last executing test programs: 6.83571598s ago: executing program 3 (id=9380): syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120110031fcd1b08cf100355af75010203010902240001080910030904180202b41d3f0109"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) 6.515013405s ago: executing program 1 (id=9385): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = dup(r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) sync() 6.099778419s ago: executing program 1 (id=9393): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 5.38226315s ago: executing program 1 (id=9398): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000404c05a00b00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000440)={0x4dae5bc9e349e70d, 0xa, 0x10, "929b24164195cd478104fd281bdc4556"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x6}, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x8}, 0x0, 0x0, &(0x7f0000000640)={0x40, 0xf, 0x2, 0xcd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.354773428s ago: executing program 3 (id=9399): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_emit_ethernet(0x256, &(0x7f0000000c00)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086"], 0x0) 4.039325171s ago: executing program 0 (id=9413): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x103002, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f00000000c0)="57c8", 0x2}], 0x1) sendto$inet(r3, 0x0, 0x0, 0x805, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r4, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) 3.8099405s ago: executing program 2 (id=9416): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00), 0x0, 0x4) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 3.66888111s ago: executing program 2 (id=9418): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.52887481s ago: executing program 2 (id=9420): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000140)='\bs:', 0x3, 0x40000, &(0x7f0000000200)={0x11, 0xe, r4, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 3.359032784s ago: executing program 1 (id=9423): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d0006", 0x1f}], 0x1) 3.283130141s ago: executing program 2 (id=9424): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r0], 0x118) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, 0x2, 0x2, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 3.28242377s ago: executing program 3 (id=9425): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, 0x0, 0x0, 0x4) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', r4, 0x4, 0x5, 0x7, 0x401, 0x25, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x80, 0x5}}) 3.222853589s ago: executing program 1 (id=9426): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) unshare(0x2a020480) openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) 3.022764629s ago: executing program 4 (id=9428): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) 2.968934225s ago: executing program 0 (id=9429): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 2.922964342s ago: executing program 4 (id=9430): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904", 0x10}], 0x1, 0x0, 0x0, 0x6000}, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 2.800706385s ago: executing program 0 (id=9431): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf5", @ANYRES32=0x0, @ANYBLOB="030000"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.512160629s ago: executing program 0 (id=9432): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b00500000000000029"], 0x5b0}, 0x20008001) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000040)="5e213ff79c83", 0x6}, {&(0x7f0000000140)="7f4f65698854ef06674cc0ad1b276784582a854b1af672ab34a8cee8be80f44ba791e52f919fb6c428235dab2e0627492babc9e1fbf69d30b6ceb53c8f89948ddd2e2c0656a734a514", 0x49}, {&(0x7f00000001c0)="45725d9decfa713ed12d5fd8557a6eed81f64c7549bd861ed391e4fd376229180a460a00b1b288e64fdadc2e41443d16ae035d0c4d1d8fc7308dee2fa95b89f33ba4bf0f15a93eaf7d50bf3aa3", 0x4d}, {&(0x7f00000022c0)="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", 0xaed}], 0x4) 2.346192517s ago: executing program 0 (id=9433): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000404c05a00b00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000440)={0x4dae5bc9e349e70d, 0xa, 0x10, "929b24164195cd478104fd281bdc4556"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x6}, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x8}, 0x0, 0x0, &(0x7f0000000640)={0x40, 0xf, 0x2, 0xcd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.237298318s ago: executing program 3 (id=9434): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000140)='\bs:', 0x3, 0x40000, &(0x7f0000000200)={0x11, 0xe, r4, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 2.205020025s ago: executing program 1 (id=9435): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_emit_ethernet(0x256, &(0x7f0000000c00)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086"], 0x0) 2.058703911s ago: executing program 3 (id=9436): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r5) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000003840)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="210f27bd7000fbdbdf2501"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc0c0) 1.881059663s ago: executing program 3 (id=9437): rt_sigaction(0xd, &(0x7f0000000040)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b66, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) 961.440832ms ago: executing program 2 (id=9438): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmsg$alg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}, 0x14}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000500)=""/15, 0xf}], 0x1}, 0x200}], 0x2, 0x2021, 0x0) 941.902608ms ago: executing program 4 (id=9439): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x103002, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f00000000c0)="57c8", 0x2}], 0x1) sendto$inet(r3, 0x0, 0x0, 0x805, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r4, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) 682.992591ms ago: executing program 4 (id=9440): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r6, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000940)=""/263, 0x107}, {0x0}], 0x2}, 0x9}], 0x1, 0x40012160, 0x0) 571.902162ms ago: executing program 4 (id=9441): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 446.080316ms ago: executing program 0 (id=9442): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0) 286.270861ms ago: executing program 4 (id=9443): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4140aecd, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) pipe(0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8202, 0x0) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x33fe0, 0x8) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r8, @ANYBLOB="040013000a00060008021100000100000600100080050000060012"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r9, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 0s ago: executing program 2 (id=9444): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, 0x0, 0x0, 0x4) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', r4, 0x4, 0x5, 0x7, 0x401, 0x25, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x80, 0x5}}) kernel console output (not intermixed with test programs): 774403][ T9918] usb 3-1: config 0 interface 126 has no altsetting 0 [ 851.792177][ T9918] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 851.805877][ T9918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.823570][ T9918] usb 3-1: Product: syz [ 851.836912][ T9918] usb 3-1: Manufacturer: syz [ 851.852762][ T9918] usb 3-1: SerialNumber: syz [ 851.876891][ T9918] usb 3-1: config 0 descriptor?? [ 851.894154][T24572] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 851.902722][T24572] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 852.338804][ T9918] ir_usb 3-1:0.126: IR Dongle converter detected [ 852.431190][T24590] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 852.444671][T24590] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 852.462991][T24590] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 852.550117][ T9918] usb 3-1: IR Dongle converter now attached to ttyUSB0 [ 852.580850][T24621] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8083'. [ 852.597165][T24621] netlink: 'syz.1.8083': attribute type 10 has an invalid length. [ 852.606003][T24621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8083'. [ 852.748959][ T9918] usb 3-1: USB disconnect, device number 83 [ 852.785736][ T9918] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 852.812018][ T9918] ir_usb 3-1:0.126: device disconnected [ 853.655086][ T9909] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 853.695295][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 853.814988][ T9909] usb 3-1: Using ep0 maxpacket: 32 [ 853.826797][ T9909] usb 3-1: config 0 has an invalid interface number: 209 but max is 0 [ 853.845211][ T9909] usb 3-1: config 0 has no interface number 0 [ 853.861650][ T9909] usb 3-1: config 0 interface 209 has no altsetting 0 [ 853.877327][ T9909] usb 3-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 853.894984][ T9909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.913315][ T9909] usb 3-1: Product: syz [ 853.917624][ T9909] usb 3-1: Manufacturer: syz [ 853.922233][ T9909] usb 3-1: SerialNumber: syz [ 853.948277][ T9909] usb 3-1: config 0 descriptor?? [ 854.105431][T14761] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 854.184743][ T9909] usb 3-1: USB disconnect, device number 84 [ 854.266945][T14761] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 854.295050][T14761] usb 4-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 854.314787][T14761] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.340085][T14761] usb 4-1: config 0 descriptor?? [ 854.358110][T24659] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8095'. [ 854.370044][T14761] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 854.395253][T24659] netlink: 'syz.0.8095': attribute type 10 has an invalid length. [ 854.408319][T24659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8095'. [ 855.336038][ T5910] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 855.495718][ T5910] usb 1-1: Using ep0 maxpacket: 32 [ 855.513500][ T5910] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 855.527708][ T5910] usb 1-1: config 0 has no interface number 0 [ 855.545406][ T5910] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 855.565835][ T5910] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 855.587242][ T5910] usb 1-1: config 0 interface 126 has no altsetting 0 [ 855.608624][ T5910] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 855.635114][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.653393][ T5910] usb 1-1: Product: syz [ 855.673631][ T5910] usb 1-1: Manufacturer: syz [ 855.679819][ T5910] usb 1-1: SerialNumber: syz [ 855.697531][ T5910] usb 1-1: config 0 descriptor?? [ 855.703230][T24675] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 855.721036][T24675] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 855.777732][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 856.141704][ T5910] ir_usb 1-1:0.126: IR Dongle converter detected [ 856.353216][ T5910] usb 1-1: IR Dongle converter now attached to ttyUSB0 [ 856.559545][ T9909] usb 1-1: USB disconnect, device number 3 [ 856.581778][ T9909] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 856.603773][ T9909] ir_usb 1-1:0.126: device disconnected [ 856.885537][ T5910] usb 4-1: USB disconnect, device number 80 [ 857.615291][T24725] program syz.4.8127 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 857.848159][T24723] loop5: detected capacity change from 0 to 7 [ 857.857144][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 858.349226][T24051] Dev loop5: unable to read RDB block 7 [ 858.385075][T24051] loop5: unable to read partition table [ 858.390982][T24051] loop5: partition table beyond EOD, truncated [ 858.458414][T24739] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8133'. [ 858.705705][T24748] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8138'. [ 858.764064][T24748] netlink: 'syz.0.8138': attribute type 10 has an invalid length. [ 858.812727][T24748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8138'. [ 859.065190][ T5910] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 859.211512][T24776] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8147'. [ 859.261260][ T5910] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 859.373637][ T5910] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 859.414636][ T5910] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 859.469076][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.736811][ T5910] usb 2-1: USB disconnect, device number 95 [ 860.135038][ T9909] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 860.154993][ T5917] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 860.309457][ T9909] usb 3-1: Using ep0 maxpacket: 16 [ 860.325264][ T5917] usb 5-1: Using ep0 maxpacket: 32 [ 860.341006][ T5917] usb 5-1: config 0 interface 0 has no altsetting 0 [ 860.350553][ T9909] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 860.373217][ T5917] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 860.384569][ T9909] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 860.402978][ T9909] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 860.413116][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.438958][ T9909] usb 3-1: config 1 interface 0 has no altsetting 0 [ 860.455184][ T5917] usb 5-1: Product: syz [ 860.457603][ T9909] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 860.474971][ T9909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.484801][ T9909] usb 3-1: Product: syz [ 860.485032][ T5917] usb 5-1: Manufacturer: syz [ 860.494062][ T9909] usb 3-1: Manufacturer: syz [ 860.501699][ T9909] usb 3-1: SerialNumber: syz [ 860.526061][ T5917] usb 5-1: SerialNumber: syz [ 860.558663][ T5917] usb 5-1: config 0 descriptor?? [ 860.802761][ T9909] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 85 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 861.063652][ T5917] gs_usb 5-1:0.0: Couldn't get device config: (err=-121) [ 861.075148][ T5917] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -121 [ 862.135339][T14760] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 862.295478][T14760] usb 1-1: Using ep0 maxpacket: 16 [ 862.303848][T14760] usb 1-1: config 0 interface 0 has no altsetting 0 [ 862.311345][T14760] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 862.320667][T14760] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.333256][T14760] usb 1-1: config 0 descriptor?? [ 862.475053][ T9909] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 862.625171][ T9909] usb 2-1: Using ep0 maxpacket: 32 [ 862.628536][ T9909] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 862.639624][ T9909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.655939][ T9909] usb 2-1: config 0 descriptor?? [ 862.754084][T14760] usbhid 1-1:0.0: can't add hid device: -71 [ 862.754223][T14760] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 862.765156][T14760] usb 1-1: USB disconnect, device number 4 [ 862.878889][ T9909] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 862.892063][ T9909] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 862.896602][ T24] usb 3-1: USB disconnect, device number 85 [ 862.903612][ T9909] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 862.921862][ T9909] usb 2-1: media controller created [ 862.931308][ T24] usblp0: removed [ 862.943989][ T9909] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 863.009330][ T5917] usb 5-1: USB disconnect, device number 84 [ 863.044010][T24859] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8180'. [ 863.081290][ T9909] az6027: usb out operation failed. (-71) [ 863.081992][ T9909] az6027: usb out operation failed. (-71) [ 863.082008][ T9909] stb0899_attach: Driver disabled by Kconfig [ 863.082022][ T9909] az6027: no front-end attached [ 863.082022][ T9909] [ 863.082385][ T9909] az6027: usb out operation failed. (-71) [ 863.082401][ T9909] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 863.087871][ T9909] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input34 [ 863.187553][ T9909] dvb-usb: schedule remote query interval to 400 msecs. [ 863.187585][ T9909] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 863.191843][ T9909] usb 2-1: USB disconnect, device number 96 [ 863.268281][ T9909] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 863.292541][T24868] program syz.2.8184 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 863.824991][ T9909] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 863.984982][ T9909] usb 1-1: Using ep0 maxpacket: 16 [ 863.997334][ T9909] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 864.012914][ T9909] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 864.023196][ T9909] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 864.039057][ T9909] usb 1-1: config 1 interface 0 has no altsetting 0 [ 864.050598][ T9909] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 864.060285][ T9909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.069076][ T9909] usb 1-1: Product: syz [ 864.073327][ T9909] usb 1-1: Manufacturer: syz [ 864.078857][ T9909] usb 1-1: SerialNumber: syz [ 864.299685][ T9909] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 864.475389][ T9918] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 864.679475][ T9918] usb 2-1: Using ep0 maxpacket: 32 [ 864.686942][ T9918] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 864.709901][ T9918] usb 2-1: config 0 has no interface number 0 [ 864.727133][ T9918] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 864.756265][ T9918] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 864.786027][ T9918] usb 2-1: config 0 interface 126 has no altsetting 0 [ 864.796902][ T9918] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 864.828524][ T9918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.848689][ T9918] usb 2-1: Product: syz [ 864.852897][ T9918] usb 2-1: Manufacturer: syz [ 864.868896][ T9918] usb 2-1: SerialNumber: syz [ 864.879737][ T9918] usb 2-1: config 0 descriptor?? [ 864.887426][T24902] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 864.895687][T24902] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 865.077997][T24932] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8210'. [ 865.094702][T24932] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8210'. [ 865.103907][T24932] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8210'. [ 865.328951][ T9918] ir_usb 2-1:0.126: IR Dongle converter detected [ 865.531761][ T9918] usb 2-1: IR Dongle converter now attached to ttyUSB0 [ 865.734280][ T9909] usb 2-1: USB disconnect, device number 97 [ 865.744251][ T9909] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 865.753228][ T9909] ir_usb 2-1:0.126: device disconnected [ 866.219460][T24960] netlink: 124 bytes leftover after parsing attributes in process `syz.2.8224'. [ 866.315554][T24965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8227'. [ 866.599504][ T9909] usb 1-1: USB disconnect, device number 5 [ 866.629982][ T9909] usblp0: removed [ 866.677809][T24989] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 868.047388][ T9918] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 868.225330][ T9918] usb 3-1: Using ep0 maxpacket: 16 [ 868.243440][ T9918] usb 3-1: config 0 interface 0 has no altsetting 0 [ 868.252851][T25046] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8265'. [ 868.265068][ T9918] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 868.294636][ T9918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.334312][ T9918] usb 3-1: config 0 descriptor?? [ 868.766446][ T9918] usbhid 3-1:0.0: can't add hid device: -71 [ 868.782833][ T9918] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 868.803218][ T9918] usb 3-1: USB disconnect, device number 86 [ 869.795033][T14755] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 869.948224][T14755] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 869.979519][T14755] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 870.015069][T14755] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 870.045543][T14755] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 870.065333][T14755] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.101101][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.107990][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.110332][T14755] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 870.181761][T25075] kvm: kvm [25074]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 870.222182][T14755] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 870.303414][T14755] usb 3-1: USB disconnect, device number 87 [ 870.871839][T25092] program syz.3.8287 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 871.236286][T25099] syzkaller0: entered promiscuous mode [ 871.255311][T25099] syzkaller0: entered allmulticast mode [ 871.445095][ T9909] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 871.630218][ T9909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 871.654978][ T9909] usb 4-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 871.674975][ T9909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.726178][ T9909] usb 4-1: config 0 descriptor?? [ 871.739469][ T9909] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 872.454976][T14755] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 872.483550][T25121] program syz.2.8299 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 872.625155][T14755] usb 1-1: Using ep0 maxpacket: 32 [ 872.641793][T14755] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 872.665366][T14755] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 872.685851][T14755] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 872.705154][T14755] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.725959][T14755] usb 1-1: config 0 descriptor?? [ 872.875040][T14760] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 873.035004][T14760] usb 3-1: Using ep0 maxpacket: 32 [ 873.042334][T14760] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 873.055101][T14760] usb 3-1: config 0 has no interface number 0 [ 873.061719][T14760] usb 3-1: config 0 interface 184 has no altsetting 0 [ 873.087957][T14760] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 873.104957][T14760] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.113011][T14760] usb 3-1: Product: syz [ 873.137138][T14760] usb 3-1: Manufacturer: syz [ 873.147301][T14760] usb 3-1: SerialNumber: syz [ 873.162643][T14755] koneplus 0003:1E7D:2D51.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.0-1/input0 [ 873.177685][T14760] usb 3-1: config 0 descriptor?? [ 873.199771][T14760] smsc75xx v1.0.0 [ 873.342693][T14755] koneplus 0003:1E7D:2D51.000F: couldn't init struct koneplus_device [ 873.355145][T14755] koneplus 0003:1E7D:2D51.000F: couldn't install mouse [ 873.377655][T14755] koneplus 0003:1E7D:2D51.000F: probe with driver koneplus failed with error -5 [ 873.546883][ T5917] usb 1-1: USB disconnect, device number 6 [ 873.808210][T14760] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 873.834965][T14760] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 874.246673][ T9918] usb 4-1: USB disconnect, device number 81 [ 874.397398][T25140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8307'. [ 874.653219][T14760] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 874.674969][T14760] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 874.695182][T14760] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 874.716376][T14760] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 874.742514][T14760] usb 3-1: USB disconnect, device number 88 [ 874.941927][T25157] netlink: 'syz.1.8314': attribute type 4 has an invalid length. [ 875.119591][T25161] syzkaller0: entered promiscuous mode [ 875.125298][T25161] syzkaller0: entered allmulticast mode [ 875.301065][T25168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8319'. [ 875.754197][T25192] syzkaller0: entered promiscuous mode [ 875.766135][T25192] syzkaller0: entered allmulticast mode [ 875.815255][ T5917] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 875.986946][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 876.008344][ T5917] usb 2-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 876.041680][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.092604][ T5917] usb 2-1: config 0 descriptor?? [ 876.507164][T25207] program syz.2.8336 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 876.556496][ T5917] usbhid 2-1:0.0: can't add hid device: -71 [ 876.575085][ T5917] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 876.602913][ T5917] usb 2-1: USB disconnect, device number 98 [ 881.635145][T25301] pim6reg: entered allmulticast mode [ 883.693193][T25339] netlink: 'syz.4.8390': attribute type 4 has an invalid length. [ 883.890514][T25346] netlink: 'syz.4.8393': attribute type 6 has an invalid length. [ 884.015424][ T9918] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 884.177377][T25356] input: syz0 as /devices/virtual/input/input35 [ 884.215297][ T9918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.253474][ T9918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 884.287568][ T9918] usb 1-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 884.317610][ T9918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.355695][ T9918] usb 1-1: config 0 descriptor?? [ 884.786264][T14755] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 884.803859][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 884.811497][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 884.820507][ T9918] usbhid 1-1:0.0: can't add hid device: -32 [ 884.827103][ T9918] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 884.867422][ T9918] usb 1-1: USB disconnect, device number 7 [ 884.957542][T14755] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.985451][T14755] usb 3-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 885.009902][T14755] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.029514][T14755] usb 3-1: config 0 descriptor?? [ 885.145080][T14760] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 885.197234][T25380] netlink: 'syz.1.8405': attribute type 4 has an invalid length. [ 885.315011][T14760] usb 5-1: Using ep0 maxpacket: 16 [ 885.327260][T14760] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 885.352822][T14760] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 885.365582][T14760] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 885.395015][T14760] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.413327][T14760] usb 5-1: Product: syz [ 885.417890][T14760] usb 5-1: Manufacturer: syz [ 885.422555][T14760] usb 5-1: SerialNumber: syz [ 885.451974][T14755] usbhid 3-1:0.0: can't add hid device: -71 [ 885.495901][T14755] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 885.524376][T14755] usb 3-1: USB disconnect, device number 89 [ 885.686782][T14760] usb 5-1: 0:2 : does not exist [ 885.734162][T25391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8410'. [ 885.744332][T14760] usb 5-1: USB disconnect, device number 85 [ 885.838078][T25368] udevd[25368]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 886.568413][T25418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8422'. [ 887.455113][ T9918] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 887.634961][ T9918] usb 4-1: Using ep0 maxpacket: 16 [ 887.652175][ T9918] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 887.676027][ T9918] usb 4-1: config 0 has no interface number 0 [ 887.707979][ T9918] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 887.747557][ T9918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.788043][ T9918] usb 4-1: Product: syz [ 887.792256][ T9918] usb 4-1: Manufacturer: syz [ 887.825654][ T9918] usb 4-1: SerialNumber: syz [ 887.846363][ T9918] usb 4-1: config 0 descriptor?? [ 887.860469][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 887.870418][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 887.879454][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 887.898405][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 887.909101][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 887.919653][ T9918] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 888.269218][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.433074][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.630167][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.783247][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.365762][ T9918] gspca_spca1528: reg_w err -71 [ 889.370746][ T9918] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 889.477069][ T9918] usb 4-1: USB disconnect, device number 82 [ 889.648500][T25452] chnl_net:caif_netlink_parms(): no params data found [ 890.025232][ T5845] Bluetooth: hci5: command tx timeout [ 890.884647][T25493] netlink: 'syz.4.8450': attribute type 4 has an invalid length. [ 891.461021][T25452] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.476178][T25452] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.484210][T25452] bridge_slave_0: entered allmulticast mode [ 891.509216][T25452] bridge_slave_0: entered promiscuous mode [ 891.529024][T25452] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.554665][T25452] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.565873][T25452] bridge_slave_1: entered allmulticast mode [ 891.578763][T25452] bridge_slave_1: entered promiscuous mode [ 891.625025][ T9909] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 891.684610][ T12] hsr_slave_0: left promiscuous mode [ 891.693558][ T12] hsr_slave_1: left promiscuous mode [ 891.703963][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 891.713120][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 891.723310][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 891.731160][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 891.770780][ T12] veth1_macvtap: left promiscuous mode [ 891.776982][ T12] veth0_macvtap: left promiscuous mode [ 891.785018][ T9909] usb 5-1: Using ep0 maxpacket: 32 [ 891.795650][ T12] veth1_vlan: left promiscuous mode [ 891.801411][ T12] veth0_vlan: left promiscuous mode [ 891.809893][ T9909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 891.821215][ T9909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 891.831377][ T9909] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 891.840772][ T9909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.859062][ T9909] usb 5-1: config 0 descriptor?? [ 891.981773][ T12] pim6reg (unregistering): left allmulticast mode [ 892.098823][ T5845] Bluetooth: hci5: command tx timeout [ 892.332449][ T9909] koneplus 0003:1E7D:2D51.0010: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.4-1/input0 [ 892.405469][ T5917] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 892.589791][ T5917] usb 4-1: Using ep0 maxpacket: 32 [ 892.648024][ T5917] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 892.675265][ T5917] usb 4-1: config 0 has no interface number 0 [ 892.681545][ T5917] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 892.693640][ T5917] usb 4-1: config 0 interface 126 has no altsetting 0 [ 892.718764][ T9909] usb 5-1: USB disconnect, device number 86 [ 892.731356][ T5917] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 892.748046][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.756689][ T5917] usb 4-1: Product: syz [ 892.760864][ T5917] usb 4-1: Manufacturer: syz [ 892.765736][ T5917] usb 4-1: SerialNumber: syz [ 892.792766][ T5917] usb 4-1: config 0 descriptor?? [ 892.812155][T25525] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 893.187960][ T12] team0 (unregistering): Port device team_slave_1 removed [ 893.254302][ T12] team0 (unregistering): Port device team_slave_0 removed [ 893.269114][ T5917] ir_usb 4-1:0.126: required endpoints missing [ 893.816319][T25452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 