last executing test programs: 3m20.887494237s ago: executing program 32 (id=296): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040476532020001010203010902270001010080320904000003ff0000000705810240000007050202400000070583030a0001"], 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x3}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(r1) 2m42.467258892s ago: executing program 1 (id=490): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0x0, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@cpuid={0x64, 0x18, {0x1}}, @uexit={0x0, 0x18, 0xaaaa}], 0x30}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0x0) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0x0, 0x0) 2m42.310712257s ago: executing program 1 (id=492): r0 = syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000402a1101000001010203010902200001010080320904000003ff000000070581024000000705010240000007058203400001"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000600)={0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/lirc0\x00', 0x2, 0x0) write(r1, &(0x7f0000000800)="64000000c800000064000000c800000064000000", 0x14) 2m39.238955405s ago: executing program 1 (id=498): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000040)={0x200001fe0000}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000080)={0x0, 0x200001fe0000, 0x8}) 2m39.229822077s ago: executing program 33 (id=452): r0 = getpid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r1, &(0x7f00000000c0)=r0, 0x12) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/devices.allow\x00', 0x1, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/address_bits', 0x0, 0x0) read(r2, &(0x7f0000000000), 0x100) 2m24.19149974s ago: executing program 34 (id=498): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000040)={0x200001fe0000}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000080)={0x0, 0x200001fe0000, 0x8}) 2m22.24686523s ago: executing program 6 (id=547): r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000102030109022e00010100803209040000040000000007058102000200070501020002000705820200020007050202000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x8, &(0x7f0000000200)={0x40, 0x0, 0x10, "0f00000100"/16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x8, &(0x7f0000000200)={0x40, 0x0, 0x10, "0f00000100"/16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x8, &(0x7f0000000200)={0x40, 0x0, 0x10, "0f00000100"/16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x8, &(0x7f0000000200)={0x40, 0x0, 0x10, "0f00000100"/16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x2}, 0x0) 2m19.094805959s ago: executing program 6 (id=555): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000200)=[@enable_nested={0x0}, @nested_create_vm={0x0}, @nested_load_code={0x0, 0x0, {0x0, 'f4'}}, @nested_vmlaunch={0x0}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m18.790795308s ago: executing program 6 (id=556): openat(0xffffffffffffff9c, &(0x7f0000000040)='sys/bus/pci/drivers/cdns-pci-usbssp/new_id\x00', 0x1, 0x0) 2m18.550723981s ago: executing program 6 (id=558): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x200000) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000100)="0002", 0x2, 0xc0c) pwrite64(r0, &(0x7f0000000100)='12345678-1234-1234-1234-123456789612', 0x24, 0xc30) pwrite64(r0, &(0x7f0000000100)="0000000000000001", 0x8, 0xd1b) pwrite64(r0, &(0x7f0000000100)="00000000000007ff", 0x8, 0xd23) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b\x00', 0x8, 0xd2b) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b\x00', 0x8, 0xd33) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0x1e8000) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0x1e800c) pwrite64(r0, &(0x7f0000000100)='12345678-1234-1234-1234-123456789612', 0x24, 0x1e8030) pwrite64(r0, &(0x7f0000000100)="0000000000000001", 0x8, 0x1e811b) pwrite64(r0, &(0x7f0000000100)="00000000000007ff", 0x8, 0x1e8123) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b\x00', 0x8, 0x1e812b) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b\x00', 0x8, 0x1e8133) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0x1ffe00) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0x1ffe0c) pwrite64(r0, &(0x7f0000000100)='12345678-1234-1234-1234-123456789612', 0x24, 0x1ffe30) pwrite64(r0, &(0x7f0000000100)="0000000000000001", 0x8, 0x1fff1b) pwrite64(r0, &(0x7f0000000100)="00000000000007ff", 0x8, 0x1fff23) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b\x00', 0x8, 0x1fff2b) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b\x00', 0x8, 0x1fff33) pwrite64(r0, &(0x7f0000000100)='TOCBLOCK', 0x8, 0x100200) pwrite64(r0, &(0x7f0000000100)='config\x00\x00\x00\x00', 0xa, 0x100224) pwrite64(r0, &(0x7f0000000100)="0000000000001000", 0x8, 0x10022e) pwrite64(r0, &(0x7f0000000100)='log\x00\x00\x00\x00\x00\x00\x00', 0xa, 0x100246) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 2m18.279184566s ago: executing program 6 (id=559): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_mnt\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_mnt\x00', 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) move_mount(r2, &(0x7f0000000000)='\x00', r0, &(0x7f0000000000)='\x00', 0x44) syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107500500010000000109023c0001010080fa0904000006ff00000007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02000200"], 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_mnt/bus/usb/drivers/sisusb/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000080)='5-1:1.0\x00', 0x8) 2m15.132834414s ago: executing program 6 (id=574): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(r3, 0x40000, &(0x7f0000000100)="020000000000000000000000000000000200", 0x0, 0x30) r4 = gettid() syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r4, 0xa) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) 2m11.127541715s ago: executing program 3 (id=588): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x1}]}}]}, 0x3c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000100)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000200)={0x2, 0x1234, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000100)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000200)={0x2, 0x1234, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000100)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000200)={0x2, 