 358.754555][ T5882] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 358.754604][ T5882] cdc_ncm 2-1:1.0: bind() failure [ 358.782349][ T5868] usb 3-1: config 0 descriptor?? [ 358.829233][ T5868] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 359.861753][ T3611] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.884074][ T12] usb 3-1: Failed to submit usb control message: -110 [ 359.884112][ T12] usb 3-1: unable to send the bmi data to the device: -110 [ 359.884132][ T12] usb 3-1: unable to get target info from device [ 359.884148][ T12] usb 3-1: could not get target info (-110) [ 359.884165][ T12] usb 3-1: could not probe fw (-110) [ 359.951028][ T1746] usb 2-1: USB disconnect, device number 37 [ 360.084878][ T7394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.118733][ T7394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.277886][ T3611] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.635531][ T3611] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.966032][ T5882] usb 3-1: USB disconnect, device number 30 [ 362.263833][ T7183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.306329][ T5867] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 362.492535][ T5867] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 362.492565][ T5867] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.492585][ T5867] usb 2-1: config 0 has no interface number 0 [ 362.492633][ T5867] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 362.492658][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.503162][ T5867] usb 2-1: config 0 descriptor?? [ 362.620372][ T5867] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 362.640305][ T5882] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 362.737176][ T5801] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 362.822495][ T5882] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 362.827358][ T5882] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 362.827390][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 362.827409][ T5882] usb 3-1: SerialNumber: syz [ 362.917109][ T5882] usb 3-1: bad CDC descriptors [ 362.926447][ T5801] usb 5-1: Using ep0 maxpacket: 32 [ 362.963650][ T7425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.010827][ T5801] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.010853][ T5801] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 363.065401][ T7425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.192983][ T5801] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 363.193007][ T5801] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.193062][ T5801] usb 5-1: Product: syz [ 363.193073][ T5801] usb 5-1: Manufacturer: syz [ 363.193083][ T5801] usb 5-1: SerialNumber: syz [ 363.321922][ T5801] usb 5-1: config 0 descriptor?? [ 363.763181][ T13] usb 2-1: Failed to submit usb control message: -110 [ 363.763209][ T13] usb 2-1: unable to send the bmi data to the device: -110 [ 363.763223][ T13] usb 2-1: unable to get target info from device [ 363.763234][ T13] usb 2-1: could not get target info (-110) [ 363.763248][ T13] usb 2-1: could not probe fw (-110) [ 363.991915][ T7183] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.021973][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.022079][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.174964][ T1209] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.175057][ T1209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.204452][ T7260] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 364.241259][ T7260] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 364.272308][ T3611] bridge_slave_1: left allmulticast mode [ 364.272331][ T3611] bridge_slave_1: left promiscuous mode [ 364.272500][ T3611] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.349473][ T3611] bridge_slave_0: left allmulticast mode [ 364.349504][ T3611] bridge_slave_0: left promiscuous mode [ 364.349767][ T3611] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.408373][ T7433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.409126][ T7433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.080765][ T5867] usb 2-1: USB disconnect, device number 38 [ 365.256367][ T5941] usb 3-1: USB disconnect, device number 31 [ 365.652355][ T5941] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 365.818747][ T5941] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 365.818778][ T5941] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 365.818831][ T5941] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 365.823264][ T5941] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 365.823314][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.823336][ T5941] usb 3-1: Product: syz [ 365.823351][ T5941] usb 3-1: Manufacturer: syz [ 365.823367][ T5941] usb 3-1: SerialNumber: syz [ 365.896416][ T1746] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 365.942461][ T5941] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 365.942496][ T5941] cdc_ncm 3-1:1.0: bind() failure [ 365.982432][ T3611] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.056485][ T1746] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 366.066746][ T1746] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 366.066777][ T1746] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 366.066799][ T1746] usb 2-1: SerialNumber: syz [ 366.120667][ T1746] usb 2-1: bad CDC descriptors [ 366.210984][ T3611] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.253228][ T3611] bond0 (unregistering): Released all slaves [ 366.274319][ T1746] usb 3-1: USB disconnect, device number 32 [ 366.394998][ T7260] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 366.563125][ T7260] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 366.630182][ T3611] tipc: Disabling bearer [ 366.630637][ T3611] tipc: Left network mode [ 367.035204][ T5867] usb 5-1: USB disconnect, device number 34 [ 367.079979][ T7451] usb usb8: usbfs: process 7451 (syz.2.388) did not claim interface 0 before use [ 367.082734][ T7451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.388'. [ 367.370086][ T7451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.388'. [ 367.416330][ T5910] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 367.588647][ T5910] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 367.588669][ T5910] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 367.590681][ T5910] usb 3-1: New USB device found, idVendor=04bb, idProduct=0930, bcdDevice= e.5d [ 367.590702][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.590717][ T5910] usb 3-1: Product: syz [ 367.590727][ T5910] usb 3-1: Manufacturer: syz [ 367.590738][ T5910] usb 3-1: SerialNumber: syz [ 367.696835][ T1746] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 367.906615][ T1746] usb 5-1: Using ep0 maxpacket: 32 [ 367.922451][ T1746] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.922524][ T1746] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 367.945858][ T1746] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 367.945892][ T1746] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.945913][ T1746] usb 5-1: Product: syz [ 367.945928][ T1746] usb 5-1: Manufacturer: syz [ 367.945943][ T1746] usb 5-1: SerialNumber: syz [ 368.015113][ T1746] usb 5-1: config 0 descriptor?? [ 368.269178][ T7451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.388'. [ 368.301357][ T5882] usb 3-1: USB disconnect, device number 33 [ 368.610091][ T7260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.057596][ T7477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.057985][ T7477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.286822][ T5910] usb 2-1: USB disconnect, device number 39 [ 369.376946][ T1746] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 369.496287][ T7260] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.528224][ T1746] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 369.530251][ T1746] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 369.530272][ T1746] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 369.530286][ T1746] usb 3-1: Manufacturer: syz [ 369.534184][ T1746] usb 3-1: config 0 descriptor?? [ 369.790734][ T1746] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 370.680842][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.681738][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.714694][ T7183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.915563][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.926547][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.156311][ T3611] hsr_slave_0: left promiscuous mode [ 371.193611][ T3611] hsr_slave_1: left promiscuous mode [ 371.194860][ T3611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.194886][ T3611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.247367][ T3611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.247397][ T3611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.002816][ T5882] usb 5-1: USB disconnect, device number 35 [ 373.096412][ T3611] veth1_macvtap: left promiscuous mode [ 373.096522][ T3611] veth0_macvtap: left promiscuous mode [ 373.098992][ T3611] veth1_vlan: left promiscuous mode [ 373.099177][ T3611] veth0_vlan: left promiscuous mode [ 373.194688][ T1746] usb 3-1: USB disconnect, device number 34 [ 373.245540][ T7500] usb usb8: usbfs: process 7500 (syz.4.395) did not claim interface 0 before use [ 373.251686][ T7500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.395'. [ 373.351235][ T7500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.395'. [ 373.546494][ T1746] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 373.608457][ T7500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.395'. [ 373.707459][ T1746] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 373.707497][ T1746] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 373.710641][ T1746] usb 5-1: New USB device found, idVendor=04bb, idProduct=0930, bcdDevice= e.5d [ 373.710670][ T1746] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.710691][ T1746] usb 5-1: Product: syz [ 373.710707][ T1746] usb 5-1: Manufacturer: syz [ 373.710720][ T1746] usb 5-1: SerialNumber: syz [ 373.943748][ T5910] usb 5-1: USB disconnect, device number 36 [ 374.486721][ T3611] team0 (unregistering): Port device team_slave_1 removed [ 375.709412][ T3611] team0 (unregistering): Port device team_slave_0 removed [ 376.316733][ T5882] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 376.486405][ T5882] usb 5-1: Using ep0 maxpacket: 32 [ 376.488975][ T5882] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 376.489003][ T5882] usb 5-1: config 0 has no interface number 0 [ 376.489049][ T5882] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 376.489073][ T5882] usb 5-1: config 0 interface 89 has no altsetting 0 [ 376.492530][ T5882] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 376.492558][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.492579][ T5882] usb 5-1: Product: syz [ 376.492594][ T5882] usb 5-1: Manufacturer: syz [ 376.492608][ T5882] usb 5-1: SerialNumber: syz [ 376.568622][ T5882] usb 5-1: config 0 descriptor?? [ 376.595079][ T5882] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 376.595116][ T5882] em28xx 5-1:0.89: Video interface 89 found: [ 377.010382][ T7533] gfs2: error -5 reading superblock [ 377.201406][ T5882] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 377.638516][ T5910] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 377.641099][ T7545] gfs2: error -5 reading superblock [ 377.676537][ T5882] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 377.676571][ T5882] em28xx 5-1:0.89: board has no eeprom [ 377.701161][ T7260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.737495][ T5882] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 377.737527][ T5882] em28xx 5-1:0.89: analog set to bulk mode. [ 377.737904][ T809] em28xx 5-1:0.89: Registering V4L2 extension [ 377.773544][ T5882] usb 5-1: USB disconnect, device number 37 [ 377.786386][ T5910] usb 3-1: Using ep0 maxpacket: 32 [ 377.788933][ T5910] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 377.788958][ T5910] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.788978][ T5910] usb 3-1: config 0 has no interface number 0 [ 377.789022][ T5910] usb 3-1: config 0 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 377.789050][ T5910] usb 3-1: config 0 interface 89 has no altsetting 0 [ 377.793023][ T5910] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 377.793051][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.793071][ T5910] usb 3-1: Product: syz [ 377.793086][ T5910] usb 3-1: Manufacturer: syz [ 377.793100][ T5910] usb 3-1: SerialNumber: syz [ 377.845021][ T5882] em28xx 5-1:0.89: Disconnecting em28xx [ 377.924010][ T5910] usb 3-1: config 0 descriptor?? [ 377.932843][ T809] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 377.932867][ T809] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 377.932882][ T809] em28xx 5-1:0.89: No AC97 audio processor [ 377.988740][ T809] usb 5-1: Decoder not found [ 377.988762][ T809] em28xx 5-1:0.89: failed to create media graph [ 377.988792][ T809] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 378.031334][ T809] em28xx 5-1:0.89: Registering snapshot button... [ 378.127547][ T809] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input11 [ 378.132343][ T809] em28xx 5-1:0.89: Remote control support is not available for this card. [ 378.157810][ T5882] em28xx 5-1:0.89: Closing input extension [ 378.157839][ T5882] em28xx 5-1:0.89: Deregistering snapshot button [ 378.330472][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 378.335090][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 378.351760][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 378.366707][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 378.370524][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 378.648343][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.648418][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.721856][ T5882] em28xx 5-1:0.89: Freeing device [ 379.076390][ T809] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 379.256325][ T809] usb 2-1: Using ep0 maxpacket: 8 [ 379.306162][ T809] usb 2-1: unable to get BOS descriptor or descriptor too short [ 379.353511][ T809] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 379.353538][ T809] usb 2-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 379.387996][ T809] usb 2-1: New USB device found, idVendor=0499, idProduct=5002, bcdDevice=55.05 [ 379.388020][ T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.388035][ T809] usb 2-1: Product: syz [ 379.388045][ T809] usb 2-1: Manufacturer: syz [ 379.388056][ T809] usb 2-1: SerialNumber: syz [ 380.459709][ T5882] usb 3-1: USB disconnect, device number 35 [ 380.511610][ T5113] Bluetooth: hci3: command tx timeout [ 382.338373][ T7575] capability: warning: `syz.2.408' uses 32-bit capabilities (legacy support in use) [ 382.744071][ T5113] Bluetooth: hci3: command tx timeout [ 383.529232][ T7551] chnl_net:caif_netlink_parms(): no params data found [ 384.746412][ T5113] Bluetooth: hci3: command tx timeout [ 384.896982][ T7551] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.897113][ T7551] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.897310][ T7551] bridge_slave_0: entered allmulticast mode [ 384.900010][ T7551] bridge_slave_0: entered promiscuous mode [ 385.156576][ T7551] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.156709][ T7551] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.157434][ T7551] bridge_slave_1: entered allmulticast mode [ 385.164701][ T7551] bridge_slave_1: entered promiscuous mode [ 385.669605][ T5910] usb 2-1: USB disconnect, device number 40 [ 385.806966][ T7551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.870541][ T7260] veth0_vlan: entered promiscuous mode [ 385.876112][ T7551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.826417][ T5113] Bluetooth: hci3: command tx timeout [ 386.856390][ T36] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 387.010875][ T7551] team0: Port device team_slave_0 added [ 387.011469][ T7260] veth1_vlan: entered promiscuous mode [ 387.031548][ T3611] bridge_slave_1: left allmulticast mode [ 387.031579][ T3611] bridge_slave_1: left promiscuous mode [ 387.031831][ T3611] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.108927][ T3611] bridge_slave_0: left allmulticast mode [ 387.108957][ T3611] bridge_slave_0: left promiscuous mode [ 387.111316][ T3611] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.157562][ T36] usb 3-1: Using ep0 maxpacket: 8 [ 387.161436][ T36] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.161491][ T36] usb 3-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 387.161515][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.167414][ T36] usb 3-1: config 0 descriptor?? [ 387.215140][ T36] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 387.420248][ T5910] usb 3-1: USB disconnect, device number 36 [ 387.951458][ T5941] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 388.310374][ T5941] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 388.310405][ T5941] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.310431][ T5941] usb 5-1: config 0 has no interface number 0 [ 388.310465][ T5941] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 388.310482][ T5941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.357902][ T5941] usb 5-1: config 0 descriptor?? [ 388.439091][ T5941] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 388.758775][ T7639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.762428][ T7639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.069428][ T7640] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 389.158504][ T3611] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.237800][ T3611] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.279606][ T3611] bond0 (unregistering): Released all slaves [ 389.374162][ T7551] team0: Port device team_slave_1 added [ 389.636300][ T1209] usb 5-1: Failed to submit usb control message: -110 [ 389.636337][ T1209] usb 5-1: unable to send the bmi data to the device: -110 [ 389.636356][ T1209] usb 5-1: unable to get target info from device [ 389.636372][ T1209] usb 5-1: could not get target info (-110) [ 389.636389][ T1209] usb 5-1: could not probe fw (-110) [ 389.966609][ T3611] hsr_slave_0: left promiscuous mode [ 389.989949][ T3611] hsr_slave_1: left promiscuous mode [ 389.993487][ T3611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.028406][ T3611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.514130][ T5867] usb 5-1: USB disconnect, device number 38 [ 390.572086][ T7648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.421'. [ 390.573982][ T7648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.421'. [ 390.904167][ T3611] team0 (unregistering): Port device team_slave_1 removed [ 390.957154][ T3611] team0 (unregistering): Port device team_slave_0 removed [ 391.354572][ T7551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.354592][ T7551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.354621][ T7551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.408145][ T7551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.408164][ T7551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.408194][ T7551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.710891][ T7551] hsr_slave_0: entered promiscuous mode [ 391.712351][ T7551] hsr_slave_1: entered promiscuous mode [ 391.713480][ T7551] debugfs: 'hsr0' already exists in 'hsr' [ 391.713506][ T7551] Cannot create hsr debugfs directory [ 391.741830][ T7653] syz.1.423 (7653) used greatest stack depth: 18184 bytes left [ 391.886281][ T1746] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 391.913431][ T7662] usb usb8: usbfs: process 7662 (syz.4.427) did not claim interface 0 before use [ 391.915294][ T7662] netlink: 