893.852138][T25452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 893.996237][T25452] team0: Port device team_slave_0 added [ 894.028694][T25452] team0: Port device team_slave_1 added [ 894.161806][T25452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 894.177744][ T5845] Bluetooth: hci5: command tx timeout [ 894.180728][T25452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 894.304952][T25452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 894.345814][T25452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 894.364044][T25452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 894.390406][T25452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 894.516488][ T12] IPVS: stop unused estimator thread 0... [ 894.706212][T25452] hsr_slave_0: entered promiscuous mode [ 894.724222][T25452] hsr_slave_1: entered promiscuous mode [ 894.746461][T25452] debugfs: 'hsr0' already exists in 'hsr' [ 894.762158][T25452] Cannot create hsr debugfs directory [ 895.218105][T14760] usb 4-1: USB disconnect, device number 83 [ 895.765212][ T9918] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 895.950046][ T9918] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 896.002435][ T9918] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 896.009214][T25594] netlink: 'syz.0.8477': attribute type 4 has an invalid length. [ 896.049559][ T9918] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 896.096208][ T9918] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 896.145204][ T9918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.187032][T25576] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 896.209128][ T9918] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 896.237064][ T9918] usb 4-1: invalid MIDI out EP 0 [ 896.255478][ T5845] Bluetooth: hci5: command tx timeout [ 896.462928][ T9918] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 896.527424][T25603] pim6reg: entered allmulticast mode [ 896.543912][ T9918] usb 4-1: USB disconnect, device number 84 [ 896.631367][T25452] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 896.667705][T25452] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 896.705573][T25452] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 896.784355][T25452] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 897.053982][T25452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 897.109633][T25452] 8021q: adding VLAN 0 to HW filter on device team0 [ 897.140983][ T996] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.148202][ T996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 897.199371][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.206601][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 897.405060][ T5917] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 897.443079][T25452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 897.581068][T25452] veth0_vlan: entered promiscuous mode [ 897.595878][ T5917] usb 3-1: Using ep0 maxpacket: 8 [ 897.617017][ T5917] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 897.630133][T25452] veth1_vlan: entered promiscuous mode [ 897.657093][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.679209][ T5917] usb 3-1: Product: syz [ 897.683413][ T5917] usb 3-1: Manufacturer: syz [ 897.698957][ T5917] usb 3-1: SerialNumber: syz [ 897.729347][T25452] veth0_macvtap: entered promiscuous mode [ 897.740361][ T5917] usb 3-1: config 0 descriptor?? [ 897.758491][T25452] veth1_macvtap: entered promiscuous mode [ 897.776922][ T5917] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 897.815998][ T5917] dvb-usb: bulk message failed: -22 (2/0) [ 897.845651][T25452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 897.854425][ T5917] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 897.880287][ T5917] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 897.902661][T25452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 897.930574][ T5917] usb 3-1: media controller created [ 897.962740][ T1114] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.001890][ T1114] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.009757][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 898.042058][ T1114] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.084984][ T1114] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.110733][ T5917] cxusb: set interface failed [ 898.127334][ T5917] dvb-usb: bulk message failed: -22 (1/0) [ 898.230024][ T5917] DVB: Unable to find symbol mt352_attach() [ 898.261709][ T5917] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 898.406070][ T5917] rc_core: IR keymap rc-dvico-portable not found [ 898.412453][ T5917] Registered IR keymap rc-empty [ 898.438166][ T5917] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 898.462924][ T5917] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input36 [ 898.489749][ T5917] dvb-usb: schedule remote query interval to 100 msecs. [ 898.516155][ T5917] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 898.581853][ T5917] usb 3-1: USB disconnect, device number 90 [ 898.920974][ T5917] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 899.047856][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 899.085780][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 899.189028][ T3538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 899.216976][ T3538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 902.393526][T25740] pim6reg1: entered promiscuous mode [ 902.427310][T25740] pim6reg1: entered allmulticast mode [ 902.905039][T14755] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 903.065021][T14755] usb 2-1: Using ep0 maxpacket: 16 [ 903.092526][T14755] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 903.119782][T14755] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 903.151516][T14755] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 903.170928][T14755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.196045][T14755] usb 2-1: Product: syz [ 903.200249][T14755] usb 2-1: Manufacturer: syz [ 903.212856][T14755] usb 2-1: SerialNumber: syz [ 903.457982][T14755] usb 2-1: 0:2 : does not exist [ 903.473132][T14755] usb 2-1: unit 15 not found! [ 903.526475][T14755] usb 2-1: USB disconnect, device number 99 [ 903.611124][T25771] udevd[25771]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 904.671126][T25785] netlink: 'syz.1.8523': attribute type 10 has an invalid length. [ 904.691067][T25785] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.698833][T25785] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.760759][T25785] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.768013][T25785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 904.775591][T25785] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.782772][T25785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 904.822490][T25788] netlink: 'syz.0.8525': attribute type 6 has an invalid length. [ 904.846655][T25785] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 908.105012][ T24] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 908.315410][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.353029][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 908.403891][ T24] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 908.455896][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.479773][ T24] usb 2-1: config 0 descriptor?? [ 908.726548][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 908.737356][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 908.755708][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 908.772581][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 908.782682][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 909.004349][T25863] netlink: 'syz.3.8556': attribute type 10 has an invalid length. [ 909.130474][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 909.173407][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 909.198616][T25871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8560'. [ 909.202260][ T24] usb 2-1: USB disconnect, device number 100 [ 909.307557][ T3538] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.570611][T25858] chnl_net:caif_netlink_parms(): no params data found [ 909.639105][ T3538] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.837055][ T3538] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.048115][ T3538] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.096819][ T24] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 910.275149][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 910.280112][T25858] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.286616][ T24] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 910.303780][T25858] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.316294][T25858] bridge_slave_0: entered allmulticast mode [ 910.318266][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 910.351731][T25858] bridge_slave_0: entered promiscuous mode [ 910.357576][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 910.357606][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.357625][ T24] usb 2-1: Product: syz [ 910.357639][ T24] usb 2-1: Manufacturer: syz [ 910.357653][ T24] usb 2-1: SerialNumber: syz [ 910.454693][T25858] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.463148][T25858] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.473462][T25858] bridge_slave_1: entered allmulticast mode [ 910.481745][T25858] bridge_slave_1: entered promiscuous mode [ 910.578354][T25858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 910.601260][ T24] usb 2-1: 0:2 : does not exist [ 910.611722][T25858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 910.626481][ T24] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 910.690050][ T24] usb 2-1: USB disconnect, device number 101 [ 910.738794][T25869] udevd[25869]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 910.815109][ T5839] Bluetooth: hci1: command tx timeout [ 910.850471][T25858] team0: Port device team_slave_0 added [ 910.871100][T25858] team0: Port device team_slave_1 added [ 911.139533][T25895] netlink: 'syz.0.8568': attribute type 10 has an invalid length. [ 911.386993][T25858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 911.394134][T25858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 911.421820][T25858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 911.445150][T25858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 911.459799][T25858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 911.560098][T25858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 912.126649][T25858] hsr_slave_0: entered promiscuous mode [ 912.144093][T25858] hsr_slave_1: entered promiscuous mode [ 912.173997][T25858] debugfs: 'hsr0' already exists in 'hsr' [ 912.191489][T25858] Cannot create hsr debugfs directory [ 912.237600][T25920] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 912.333321][T25933] netlink: 'syz.1.8581': attribute type 10 has an invalid length. [ 912.382561][ T3538] hsr_slave_0: left promiscuous mode [ 912.400841][ T3538] hsr_slave_1: left promiscuous mode [ 912.415891][ T3538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 912.432203][ T3538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 912.456376][ T3538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 912.467436][ T3538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 912.523903][ T3538] veth1_macvtap: left promiscuous mode [ 912.535143][ T3538] veth0_macvtap: left promiscuous mode [ 912.550001][ T3538] veth1_vlan: left promiscuous mode [ 912.564183][ T3538] veth0_vlan: left promiscuous mode [ 912.801785][ T3538] pim6reg (unregistering): left allmulticast mode [ 912.895176][ T5839] Bluetooth: hci1: command tx timeout [ 913.311844][ T3538] team0 (unregistering): Port device team_slave_1 removed [ 913.362157][ T3538] team0 (unregistering): Port device team_slave_0 removed [ 913.981647][T25933] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.989083][T25933] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.316325][T25961] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8591'. [ 914.415515][ T24] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 914.478170][T25966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 914.596692][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 914.615075][ T24] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 914.634119][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.699208][ T24] usb 2-1: config 0 descriptor?? [ 914.724089][ T3538] IPVS: stop unused estimator thread 0... [ 914.728251][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 914.962712][T25981] netlink: 'syz.0.8597': attribute type 10 has an invalid length. [ 914.975030][ T5839] Bluetooth: hci1: command tx timeout [ 915.121290][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 915.140795][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 915.181143][T25987] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 915.335352][T14760] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 915.357884][ T24] pwc: recv_control_msg error -71 req 04 val 1000 [ 915.385418][ T24] pwc: recv_control_msg error -71 req 04 val 1300 [ 915.408537][ T24] pwc: recv_control_msg error -71 req 04 val 1400 [ 915.427642][ T24] pwc: recv_control_msg error -71 req 02 val 2000 [ 915.458917][ T24] pwc: recv_control_msg error -71 req 02 val 2100 [ 915.475911][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 915.483655][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 915.507827][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 915.520123][T14760] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 915.523225][T25858] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 915.543246][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 915.552392][T14760] usb 3-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 915.568201][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 915.574814][T14760] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.586685][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 915.606933][T25858] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 915.614499][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 915.619718][T14760] usb 3-1: config 0 descriptor?? [ 915.623314][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 915.649719][ T24] pwc: Registered as video103. [ 915.662083][T25858] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 915.698637][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input37 [ 915.723186][T25858] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 915.731366][T25998] netlink: 'syz.3.8601': attribute type 4 has an invalid length. [ 915.750346][ T24] usb 2-1: USB disconnect, device number 102 [ 915.788148][T26000] netlink: 'syz.3.8601': attribute type 4 has an invalid length. [ 916.056024][T26011] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8604'. [ 916.093079][T26016] netlink: 284 bytes leftover after parsing attributes in process `syz.0.8606'. [ 916.096491][T14760] usbhid 3-1:0.0: can't add hid device: -71 [ 916.129898][T25858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 916.136812][T14760] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 916.184987][T14760] usb 3-1: USB disconnect, device number 91 [ 916.230104][T25858] 8021q: adding VLAN 0 to HW filter on device team0 [ 916.279844][T26021] netlink: 'syz.3.8607': attribute type 10 has an invalid length. [ 916.311825][ T996] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.319086][ T996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 916.349625][ T996] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.356855][ T996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 916.567152][T25858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 916.736586][T25858] veth0_vlan: entered promiscuous mode [ 916.764758][T26047] netlink: 'syz.3.8615': attribute type 4 has an invalid length. [ 916.800833][T25858] veth1_vlan: entered promiscuous mode [ 916.812056][T26050] netlink: 71 bytes leftover after parsing attributes in process `syz.0.8617'. [ 