0x1234, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000100)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000200)={0x2, 0x1234, @loopback}, 0x10) 2m10.850927243s ago: executing program 3 (id=589): syz_usb_connect(0x3, 0xc8, &(0x7f0000000240)=ANY=[@ANYBLOB="120100020000004082058d004000010203010902b600040100c032080b0004010100020904000000010100000a240100010a000201020904000101010100000b2402010203180144ac000905830340000100000904010000010200000904010101010200000b2402010203180144ac00090582050002010000072501010000000904020000010200000904020101010200000b2402010203180144ac0009050105000201000007250101000000090403000201030000090584020002000000090504020002000000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0x40285511, &(0x7f0000000500)) 2m7.730313134s ago: executing program 3 (id=599): symlinkat(&(0x7f0000000040)='target0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='link0\x00') 2m7.64478225s ago: executing program 3 (id=600): r0 = syz_usbip_server_init(0x1) poll(&(0x7f0000000000)=[{r0, 0x1}], 0x1, 0x3e8) nanosleep(&(0x7f0000000040)={0x1}, 0x0) 2m6.146760844s ago: executing program 3 (id=601): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r3, 0x3, 0x11, r2, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000200)=0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m5.970684203s ago: executing program 3 (id=602): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000200)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000201), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000202)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000203)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000204)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000205)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000206)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000207)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000208)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000209)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f000000020a)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f000000020b)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f000000020c), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f000000020d), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f000000020e), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f000000020f)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000210)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000211)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000212)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000213)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000214)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000215)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000216), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000217), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000218)={0x2, 0xa}, 0x2) 1m59.188994681s ago: executing program 35 (id=574): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(r3, 0x40000, &(0x7f0000000100)="020000000000000000000000000000000200", 0x0, 0x30) r4 = gettid() syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r4, 0xa) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) 1m50.592520363s ago: executing program 36 (id=602): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000200)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000201), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000202)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000203)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000204)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000205)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000206)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000207)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000208)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000209)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f000000020a)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f000000020b)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f000000020c), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f000000020d), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f000000020e), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f000000020f)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000210)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000211)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000212)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000213)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000214)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000215)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000216), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000217), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000218)={0x2, 0xa}, 0x2) 1m29.923051129s ago: executing program 9 (id=711): r0 = syz_usb_connect(0x1, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040b906614000000000000109023900020100a0320904000001ff000000070581031000010904010000ff0000000904010102ff0000000705870240000007050702400000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x14, &(0x7f0000000080)={0xc0, 0x12, 0x7, "01020304050607"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000200)={0x0, 0x5f5e100}, 0x0) syz_usb_disconnect(r0) nanosleep(&(0x7f0000000200)={0x0, 0x5f5e100}, 0x0) 1m26.846145347s ago: executing program 9 (id=719): syz_emit_ethernet(0x30, &(0x7f0000000100)={@link_local, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x18, 0xfffe, 0x0, 0xa0, 0x11, 0x0, @remote, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) 1m26.745433747s ago: executing program 9 (id=721): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-vaes-avx512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="00112233445566778899aabbccddeeff00112233", 0x14) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x800) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x20, 0x117, 0x2, 0x8, "0011223344556677"}, @assoc={0x18}], 0x50}, 0x0) read$alg(r1, &(0x7f0000000400)=""/64, 0x40) 1m26.543258073s ago: executing program 9 (id=722): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4010ae67, &(0x7f0000000100)={0x8d, 0x0, 0x2}) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000200)={0x0, &(0x7f0000000300)=[@wrmsr={0x65, 