12 bytes leftover after parsing attributes in process `syz.4.427'. [ 392.004123][ T7662] netlink: 12 bytes leftover after parsing attributes in process `syz.4.427'. [ 392.033718][ T7260] veth0_macvtap: entered promiscuous mode [ 392.046260][ T1746] usb 3-1: Using ep0 maxpacket: 16 [ 392.067459][ T1746] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.072578][ T1746] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 392.072617][ T1746] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.072638][ T1746] usb 3-1: Product: syz [ 392.072654][ T1746] usb 3-1: Manufacturer: syz [ 392.072670][ T1746] usb 3-1: SerialNumber: syz [ 392.129101][ T1746] usb 3-1: config 0 descriptor?? [ 392.273566][ T36] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 392.313752][ T7662] netlink: 12 bytes leftover after parsing attributes in process `syz.4.427'. [ 392.367270][ T7260] veth1_macvtap: entered promiscuous mode [ 392.438139][ T36] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 392.438168][ T36] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 392.440561][ T36] usb 5-1: New USB device found, idVendor=04bb, idProduct=0930, bcdDevice= e.5d [ 392.440590][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.440612][ T36] usb 5-1: Product: syz [ 392.440626][ T36] usb 5-1: Manufacturer: syz [ 392.440642][ T36] usb 5-1: SerialNumber: syz [ 392.717696][ T7260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.742989][ T5867] usb 5-1: USB disconnect, device number 39 [ 392.923080][ T7260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.942247][ T134] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.942406][ T134] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.942539][ T134] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.942581][ T134] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.106441][ T5941] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 393.262255][ T5941] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.266000][ T5941] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 393.266022][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 393.266037][ T5941] usb 2-1: SerialNumber: syz [ 393.348840][ T5941] usb 2-1: bad CDC descriptors [ 396.211302][ T5882] usb 3-1: USB disconnect, device number 37 [ 396.527770][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 396.536478][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 396.558870][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 396.579264][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 396.599541][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 396.912359][ T1746] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 397.075110][ T1746] usb 5-1: Using ep0 maxpacket: 32 [ 397.082502][ T1746] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.082525][ T1746] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 397.088861][ T1746] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 397.088941][ T1746] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.088994][ T1746] usb 5-1: Product: syz [ 397.089054][ T1746] usb 5-1: Manufacturer: syz [ 397.089082][ T1746] usb 5-1: SerialNumber: syz [ 397.175541][ T1746] usb 5-1: config 0 descriptor?? [ 397.320087][ T7707] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 398.480719][ T809] usb 2-1: USB disconnect, device number 41 [ 400.535233][ T60] Bluetooth: hci5: command tx timeout [ 401.551158][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.694960][ T5941] usb 5-1: USB disconnect, device number 40 [ 401.877955][ T809] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 402.029954][ T809] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 402.029980][ T809] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 402.030018][ T809] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 402.034734][ T809] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 402.034757][ T809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.034771][ T809] usb 3-1: Product: syz [ 402.034782][ T809] usb 3-1: Manufacturer: syz [ 402.034792][ T809] usb 3-1: SerialNumber: syz [ 402.107021][ T809] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 402.107055][ T809] cdc_ncm 3-1:1.0: bind() failure [ 402.207224][ T5801] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 402.311283][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.339318][ T5941] usb 3-1: USB disconnect, device number 38 [ 402.356373][ T5801] usb 5-1: Using ep0 maxpacket: 32 [ 402.359437][ T5801] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.359460][ T5801] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 402.412710][ T7551] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 402.457554][ T5801] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 402.457835][ T5801] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.457859][ T5801] usb 5-1: Product: syz [ 402.457875][ T5801] usb 5-1: Manufacturer: syz [ 402.457889][ T5801] usb 5-1: SerialNumber: syz [ 402.462117][ T5801] usb 5-1: config 0 descriptor?? [ 402.546575][ T7551] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 402.592684][ T60] Bluetooth: hci5: command tx timeout [ 402.616424][ T7551] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 403.228006][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.280968][ T7551] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 404.548902][ T7749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.549300][ T7749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.659544][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.669735][ T60] Bluetooth: hci5: command tx timeout [ 404.766358][ T5867] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 404.916309][ T5867] usb 3-1: Using ep0 maxpacket: 32 [ 404.918486][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.918519][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.918558][ T5867] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 404.918581][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.986931][ T5867] usb 3-1: config 0 descriptor?? [ 405.108176][ T5882] usb 2-1: new low-speed USB device number 42 using dummy_hcd [ 405.186030][ T7704] chnl_net:caif_netlink_parms(): no params data found [ 405.267685][ T5882] usb 2-1: device descriptor read/64, error -71 [ 405.413739][ T5867] usbhid 3-1:0.0: can't add hid device: -71 [ 405.413870][ T5867] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 405.448842][ T5867] usb 3-1: USB disconnect, device number 39 [ 405.506624][ T5882] usb 2-1: new low-speed USB device number 43 using dummy_hcd [ 405.646420][ T5882] usb 2-1: device descriptor read/64, error -71 [ 405.770930][ T5882] usb usb2-port1: attempt power cycle [ 406.148509][ T5882] usb 2-1: new low-speed USB device number 44 using dummy_hcd [ 406.167251][ T5882] usb 2-1: device descriptor read/8, error -71 [ 406.175037][ T13] bridge_slave_1: left allmulticast mode [ 406.175066][ T13] bridge_slave_1: left promiscuous mode [ 406.175314][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.272850][ T13] bridge_slave_0: left allmulticast mode [ 406.272881][ T13] bridge_slave_0: left promiscuous mode [ 406.273168][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.439187][ T60] Bluetooth: hci5: command tx timeout [ 407.505480][ T5882] usb 2-1: new low-speed USB device number 45 using dummy_hcd [ 407.517153][ T5882] usb 2-1: device descriptor read/8, error -71 [ 409.457687][ T5882] usb usb2-port1: unable to enumerate USB device [ 409.699794][ T5867] usb 5-1: USB disconnect, device number 41 [ 411.551135][ T36] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 411.776305][ T36] usb 5-1: Using ep0 maxpacket: 8 [ 411.789117][ T36] usb 5-1: unable to get BOS descriptor or descriptor too short [ 411.792531][ T36] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 411.792550][ T36] usb 5-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 411.836458][ T36] usb 5-1: New USB device found, idVendor=0499, idProduct=5002, bcdDevice=55.05 [ 411.836482][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.836497][ T36] usb 5-1: Product: syz [ 411.836508][ T36] usb 5-1: Manufacturer: syz [ 411.836518][ T36] usb 5-1: SerialNumber: syz [ 413.838753][ T7804] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 413.916437][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.108680][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.151239][ T13] bond0 (unregistering): Released all slaves [ 414.367522][ T7704] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.367715][ T7704] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.367999][ T7704] bridge_slave_0: entered allmulticast mode [ 414.373784][ T7704] bridge_slave_0: entered promiscuous mode [ 414.516313][ T1746] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 414.595462][ T7704] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.603941][ T7704] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.604180][ T7704] bridge_slave_1: entered allmulticast mode [ 414.620254][ T7704] bridge_slave_1: entered promiscuous mode [ 414.666413][ T1746] usb 2-1: Using ep0 maxpacket: 8 [ 414.668930][ T1746] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.668987][ T1746] usb 2-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 414.669012][ T1746] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.719865][ T1746] usb 2-1: config 0 descriptor?? [ 414.736346][ T1746] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 414.926100][ T1746] usb 2-1: USB disconnect, device number 46 [ 414.937239][ T13] hsr_slave_0: left promiscuous mode [ 414.977922][ T13] hsr_slave_1: left promiscuous mode [ 415.003094][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.003117][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.049871][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.049894][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.231738][ T13] veth1_macvtap: left promiscuous mode [ 415.235379][ T13] veth0_macvtap: left promiscuous mode [ 415.237573][ T13] veth1_vlan: left promiscuous mode [ 415.267004][ T13] veth0_vlan: left promiscuous mode [ 416.658720][ T36] usb 5-1: USB disconnect, device number 42 [ 418.687387][ T13] team0 (unregistering): Port device team_slave_1 removed [ 419.000961][ T13] team0 (unregistering): Port device team_slave_0 removed [ 420.619655][ T7704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.895342][ T7704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.135357][ T7704] team0: Port device team_slave_0 added [ 421.152886][ T7704] team0: Port device team_slave_1 added [ 421.273597][ T7551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.277480][ T7704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.277530][ T7704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.277598][ T7704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.307073][ T5801] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 422.378950][ T5801] usb 3-1: Using ep0 maxpacket: 8 [ 422.381594][ T5801] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.381621][ T5801] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 422.384211][ T5801] usb 3-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 422.384240][ T5801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.384255][ T5801] usb 3-1: Product: syz [ 422.384265][ T5801] usb 3-1: Manufacturer: syz [ 422.384276][ T5801] usb 3-1: SerialNumber: syz [ 422.440183][ T5801] usb 3-1: config 0 descriptor?? [ 422.491225][ T7704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.491238][ T7704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.491259][ T7704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.623809][ T7551] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.648164][ T87] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.648319][ T87] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.734304][ T87] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.734520][ T87] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.776860][ T5801] usb 3-1: USB disconnect, device number 40 [ 422.924307][ T7704] hsr_slave_0: entered promiscuous mode [ 422.925640][ T7704] hsr_slave_1: entered promiscuous mode [ 422.963089][ T7704] debugfs: 'hsr0' already exists in 'hsr' [ 422.963120][ T7704] Cannot create hsr debugfs directory [ 430.903827][ T7551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.991686][ T5801] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 432.226332][ T5801] usb 3-1: Using ep0 maxpacket: 8 [ 432.276686][ T5801] usb 3-1: unable to get BOS descriptor or descriptor too short [ 432.311610][ T5801] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 432.311640][ T5801] usb 3-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 432.329069][ T5801] usb 3-1: New USB device found, idVendor=0499, idProduct=5002, bcdDevice=55.05 [ 432.329281][ T5801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.329363][ T5801] usb 3-1: Product: syz [ 432.329403][ T5801] usb 3-1: Manufacturer: syz [ 432.329437][ T5801] usb 3-1: SerialNumber: syz [ 436.624452][ T7704] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 436.682171][ T7704] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 436.727291][ T7704] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 436.815419][ T7704] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 436.919129][ T7551] veth0_vlan: entered promiscuous mode [ 436.985522][ T7551] veth1_vlan: entered promiscuous mode [ 437.270009][ T7551] veth0_macvtap: entered promiscuous mode [ 437.304932][ T7551] veth1_macvtap: entered promiscuous mode [ 437.467050][ T7551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.537742][ T7551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.541340][ T7704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.589693][ T57] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.646818][ T57] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.667748][ T57] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.699538][ T57] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.804788][ T7704] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.904303][ T1459] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.904407][ T1459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.042610][ T1436] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.042781][ T1436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.658202][ T36] usb 3-1: USB disconnect, device number 41 [ 439.604171][ T5113] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 439.638497][ T5113] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 439.653492][ T5113] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 439.677022][ T5113] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 439.697163][ T5113] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 439.870889][ T7704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.049135][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.049210][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.787269][ T60] Bluetooth: hci2: command tx timeout [ 442.688931][ T5941] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 442.836332][ T5941] usb 5-1: Using ep0 maxpacket: 8 [ 442.841640][ T5941] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.841697][ T5941] usb 5-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 442.841721][ T5941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.870241][ T5941] usb 5-1: config 0 descriptor?? [ 442.915721][ T5941] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 443.097661][ T5868] usb 5-1: USB disconnect, device number 43 [ 443.875951][ T60] Bluetooth: hci2: command tx timeout [ 443.949397][ T1436] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.539196][ T8009] input: syz1 as /devices/virtual/input/input12 [ 445.714527][ T1436] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.963574][ T60] Bluetooth: hci2: command tx timeout [ 446.907068][ T7966] chnl_net:caif_netlink_parms(): no params data found [ 448.042098][ T60] Bluetooth: hci2: command tx timeout [ 448.564544][ T1436] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.686259][ T5941] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 450.253316][ T5941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.253360][ T5941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.254461][ T5941] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 450.254480][ T5941] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 450.254494][ T5941] usb 5-1: Manufacturer: syz [ 450.327888][ T5941] usb 5-1: config 0 descriptor?? [ 450.981759][ T1436] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.113073][ T7704] veth0_vlan: entered promiscuous mode [ 451.304458][ T5941] uclogic 0003:256C:006D.0001: failed retrieving Huion firmware version: -71 [ 451.304507][ T5941] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 451.304600][ T5941] uclogic 0003:256C:006D.0001: probe with driver uclogic failed with error -71 [ 451.346781][ T5941] usb 5-1: USB disconnect, device number 44 [ 451.869790][ T7966] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.872822][ T7966] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.873048][ T7966] bridge_slave_0: entered allmulticast mode [ 451.875701][ T7966] bridge_slave_0: entered promiscuous mode [ 451.916046][ T7966] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.923960][ T7966] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.924188][ T7966] bridge_slave_1: entered allmulticast mode [ 451.954527][ T7966] bridge_slave_1: entered promiscuous mode [ 451.979074][ T7704] veth1_vlan: entered promiscuous mode [ 452.688849][ T7966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.766760][ T7966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.947404][ T7966] team0: Port device team_slave_0 added [ 456.971338][ T7966] team0: Port device team_slave_1 added [ 457.277658][ T7966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.277677][ T7966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.277707][ T7966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.337385][ T7966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.337404][ T7966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.337432][ T7966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.656918][ T1436] bridge_slave_1: left allmulticast mode [ 457.656952][ T1436] bridge_slave_1: left promiscuous mode [ 457.657183][ T1436] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.907958][ T1436] bridge_slave_0: left allmulticast mode [ 457.907989][ T1436] bridge_slave_0: left promiscuous mode [ 457.908260][ T1436] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.224711][ T5113] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 458.245260][ T5113] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 458.256008][ T5113] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 458.304087][ T5113] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 458.304716][ T5113] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 458.689432][ T8103] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 461.164907][ T5113] Bluetooth: hci3: command tx timeout [ 461.435405][ T1436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.527475][ T1436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.566655][ T5867] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 461.590559][ T1436] bond0 (unregistering): Released all slaves [ 461.738053][ T5867] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 461.738083][ T5867] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 461.743168][ T5867] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 461.743198][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 461.743217][ T5867] usb 3-1: SerialNumber: syz [ 462.048317][ T5867] usb 3-1: 0:2 : does not exist [ 462.048417][ T5867] usb 3-1: unit 5 not found! [ 462.139880][ T7966] hsr_slave_0: entered promiscuous mode [ 462.140844][ T7966] hsr_slave_1: entered