916.884292][T25858] veth0_macvtap: entered promiscuous mode [ 916.950950][T25858] veth1_macvtap: entered promiscuous mode [ 916.965074][ T24] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 917.008251][T26055] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 917.040982][T26058] netlink: 'syz.3.8620': attribute type 10 has an invalid length. [ 917.052034][T25858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 917.055127][ T5839] Bluetooth: hci1: command tx timeout [ 917.064351][T25858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 917.083495][ T1324] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.116832][ T24] usb 3-1: device descriptor read/64, error -71 [ 917.127796][ T3578] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.160019][ T3578] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.178133][ T9918] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 917.186049][ T3578] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.356102][ T3578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 917.382946][ T9918] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 917.400223][ T3578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 917.408910][ T24] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 917.435844][ T9918] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 917.464534][ T9918] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 917.482182][T26060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 917.482553][ T9918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.517391][T26060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 917.547777][T26053] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 917.577535][T26053] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 917.585369][ T24] usb 3-1: device descriptor read/64, error -71 [ 917.605144][ T9918] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 917.695400][ T24] usb usb3-port1: attempt power cycle [ 917.869708][ T9918] usb 2-1: USB disconnect, device number 103 [ 918.001818][T26092] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 918.065093][ T24] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 918.127371][ T24] usb 3-1: device descriptor read/8, error -71 [ 918.146957][T26098] netlink: 'syz.0.8630': attribute type 10 has an invalid length. [ 918.374982][ T24] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 918.425801][ T24] usb 3-1: device descriptor read/8, error -71 [ 918.556437][ T24] usb usb3-port1: unable to enumerate USB device [ 918.708167][T26124] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 918.896490][T26132] netlink: 'syz.1.8643': attribute type 10 has an invalid length. [ 919.615033][ T24] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 919.794287][ T24] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 919.811434][ T24] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 919.827381][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 919.840850][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.865225][T26152] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 919.880891][T26152] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 919.895064][ T5917] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 919.920262][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 920.045303][ T5917] usb 2-1: device descriptor read/64, error -71 [ 920.143999][T14755] usb 1-1: USB disconnect, device number 8 [ 920.325182][ T5917] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 920.474938][ T5917] usb 2-1: device descriptor read/64, error -71 [ 920.595425][ T5917] usb usb2-port1: attempt power cycle [ 920.965239][ T5917] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 920.996408][ T5917] usb 2-1: device descriptor read/8, error -71 [ 921.255808][ T5917] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 921.324639][ T5917] usb 2-1: device descriptor read/8, error -71 [ 921.351923][T26219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8681'. [ 921.438328][ T5917] usb usb2-port1: unable to enumerate USB device [ 922.566765][T26255] batman_adv: batadv0: Adding interface: dummy0 [ 922.573057][T26255] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 922.640147][T26255] batman_adv: batadv0: Interface activated: dummy0 [ 922.669785][T26257] batadv0: mtu less than device minimum [ 922.705376][T26257] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 922.717315][T26257] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 922.729238][T26257] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 922.741106][T26257] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 922.753032][T26257] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 922.765031][T26257] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 922.776858][T26257] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 922.788718][T26257] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 922.800615][T26257] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 923.715055][ T5918] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 923.830598][T14755] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 923.885006][T14760] usb 2-1: new full-speed USB device number 108 using dummy_hcd [ 923.916644][ T5918] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 923.944937][ T5918] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 923.964987][T14755] usb 5-1: device descriptor read/64, error -71 [ 923.969287][ T5918] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 923.990673][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.013732][ T5918] usb 4-1: config 0 descriptor?? [ 924.042925][T14760] usb 2-1: config 0 interface 0 has no altsetting 0 [ 924.075029][T14760] usb 2-1: New USB device found, idVendor=1430, idProduct=07bb, bcdDevice= 0.00 [ 924.092069][T14760] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.121681][T14760] usb 2-1: config 0 descriptor?? [ 924.215040][T14755] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 924.256245][ T5918] usb 4-1: USB disconnect, device number 85 [ 924.355370][T14755] usb 5-1: device descriptor read/64, error -71 [ 924.486368][T14755] usb usb5-port1: attempt power cycle [ 924.584660][T14760] sony 0003:1430:07BB.0011: unknown main item tag 0x0 [ 924.621793][T14760] sony 0003:1430:07BB.0011: unknown main item tag 0x0 [ 924.637773][T14760] sony 0003:1430:07BB.0011: unknown main item tag 0x0 [ 924.666398][T14760] sony 0003:1430:07BB.0011: hidraw0: USB HID v0.06 Device [HID 1430:07bb] on usb-dummy_hcd.1-1/input0 [ 924.682709][T14760] sony 0003:1430:07BB.0011: failed to claim input [ 924.796412][T14760] usb 2-1: USB disconnect, device number 108 [ 924.848527][T26295] fido_id[26295]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 924.867525][T14755] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 924.917634][T14755] usb 5-1: device descriptor read/8, error -71 [ 925.164962][T14755] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 925.196755][T14755] usb 5-1: device descriptor read/8, error -71 [ 925.315395][T14755] usb usb5-port1: unable to enumerate USB device [ 925.685160][ T5917] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 925.804360][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 925.814049][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 925.826519][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 925.835557][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 925.843286][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 925.855172][ T5917] usb 2-1: Using ep0 maxpacket: 32 [ 925.866855][ T5917] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 925.914947][ T5917] usb 2-1: config 0 has no interface number 0 [ 925.933625][ T5917] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 925.995091][ T5917] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 926.036164][ T5917] usb 2-1: config 0 interface 126 has no altsetting 0 [ 926.058381][ T5917] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 926.087975][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.118371][ T5917] usb 2-1: Product: syz [ 926.122581][ T5917] usb 2-1: Manufacturer: syz [ 926.149846][ T5917] usb 2-1: SerialNumber: syz [ 926.169648][ T5917] usb 2-1: config 0 descriptor?? [ 926.195520][T26311] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 926.202936][T26311] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 926.722138][T26313] chnl_net:caif_netlink_parms(): no params data found [ 926.887669][ T5917] ir_usb 2-1:0.126: IR Dongle converter detected [ 926.922312][ T5917] usb 2-1: IRDA class descriptor not found, device not bound [ 926.945244][ T5917] usb 2-1: USB disconnect, device number 109 [ 927.078890][T26313] bridge0: port 1(bridge_slave_0) entered blocking state [ 927.115105][T26313] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.132255][T26313] bridge_slave_0: entered allmulticast mode [ 927.157215][T26313] bridge_slave_0: entered promiscuous mode [ 927.193839][T26313] bridge0: port 2(bridge_slave_1) entered blocking state [ 927.224304][T26313] bridge0: port 2(bridge_slave_1) entered disabled state [ 927.255318][T26313] bridge_slave_1: entered allmulticast mode [ 927.263226][T26313] bridge_slave_1: entered promiscuous mode [ 927.491893][T26313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 927.557377][T26313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 927.781866][T26313] team0: Port device team_slave_0 added [ 927.842177][T26313] team0: Port device team_slave_1 added [ 927.935066][ T5839] Bluetooth: hci3: command tx timeout [ 927.987570][T26313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 928.020866][T26313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 928.092711][T26313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 928.140857][T26313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 928.161858][T26313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 928.238137][T26313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 928.519229][T26313] hsr_slave_0: entered promiscuous mode [ 928.551702][T26313] hsr_slave_1: entered promiscuous mode [ 928.576773][T26313] debugfs: 'hsr0' already exists in 'hsr' [ 928.607295][T26313] Cannot create hsr debugfs directory [ 928.901160][T26381] net_ratelimit: 10 callbacks suppressed [ 928.901181][T26381] IPv6: addrconf: prefix option has invalid lifetime [ 929.000452][T26384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8747'. [ 929.074162][T26384] veth0_macvtap: left promiscuous mode [ 929.266474][T26393] netlink: 71 bytes leftover after parsing attributes in process `syz.4.8750'. [ 929.982641][T26313] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.028061][ T5839] Bluetooth: hci3: command tx timeout [ 930.299226][T26423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8764'. [ 930.356033][T26313] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.606929][T26313] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.818692][T26313] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.988445][T26447] netlink: 71 bytes leftover after parsing attributes in process `syz.0.8776'. [ 931.187626][T26449] netlink: 268 bytes leftover after parsing attributes in process `syz.2.8777'. [ 931.345539][T26313] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 931.411241][T26313] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 931.457747][T26313] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 931.511564][T26461] netlink: 'syz.0.8782': attribute type 4 has an invalid length. [ 931.540657][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.547193][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.558017][T26459] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 931.640097][T26313] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 931.900196][ T5839] Bluetooth: hci2: unexpected event for opcode 0x000b [ 932.095200][ T5839] Bluetooth: hci3: command tx timeout [ 932.795538][T26313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 933.048053][T26313] 8021q: adding VLAN 0 to HW filter on device team0 [ 933.129888][T26060] hsr_slave_0: left promiscuous mode [ 933.142905][T26060] hsr_slave_1: left promiscuous mode [ 933.159595][T26060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 933.174929][T26060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 933.196254][T26060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 933.214004][T26060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 933.322563][T26060] veth1_macvtap: left promiscuous mode [ 933.332400][T26060] veth0_macvtap: left promiscuous mode [ 933.345645][T26060] veth1_vlan: left promiscuous mode [ 933.355230][T26060] veth0_vlan: left promiscuous mode [ 933.652939][T26060] pim6reg (unregistering): left allmulticast mode [ 934.176935][ T5839] Bluetooth: hci3: command tx timeout [ 934.757591][T26060] team0 (unregistering): Port device team_slave_1 removed [ 934.813173][T26060] team0 (unregistering): Port device team_slave_0 removed [ 934.965005][T14761] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 935.121853][T14761] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 935.144515][T14761] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 935.160984][T14761] usb 1-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 935.179616][T14761] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.207636][T14761] usb 1-1: config 0 descriptor?? [ 935.455550][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.462733][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 935.501966][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.509193][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 935.640855][T14761] playstation 0003:054C:0BA0.0012: unknown main item tag 0x0 [ 935.674239][T14761] playstation 0003:054C:0BA0.0012: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.0-1/input0 [ 935.837210][T14761] playstation 0003:054C:0BA0.0012: Failed to retrieve feature with reportID 18: -32 [ 935.877921][T14761] playstation 0003:054C:0BA0.0012: Failed to retrieve DualShock4 pairing info: -32 [ 935.904945][T14761] playstation 0003:054C:0BA0.0012: Failed to get MAC address from DualShock4 [ 935.917650][T14761] playstation 0003:054C:0BA0.0012: Failed to create dualshock4. [ 935.935797][ T5839] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 935.945429][ T5839] Bluetooth: hci2: Injecting HCI hardware error event [ 935.953916][ T5839] Bluetooth: hci2: hardware error 0x00 [ 935.970005][T14761] playstation 0003:054C:0BA0.0012: probe with driver playstation failed with error -32 [ 935.990476][T14761] usb 1-1: USB disconnect, device number 9 [ 936.129633][T26313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 936.196296][T26527] netlink: 'syz.2.8809': attribute type 4 has an invalid length. [ 936.246848][T26528] netlink: 'syz.2.8809': attribute type 4 has an invalid length. [ 936.292971][T26313] veth0_vlan: entered promiscuous mode [ 936.348036][T26313] veth1_vlan: entered promiscuous mode [ 936.414989][T26530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8810'. [ 936.508849][T26313] veth0_macvtap: entered promiscuous mode [ 936.522168][ T996] tipc: Resetting bearer [ 936.571675][T26313] veth1_macvtap: entered promiscuous mode [ 936.660598][T26313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 936.679232][T26313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 936.700095][ T996] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.719762][ T996] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.742109][ T996] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.765043][T14761] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 936.777244][ T996] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.866943][T26548] netlink: 'syz.2.8817': attribute type 6 has an invalid length. [ 936.871452][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 936.896664][ T9918] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 936.910212][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 936.937482][T14761] usb 2-1: Using ep0 maxpacket: 16 [ 936.946343][T14761] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 