0x20, {0x1b, 0xfee00c00}}, @wrmsr={0x65, 0x20, {0x832, 0x40000}}, @wrmsr={0x65, 0x20, {0x6e0, 0x100000}}, @code={0xa, 0x13, {"f4c3"}}], 0x73}) ioctl$KVM_RUN(r3, 0xae80, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m26.147906597s ago: executing program 9 (id=723): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write(r1, &(0x7f0000000500)='transport=rdma,nqn=nqn.2014-08.org.nvmexpress:NVMf:uuid:12345678-1234-1234-1234-123456789abc,traddr=127.0.0.1,trsvcid=4420\x00', 0x85) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) 1m25.854960939s ago: executing program 9 (id=724): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) read$usbmon(r0, 0x0, 0x2f) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) 1m10.194350971s ago: executing program 37 (id=724): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) read$usbmon(r0, 0x0, 0x2f) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) 49.992523833s ago: executing program 4 (id=835): syz_usb_connect$uac1(0x2, 0x9a, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x31e9, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x3, 0x1, 0x9, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x8, 0x5}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x200, 0xfff, 0x0, 'f'}]}, {{0x9, 0x5, 0x1, 0x5, 0x200, 0x1, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x8, 0x5}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x200, 0xfff, 0x0, 'f'}]}, {{0x9, 0x5, 0x81, 0x5, 0x200, 0x1, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1}}}}}}}}]}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 48.513583048s ago: executing program 4 (id=841): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xffffffff, 0x10, 0x20, @buffer, &(0x7f0000000100)="8506200000000000000000000000e600", &(0x7f0000000140)=""/64, 0x3e8}) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0xfffffffd, 0xa, 0x20, @buffer={0x0, 0x200, &(0x7f0000000400)=""/512}, &(0x7f0000000300)="28000000000000000100", &(0x7f0000000340)=""/64, 0x3e8}) clock_nanosleep(0x0, 0x0, &(0x7f0000000500)={0x1}, 0x0) 47.531083139s ago: executing program 4 (id=843): openat(0xffffffffffffff9c, &(0x7f0000000000)='./dev/mapper/control\x00', 0x2, 0x0) 47.502054167s ago: executing program 4 (id=844): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40081601020001000000010902350001010080320904000005ffffff00070581024000000705020240000007058302400000070504024000000705850340000000"], 0x0) syz_usb_ep_read(r0, 0x81, 0x40, &(0x7f0000000000)=""/64) 46.170267072s ago: executing program 4 (id=848): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040ae24, &(0x7f0000000040)={0x1000}) 45.958938184s ago: executing program 4 (id=849): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xb, 0x2) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0xc, 0x2) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0xd, 0x2) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) r3 = syz_open_dev$usbfs(&(0x7f0000000300), 0xe, 0x2) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) r4 = syz_open_dev$usbfs(&(0x7f0000000400), 0xf, 0x2) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) r5 = syz_open_dev$usbfs(&(0x7f0000000500), 0x10, 0x2) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) r6 = syz_open_dev$usbfs(&(0x7f0000000600), 0x11, 0x2) ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522) r7 = syz_open_dev$usbfs(&(0x7f0000000700), 0x12, 0x2) ioctl$USBDEVFS_ALLOW_SUSPEND(r7, 0x5522) r8 = syz_open_dev$usbfs(&(0x7f0000000800), 0x13, 0x2) ioctl$USBDEVFS_ALLOW_SUSPEND(r8, 0x5522) ppoll(&(0x7f0000000c00)=[{r0, 0x1}, {r1, 0x1}, {r2, 0x1}, {r3, 0x1}, {r4, 0x1}, {r5, 0x1}, {r6, 0x1}, {r7, 0x1}, {r8, 0x1}], 0x9, 0x0, 0x0, 0x0) 35.228250033s ago: executing program 8 (id=895): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x1000, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x2000, 0x20, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x4000, 0x40, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8000, 0x80, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x10000, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x20000, 0x200, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x2, 0x4, 0x40000, 0x400, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x2, 0x4, 0x80000, 0x800, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x2, 0x4, 0x100000, 0x1000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x2, 0x4, 0x3000, 0x30, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x2, 0x4, 0x5000, 0x50, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x2, 0x4, 0x9000, 0x90, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 30.725805143s ago: executing program 38 (id=849): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xb, 0x2) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0xc, 0x2) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0xd, 0x2) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) r3 = syz_open_dev$usbfs(&(0x7f0000000300), 0xe, 0x2) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) r4 = syz_open_dev$usbfs(&(0x7f0000000400), 0xf, 0x2) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) r5 = syz_open_dev$usbfs(&(0x7f0000000500), 0x10, 0x2) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) r6 = syz_open_dev$usbfs(&(0x7f0000000600), 0x11, 0x2) ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522) r7 = syz_open_dev$usbfs(&(0x7f0000000700), 0x12, 0x2) ioctl$USBDEVFS_ALLOW_SUSPEND(r7, 0x5522) r8 = syz_open_dev$usbfs(&(0x7f0000000800), 0x13, 0x2) ioctl$USBDEVFS_ALLOW_SUSPEND(r8, 0x5522) ppoll(&(0x7f0000000c00)=[{r0, 0x1}, {r1, 0x1}, {r2, 0x1}, {r3, 0x1}, {r4, 0x1}, {r5, 0x1}, {r6, 0x1}, {r7, 0x1}, {r8, 0x1}], 0x9, 0x0, 0x0, 0x0) 26.733892098s ago: executing program 8 (id=918): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040450c40600001000000010902320001010080320904000002000000000705810300020107050203000201"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 23.042472468s ago: executing program 8 (id=929): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x200000) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000100)='12345678-1234-1234-1234-123456789612', 0x24, 0xc30) pwrite64(r0, &(0x7f0000000100), 0x0, 0xd1b) pwrite64(r0, &(0x7f0000000100)="00000000000007ff", 0x8, 0xd23) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b\x00', 