promiscuous mode [ 462.141502][ T7966] debugfs: 'hsr0' already exists in 'hsr' [ 462.141519][ T7966] Cannot create hsr debugfs directory [ 462.212243][ T5867] usb 3-1: USB disconnect, device number 42 [ 462.311840][ T6573] udevd[6573]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 462.656267][ T5882] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 462.716686][ T1436] hsr_slave_0: left promiscuous mode [ 464.383686][ T5113] Bluetooth: hci3: command tx timeout [ 464.607079][ T1436] hsr_slave_1: left promiscuous mode [ 464.608151][ T1436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.608178][ T1436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.658177][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.658213][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.696556][ T5882] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 464.696588][ T5882] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 464.696610][ T5882] usb 2-1: Manufacturer: syz [ 464.728732][ T1436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.728759][ T1436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.730843][ T5882] usb 2-1: config 0 descriptor?? [ 466.015371][ T1436] veth1_macvtap: left promiscuous mode [ 466.021061][ T1436] veth0_macvtap: left promiscuous mode [ 466.021435][ T1436] veth1_vlan: left promiscuous mode [ 466.031180][ T1436] veth0_vlan: left promiscuous mode [ 466.285369][ T5882] usbhid 2-1:0.0: can't add hid device: -71 [ 466.285493][ T5882] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 466.322684][ T5882] usb 2-1: USB disconnect, device number 47 [ 466.416475][ T8129] Bluetooth: hci0: unsupported parameter 255 [ 466.416494][ T8129] Bluetooth: hci0: unsupported parameter 255 [ 466.445049][ T5113] Bluetooth: hci3: command tx timeout [ 468.829859][ T5113] Bluetooth: hci3: command tx timeout [ 470.736310][ T5867] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 471.006756][ T5867] usb 3-1: Using ep0 maxpacket: 16 [ 471.488681][ T5867] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.488736][ T5867] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 471.488760][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.528341][ T5867] usb 3-1: config 0 descriptor?? [ 471.568299][ T5867] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 471.745528][ T5801] usb 3-1: USB disconnect, device number 43 [ 471.939249][ T1436] team0 (unregistering): Port device team_slave_1 removed [ 471.997209][ T1436] team0 (unregistering): Port device team_slave_0 removed [ 472.093545][ T5867] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 472.638555][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.638606][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.639715][ T5867] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 472.639741][ T5867] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 472.639761][ T5867] usb 5-1: Manufacturer: syz [ 472.650180][ T5867] usb 5-1: config 0 descriptor?? [ 472.751606][ T8160] Bluetooth: hci0: unsupported parameter 255 [ 472.751629][ T8160] Bluetooth: hci0: unsupported parameter 255 [ 474.066917][ T5867] uclogic 0003:256C:006D.0002: failed retrieving Huion firmware version: -71 [ 474.066976][ T5867] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 474.067080][ T5867] uclogic 0003:256C:006D.0002: probe with driver uclogic failed with error -71 [ 474.120133][ T5867] usb 5-1: USB disconnect, device number 45 [ 475.167802][ T8174] usb usb8: usbfs: process 8174 (syz.4.524) did not claim interface 0 before use [ 475.169705][ T8174] netlink: 12 bytes leftover after parsing attributes in process `syz.4.524'. [ 476.498687][ T8174] netlink: 12 bytes leftover after parsing attributes in process `syz.4.524'. [ 477.019144][ T8174] netlink: 12 bytes leftover after parsing attributes in process `syz.4.524'. [ 477.253888][ T8097] chnl_net:caif_netlink_parms(): no params data found [ 477.416299][ T809] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 477.566214][ T809] usb 3-1: Using ep0 maxpacket: 32 [ 477.569448][ T809] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.569511][ T809] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 477.569546][ T809] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 477.569567][ T809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.628303][ T809] usb 3-1: config 0 descriptor?? [ 477.634666][ T809] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 477.735934][ T8210] Bluetooth: hci0: unsupported parameter 255 [ 477.735955][ T8210] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 481.228193][ T5910] usb 3-1: USB disconnect, device number 44 [ 481.423092][ T8097] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.423259][ T8097] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.423497][ T8097] bridge_slave_0: entered allmulticast mode [ 481.456836][ T8097] bridge_slave_0: entered promiscuous mode [ 481.586478][ T36] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 481.688257][ T5910] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 481.726373][ T8097] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.726489][ T8097] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.726691][ T8097] bridge_slave_1: entered allmulticast mode [ 481.729608][ T8097] bridge_slave_1: entered promiscuous mode [ 481.848939][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.848973][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.850463][ T5910] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 481.850489][ T5910] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 481.850509][ T5910] usb 3-1: Manufacturer: syz [ 481.855847][ T5910] usb 3-1: config 0 descriptor?? [ 481.956265][ T36] usb 2-1: Using ep0 maxpacket: 8 [ 482.045725][ T36] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.045779][ T36] usb 2-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 482.045803][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.890238][ T36] usb 2-1: config 0 descriptor?? [ 482.890247][ T5910] usbhid 3-1:0.0: can't add hid device: -71 [ 482.890364][ T5910] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 482.982384][ T5910] usb 3-1: USB disconnect, device number 45 [ 482.983015][ T36] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 483.156155][ T5882] usb 2-1: USB disconnect, device number 48 [ 484.759210][ T8249] Bluetooth: hci0: unsupported parameter 255 [ 484.759233][ T8249] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 485.078340][ T8097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.518475][ T8097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.348972][ T7966] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 487.429126][ T7966] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 489.236504][ T5801] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 489.337567][ T7966] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 489.410028][ T5801] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 489.410057][ T5801] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 489.410105][ T5801] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 489.413755][ T5801] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 489.413783][ T5801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.413804][ T5801] usb 3-1: Product: syz [ 489.413819][ T5801] usb 3-1: Manufacturer: syz [ 489.413833][ T5801] usb 3-1: SerialNumber: syz [ 489.495467][ T5801] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 489.495518][ T5801] cdc_ncm 3-1:1.0: bind() failure [ 489.672432][ T8097] team0: Port device team_slave_0 added [ 489.672702][ T7966] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 489.800807][ T8276] /dev/nullb0: Can't open blockdev [ 490.645040][ T8097] team0: Port device team_slave_1 added [ 490.673740][ T5801] usb 3-1: USB disconnect, device number 46 [ 490.789052][ T8097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.789070][ T8097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.789093][ T8097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.793129][ T8097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.793144][ T8097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.793165][ T8097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.215369][ T8097] hsr_slave_0: entered promiscuous mode [ 491.221347][ T8097] hsr_slave_1: entered promiscuous mode [ 491.225624][ T8097] debugfs: 'hsr0' already exists in 'hsr' [ 491.225652][ T8097] Cannot create hsr debugfs directory [ 491.518901][ T1436] bridge_slave_1: left allmulticast mode [ 491.518929][ T1436] bridge_slave_1: left promiscuous mode [ 491.519162][ T1436] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.607470][ T1436] bridge_slave_0: left allmulticast mode [ 491.607506][ T1436] bridge_slave_0: left promiscuous mode [ 491.607688][ T1436] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.776867][ T5882] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 492.082514][ T5882] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 492.103444][ T5882] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 492.103485][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 492.103532][ T5882] usb 3-1: SerialNumber: syz [ 492.166965][ T5882] usb 3-1: bad CDC descriptors [ 492.588026][ T8309] Bluetooth: hci0: unsupported parameter 255 [ 492.588049][ T8309] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 492.886317][ T5868] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 493.039017][ T5868] usb 2-1: Using ep0 maxpacket: 8 [ 493.040937][ T5868] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 493.040993][ T5868] usb 2-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 493.041010][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.049291][ T5868] usb 2-1: config 0 descriptor?? [ 493.106047][ T5868] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 493.186752][ T1436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.296833][ T1436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.351808][ T1436] bond0 (unregistering): Released all slaves [ 493.507703][ T5882] usb 2-1: USB disconnect, device number 49 [ 493.586259][ T5868] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 493.861589][ T5868] usb 5-1: Using ep0 maxpacket: 32 [ 493.871846][ T5868] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 493.871866][ T5868] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 493.887632][ T5868] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 493.887663][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.887684][ T5868] usb 5-1: Product: syz [ 493.887699][ T5868] usb 5-1: Manufacturer: syz [ 493.887714][ T5868] usb 5-1: SerialNumber: syz [ 493.912917][ T5868] usb 5-1: config 0 descriptor?? [ 495.777754][ T1436] hsr_slave_0: left promiscuous mode [ 495.841025][ T1436] hsr_slave_1: left promiscuous mode [ 495.842145][ T1436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.896972][ T1436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.524631][ T1436] veth1_vlan: left promiscuous mode [ 496.524760][ T1436] veth0_vlan: left promiscuous mode [ 496.964021][ T5910] usb 3-1: USB disconnect, device number 47 [ 497.116940][ T1436] team0 (unregistering): Port device team_slave_1 removed [ 497.158803][ T1436] team0 (unregistering): Port device team_slave_0 removed [ 497.401869][ T8336] tipc: Enabling of bearer rejected, already enabled [ 497.546223][ T5801] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 497.706333][ T5801] usb 3-1: Using ep0 maxpacket: 8 [ 497.924653][ T5801] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 497.924705][ T5801] usb 3-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 497.924721][ T5801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.748361][ T5801] usb 3-1: config 0 descriptor?? [ 498.763241][ T5801] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 498.955484][ T5867] usb 3-1: USB disconnect, device number 48 [ 499.097759][ T5910] usb 5-1: USB disconnect, device number 46 [ 499.237370][ T5113] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 499.243075][ T5113] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 499.247490][ T5113] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 499.251223][ T5113] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 499.253271][ T5113] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 500.720625][ T5868] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 500.881106][ T5868] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 500.881134][ T5868] usb 3-1: config 0 has no interfaces? [ 500.881174][ T5868] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 500.881197][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.921577][ T5868] usb 3-1: config 0 descriptor?? [ 501.787699][ T60] Bluetooth: hci5: command tx timeout [ 502.252928][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.253006][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.366279][ T5910] usb 3-1: USB disconnect, device number 49 [ 503.919288][ T60] Bluetooth: hci5: command tx timeout [ 505.954470][ T60] Bluetooth: hci5: command tx timeout [ 508.156932][ T60] Bluetooth: hci5: command tx timeout [ 511.449827][ T8447] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 511.552635][ T8097] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 511.626329][ T8097] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 511.762655][ T8097] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 513.477916][ T8354] chnl_net:caif_netlink_parms(): no params data found [ 513.936476][ T8097] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 514.733434][ T8354] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.733512][ T8354] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.733669][ T8354] bridge_slave_0: entered allmulticast mode [ 514.777822][ T8354] bridge_slave_0: entered promiscuous mode [ 514.817177][ T8354] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.817315][ T8354] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.817556][ T8354] bridge_slave_1: entered allmulticast mode [ 514.850529][ T8354] bridge_slave_1: entered promiscuous mode [ 515.495210][ T8483] /dev/nullb0: Can't open blockdev [ 516.335136][ T8354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.381355][ T8354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.471762][ T1436] bridge_slave_1: left allmulticast mode [ 516.471791][ T1436] bridge_slave_1: left promiscuous mode [ 516.488693][ T1436] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.574765][ T1436] bridge_slave_0: left allmulticast mode [ 516.574794][ T1436] bridge_slave_0: left promiscuous mode [ 516.575067][ T1436] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.923164][ T5113] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 517.932874][ T5113] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 517.934155][ T5113] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 517.936743][ T5113] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 517.937693][ T5113] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 519.107339][ T8509] /dev/nullb0: Can't open blockdev [ 519.687372][ T1436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 519.807077][ T1436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 519.891072][ T1436] bond0 (unregistering): Released all slaves [ 519.950986][ T5113] Bluetooth: hci2: command tx timeout [ 519.992365][ T8354] team0: Port device team_slave_0 added [ 520.009943][ T8354] team0: Port device team_slave_1 added [ 520.350830][ T8354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.350850][ T8354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.350880][ T8354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.383362][ T8354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.383415][ T8354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.383484][ T8354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.794189][ T1436] hsr_slave_0: left promiscuous mode [ 521.512030][ T1436] hsr_slave_1: left promiscuous mode [ 521.512801][ T1436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.552001][ T1436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.750408][ T8532] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 522.026270][ T5113] Bluetooth: hci2: command tx timeout [ 523.078203][ T1436] team0 (unregistering): Port device team_slave_1 removed [ 523.597910][ T1436] team0 (unregistering): Port device team_slave_0 removed [ 524.136195][ T5113] Bluetooth: hci2: command tx timeout [ 524.786493][ T8354] hsr_slave_0: entered promiscuous mode [ 524.804581][ T8354] hsr_slave_1: entered promiscuous mode [ 524.805668][ T8354] debugfs: 'hsr0' already exists in 'hsr' [ 524.805687][ T8354] Cannot create hsr debugfs directory [ 526.997158][ T5113] Bluetooth: hci2: command tx timeout [ 530.793076][ T8496] chnl_net:caif_netlink_parms(): no params data found [ 531.026235][ T5868] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 531.235477][ T5868] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 531.235512][ T5868] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 531.235541][ T5868] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 531.267784][ T5868] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 531.267880][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.267935][ T5868] usb 3-1: Product: syz [ 531.267977][ T5868] usb 3-1: Manufacturer: syz [ 531.268018][ T5868] usb 3-1: SerialNumber: syz [ 531.301714][ T5868] usb 3-1: config 0 descriptor?? [ 531.311591][ T8586] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 531.316283][ T31] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 531.331477][ T8586] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 531.362012][ T5868] usb 3-1: ucan: probing device on interface #0 [ 531.476288][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 531.481667][ T8496] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.482660][ T8496] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.482883][ T8496] bridge_slave_0: entered allmulticast mode [ 531.485864][ T8496] bridge_slave_0: entered promiscuous mode [ 531.522784][ T8496] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.523012][ T8496] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.523227][ T8496] bridge_slave_1: entered allmulticast mode [ 531.526038][ T8496] bridge_slave_1: entered promiscuous mode [ 531.588310][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.588804][ T31] usb 2-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 531.588832][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.646366][ T5868] usb 3-1: ucan: could not read protocol version, ret=26 [ 531.646394][ T5868] usb 3-1: ucan: probe failed; try to update the device firmware [ 531.720031][ T31] usb 2-1: config 0 descriptor?? [ 531.766716][ T31] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 531.884833][ T8496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 531.986351][ T5868] usb 2-1: USB disconnect, device number 50 [ 532.120522][ T8496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 532.327858][ T5113] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 533.620010][ T8496] team0: Port device team_slave_0 added [ 533.651812][ T8496] team0: Port device team_slave_1 added [ 534.393160][ T5910] usb 3-1: USB disconnect, device number 50 [ 535.425090][ T8625] /dev/nullb0: Can't open blockdev [ 536.350304][ T5113] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 536.359317][ T5113] Bluetooth: hci4: Injecting HCI hardware error event [ 536.396678][ T5113] Bluetooth: hci4: hardware error 0x00 [ 537.094226][ T8496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.094244][ T8496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.094274][ T8496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.147954][ T8496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.147973][ T8496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.148003][ T8496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 537.696701][ T8637] tipc: Enabling of bearer rejected, already enabled [ 537.718822][ T8496] hsr_slave_0: entered promiscuous mode [ 537.721608][ T8496] hsr_slave_1: entered promiscuous mode [ 537.723661][ T8496] debugfs: 'hsr0' already exists in 'hsr' [ 537.723686][ T8496] Cannot create hsr debugfs directory [ 538.053480][ T8354] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 538.215481][ T8354] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 538.448781][ T8628] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 538.592915][ T5113] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 539.532659][ T8644] vivid-003: kernel_thread() failed [ 540.379660][ T5113] Bluetooth: hci1: Unknown advertising packet type: 0x73 [ 540.379802][ T5113] Bluetooth: hci1: Malformed LE Event: 0x0d [ 540.872634][ T8354] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 542.706738][ T5113] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 542.707560][ T5113] Bluetooth: hci1: Injecting HCI hardware error event [ 542.708269][ T5113] Bluetooth: hci1: hardware error 0x00 [ 543.334718][ T8354] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 543.356400][ T5868] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 543.520928][ T1436] bridge_slave_1: left allmulticast mode [ 543.520960][ T1436] bridge_slave_1: left promiscuous mode [ 543.521331][ T1436] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.547801][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.547837][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.549870][ T5868] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 543.549899][ T5868] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 543.549922][ T5868] usb 3-1: Manufacturer: syz [ 543.616443][ T5868] usb 3-1: config 0 descriptor?? [ 543.641290][ T1436] bridge_slave_0: left allmulticast mode [ 543.641487][ T1436] bridge_slave_0: left promiscuous mode [ 543.641924][ T1436] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.026326][ T809] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 544.176281][ T809] usb 2-1: Using ep0 maxpacket: 8 [ 544.189658][ T809] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 544.189770][ T809] usb 2-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 544.189797][ T809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.266823][ T809] usb 2-1: config 0 descriptor?? [ 544.298953][ T809] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 544.379969][ T1436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 544.497963][ T1436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 544.550970][ T809] usb 2-1: USB disconnect, device number 51 [ 544.564565][ T1436] bond0 (unregistering): Released all slaves [ 544.629618][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 544.629967][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 544.630695][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 544.637691][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 544.642884][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 544.732892][ T5868] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0003/input/input13 [ 544.857340][ T5868] uclogic 0003:256C:006D.0003: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 544.906918][ T5113] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 544.910196][ T5868] usb 3-1: USB disconnect, device number 51 [ 545.891840][ T8681] fido_id[8681]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 545.946513][ T1436] hsr_slave_0: left promiscuous mode [ 545.970685][ T1436] hsr_slave_1: left promiscuous mode [ 545.971664][ T1436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.016839][ T1436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 547.137236][ T5883] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 547.653229][ T5883] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 547.653260][ T5883] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 547.655745][ T5883] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 547.655774][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 547.655796][ T5883] usb 2-1: SerialNumber: syz [ 547.898711][ T1436] team0 (unregistering): Port device team_slave_1 removed [ 547.940425][ T5883] usb 2-1: 0:2 : does not exist [ 547.948728][ T1436] team0 (unregistering): Port device team_slave_0 removed [ 548.126961][ T8690] tipc: Enabling of bearer rejected, already enabled [ 548.386606][ T5883] usb 2-1: USB disconnect, device number 52 [ 548.542316][ T6573] udevd[6573]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 548.636239][ T1746] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 548.766410][ T1746] usb 5-1: device descriptor read/64, error -71 [ 548.915199][ T8354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 548.968758][ T8354] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.014522][ T1412] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.014688][ T1412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.025014][ T1746] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 549.061375][ T3611] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.061484][ T3611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.178082][ T1746] usb 5-1: device descriptor read/64, error -71 [ 549.343078][ T1746] usb usb5-port1: attempt power cycle [ 550.076338][ T1746] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 550.112284][ T1746] usb 5-1: device descriptor read/8, error -71 [ 550.546205][ T1746] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 550.668583][ T8729] gfs2: error -5 reading superblock [ 551.412751][ T1746] usb 5-1: device descriptor read/8, error -71 [ 551.520247][ T1746] usb usb5-port1: unable to enumerate USB device [ 551.978164][ T8496] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 552.314509][ T8496] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 552.346426][ T8721] syz.1.631 (8721) used greatest stack depth: 17808 bytes left [ 552.614615][ T8496] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 552.995337][ T8496] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 554.762995][ T8354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 556.782196][ T8496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.870231][ T8496] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.912655][ T3583] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.912812][ T3583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.933717][ T3583] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.976366][ T3583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 557.096229][ T5868] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 557.228453][ T5868] usb 2-1: device descriptor read/64, error -71 [ 557.468629][ T5868] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 557.556330][ T8674] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 557.596272][ T5868] usb 2-1: device descriptor read/64, error -71 [ 557.616379][ T809] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 557.707453][ T8674] usb 5-1: Using ep0 maxpacket: 8 [ 557.711183][ T5868] usb usb2-port1: attempt power cycle [ 557.726905][ T8674] usb 5-1: unable to get BOS descriptor or descriptor too short [ 557.733561][ T8674] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 557.733589][ T8674] usb 5-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 557.756360][ T8674] usb 5-1: New USB device found, idVendor=0499, idProduct=5002, bcdDevice=55.05 [ 557.756393][ T8674] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.756414][ T8674] usb 5-1: Product: syz [ 557.756429][ T8674] usb 5-1: Manufacturer: syz [ 557.756445][ T8674] usb 5-1: SerialNumber: syz [ 557.839249][ T809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.839343][ T809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.839384][ T809] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 557.839409][ T809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.916042][ T809] usb 3-1: config 0 descriptor?? [ 558.156273][ T5868] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 558.187200][ T5868] usb 2-1: device descriptor read/8, error -71 [ 558.358407][ T809] usbhid 3-1:0.0: can't add hid device: -71 [ 558.358648][ T809] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 558.388771][ T8354] veth0_vlan: entered promiscuous mode [ 558.390135][ T809] usb 3-1: USB disconnect, device number 52 [ 558.436606][ T5868] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 558.456973][ T5868] usb 2-1: device descriptor read/8, error -71 [ 558.462178][ T8496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.566654][ T5868] usb usb2-port1: unable to enumerate USB device [ 558.611252][ T8354] veth1_vlan: entered promiscuous mode [ 558.880617][ T8354] veth0_macvtap: entered promiscuous mode [ 558.945234][ T8354] veth1_macvtap: entered promiscuous mode [ 562.504324][ T8628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 562.528954][ T8628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 562.533221][ T8628] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 562.551150][ T8628] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 562.555753][ T8628] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 563.076756][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.076810][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.098445][ T8838] vivid-005: kernel_thread() failed [ 564.293652][ T8830] ODEBUG: Out of memory. ODEBUG disabled [ 564.714107][ T8628] Bluetooth: hci3: command tx timeout [ 565.932769][ T8496] veth0_vlan: entered promiscuous mode [ 566.750072][ T8628] Bluetooth: hci3: command tx timeout [ 567.504515][ T809] usb 5-1: USB disconnect, device number 51 [ 567.705382][ T5801] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 568.196861][ T5801] usb 3-1: device descriptor read/64, error -71 [ 568.781345][ T8496] veth1_vlan: entered promiscuous mode [ 568.796518][ T5801] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 