936.960436][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 936.969291][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 936.970808][T14761] usb 2-1: config 1 has no interface number 0 [ 936.993082][T14761] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 937.013438][T14761] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 937.034093][T14761] usb 2-1: config 1 interface 105 has no altsetting 0 [ 937.044175][T14761] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 937.066764][T14761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.085035][T14761] usb 2-1: Product: syz [ 937.085186][ T9918] usb 1-1: Using ep0 maxpacket: 32 [ 937.089226][T14761] usb 2-1: Manufacturer: syz [ 937.089246][T14761] usb 2-1: SerialNumber: syz [ 937.092829][T26536] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 937.118496][ T9918] usb 1-1: config 0 interface 0 has no altsetting 0 [ 937.134187][T26536] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 937.143549][ T9918] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 937.164768][ T9918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.179682][ T9918] usb 1-1: Product: syz [ 937.183968][ T9918] usb 1-1: Manufacturer: syz [ 937.189054][ T9918] usb 1-1: SerialNumber: syz [ 937.210020][ T9918] usb 1-1: config 0 descriptor?? [ 937.404999][ T5910] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 937.575621][ T5910] usb 4-1: Using ep0 maxpacket: 16 [ 937.582989][T26536] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 937.601422][ T5910] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 937.613259][T26536] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 937.627698][ T5910] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 937.645813][ T9918] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 937.657199][ T5910] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 937.675221][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.693687][ T5910] usb 4-1: Product: syz [ 937.703941][ T5910] usb 4-1: Manufacturer: syz [ 937.714122][ T5910] usb 4-1: SerialNumber: syz [ 937.846576][T14761] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 937.852592][ T9918] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 937.885878][ T9918] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -121 [ 937.888444][T14761] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71 [ 937.937503][T14761] usb 2-1: USB disconnect, device number 110 [ 937.970690][ T5910] usb 4-1: 0:2 : does not exist [ 937.998949][ T5910] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 938.018952][ T5839] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 938.049150][ T5910] usb 4-1: USB disconnect, device number 86 [ 938.097497][ T9918] usb 1-1: USB disconnect, device number 10 [ 938.143674][T25869] udevd[25869]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 938.954948][ T9918] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 939.127734][ T9918] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 939.142715][ T9918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.176215][ T9918] usb 4-1: config 0 descriptor?? [ 939.187335][ T9918] cp210x 4-1:0.0: cp210x converter detected [ 939.798839][ T9918] cp210x 4-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 939.834968][ T9918] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 939.872356][ T9918] usb 4-1: cp210x converter now attached to ttyUSB0 [ 939.884959][ T5918] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 939.923343][ T9918] usb 4-1: USB disconnect, device number 87 [ 939.956259][ T9918] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 939.995317][ T9918] cp210x 4-1:0.0: device disconnected [ 940.056205][ T5918] usb 1-1: Using ep0 maxpacket: 32 [ 940.063733][ T5918] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 940.082195][ T5918] usb 1-1: config 0 has no interface number 0 [ 940.092346][ T5918] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 940.114509][ T5918] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 940.126724][ T5918] usb 1-1: config 0 interface 126 has no altsetting 0 [ 940.176338][ T5918] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 940.205794][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.215360][ T5918] usb 1-1: Product: syz [ 940.225366][ T5918] usb 1-1: Manufacturer: syz [ 940.237869][ T5918] usb 1-1: SerialNumber: syz [ 940.259533][ T5918] usb 1-1: config 0 descriptor?? [ 940.265686][T26600] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 940.283225][T26600] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 940.527895][T26635] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 940.655522][ T9918] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 940.685024][ T5917] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 940.816357][ T9918] usb 2-1: Using ep0 maxpacket: 16 [ 940.824404][ T9918] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 940.843373][ T9918] usb 2-1: config 0 has no interface number 0 [ 940.884598][ T9918] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 940.904619][ T9918] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 940.915840][ T9918] usb 2-1: config 0 interface 41 has no altsetting 0 [ 940.926988][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 940.940503][ T9918] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 940.959641][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 940.970543][ T9918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.979406][ T5917] usb 3-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 940.988933][ T9918] usb 2-1: Product: syz [ 940.993180][ T9918] usb 2-1: Manufacturer: syz [ 940.998188][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.009102][ T9918] usb 2-1: SerialNumber: syz [ 941.017331][ T9918] usb 2-1: config 0 descriptor?? [ 941.025120][ T5918] ir_usb 1-1:0.126: IR Dongle converter detected [ 941.037825][T26626] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 941.051641][ T5917] usb 3-1: config 0 descriptor?? [ 941.058999][ T5918] usb 1-1: IRDA class descriptor not found, device not bound [ 941.071962][T26626] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 941.118651][ T5918] usb 1-1: USB disconnect, device number 11 [ 941.321625][ T9918] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 941.358078][ T9918] usb 2-1: USB disconnect, device number 111 [ 941.502974][ T5917] playstation 0003:054C:0BA0.0013: unknown main item tag 0x0 [ 941.520001][ T5917] playstation 0003:054C:0BA0.0013: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.2-1/input0 [ 941.696236][ T5917] playstation 0003:054C:0BA0.0013: Failed to retrieve feature with reportID 18: -32 [ 941.714459][ T5917] playstation 0003:054C:0BA0.0013: Failed to retrieve DualShock4 pairing info: -32 [ 941.725187][ T5917] playstation 0003:054C:0BA0.0013: Failed to get MAC address from DualShock4 [ 941.728991][T14761] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 941.733976][ T5917] playstation 0003:054C:0BA0.0013: Failed to create dualshock4. [ 941.756632][ T5917] playstation 0003:054C:0BA0.0013: probe with driver playstation failed with error -32 [ 941.815137][ T5917] usb 3-1: USB disconnect, device number 96 [ 941.917113][T26679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8874'. [ 941.949520][T14761] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.17 [ 941.962043][T14761] usb 4-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 941.981737][T14761] usb 4-1: Product: syz [ 941.991802][T14761] usb 4-1: Manufacturer: syz [ 942.004247][T14761] usb 4-1: SerialNumber: syz [ 942.034399][T14761] usb 4-1: config 0 descriptor?? [ 942.057736][T14761] ch341 4-1:0.0: ch341-uart converter detected [ 942.269954][T14761] usb 4-1: failed to receive control message: -32 [ 942.291051][T14761] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 942.315501][T14761] usb 4-1: USB disconnect, device number 88 [ 942.336804][T14761] ch341 4-1:0.0: device disconnected [ 942.668416][T26708] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8889'. [ 942.714899][T26710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8890'. [ 942.908305][T26714] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8892'. [ 943.084624][T26725] netlink: 268 bytes leftover after parsing attributes in process `syz.3.8897'. [ 943.477068][ T9909] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 943.645256][ T9909] usb 4-1: Using ep0 maxpacket: 32 [ 943.659433][ T9909] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 943.693755][ T9909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.715274][ T9909] usb 4-1: Product: syz [ 943.719479][ T9909] usb 4-1: Manufacturer: syz [ 943.724094][ T9909] usb 4-1: SerialNumber: syz [ 943.748045][ T9909] usb 4-1: config 0 descriptor?? [ 943.986011][ T9909] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 089 [ 944.181046][ T9909] usb 4-1: USB disconnect, device number 89 [ 944.246033][T14761] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 944.406657][T14761] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 944.425175][T14761] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.447461][T14761] usb 2-1: config 0 descriptor?? [ 944.478159][T14761] cp210x 2-1:0.0: cp210x converter detected [ 944.876390][T14761] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 944.894595][T14761] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 944.913929][T14761] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 944.941419][T14761] usb 2-1: cp210x converter now attached to ttyUSB0 [ 944.981981][T14761] usb 2-1: USB disconnect, device number 112 [ 945.025820][T14761] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 945.068803][T14761] cp210x 2-1:0.0: device disconnected [ 946.094977][ T5839] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 946.104642][ T5839] Bluetooth: hci5: Injecting HCI hardware error event [ 946.113893][ T5845] Bluetooth: hci5: hardware error 0x00 [ 946.785056][ T5917] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 946.997835][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 947.045054][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 947.104930][ T5917] usb 1-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 947.154653][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.216037][ T5917] usb 1-1: config 0 descriptor?? [ 947.674089][ T5917] playstation 0003:054C:0BA0.0014: unknown main item tag 0x0 [ 947.722929][ T5917] playstation 0003:054C:0BA0.0014: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.0-1/input0 [ 947.855613][ T5917] playstation 0003:054C:0BA0.0014: Invalid byte count transferred, expected 16 got 0 [ 947.874890][ T5917] playstation 0003:054C:0BA0.0014: Failed to retrieve DualShock4 pairing info: -22 [ 947.905070][ T5917] playstation 0003:054C:0BA0.0014: Failed to get MAC address from DualShock4 [ 947.935073][ T5917] playstation 0003:054C:0BA0.0014: Failed to create dualshock4. [ 948.022445][ T5917] playstation 0003:054C:0BA0.0014: probe with driver playstation failed with error -22 [ 948.089288][ T5917] usb 1-1: USB disconnect, device number 12 [ 948.335183][ T5845] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 949.407373][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 949.407392][ T30] audit: type=1326 audit(1763504977.362:3258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26827 comm="syz.0.8943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3c18f6c9 code=0x7ffc0000 [ 949.494670][ T30] audit: type=1326 audit(1763504977.362:3259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26827 comm="syz.0.8943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3c18f6c9 code=0x7ffc0000 [ 949.607926][ T30] audit: type=1326 audit(1763504977.402:3260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26827 comm="syz.0.8943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7fdf3c18f6c9 code=0x7ffc0000 [ 949.676813][ T30] audit: type=1326 audit(1763504977.402:3261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26827 comm="syz.0.8943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3c18f6c9 code=0x7ffc0000 [ 949.754989][ T30] audit: type=1326 audit(1763504977.402:3262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26827 comm="syz.0.8943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3c18f6c9 code=0x7ffc0000 [ 950.262978][T26838] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8947'. [ 951.167651][T26850] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3851450944 (3851450944 ns) > initial count (1115526657 ns). Using initial count to start timer. [ 951.243512][T26850] kvm: pic: level sensitive irq not supported [ 951.243796][T26850] kvm: pic: non byte read [ 951.265620][T26850] kvm: pic: level sensitive irq not supported [ 951.265696][T26850] kvm: pic: non byte read [ 951.289954][T26850] kvm: pic: level sensitive irq not supported [ 951.290025][T26850] kvm: pic: non byte read [ 951.369188][ T30] audit: type=1326 audit(1763504979.322:3263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26855 comm="syz.1.8954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f740b78f6c9 code=0x7ffc0000 [ 951.432221][ T30] audit: type=1326 audit(1763504979.322:3264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26855 comm="syz.1.8954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f740b78f6c9 code=0x7ffc0000 [ 951.477749][ T30] audit: type=1326 audit(1763504979.342:3265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26855 comm="syz.1.8954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f740b78f6c9 code=0x7ffc0000 [ 951.512466][ T30] audit: type=1326 audit(1763504979.342:3266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26855 comm="syz.1.8954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f740b78f6c9 code=0x7ffc0000 [ 951.556988][ T30] audit: type=1326 audit(1763504979.342:3267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26855 comm="syz.1.8954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f740b78f6c9 code=0x7ffc0000 [ 953.956381][T26923] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 954.244950][ T9909] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 954.405252][ T9909] usb 3-1: Using ep0 maxpacket: 8 [ 954.415552][ T9909] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 954.432573][ T9909] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 954.454953][ T9909] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 954.475726][ T9909] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 954.503814][ T9909] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 954.524997][ T9909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.753397][ T9909] usb 3-1: GET_CAPABILITIES returned 0 [ 954.761590][ T9909] usbtmc 3-1:16.0: can't read capabilities [ 954.957603][ T9909] usb 3-1: USB disconnect, device number 97 [ 955.249488][T26952] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.8998'. [ 955.970991][T26978] netlink: 'syz.0.8997': attribute type 4 has an invalid length. [ 956.194952][ T9909] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 956.378840][ T9909] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 956.388246][T14761] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 956.398436][ T9909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.424917][ T9909] usb 5-1: Product: syz [ 956.429274][ T9909] usb 5-1: Manufacturer: syz [ 956.433874][ T9909] usb 5-1: SerialNumber: syz [ 956.490571][ T9909] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 956.534071][T14760] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 956.573434][T14761] usb 1-1: Using ep0 maxpacket: 8 [ 956.595754][T14761] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 956.624922][T14761] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 956.647870][T14761] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 956.679490][T14761] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 956.699353][T14761] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 956.709174][T14761] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.843304][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 