0x8, 0xd2b) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b\x00', 0x8, 0xd33) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0x1e8000) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0x1e800c) pwrite64(r0, &(0x7f0000000100)='12345678-1234-1234-1234-123456789612', 0x24, 0x1e8030) pwrite64(r0, &(0x7f0000000100)="0000000000000001", 0x8, 0x1e811b) pwrite64(r0, &(0x7f0000000100)="00000000000007ff", 0x8, 0x1e8123) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b\x00', 0x8, 0x1e812b) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b\x00', 0x8, 0x1e8133) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0x1ffe00) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0x1ffe0c) pwrite64(r0, &(0x7f0000000100)='12345678-1234-1234-1234-123456789612', 0x24, 0x1ffe30) pwrite64(r0, &(0x7f0000000100)="0000000000000001", 0x8, 0x1fff1b) pwrite64(r0, &(0x7f0000000100)="00000000000007ff", 0x8, 0x1fff23) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b\x00', 0x8, 0x1fff2b) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b\x00', 0x8, 0x1fff33) pwrite64(r0, &(0x7f0000000100)='TOCBLOCK', 0x8, 0x100200) pwrite64(r0, &(0x7f0000000100)='config\x00\x00\x00\x00', 0xa, 0x100224) pwrite64(r0, &(0x7f0000000100)="0000000000001000", 0x8, 0x10022e) pwrite64(r0, &(0x7f0000000100)='log\x00\x00\x00\x00\x00\x00\x00', 0xa, 0x100246) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 22.485634637s ago: executing program 8 (id=932): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000040)={0xb6, 0x0, 0x30d40}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000400)={0x1, 0x0, [{0x40000001, 0x0, 0x0, 0x1000}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d05, 0x0, 0x1}]}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000200)=0x3) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000300)={0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000300)) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000200)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21.370947954s ago: executing program 8 (id=933): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x34, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x34}}, 0x0) 20.523948907s ago: executing program 8 (id=936): syz_usb_connect(0x0, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) 9.680969877s ago: executing program 0 (id=966): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000080)='\x00'/10, 0xa, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, &(0x7f0000000140)=""/10, 0xa, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)="0100000002000800ffffff7f0100"/32, 0x20, 0xffffffff) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000300)='syz \x00', 0x5) connect$rxrpc(r2, &(0x7f0000000400)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) sendmsg(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000d00)="11223344", 0x4}], 0x1, &(0x7f0000000e00)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) recvfrom$inet(r0, &(0x7f0000000600)=""/1000, 0x3e8, 0x0, &(0x7f0000000700)={0x2, 0x4e20, @loopback}, 0x10) pipe2(&(0x7f0000000900)={0x0, 0x0}, 0x0) write(r4, &(0x7f0000000a00)="000000000000000000000001060000020000000100000002000004d20000000000000000", 0x23) read(r3, &(0x7f0000000608), 0x23) sendto$inet(r0, &(0x7f0000000600)='\x00'/43, 0x2b, 0x0, &(0x7f0000000700)={0x2, 0x4e20, @loopback}, 0x10) 9.576737375s ago: executing program 0 (id=967): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e60410100000010203010902200001010080320904000002080680000705810200020007050202000200"], 0x0) 6.843485425s ago: executing program 5 (id=977): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) syz_usb_connect(0x3, 0x6d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000400000000000010000000109025b00010100c00009040000020806500007058102000200070502020002000904000105080662000705810200020003240107050202000200032402070583020002000324030705040200020003240407050502000200030000"], 0x0) 6.439019092s ago: executing program 0 (id=978): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000100000040030401600001000000010902200001010080320904000002ff0000000705810200020007050202000200"], 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000300)) 5.62214431s ago: executing program 2 (id=980): r0 = socket(0x2d, 0x2, 0x0) ioctl(r0, 0x89e2, &(0x7f0000000000)='\x00'/16) 5.522922876s ago: executing program 2 (id=981): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 5.467024195s ago: executing program 39 (id=936): syz_usb_connect(0x0, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) 5.384207249s ago: executing program 2 (id=983): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x34, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x34}}, 0x0) 5.164205323s ago: executing program 7 (id=984): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xd4}}, 0x0) r1 = socket(0x2, 0x1, 0x6) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000002c0)='veth0_to_bridge\x00', 0x10) connect(r1, &(0x7f0000000300)=@in={0x2, 0x5000, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) 4.515860092s ago: executing program 2 (id=985): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c40700a000000102030109022000010100c0000904000002080650000705010200020007058202000200"], 0x0) syz_usb_ep_write(r0, 0x82, 0x200, &(0x7f0000000100)='\x00') syz_usb_ep_write(r0, 0x82, 0x200, &(0x7f0000000100)='\x00') syz_usb_ep_write(r0, 0x82, 0x200, &(0x7f0000000100)='\x00') syz_usb_ep_write(r0, 0x82, 0x200, &(0x7f0000000100)='\x00') syz_usb_ep_write(r0, 0x82, 0x200, &(0x7f0000000100)='\x00') nanosleep(&(0x7f0000000300)={0x5}, 0x0) 4.20362364s ago: executing program 7 (id=986): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 4.092823613s ago: executing program 7 (id=987): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) 3.960458613s ago: executing program 7 (id=988): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040b41801100000010200010902240002010080fa0904000000000000000904010000ff000000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x10, &(0x7f0000000200)={0xc0, 0x1, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x2}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000400), 0x2, 0x2) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000500)={&(0x7f0000000600)=[{0x67, 0x0, 0x1, &(0x7f0000000700)='3'}], 