568.826707][ T8628] Bluetooth: hci3: command tx timeout [ 568.934037][ T5801] usb 3-1: device descriptor read/64, error -71 [ 569.092764][ T5801] usb usb3-port1: attempt power cycle [ 570.486199][ T5801] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 570.744239][ T5801] usb 3-1: device not accepting address 55, error -71 [ 570.795848][ T8894] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 571.586871][ T8628] Bluetooth: hci3: command tx timeout [ 574.281457][ T8496] veth0_macvtap: entered promiscuous mode [ 575.373143][ T8496] veth1_macvtap: entered promiscuous mode [ 575.960051][ T8496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 576.043162][ T8496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 576.140087][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.150264][ T1209] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.150402][ T1209] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.150504][ T1209] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.881441][ T8829] chnl_net:caif_netlink_parms(): no params data found [ 578.213356][ T134] bridge_slave_1: left allmulticast mode [ 578.213387][ T134] bridge_slave_1: left promiscuous mode [ 578.213634][ T134] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.327716][ T134] bridge_slave_0: left allmulticast mode [ 578.327748][ T134] bridge_slave_0: left promiscuous mode [ 578.328008][ T134] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.246842][ T8674] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 580.428608][ T8674] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 580.428637][ T8674] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 580.430116][ T8674] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 580.430144][ T8674] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 580.430170][ T8674] usb 5-1: SerialNumber: syz [ 580.636507][ T8628] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 580.653949][ T8628] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 580.654847][ T8628] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 580.679860][ T8628] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 580.683299][ T8628] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 580.748283][ T8674] usb 5-1: 0:2 : does not exist [ 581.006507][ T8674] usb 5-1: USB disconnect, device number 52 [ 581.033711][ T8953] syz.1.675 (8953) used greatest stack depth: 15912 bytes left [ 581.093172][ T6573] udevd[6573]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 582.107009][ T5883] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 582.278925][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.278961][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.279000][ T5883] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 582.279024][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.284872][ T5883] usb 2-1: config 0 descriptor?? [ 582.339442][ T134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 582.417773][ T134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.440236][ T134] bond0 (unregistering): Released all slaves [ 582.750137][ T5883] usbhid 2-1:0.0: can't add hid device: -71 [ 582.750259][ T5883] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 582.801005][ T5883] usb 2-1: USB disconnect, device number 57 [ 582.827589][ T5113] Bluetooth: hci5: command tx timeout [ 582.997790][ T8829] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.997919][ T8829] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.998116][ T8829] bridge_slave_0: entered allmulticast mode [ 583.000363][ T8829] bridge_slave_0: entered promiscuous mode [ 583.176635][ T134] hsr_slave_0: left promiscuous mode [ 583.216345][ T134] hsr_slave_1: left promiscuous mode [ 583.217420][ T134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 583.267166][ T134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.504468][ T5883] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 583.508538][ C0] ------------[ cut here ]------------ [ 583.508552][ C0] 1 [ 583.508613][ C0] WARNING: kernel/time/timer.c:716 at stub_timer+0xa/0x20, CPU#0: ktimers/0/16 [ 583.508684][ C0] Modules linked in: [ 583.508782][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 583.508824][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 583.508863][ C0] RIP: 0010:stub_timer+0xa/0x20 [ 583.508902][ C0] Code: 0f 94 c0 5b 41 5e e9 05 1d 75 09 cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa e8 f7 bc 13 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 [ 583.508938][ C0] RSP: 0018:ffffc90000157a38 EFLAGS: 00010246 [ 583.508978][ C0] RAX: ffffffff81b09639 RBX: 0000000080000000 RCX: ffff88801c6e8000 [ 583.509011][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 583.509045][ C0] RBP: ffffc90000157b30 R08: 0000000000000000 R09: 0000000000000100 [ 583.509077][ C0] R10: dffffc0000000000 R11: ffffffff81b09630 R12: 0000000000000000 [ 583.509110][ C0] R13: 0000000100006e04 R14: 1ffff9200002af4c R15: ffff888060f766b0 [ 583.509143][ C0] FS: 0000000000000000(0000) GS:ffff888126340000(0000) knlGS:0000000000000000 [ 583.509178][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 583.509211][ C0] CR2: 0000200000001080 CR3: 000000003ae3e000 CR4: 00000000003526f0 [ 583.509249][ C0] Call Trace: [ 583.509284][ C0] [ 583.509314][ C0] call_timer_fn+0x192/0x640 [ 583.509358][ C0] ? __pfx_stub_timer+0x10/0x10 [ 583.509394][ C0] ? call_timer_fn+0xd4/0x640 [ 583.509432][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 583.509468][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 583.509556][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 583.509615][ C0] ? __pfx_stub_timer+0x10/0x10 [ 583.509654][ C0] __run_timer_base+0x6a3/0x9f0 [ 583.509766][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 583.509859][ C0] run_timer_softirq+0xb7/0x170 [ 583.509916][ C0] handle_softirqs+0x1de/0x6f0 [ 583.509998][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 583.510051][ C0] run_ktimerd+0x69/0x100 [ 583.510103][ C0] smpboot_thread_fn+0x541/0xa50 [ 583.510162][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 583.510247][ C0] kthread+0x388/0x470 [ 583.510295][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 583.510347][ C0] ? __pfx_kthread+0x10/0x10 [ 583.510389][ C0] ret_from_fork+0x51e/0xb90 [ 583.510445][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 583.510494][ C0] ? __switch_to+0xc7d/0x1450 [ 583.510545][ C0] ? __pfx_kthread+0x10/0x10 [ 583.510588][ C0] ret_from_fork_asm+0x1a/0x30 [ 583.510670][ C0] [ 583.510708][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 583.510726][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 583.510752][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 583.510766][ C0] Call Trace: [ 583.510775][ C0] [ 583.510785][ C0] vpanic+0x56c/0xa60 [ 583.510822][ C0] ? __pfx__printk+0x10/0x10 [ 583.510849][ C0] ? __pfx_vpanic+0x10/0x10 [ 583.510882][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 583.510915][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 583.510957][ C0] panic+0xc5/0xd0 [ 583.510999][ C0] ? __pfx_panic+0x10/0x10 [ 583.511045][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 583.511074][ C0] __warn+0x315/0x4f0 [ 583.511107][ C0] ? stub_timer+0xa/0x20 [ 583.511129][ C0] ? stub_timer+0xa/0x20 [ 583.511152][ C0] __report_bug+0x29a/0x540 [ 583.511191][ C0] ? stub_timer+0xa/0x20 [ 583.511212][ C0] ? __pfx___report_bug+0x10/0x10 [ 583.511240][ C0] ? rcu_is_watching+0x15/0xb0 [ 583.511272][ C0] ? stub_timer+0xc/0x20 [ 583.511299][ C0] ? stub_timer+0xa/0x20 [ 583.511327][ C0] ? stub_timer+0xa/0x20 [ 583.511348][ C0] report_bug+0x16a/0x220 [ 583.511379][ C0] ? stub_timer+0xa/0x20 [ 583.511398][ C0] ? stub_timer+0xc/0x20 [ 583.511418][ C0] handle_bug+0x98/0x200 [ 583.511461][ C0] exc_invalid_op+0x1a/0x50 [ 583.511497][ C0] asm_exc_invalid_op+0x1a/0x20 [ 583.511520][ C0] RIP: 0010:stub_timer+0xa/0x20 [ 583.511547][ C0] Code: 0f 94 c0 5b 41 5e e9 05 1d 75 09 cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa e8 f7 bc 13 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 [ 583.511568][ C0] RSP: 0018:ffffc90000157a38 EFLAGS: 00010246 [ 583.511588][ C0] RAX: ffffffff81b09639 RBX: 0000000080000000 RCX: ffff88801c6e8000 [ 583.511607][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 583.511620][ C0] RBP: ffffc90000157b30 R08: 0000000000000000 R09: 0000000000000100 [ 583.511635][ C0] R10: dffffc0000000000 R11: ffffffff81b09630 R12: 0000000000000000 [ 583.511651][ C0] R13: 0000000100006e04 R14: 1ffff9200002af4c R15: ffff888060f766b0 [ 583.511675][ C0] ? __pfx_stub_timer+0x10/0x10 [ 583.511698][ C0] ? stub_timer+0x9/0x20 [ 583.511726][ C0] ? stub_timer+0x9/0x20 [ 583.511744][ C0] call_timer_fn+0x192/0x640 [ 583.511767][ C0] ? __pfx_stub_timer+0x10/0x10 [ 583.511787][ C0] ? call_timer_fn+0xd4/0x640 [ 583.511808][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 583.511829][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 583.511874][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 583.511905][ C0] ? __pfx_stub_timer+0x10/0x10 [ 583.511929][ C0] __run_timer_base+0x6a3/0x9f0 [ 583.511982][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 583.512037][ C0] run_timer_softirq+0xb7/0x170 [ 583.512072][ C0] handle_softirqs+0x1de/0x6f0 [ 583.512114][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 583.512148][ C0] run_ktimerd+0x69/0x100 [ 583.512185][ C0] smpboot_thread_fn+0x541/0xa50 [ 583.512223][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 583.512269][ C0] kthread+0x388/0x470 [ 583.512300][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 583.512335][ C0] ? __pfx_kthread+0x10/0x10 [ 583.512361][ C0] ret_from_fork+0x51e/0xb90 [ 583.512399][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 583.512432][ C0] ? __switch_to+0xc7d/0x1450 [ 583.512472][ C0] ? __pfx_kthread+0x10/0x10 [ 583.512500][ C0] ret_from_fork_asm+0x1a/0x30 [ 583.512541][ C0] [ 583.513146][ C0] Kernel Offset: disabled