956.853098][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 956.864171][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 956.873214][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 956.882874][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 956.981228][T14761] usb 1-1: GET_CAPABILITIES returned 0 [ 957.005093][T14761] usbtmc 1-1:16.0: can't read capabilities [ 957.182009][ T9918] usb 1-1: USB disconnect, device number 13 [ 957.634426][T26990] chnl_net:caif_netlink_parms(): no params data found [ 957.802503][ T9909] usb 5-1: USB disconnect, device number 91 [ 957.859545][T14760] usb 5-1: Service connection timeout for: 256 [ 957.872266][T14760] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 957.922610][T14760] ath9k_htc: Failed to initialize the device [ 957.949752][ T9909] usb 5-1: ath9k_htc: USB layer deinitialized [ 958.060865][T26990] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.075748][T26990] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.093621][T26990] bridge_slave_0: entered allmulticast mode [ 958.113481][T26990] bridge_slave_0: entered promiscuous mode [ 958.146731][T26990] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.186260][T26990] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.193563][T26990] bridge_slave_1: entered allmulticast mode [ 958.227106][T26990] bridge_slave_1: entered promiscuous mode [ 958.285741][T26990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 958.299098][T26990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 958.378506][T26990] team0: Port device team_slave_0 added [ 958.400133][T26990] team0: Port device team_slave_1 added [ 958.481206][T26990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 958.489787][T26990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 958.516835][T27016] netlink: 'syz.4.9024': attribute type 4 has an invalid length. [ 958.521303][T26990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 958.546072][T27016] netlink: 'syz.4.9024': attribute type 4 has an invalid length. [ 958.547798][T26990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 958.561218][T26990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 958.589425][T26990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 958.691110][T26990] hsr_slave_0: entered promiscuous mode [ 958.702566][T26990] hsr_slave_1: entered promiscuous mode [ 958.710654][T26990] debugfs: 'hsr0' already exists in 'hsr' [ 958.716758][T26990] Cannot create hsr debugfs directory [ 958.905743][ T5839] Bluetooth: hci0: command tx timeout [ 958.926973][T26990] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.985920][ T9918] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 959.027559][T26990] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.139379][T26990] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.165901][ T9918] usb 5-1: Using ep0 maxpacket: 8 [ 959.179837][ T9918] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 959.194474][ T9918] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 959.213480][ T9918] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 959.224559][ T9918] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 959.275033][ T9918] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 959.276864][T26990] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.294986][ T9918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.353477][T27029] @0Ù: renamed from bond_slave_1 (while UP) [ 959.543121][ T9918] usb 5-1: GET_CAPABILITIES returned 0 [ 959.562866][ T9918] usbtmc 5-1:16.0: can't read capabilities [ 959.640026][T26990] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 959.671360][T26990] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 959.701430][T26990] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 959.724684][T26990] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 959.758659][ T9918] usb 5-1: USB disconnect, device number 92 [ 959.913043][T27041] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9033'. [ 959.999544][T26990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 960.063439][T26990] 8021q: adding VLAN 0 to HW filter on device team0 [ 960.107315][ T3538] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.114502][ T3538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 960.167397][ T3538] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.174563][ T3538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 960.401356][T26990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 960.455404][T27045] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9035'. [ 960.541797][T26990] veth0_vlan: entered promiscuous mode [ 960.580355][T26990] veth1_vlan: entered promiscuous mode [ 960.681742][T26990] veth0_macvtap: entered promiscuous mode [ 960.708905][T26990] veth1_macvtap: entered promiscuous mode [ 960.790635][T26990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 960.829192][T26990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 960.868119][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.898198][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.916384][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.948875][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.975801][ T5839] Bluetooth: hci0: command tx timeout [ 961.137942][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 961.166528][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 961.256642][ T996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 961.276027][ T996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.578075][ T5917] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 962.747776][ T5917] usb 3-1: config index 0 descriptor too short (expected 539, got 27) [ 962.756143][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 4 [ 962.782155][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 41407, setting to 1023 [ 962.813044][ T5917] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 962.823319][T27078] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 962.840833][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.850729][ T5917] usb 3-1: Product: syz [ 962.855432][ T5917] usb 3-1: Manufacturer: syz [ 962.862975][ T5917] usb 3-1: SerialNumber: syz [ 962.901329][ T5917] usb 3-1: config 0 descriptor?? [ 962.936898][ T5917] hub 3-1:0.0: bad descriptor, ignoring hub [ 962.955010][ T5917] hub 3-1:0.0: probe with driver hub failed with error -5 [ 962.976780][ T5917] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input38 [ 963.005432][ T5917] usbtouchscreen 3-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22 [ 963.048166][ T5917] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -22 [ 963.057868][ T5839] Bluetooth: hci0: command tx timeout [ 963.080046][T27084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9054'. [ 963.136262][T27084] veth0_macvtap: left promiscuous mode [ 963.285307][ T5917] usb 3-1: USB disconnect, device number 98 [ 963.790547][T27098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9059'. [ 964.057057][T27104] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9062'. [ 964.529012][T27124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9072'. [ 965.137173][ T5839] Bluetooth: hci0: command tx timeout [ 965.556344][T27146] netlink: 'syz.3.9084': attribute type 4 has an invalid length. [ 966.085099][ T5918] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 966.267435][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 966.299223][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 966.329638][ T5918] usb 5-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 966.360973][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.392411][ T5918] usb 5-1: config 0 descriptor?? [ 966.505488][ T5917] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 966.699259][ T5917] usb 4-1: Using ep0 maxpacket: 8 [ 966.710929][ T5917] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 966.736297][ T5917] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 966.764892][ T5917] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 966.795218][ T5917] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 966.830533][ T5918] elo 0003:04E7:0030.0015: item fetching failed at offset 2/3 [ 966.841184][ T5917] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 966.865793][ T5918] elo 0003:04E7:0030.0015: parse failed [ 966.875078][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.903576][ T5918] elo 0003:04E7:0030.0015: probe with driver elo failed with error -22 [ 967.027516][T27169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9094'. [ 967.034150][T14760] usb 5-1: USB disconnect, device number 93 [ 967.134019][ T5917] usb 4-1: GET_CAPABILITIES returned 0 [ 967.150287][ T5917] usbtmc 4-1:16.0: can't read capabilities [ 967.172758][T27171] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3851450944 (3851450944 ns) > initial count (1115526657 ns). Using initial count to start timer. [ 967.228696][T27171] kvm: pic: level sensitive irq not supported [ 967.228772][T27171] kvm: pic: non byte read [ 967.255269][T27171] kvm: pic: level sensitive irq not supported [ 967.255340][T27171] kvm: pic: non byte read [ 967.277055][T27171] kvm: pic: level sensitive irq not supported [ 967.277130][T27171] kvm: pic: non byte read [ 967.337753][T14760] usb 4-1: USB disconnect, device number 90 [ 968.978997][T27209] IPVS: length: 225 != 8 [ 970.744933][ T9909] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 970.907610][ T9909] usb 2-1: Using ep0 maxpacket: 32 [ 970.942674][ T9909] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 970.961332][ T9909] usb 2-1: config 0 has no interface number 0 [ 970.988207][ T9909] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 971.019006][ T9909] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 971.077700][ T9909] usb 2-1: config 0 interface 126 has no altsetting 0 [ 971.098068][ T9909] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 971.117548][ T9909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.148655][ T9909] usb 2-1: Product: syz [ 971.152870][ T9909] usb 2-1: Manufacturer: syz [ 971.174928][ T9909] usb 2-1: SerialNumber: syz [ 971.204328][ T9909] usb 2-1: config 0 descriptor?? [ 971.231125][T27226] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 971.245145][T27226] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 971.935582][T27238] netlink: 268 bytes leftover after parsing attributes in process `syz.2.9127'. [ 972.100858][ T9909] ir_usb 2-1:0.126: IR Dongle converter detected [ 972.135154][ T9909] usb 2-1: IRDA class descriptor not found, device not bound [ 972.185302][ T9909] usb 2-1: USB disconnect, device number 113 [ 972.657644][T27246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9129'. [ 973.565731][T27270] netlink: 312 bytes leftover after parsing attributes in process `syz.3.9139'. [ 973.608457][T27272] netlink: 'syz.2.9138': attribute type 6 has an invalid length. [ 974.166113][T27282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9144'. [ 975.574926][T14761] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 975.742322][T14761] usb 4-1: unable to get BOS descriptor or descriptor too short [ 975.761316][T14761] usb 4-1: not running at top speed; connect to a high speed hub [ 975.791298][T14761] usb 4-1: config 0 has no interfaces? [ 975.803720][T14761] usb 4-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 975.823233][T14761] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.844669][T14761] usb 4-1: Product: syz [ 975.852172][T14761] usb 4-1: Manufacturer: syz [ 975.897598][T14761] usb 4-1: SerialNumber: syz [ 975.916735][T14761] usb 4-1: config 0 descriptor?? [ 976.126100][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 976.126117][ T30] audit: type=1326 audit(1763505004.082:3293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27318 comm="syz.2.9164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f190c18f6c9 code=0x7ffc0000 [ 976.188221][ T9909] usb 4-1: USB disconnect, device number 91 [ 976.221640][ T30] audit: type=1326 audit(1763505004.082:3294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27318 comm="syz.2.9164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f190c18f6c9 code=0x7ffc0000 [ 976.279271][ T30] audit: type=1326 audit(1763505004.122:3295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27318 comm="syz.2.9164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f190c18f6c9 code=0x7ffc0000 [ 976.332225][ T30] audit: type=1326 audit(1763505004.122:3296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27318 comm="syz.2.9164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f190c18f6c9 code=0x7ffc0000 [ 976.385105][ T30] audit: type=1326 audit(1763505004.122:3297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27318 comm="syz.2.9164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f190c18f6c9 code=0x7ffc0000 [ 976.425901][ T30] audit: type=1326 audit(1763505004.132:3298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27318 comm="syz.2.9164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f190c18f6c9 code=0x7ffc0000 [ 976.455417][ T30] audit: type=1326 audit(1763505004.132:3299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27318 comm="syz.2.9164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f190c18f6c9 code=0x7ffc0000 [ 976.479317][ T30] audit: type=1326 audit(1763505004.132:3300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27318 comm="syz.2.9164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f190c18f6c9 code=0x7ffc0000 [ 976.504715][ T30] audit: type=1326 audit(1763505004.132:3301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27318 comm="syz.2.9164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f190c18f6c9 code=0x7ffc0000 [ 976.535028][ T9918] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 976.591458][ T30] audit: type=1326 audit(1763505004.132:3302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27318 comm="syz.2.9164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f190c18f6c9 code=0x7ffc0000 [ 976.629559][T27330] netlink: 71 bytes leftover after parsing attributes in process `syz.1.9166'. [ 976.675321][ T9918] usb 3-1: device descriptor read/64, error -71 [ 976.739930][T27336] netlink: 268 bytes leftover after parsing attributes in process `syz.1.9171'. [ 976.925036][ T9918] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 977.075009][ T9918] usb 3-1: device descriptor read/64, error -71 [ 977.187815][ T9918] usb usb3-port1: attempt power cycle [ 977.446057][T27353] pim6reg: entered allmulticast mode [ 977.564922][ T9918] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 977.597001][ T9918] usb 3-1: device descriptor read/8, error -71 [ 977.866688][ T9918] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 977.917875][ T9918] usb 3-1: device descriptor read/8, error -71 [ 978.030265][ T9918] usb usb3-port1: unable to enumerate USB device [ 978.394968][ T9909] usb 5-1: new full-speed USB device number 94 using dummy_hcd [ 978.566558][ T9909] usb 5-1: unable to get BOS descriptor or descriptor too short [ 978.596815][ T9909] usb 5-1: not running at top speed; connect to a high speed hub [ 978.632374][ T9909] usb 5-1: config 0 has no interfaces? [ 978.647936][ T9909] usb 5-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 978.673380][ T9909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.684894][ T9909] usb 5-1: Product: syz [ 978.689086][ T9909] usb 5-1: Manufacturer: syz [ 978.697771][T27379] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9188'. [ 978.703978][ T9909] usb 5-1: SerialNumber: syz [ 978.717709][ T9909] usb 5-1: config 0 descriptor?? [ 978.936888][ T5917] usb 5-1: USB disconnect, device number 94 [ 979.072989][T27385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9193'. [ 979.704949][ T5917] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 979.845942][ T5917] usb 3-1: device descriptor read/64, error -71 [ 979.935040][T14761] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 980.085805][ T5917] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 980.104893][T14761] usb 1-1: Using ep0 maxpacket: 16 [ 