0x1}) 3.686874341s ago: executing program 5 (id=989): write(0xffffffffffffffff, &(0x7f0000000200)='foo', 0x3) 3.621993742s ago: executing program 5 (id=990): r0 = socket(0x2, 0x1, 0x0) connect(r0, &(0x7f0000003000)=@in={0x2, 0x3039, @rand_addr=0x64010100}, 0x10) 3.530856169s ago: executing program 5 (id=991): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020ae62, &(0x7f0000000100)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x20, 0x0, 0x1}]}}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000200)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000070}]}) 3.28240532s ago: executing program 0 (id=992): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000) 3.232609044s ago: executing program 5 (id=993): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') 3.122372461s ago: executing program 0 (id=994): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x34, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x34}}, 0x0) 2.317025265s ago: executing program 0 (id=995): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402f0700220001010200010902200001010080320904000002ff0000000705810240000007050202400000"], 0x0) 1.641007595s ago: executing program 1 (id=982): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x200000) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000100)='12345678-1234-1234-1234-123456789612', 0x24, 0xc30) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00', 0x4, 0xd1b) pwrite64(r0, &(0x7f0000000100)="00000000000007ff", 0x8, 0xd23) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b\x00', 0x8, 0xd2b) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b\x00', 0x8, 0xd33) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0x1e8000) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0x1e800c) pwrite64(r0, &(0x7f0000000100)='12345678-1234-1234-1234-123456789612', 0x24, 0x1e8030) pwrite64(r0, &(0x7f0000000100)="0000000000000001", 0x8, 0x1e811b) pwrite64(r0, &(0x7f0000000100)="00000000000007ff", 0x8, 0x1e8123) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b\x00', 0x8, 0x1e812b) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b\x00', 0x8, 0x1e8133) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0x1ffe00) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0x1ffe0c) pwrite64(r0, &(0x7f0000000100)='12345678-1234-1234-1234-123456789612', 0x24, 0x1ffe30) pwrite64(r0, &(0x7f0000000100)="0000000000000001", 0x8, 0x1fff1b) pwrite64(r0, &(0x7f0000000100)="00000000000007ff", 0x8, 0x1fff23) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b\x00', 0x8, 0x1fff2b) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b\x00', 0x8, 0x1fff33) pwrite64(r0, &(0x7f0000000100)='TOCBLOCK', 0x8, 0x100200) pwrite64(r0, &(0x7f0000000100)='config\x00\x00\x00\x00', 0xa, 0x100224) pwrite64(r0, &(0x7f0000000100)="0000000000001000", 0x8, 0x10022e) pwrite64(r0, &(0x7f0000000100)='log\x00\x00\x00\x00\x00\x00\x00', 0xa, 0x100246) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 1.381658823s ago: executing program 1 (id=996): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0x0, 0x0) r3 = eventfd2(0x0, 0x0) r4 = eventfd2(0x0, 0x0) r5 = eventfd2(0x0, 0x0) r6 = eventfd2(0x0, 0x0) r7 = eventfd2(0x0, 0x0) r8 = eventfd2(0x0, 0x0) r9 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0x0, 0x0, 0x0}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000120)={r3, 0x1, 0x0, 0x0}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r4, 0x2, 0x0, 0x0}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000160)={r5, 0x3, 0x0, 0x0}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000180)={r6, 0x4, 0x0, 0x0}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001a0)={r7, 0x5, 0x0, 0x0}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={r8, 0x6, 0x0, 0x0}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001e0)={r9, 0x7, 0x0, 0x0}) write$eventfd(r2, &(0x7f0000000300)=0x1, 0x8) (async) write$eventfd(r3, &(0x7f0000000300)=0x1, 0x8) (async) write$eventfd(r4, &(0x7f0000000300)=0x1, 0x8) (async) write$eventfd(r5, &(0x7f0000000300)=0x1, 0x8) (async) write$eventfd(r6, &(0x7f0000000300)=0x1, 0x8) (async) write$eventfd(r7, &(0x7f0000000300)=0x1, 0x8) (async) write$eventfd(r8, &(0x7f0000000300)=0x1, 0x8) (async) write$eventfd(r9, &(0x7f0000000300)=0x1, 0x8) (async) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000400)={0x8, 0x0, [{0x0, 0x1}, {0x1, 0x1, 0x0, 0x0, @irqchip={0x0, 0x1}}, {0x2, 0x1, 0x0, 0x0, @irqchip={0x0, 0x2}}, {0x3, 0x1, 0x0, 0x0, @irqchip={0x0, 0x3}}, {0x4, 0x1, 0x0, 0x0, @irqchip={0x1}}, {0x5, 0x1, 0x0, 0x0, @irqchip={0x1, 0x1}}, {0x6, 0x1, 0x0, 0x0, @irqchip={0x1, 0x2}}, {0x7, 0x1, 0x0, 0x0, @irqchip={0x1, 0x3}}]}) write$eventfd(r2, &(0x7f0000000300)=0x1, 0x8) (async) write$eventfd(r3, &(0x7f0000000300)=0x1, 0x8) (async) write$eventfd(r4, &(0x7f0000000300)=0x1, 0x8) (async) write$eventfd(r5, &(0x7f0000000300)=0x1, 0x8) (async) write$eventfd(r6, &(0x7f0000000300)=0x1, 0x8) (async) write$eventfd(r7, &(0x7f0000000300)=0x1, 0x8) (async) write$eventfd(r8, &(0x7f0000000300)=0x1, 0x8) (async) write$eventfd(r9, &(0x7f0000000300)=0x1, 0x8) (async) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000400)={0x8, 0x0, [{0x0, 0x2, 0x0, 0x0, @msi={0xfee00000, 0x0, 0x1}}, {0x1, 0x2, 0x0, 0x0, @msi={0xfee00000, 0x0, 0x2}}, {0x2, 0x2, 0x0, 0x0, @msi={0xfee00000, 0x0, 0x3}}, {0x3, 0x2, 0x0, 0x0, @msi={0xfee00000, 0x0, 0x4}}, {0x4, 0x2, 0x0, 0x0, @msi={0xfee00000, 0x0, 0x5}}, {0x5, 0x2, 0x0, 0x0, @msi={0xfee00000, 0x0, 0x6}}, {0x6, 0x2, 0x0, 0x0, @msi={0xfee00000, 0x0, 0x7}}, {0x7, 0x2, 0x0, 0x0, @msi={0xfee00000, 0x0, 0x8}}]}) 1.29958272s ago: executing program 2 (id=997): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x28}}, 0x0) 1.182933406s ago: executing program 2 (id=998): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040460d1120000001010203010902200001010080320904000002ff0000000705810308000a0705020308000a"], 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r1, &(0x7f0000000300)='xdevxcharx188x0\x00', 0x10) read(r0, &(0x7f0000000400), 0x10) write(r1, &(0x7f0000000300)='/', 0x1) read(r0, &(0x7f0000000400), 0x1) write(r1, &(0x7f0000000300)='/', 0x1) read(r0, &(0x7f0000000404), 0x1) write(r1, &(0x7f0000000300)='/', 0x1) read(r0, &(0x7f0000000409), 0x1) write(r1, &(0x7f0000000300)=':', 0x1) read(r0, &(0x7f000000040d), 0x1) openat(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 