980.114587][T14761] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 980.135348][T14761] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 980.157275][T14761] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 980.175924][T14761] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.194654][T14761] usb 1-1: Product: syz [ 980.202871][T14761] usb 1-1: Manufacturer: syz [ 980.214920][T14761] usb 1-1: SerialNumber: syz [ 980.234936][ T5917] usb 3-1: device descriptor read/64, error -71 [ 980.345303][ T5917] usb usb3-port1: attempt power cycle [ 980.439001][T14761] usb 1-1: 0:2 : does not exist [ 980.457602][T14761] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 980.510851][T14761] usb 1-1: USB disconnect, device number 14 [ 980.571880][T25869] udevd[25869]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 980.705043][ T5917] usb 3-1: new full-speed USB device number 105 using dummy_hcd [ 980.745639][ T5917] usb 3-1: device descriptor read/8, error -71 [ 980.995043][ T5917] usb 3-1: new full-speed USB device number 106 using dummy_hcd [ 981.035660][ T5917] usb 3-1: device descriptor read/8, error -71 [ 981.155156][ T5917] usb usb3-port1: unable to enumerate USB device [ 982.151876][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 982.151894][ T30] audit: type=1326 audit(1763505010.102:3338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27427 comm="syz.0.9208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3c18f6c9 code=0x7ffc0000 [ 982.235980][ T30] audit: type=1326 audit(1763505010.142:3339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27427 comm="syz.0.9208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3c18f6c9 code=0x7ffc0000 [ 982.298723][ T30] audit: type=1326 audit(1763505010.152:3340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27427 comm="syz.0.9208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fdf3c18f6c9 code=0x7ffc0000 [ 982.355394][ T30] audit: type=1326 audit(1763505010.152:3341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27427 comm="syz.0.9208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3c18f6c9 code=0x7ffc0000 [ 982.427467][ T30] audit: type=1326 audit(1763505010.152:3342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27427 comm="syz.0.9208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3c18f6c9 code=0x7ffc0000 [ 982.467151][T27436] netlink: 'syz.0.9209': attribute type 4 has an invalid length. [ 982.494922][ T30] audit: type=1326 audit(1763505010.152:3343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27427 comm="syz.0.9208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fdf3c18f6c9 code=0x7ffc0000 [ 982.565016][ T30] audit: type=1326 audit(1763505010.172:3344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27427 comm="syz.0.9208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3c18f6c9 code=0x7ffc0000 [ 982.624918][ T30] audit: type=1326 audit(1763505010.172:3345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27427 comm="syz.0.9208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3c18f6c9 code=0x7ffc0000 [ 982.645068][ T5917] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 982.714062][ T30] audit: type=1326 audit(1763505010.172:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27427 comm="syz.0.9208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdf3c18f6c9 code=0x7ffc0000 [ 982.742530][ T30] audit: type=1326 audit(1763505010.172:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27427 comm="syz.0.9208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3c18f6c9 code=0x7ffc0000 [ 982.805014][ T5917] usb 2-1: device descriptor read/64, error -71 [ 983.045109][ T5917] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 983.185149][ T5917] usb 2-1: device descriptor read/64, error -71 [ 983.296187][ T5917] usb usb2-port1: attempt power cycle [ 983.375380][ T5910] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 983.514962][ T5910] usb 1-1: device descriptor read/64, error -71 [ 983.635100][ T5917] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 983.665645][ T5917] usb 2-1: device descriptor read/8, error -71 [ 983.764934][ T5910] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 983.905882][ T5917] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 983.913710][ T5910] usb 1-1: device descriptor read/64, error -71 [ 983.945522][ T5917] usb 2-1: device descriptor read/8, error -71 [ 984.038182][ T5910] usb usb1-port1: attempt power cycle [ 984.065322][ T5917] usb usb2-port1: unable to enumerate USB device [ 984.318110][T27479] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9230'. [ 984.394968][ T5910] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 984.417156][ T5910] usb 1-1: device descriptor read/8, error -71 [ 984.474610][T27483] netlink: 312 bytes leftover after parsing attributes in process `syz.4.9232'. [ 984.664981][ T5910] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 984.695659][ T5910] usb 1-1: device descriptor read/8, error -71 [ 984.808631][ T5910] usb usb1-port1: unable to enumerate USB device [ 985.679688][T27511] netlink: 312 bytes leftover after parsing attributes in process `syz.2.9244'. [ 986.045223][T27517] netlink: 'syz.2.9247': attribute type 4 has an invalid length. [ 986.073301][T27517] netlink: 'syz.2.9247': attribute type 5 has an invalid length. [ 986.095185][T27517] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.9247'. [ 987.604527][T14761] usb 3-1: new full-speed USB device number 107 using dummy_hcd [ 987.766591][T14761] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 987.785242][T14761] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 987.805273][T14761] usb 3-1: New USB device found, idVendor=04f3, idProduct=0001, bcdDevice= 0.00 [ 987.825178][T14761] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.857659][T14761] usb 3-1: config 0 descriptor?? [ 988.731684][T27563] pim6reg: entered allmulticast mode [ 989.224954][ T5910] usb 5-1: new full-speed USB device number 95 using dummy_hcd [ 989.388411][ T5910] usb 5-1: unable to get BOS descriptor or descriptor too short [ 989.406281][ T5910] usb 5-1: not running at top speed; connect to a high speed hub [ 989.422397][ T5910] usb 5-1: config 8 has an invalid interface number: 24 but max is 0 [ 989.437053][ T5910] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 989.466700][ T5910] usb 5-1: config 8 has no interface number 0 [ 989.488667][ T5910] usb 5-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 989.501453][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.521571][ T5910] usb 5-1: Product: syz [ 989.535199][ T5910] usb 5-1: Manufacturer: syz [ 989.547841][ T5910] usb 5-1: SerialNumber: syz [ 989.786136][ T5910] vmk80xx 5-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 989.836531][ T5910] usb 5-1: USB disconnect, device number 95 [ 990.411159][ T5910] usb 3-1: USB disconnect, device number 107 [ 990.495233][T14761] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 990.539624][T27597] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9281'. [ 990.601951][T27599] netlink: 268 bytes leftover after parsing attributes in process `syz.4.9282'. [ 990.637001][T14761] usb 2-1: device descriptor read/64, error -71 [ 990.877957][T27616] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 990.897314][T14761] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 990.941012][T27620] netlink: 'syz.3.9292': attribute type 4 has an invalid length. [ 990.944973][ T5910] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 990.961128][T27620] netlink: 'syz.3.9292': attribute type 5 has an invalid length. [ 990.972314][T27620] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.9292'. [ 991.044953][T14761] usb 2-1: device descriptor read/64, error -71 [ 991.119306][ T5910] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 991.119338][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.119361][ T5910] usb 3-1: Product: syz [ 991.119377][ T5910] usb 3-1: Manufacturer: syz [ 991.119394][ T5910] usb 3-1: SerialNumber: syz [ 991.145177][ T5910] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 991.165458][T14761] usb usb2-port1: attempt power cycle [ 991.202263][ T5917] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 991.375143][T14760] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 991.504930][T14760] usb 1-1: device descriptor read/64, error -71 [ 991.525004][T14761] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 991.546200][T14761] usb 2-1: device descriptor read/8, error -71 [ 991.754930][T14760] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 991.784950][T14761] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 991.814170][T14761] usb 2-1: device descriptor read/8, error -71 [ 991.886792][T14760] usb 1-1: device descriptor read/64, error -71 [ 991.917877][T14761] usb usb2-port1: unable to enumerate USB device [ 991.995415][T14760] usb usb1-port1: attempt power cycle [ 992.258005][ T5910] usb 3-1: USB disconnect, device number 108 [ 992.274132][ T5917] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 992.285853][ T5917] ath9k_htc: Failed to initialize the device [ 992.314045][ T5910] usb 3-1: ath9k_htc: USB layer deinitialized [ 992.356591][T14760] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 992.405639][T14760] usb 1-1: device descriptor read/8, error -71 [ 992.665873][T14760] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 992.685786][T14760] usb 1-1: device descriptor read/8, error -71 [ 992.805488][T14760] usb usb1-port1: unable to enumerate USB device [ 992.894306][T27675] pim6reg: entered allmulticast mode [ 992.915204][T14761] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 992.978198][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.984580][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.105512][T14761] usb 5-1: Using ep0 maxpacket: 16 [ 993.113104][T14761] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 993.124593][T14761] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 993.134703][T14761] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 993.148152][T14761] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 993.157520][T14761] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.181138][T14761] usb 5-1: config 0 descriptor?? [ 993.643534][T14761] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 993.664979][T14761] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 993.705386][T14761] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 993.746801][T14761] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 993.773637][T14761] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 993.797579][T27688] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 993.814370][T14761] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 993.832207][T14761] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 993.842318][T14761] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 993.861265][T14761] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 993.878958][T14761] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 993.919679][T14761] microsoft 0003:045E:07DA.0016: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 993.999651][T14761] microsoft 0003:045E:07DA.0016: no inputs found [ 994.025222][T14761] microsoft 0003:045E:07DA.0016: could not initialize ff, continuing anyway [ 994.064865][T14761] usb 5-1: USB disconnect, device number 96 [ 994.101297][T27693] netlink: 'syz.3.9324': attribute type 4 has an invalid length. [ 994.121997][T27693] netlink: 'syz.3.9324': attribute type 5 has an invalid length. [ 994.133415][T27693] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.9324'. [ 994.145557][T27691] fido_id[27691]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 994.256522][ T5839] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 994.266340][ T5839] Bluetooth: hci3: Injecting HCI hardware error event [ 994.275870][ T5845] Bluetooth: hci3: hardware error 0x00 [ 994.427176][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 994.427194][ T30] audit: type=1326 audit(1763505022.372:3365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27702 comm="syz.1.9328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f740b78f6c9 code=0x7ffc0000 [ 994.560977][ T30] audit: type=1326 audit(1763505022.372:3366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27702 comm="syz.1.9328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f740b78f6c9 code=0x7ffc0000 [ 994.698212][ T30] audit: type=1326 audit(1763505022.412:3367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27702 comm="syz.1.9328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f740b78f6c9 code=0x7ffc0000 [ 994.874921][ T30] audit: type=1326 audit(1763505022.422:3368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27702 comm="syz.1.9328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f740b78f6c9 code=0x7ffc0000 [ 994.974037][ T30] audit: type=1326 audit(1763505022.422:3369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27702 comm="syz.1.9328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f740b78f6c9 code=0x7ffc0000 [ 995.100408][T27720] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 995.110101][ T30] audit: type=1326 audit(1763505022.422:3370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27702 comm="syz.1.9328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f740b78f6c9 code=0x7ffc0000 [ 995.179319][ T30] audit: type=1326 audit(1763505022.422:3371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27702 comm="syz.1.9328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f740b78f6c9 code=0x7ffc0000 [ 995.273587][ T30] audit: type=1326 audit(1763505022.422:3372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27702 comm="syz.1.9328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f740b78f6c9 code=0x7ffc0000 [ 995.345279][T27699] fuse: Bad value for 'fd' [ 995.375759][ T30] audit: type=1326 audit(1763505022.422:3373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27702 comm="syz.1.9328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f740b78f6c9 code=0x7ffc0000 [ 995.504124][ T30] audit: type=1326 audit(1763505022.432:3374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27702 comm="syz.1.9328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f740b78f6c9 code=0x7ffc0000 [ 995.505022][ T5917] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 995.745807][ T5917] usb 4-1: no configurations [ 995.750534][ T5917] usb 4-1: can't read configurations, error -22 [ 995.894973][T27744] netlink: 312 bytes leftover after parsing attributes in process `syz.2.9345'. [ 995.904953][ T5917] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 996.059900][ T5917] usb 4-1: no configurations [ 996.059914][ T5917] usb 4-1: can't read configurations, error -22 [ 996.060409][ T5917] usb usb4-port1: attempt power cycle [ 996.405399][ T5917] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 996.420467][ T5845] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 996.453664][ T5917] usb 4-1: no configurations [ 996.453685][ T5917] usb 4-1: can't read configurations, error -22 [ 996.492090][T27761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9353'. [ 996.509213][T27761] veth0_macvtap: left promiscuous mode [ 996.575174][ T5917] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 996.604623][ T5917] usb 4-1: no configurations [ 996.609539][ T5917] usb 4-1: can't read configurations, error -22 [ 996.639363][ T5917] usb usb4-port1: unable to enumerate USB device [ 996.721051][T27767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9356'. [ 997.747039][T27789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9365'. [ 997.897277][T27791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9366'. [ 998.580620][T27809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9376'. [ 999.034968][T14761] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 999.199715][T14761] usb 4-1: unable to get BOS descriptor or descriptor too short [ 999.210512][T14761] usb 4-1: not running at top speed; connect to a high speed hub [ 999.228888][T14761] usb 4-1: config 8 has an