949.506955ms ago: executing program 1 (id=999): syz_usb_connect(0x2, 0x5b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010001000000406b1d010100010102030109024900020100c03209040000000101000009240100012e0001010c240201010200010100000010240702010001010101000001020005092403030101000200090401000001020000"], 0x0) nanosleep(&(0x7f0000000200)={0x0, 0x1dcd6500}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000140), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xca285513, &(0x7f0000000300)={{0x1, 0x3, 0x0, 0x0, 'syz0\x00'}}) 354.89342ms ago: executing program 7 (id=1000): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000200)=[@code={0xa, 0x1b, {'8800000000'}}], 0x1b}) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 129.594701ms ago: executing program 5 (id=1001): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x20, 0x1a, 0x301, 0x0, 0x0, {0x1}, [@typed={0x4, 0x15b}, @typed={0x8, 0x3, 0x0, 0x0, @u32}]}, 0x20}}, 0x0) 0s ago: executing program 7 (id=1002): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000180)=@framed={{}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): : Mfr=1, Product=2, SerialNumber=3 [ 223.006592][ T5680] usb 5-1: Product: syz [ 223.017266][ T5680] usb 5-1: Manufacturer: syz [ 223.031874][ T5680] usb 5-1: SerialNumber: syz [ 223.055250][ T7559] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 223.071795][ T7559] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 223.098525][ T5680] sierra 5-1:1.0: Sierra USB modem converter detected [ 223.751106][ T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 223.922191][ T24] usb 6-1: New USB device found, idVendor=0bda, idProduct=8152, bcdDevice= 0.00 [ 223.954441][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.970588][ T24] usb 6-1: Product: syz [ 223.976191][ T24] usb 6-1: Manufacturer: syz [ 223.989916][ T24] usb 6-1: SerialNumber: syz [ 224.011211][ T24] r8152-cfgselector 6-1: Unknown version 0x0000 [ 224.371155][ T24] r8152-cfgselector 6-1: reset high-speed USB device number 12 using dummy_hcd [ 225.316898][ T5680] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 225.352508][ T5680] usb 5-1: USB disconnect, device number 24 [ 225.403926][ T5680] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 225.417185][ T5680] sierra 5-1:1.0: device disconnected [ 226.730007][ T5680] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 226.880798][ T5680] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice= 1.00 [ 226.904501][ T5680] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 226.919922][ T5680] usb 5-1: Product: syz [ 226.924192][ T5680] usb 5-1: Manufacturer: syz [ 227.172054][ T5680] hdpvr 5-1:1.0: firmware version 0x1e dated 01234567890123456789012345678901234567890123 [ 227.478438][ T5680] hdpvr 5-1:1.0: device init failed [ 227.494139][ T5680] hdpvr 5-1:1.0: probe with driver hdpvr failed with error -12 [ 227.526143][ T5680] usb 5-1: USB disconnect, device number 25 [ 229.399984][ T187] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 229.554905][ T24] r8152-cfgselector 6-1: device descriptor read/64, error -110 [ 229.565478][ T187] usb 5-1: New USB device found, idVendor=076d, idProduct=0006, bcdDevice= 1.00 [ 229.576217][ T187] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.800339][ T24] r8152-cfgselector 6-1: reset high-speed USB device number 12 using dummy_hcd [ 229.950031][ T24] r8152-cfgselector 6-1: device descriptor read/64, error -32 [ 230.211107][ T24] r8152-cfgselector 6-1: reset high-speed USB device number 12 using dummy_hcd [ 230.250808][ T24] r8152-cfgselector 6-1: device descriptor read/8, error -32 [ 230.354418][ T5611] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 230.366053][ T5611] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 230.377483][ T5611] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 230.388318][ T5611] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 230.396595][ T5611] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 230.500017][ T24] r8152-cfgselector 6-1: reset high-speed USB device number 12 using dummy_hcd [ 230.560781][ T24] r8152-cfgselector 6-1: device descriptor read/8, error -32 [ 230.690999][ T24] raw-gadget.1 gadget.5: failed to queue suspend event [ 230.713478][ T24] r8152 6-1:1.0: USB reset failed, errno=-19 [ 230.753676][ T24] r8152-cfgselector 6-1: USB disconnect, device number 12 [ 230.796438][ T7629] raw-gadget.1 gadget.5: failed to queue disconnect event [ 231.007491][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.102967][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.210722][ T24] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 231.222216][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.330158][ T187] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 231.365593][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.379939][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 231.389791][ T187] usb 5-1: USB disconnect, device number 26 [ 231.393439][ T24] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 231.419369][ T24] usb 6-1: config 0 has an invalid interface number: 143 but max is 0 [ 231.436019][ T24] usb 6-1: config 0 has no interface number 0 [ 231.461407][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.495012][ T24] usb 6-1: config 0 descriptor?? [ 231.610977][ T24] viperboard 6-1:0.143: version 0.00 found at bus 006 address 013 [ 231.655143][ T24] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 231.671534][ T24] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 231.739738][ T24] usb 6-1: USB disconnect, device number 13 [ 231.952396][ T187] wiimote 0005:057E:0306.000E: hidraw0: BLUETOOTH HID v0.00 Gamepad [syz0] on syz0 [ 231.965800][ T187] wiimote 0005:057E:0306.000E: New device registered [ 232.034607][ T7735] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.042111][ T7735] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.049348][ T7735] bridge_slave_0: entered allmulticast mode [ 232.072321][ T7735] bridge_slave_0: entered promiscuous mode [ 232.122643][ T7735] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.147084][ T7735] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.157588][ T7735] bridge_slave_1: entered allmulticast mode [ 232.175639][ T7735] bridge_slave_1: entered promiscuous