invalid interface number: 24 but max is 0 [ 999.238488][T14761] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 999.257974][T14761] usb 4-1: config 8 has no interface number 0 [ 999.272370][T14761] usb 4-1: config 8 interface 24 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 999.305505][T14761] usb 4-1: config 8 interface 24 has no altsetting 0 [ 999.343136][T14761] usb 4-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 999.376521][T14761] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.384788][T14761] usb 4-1: Product: syz [ 999.389636][T14761] usb 4-1: Manufacturer: syz [ 999.399260][T14761] usb 4-1: SerialNumber: syz [ 999.646884][T14761] vmk80xx 4-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 999.681095][T14761] usb 4-1: USB disconnect, device number 96 [ 1000.485034][ T9918] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1000.658473][ T9918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1000.672612][ T9918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1000.693489][ T9918] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 1000.745060][ T9918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.785397][ T9918] usb 2-1: config 0 descriptor?? [ 1001.068840][T27880] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9409'. [ 1001.216255][ T9918] playstation 0003:054C:0BA0.0017: unknown main item tag 0x0 [ 1001.282643][ T9918] playstation 0003:054C:0BA0.0017: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.1-1/input0 [ 1001.415028][ T9918] playstation 0003:054C:0BA0.0017: Invalid reportID received, expected 18 got 146 [ 1001.426154][T27887] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9412'. [ 1001.445291][ T9918] playstation 0003:054C:0BA0.0017: Failed to retrieve DualShock4 pairing info: -22 [ 1001.454663][ T9918] playstation 0003:054C:0BA0.0017: Failed to get MAC address from DualShock4 [ 1001.479478][ T9918] playstation 0003:054C:0BA0.0017: Failed to create dualshock4. [ 1001.499703][ T9918] playstation 0003:054C:0BA0.0017: probe with driver playstation failed with error -22 [ 1001.629081][ T9918] usb 2-1: USB disconnect, device number 122 [ 1002.149341][T27903] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9421'. [ 1002.886766][T27923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9431'. [ 1002.915391][T27923] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9431'. [ 1002.958566][T27923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9431'. [ 1002.967881][T14761] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1002.988222][T27923] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9431'. [ 1003.135099][T14761] usb 5-1: Using ep0 maxpacket: 32 [ 1003.142361][T14761] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 1003.161912][T14761] usb 5-1: config 0 has no interface number 0 [ 1003.172086][T14761] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1003.205527][T14761] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 1003.230204][T14761] usb 5-1: config 0 interface 126 has no altsetting 0 [ 1003.257858][T14761] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 1003.277328][T14761] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.304947][T14761] usb 5-1: Product: syz [ 1003.315665][T14761] usb 5-1: Manufacturer: syz [ 1003.330641][T14761] usb 5-1: SerialNumber: syz [ 1003.343591][T14761] usb 5-1: config 0 descriptor?? [ 1003.361904][T27921] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1003.375170][T27921] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1003.475061][ T9909] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1003.568538][T27936] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9436'. [ 1003.640102][ T9909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1003.664955][ T9909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1003.696871][ T9909] usb 1-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 1003.715044][ T9909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.737812][ T9909] usb 1-1: config 0 descriptor?? [ 1003.821922][T14761] ir_usb 5-1:0.126: IR Dongle converter detected [ 1004.026329][T14761] usb 5-1: IRDA class descriptor not found, device not bound [ 1004.061868][T14761] usb 5-1: USB disconnect, device number 97 [ 1004.153059][ T9909] playstation 0003:054C:0BA0.0018: unknown main item tag 0x0 [ 1004.185158][ T9909] playstation 0003:054C:0BA0.0018: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.0-1/input0 [ 1004.350814][ T9909] playstation 0003:054C:0BA0.0018: Invalid reportID received, expected 18 got 146 [ 1004.370522][ T9909] playstation 0003:054C:0BA0.0018: Failed to retrieve DualShock4 pairing info: -22 [ 1004.391086][ T9909] playstation 0003:054C:0BA0.0018: Failed to get MAC address from DualShock4 [ 1004.410195][ T9909] playstation 0003:054C:0BA0.0018: Failed to create dualshock4. [ 1004.431193][ T9909] playstation 0003:054C:0BA0.0018: probe with driver playstation failed with error -22 [ 1004.564507][ T9909] usb 1-1: USB disconnect, device number 23 [ 1005.649297][T27952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9443'. [ 1005.698701][T27952] ------------[ cut here ]------------ [ 1005.704514][T27952] WARNING: CPU: 0 PID: 27952 at net/mac80211/rate.c:53 rate_control_rate_init+0x64a/0x6e0 [ 1005.714526][T27952] Modules linked in: [ 1005.718845][T27952] CPU: 0 UID: 0 PID: 27952 Comm: syz.4.9443 Not tainted syzkaller #0 PREEMPT(full) [ 1005.728344][T27952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1005.738515][T27952] RIP: 0010:rate_control_rate_init+0x64a/0x6e0 [ 1005.744692][T27952] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 48 1d 8c 00 cc e8 62 bc 02 f7 90 0f 0b 90 eb e1 e8 57 bc 02 f7 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00 [ 1005.764838][T27952] RSP: 0018:ffffc9000c676f60 EFLAGS: 00010287 [ 1005.771968][T27952] RAX: ffffffff8abd4769 RBX: ffff88804cd4c000 RCX: 0000000000080000 [ 1005.781338][T27952] RDX: ffffc90014bbd000 RSI: 0000000000003781 RDI: 0000000000003782 [ 1005.789392][T27952] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8abd4283 [ 1005.797433][T27952] R10: dffffc0000000000 R11: ffffed10099a9831 R12: 1ffff110099a980a [ 1005.805455][T27952] R13: ffff88806c858e80 R14: 0000000000000001 R15: ffffffff8abd4283 [ 1005.813448][T27952] FS: 00007f96e09be6c0(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 1005.822744][T27952] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1005.829536][T27952] CR2: 00007f190c1b7460 CR3: 000000006e30c000 CR4: 00000000003526f0 [ 1005.837666][T27952] Call Trace: [ 1005.840957][T27952] [ 1005.843912][T27952] rate_control_rate_init_all_links+0x109/0x1a0 [ 1005.850246][T27952] sta_apply_auth_flags+0x1c2/0x400 [ 1005.855638][T27952] sta_apply_parameters+0xe27/0x1570 [ 1005.860975][T27952] ieee80211_add_station+0x424/0x6a0 [ 1005.866366][T27952] rdev_add_station+0x108/0x290 [ 1005.872185][T27952] nl80211_new_station+0x1755/0x1b70 [ 1005.878382][T27952] ? __pfx_nl80211_new_station+0x10/0x10 [ 1005.884053][T27952] ? netdev_run_todo+0xe1d/0xea0 [ 1005.889139][T27952] ? nl80211_pre_doit+0x4f1/0x930 [ 1005.894201][T27952] genl_family_rcv_msg_doit+0x215/0x300 [ 1005.899851][T27952] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1005.906007][T27952] ? bpf_lsm_capable+0x9/0x20 [ 1005.910807][T27952] ? security_capable+0x7e/0x2e0 [ 1005.915843][T27952] genl_rcv_msg+0x60e/0x790 [ 1005.920387][T27952] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1005.925491][T27952] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1005.930881][T27952] ? __pfx_nl80211_new_station+0x10/0x10 [ 1005.936930][T27952] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1005.942415][T27952] ? __asan_memcpy+0x40/0x70 [ 1005.947078][T27952] ? __pfx_ref_tracker_free+0x10/0x10 [ 1005.952474][T27952] netlink_rcv_skb+0x208/0x470 [ 1005.957314][T27952] ? __lock_acquire+0xab9/0xd20 [ 1005.962183][T27952] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1005.967308][T27952] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1005.972631][T27952] ? down_read+0x1ad/0x2e0 [ 1005.978139][T27952] genl_rcv+0x28/0x40 [ 1005.982162][T27952] netlink_unicast+0x82f/0x9e0 [ 1005.987849][T27952] ? __pfx_netlink_unicast+0x10/0x10 [ 1005.993177][T27952] ? netlink_sendmsg+0x642/0xb30 [ 1005.998179][T27952] ? skb_put+0x11b/0x210 [ 1006.002445][T27952] netlink_sendmsg+0x805/0xb30 [ 1006.007294][T27952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1006.012606][T27952] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1006.017757][T27952] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1006.023060][T27952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1006.028462][T27952] __sock_sendmsg+0x21c/0x270 [ 1006.033172][T27952] ____sys_sendmsg+0x505/0x830 [ 1006.038028][T27952] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1006.043341][T27952] ? import_iovec+0x74/0xa0 [ 1006.047941][T27952] ___sys_sendmsg+0x21f/0x2a0 [ 1006.052650][T27952] ? __pfx____sys_sendmsg+0x10/0x10 [ 1006.057948][T27952] ? __fget_files+0x2a/0x420 [ 1006.062547][T27952] ? __fget_files+0x3a0/0x420 [ 1006.067296][T27952] __x64_sys_sendmsg+0x19b/0x260 [ 1006.072255][T27952] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1006.078773][T27952] ? do_syscall_64+0xbe/0xfa0 [ 1006.083487][T27952] do_syscall_64+0xfa/0xfa0 [ 1006.088911][T27952] ? lockdep_hardirqs_on+0x9c/0x150 [ 1006.094153][T27952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.100445][T27952] ? clear_bhb_loop+0x60/0xb0 [ 1006.105195][T27952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.111099][T27952] RIP: 0033:0x7f96dfb8f6c9 [ 1006.115593][T27952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1006.135289][T27952] RSP: 002b:00007f96e09be038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1006.143728][T27952] RAX: ffffffffffffffda RBX: 00007f96dfde5fa0 RCX: 00007f96dfb8f6c9 [ 1006.151783][T27952] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 000000000000000c [ 1006.159823][T27952] RBP: 00007f96dfc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1006.167878][T27952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1006.176120][T27952] R13: 00007f96dfde6038 R14: 00007f96dfde5fa0 R15: 00007f96dff0fa28 [ 1006.185213][T27952] [ 1006.188271][T27952] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1006.195562][T27952] CPU: 0 UID: 0 PID: 27952 Comm: syz.4.9443 Not tainted syzkaller #0 PREEMPT(full) [ 1006.204965][T27952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1006.215033][T27952] Call Trace: [ 1006.218326][T27952] [ 1006.221265][T27952] dump_stack_lvl+0x99/0x250 [ 1006.225869][T27952] ? __asan_memcpy+0x40/0x70 [ 1006.230462][T27952] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1006.235662][T27952] ? __pfx__printk+0x10/0x10 [ 1006.240257][T27952] vpanic+0x237/0x6d0 [ 1006.244242][T27952] ? __pfx_vpanic+0x10/0x10 [ 1006.248753][T27952] panic+0xb9/0xc0 [ 1006.252476][T27952] ? __pfx_panic+0x10/0x10 [ 1006.256904][T27952] __warn+0x31b/0x4b0 [ 1006.260887][T27952] ? rate_control_rate_init+0x64a/0x6e0 [ 1006.266426][T27952] ? rate_control_rate_init+0x64a/0x6e0 [ 1006.271965][T27952] report_bug+0x2be/0x4f0 [ 1006.276293][T27952] ? rate_control_rate_init+0x64a/0x6e0 [ 1006.281834][T27952] ? rate_control_rate_init+0x64a/0x6e0 [ 1006.287376][T27952] ? rate_control_rate_init+0x64c/0x6e0 [ 1006.292916][T27952] handle_bug+0x84/0x160 [ 1006.297161][T27952] exc_invalid_op+0x1a/0x50 [ 1006.301658][T27952] asm_exc_invalid_op+0x1a/0x20 [ 1006.306502][T27952] RIP: 0010:rate_control_rate_init+0x64a/0x6e0 [ 1006.312650][T27952] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 48 1d 8c 00 cc e8 62 bc 02 f7 90 0f 0b 90 eb e1 e8 57 bc 02 f7 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00 [ 1006.332252][T27952] RSP: 0018:ffffc9000c676f60 EFLAGS: 00010287 [ 1006.338328][T27952] RAX: ffffffff8abd4769 RBX: ffff88804cd4c000 RCX: 0000000000080000 [ 1006.346317][T27952] RDX: ffffc90014bbd000 RSI: 0000000000003781 RDI: 0000000000003782 [ 1006.354301][T27952] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8abd4283 [ 1006.362274][T27952] R10: dffffc0000000000 R11: ffffed10099a9831 R12: 1ffff110099a980a [ 1006.370254][T27952] R13: ffff88806c858e80 R14: 0000000000000001 R15: ffffffff8abd4283 [ 1006.378223][T27952] ? rate_control_rate_init+0x163/0x6e0 [ 1006.383776][T27952] ? rate_control_rate_init+0x163/0x6e0 [ 1006.389322][T27952] ? rate_control_rate_init+0x649/0x6e0 [ 1006.394883][T27952] rate_control_rate_init_all_links+0x109/0x1a0 [ 1006.401133][T27952] sta_apply_auth_flags+0x1c2/0x400 [ 1006.406335][T27952] sta_apply_parameters+0xe27/0x1570 [ 1006.411630][T27952] ieee80211_add_station+0x424/0x6a0 [ 1006.416917][T27952] rdev_add_station+0x108/0x290 [ 1006.421776][T27952] nl80211_new_station+0x1755/0x1b70 [ 1006.427073][T27952] ? __pfx_nl80211_new_station+0x10/0x10 [ 1006.432701][T27952] ? netdev_run_todo+0xe1d/0xea0 [ 1006.437656][T27952] ? nl80211_pre_doit+0x4f1/0x930 [ 1006.442682][T27952] genl_family_rcv_msg_doit+0x215/0x300 [ 1006.448232][T27952] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1006.454306][T27952] ? bpf_lsm_capable+0x9/0x20 [ 1006.458980][T27952] ? security_capable+0x7e/0x2e0 [ 1006.463920][T27952] genl_rcv_msg+0x60e/0x790 [ 1006.468430][T27952] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1006.473449][T27952] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1006.478816][T27952] ? __pfx_nl80211_new_station+0x10/0x10 [ 1006.484449][T27952] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1006.489910][T27952] ? __asan_memcpy+0x40/0x70 [ 1006.494502][T27952] ? __pfx_ref_tracker_free+0x10/0x10 [ 1006.499877][T27952] netlink_rcv_skb+0x208/0x470 [ 1006.504642][T27952] ? __lock_acquire+0xab9/0xd20 [ 1006.509490][T27952] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1006.514515][T27952] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1006.519810][T27952] ? down_read+0x1ad/0x2e0 [ 1006.524227][T27952] genl_rcv+0x28/0x40 [ 1006.528207][T27952] netlink_unicast+0x82f/0x9e0 [ 1006.532980][T27952] ? __pfx_netlink_unicast+0x10/0x10 [ 1006.538268][T27952] ? netlink_sendmsg+0x642/0xb30 [ 1006.543195][T27952] ? skb_put+0x11b/0x210 [ 1006.547433][T27952] netlink_sendmsg+0x805/0xb30 [ 1006.552197][T27952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1006.557475][T27952] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1006.562414][T27952] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1006.567690][T27952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1006.572977][T27952] __sock_sendmsg+0x21c/0x270 [ 1006.577666][T27952] ____sys_sendmsg+0x505/0x830 [ 1006.582431][T27952] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1006.587722][T27952] ? import_iovec+0x74/0xa0 [ 1006.592230][T27952] ___sys_sendmsg+0x21f/0x2a0 [ 1006.596909][T27952] ? __pfx____sys_sendmsg+0x10/0x10 [ 1006.602136][T27952] ? __fget_files+0x2a/0x420 [ 1006.606720][T27952] ? __fget_files+0x3a0/0x420 [ 1006.611400][T27952] __x64_sys_sendmsg+0x19b/0x260 [ 1006.616374][T27952] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1006.621847][T27952] ? do_syscall_64+0xbe/0xfa0 [ 1006.626527][T27952] do_syscall_64+0xfa/0xfa0 [ 1006.631028][T27952] ? lockdep_hardirqs_on+0x9c/0x150 [ 1006.636226][T27952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.642283][T27952] ? clear_bhb_loop+0x60/0xb0 [ 1006.646959][T27952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.652843][T27952] RIP: 0033:0x7f96dfb8f6c9 [ 1006.657249][T27952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1006.676849][T27952] RSP: 002b:00007f96e09be038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1006.685257][T27952] RAX: ffffffffffffffda RBX: 00007f96dfde5fa0 RCX: 00007f96dfb8f6c9 [ 1006.693224][T27952] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 000000000000000c [ 1006.701194][T27952] RBP: 00007f96dfc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1006.709164][T27952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1006.717144][T27952] R13: 00007f96dfde6038 R14: 00007f96dfde5fa0 R15: 00007f96dff0fa28 [ 1006.725122][T27952] [ 1006.728469][T27952] Kernel Offset: disabled [ 1006.732781][T27952] Rebooting in 86400 seconds..