mode [ 232.232344][ T35] gretap0: left allmulticast mode [ 232.243724][ T35] gretap0: left promiscuous mode [ 232.262998][ T35] bridge0: port 3(gretap0) entered disabled state [ 232.278494][ T35] bridge_slave_1: left allmulticast mode [ 232.297419][ T35] bridge_slave_1: left promiscuous mode [ 232.315268][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.336192][ T35] bridge_slave_0: left allmulticast mode [ 232.350017][ T35] bridge_slave_0: left promiscuous mode [ 232.363748][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.471402][ T5625] Bluetooth: hci4: command tx timeout [ 232.763754][ T7917] wiimote 0005:057E:0306.000E: Device removed [ 232.965880][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.977197][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.996214][ T35] bond0 (unregistering): Released all slaves [ 233.019982][ T5603] wiimote 0005:057E:0306.000E: detected device: Nintendo Wii Remote (Gen 1) [ 233.076241][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5 [ 233.132425][ T7971] team0: Port device veth0_to_team added [ 233.171422][ T7735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.177061][ T5603] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.000E/input/input23 [ 233.222923][ T5603] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.000E/input/input24 [ 233.244907][ T7735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.273706][ T35] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING) [ 233.298226][ T5603] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.000E/input/input22 [ 233.467176][ T7735] team0: Port device team_slave_0 added [ 233.477607][ T7735] team0: Port device team_slave_1 added [ 233.626760][ T7735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.634103][ T5736] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 233.641979][ T7735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.675647][ T7735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.721999][ T7735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.740970][ T7735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.800138][ T7735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.802283][ T5736] usb 6-1: device descriptor read/64, error -71 [ 233.878944][ T35] hsr_slave_0: left promiscuous mode [ 233.895621][ T35] hsr_slave_1: left promiscuous mode [ 233.911230][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.924782][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.941287][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.961102][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.027214][ T35] veth1_macvtap: left promiscuous mode [ 234.041669][ T35] veth0_macvtap: left promiscuous mode [ 234.055694][ T35] veth1_vlan: left promiscuous mode [ 234.072124][ T35] veth0_vlan: left promiscuous mode [ 234.080046][ T5736] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 234.221770][ T5736] usb 6-1: device descriptor read/64, error -71 [ 234.364077][ T5736] usb usb6-port1: attempt power cycle [ 234.550089][ T5625] Bluetooth: hci4: command tx timeout [ 234.653230][ T35] team0 (unregistering): Port device team_slave_1 removed [ 234.693358][ T35] team0 (unregistering): Port device team_slave_0 removed [ 234.719930][ T5736] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 234.751525][ T5736] usb 6-1: device descriptor read/8, error -71 [ 234.886369][ T5272] 8021q: adding VLAN 0 to HW filter on device eth6 [ 234.983850][ T7735] hsr_slave_0: entered promiscuous mode [ 234.993607][ T7735] hsr_slave_1: entered promiscuous mode [ 235.000173][ T7735] debugfs: 'hsr0' already exists in 'hsr' [ 235.005950][ T7735] Cannot create hsr debugfs directory [ 235.021972][ T5736] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 235.062813][ T5736] usb 6-1: device descriptor read/8, error -71 [ 235.199470][ T5736] usb usb6-port1: unable to enumerate USB device [ 235.537193][ T7735] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 235.555136][ T7735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 235.569083][ T7735] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 235.592867][ T7735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 235.613400][ T7735] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 235.633642][ T7735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 235.650861][ T7735] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 235.675086][ T7735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 235.874102][ T7735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.903006][ T7735] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.935771][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.943010][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.964846][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.972040][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.989111][ T5272] 8021q: adding VLAN 0 to HW filter on device eth7 [ 236.116822][ T7735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.185080][ T7735] veth0_vlan: entered promiscuous mode [ 236.203852][ T7735] veth1_vlan: entered promiscuous mode [ 236.268731][ T7735] veth0_macvtap: entered promiscuous mode [ 236.303138][ T7735] veth1_macvtap: entered promiscuous mode [ 236.336884][ T7735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.368605][ T7735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.441539][ T35] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.469976][ T35] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.541488][ T6874] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.620965][ T5625] Bluetooth: hci4: command tx timeout [ 236.641659][ T35] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.661566][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.676971][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.723391][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.739198][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.824551][ T5699] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 236.991614][ T5699] usb 6-1: Using ep0 maxpacket: 32 [ 237.007849][ T5699] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 237.032831][ T5699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 237.048523][ T5699] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 237.058638][ T5699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 237.068960][ T5699] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 237.079175][ T5699] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 237.092964][ T5699] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.111189][ T5272] 8021q: adding VLAN 0 to HW filter on device eth8 [ 237.116608][ T5699] usb 6-1: config 0 descriptor?? [ 237.341101][ T5699] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 238.700322][ T5625] Bluetooth: hci4: command tx timeout [ 239.568101][ T24] usb 6-1: USB disconnect, device number 18 [ 239.596087][ T24] usblp0: removed [ 239.989962][ T24] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 240.162848][ T24] usb 6-1: New USB device found, idVendor=0711, idProduct=0903, bcdDevice= 1.00 [ 240.191087][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.216230][ T24] usb 6-1: USB2VGA dongle found at address 19 [ 240.247334][ T24] usb 6-1: Allocated 8 output buffers [ 240.999967][ T5699] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 241.159952][ T5699] usb 5-1: Using ep0 maxpacket: 32 [ 241.167321][ T5699] usb 5-1: unable to get BOS descriptor or descriptor too short [ 241.177467][ T5699] usb 5-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 241.193962][ T5699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.204343][ T5699] usb 5-1: Product: syz [ 241.208571][ T5699] usb 5-1: Manufacturer: syz [ 241.213490][ T5699] usb 5-1: SerialNumber: syz [ 241.441852][ T8325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.456469][ T8325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.477373][ T5699] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 242.503862][ T5699] usb 5-1: unit 37 not found! [ 242.508717][ T5699] usb 5-1: unit 0 not found! [ 242.645586][ T5699] usb 5-1: USB disconnect, device number 27 [ 242.668210][ T24] usb 6-1: Failed to early initialize device [ 242.724148][ T24] usb 6-1: USB disconnect, device number 19 [ 243.139965][ T24] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 243.301852][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 243.316329][ T24] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 243.341790][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.369920][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 243.400041][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.416443][ T24] usb 6-1: config 0 descriptor?? [ 244.318808][ T8447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.329101][ T5670] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 244.392143][ T8447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.456275][ T8447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.996923][ T5670] usb 5-1: New USB device found, idVendor=0971, idProduct=7840, bcdDevice= 1.00 [ 245.019150][ T5670] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 245.037500][ T5670] usb 5-1: can't read configurations, error -71 [ 245.328123][ T5611] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 245.343208][ T5611] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 245.351048][ T5611] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 245.359462][ T5611] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 245.367949][ T5611] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 245.667797][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 245.702703][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 245.737129][ T5680] logitech-hidpp-device 0003:046D:C082.000F: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 245.777864][ T24] usb 6-1: USB disconnect, device number 20 [ 246.211916][ T5670] nintendo 0005:057E:2007.0010: hidraw0: BLUETOOTH HID v80.00 Gamepad [syz0] on syz0 [ 246.404728][ T8467] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.412947][ T8467] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.422042][ T8467] bridge_slave_0: entered allmulticast mode [ 246.431350][ T8467] bridge_slave_0: entered promiscuous mode [ 246.440336][ T8467] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.447562][ T8467] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.454812][ T8467] bridge_slave_1: entered allmulticast mode [ 246.463364][ T8467] bridge_slave_1: entered promiscuous mode [ 246.506062][ T8467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.518798][ T8467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.566026][ T8467] team0: Port device team_slave_0 added [ 246.574911][ T8467] team0: Port device team_slave_1 added [ 246.590293][ T5736] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 246.667814][ T8467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.681820][ T8467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.713134][ T8467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.726947][ T8467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.734627][ T8467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.761083][ T8467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.780156][ T5736] usb 6-1: Invalid ep0 maxpacket: 64 [ 246.865923][ T8467] hsr_slave_0: entered promiscuous mode [ 246.880954][ T8467] hsr_slave_1: entered promiscuous mode [ 246.894821][ T8467] debugfs: 'hsr0' already exists in 'hsr' [ 246.919962][ T5736] usb 6-1: new low-speed USB device number 22 using dummy_hcd [ 246.935184][ T8467] Cannot create hsr debugfs directory [ 247.091674][ T5736] usb 6-1: Invalid ep0 maxpacket: 64 [ 247.102136][ T5736] usb usb6-port1: attempt power cycle [ 247.355124][ T8467] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 247.366959][ T8467] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 247.381714][ T8467] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 247.394065][ T8467] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 247.407452][ T8467] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 247.419155][ T8467] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 247.426377][ T5625] Bluetooth: hci2: command tx timeout [ 247.430691][ T8467] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 247.447140][ T8467] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 247.471097][ T5736] usb 6-1: new low-speed USB device number 23 using dummy_hcd [ 247.501608][ T5736] usb 6-1: Invalid ep0 maxpacket: 64 [ 247.641256][ T5736] usb 6-1: new low-speed USB device number 24 using dummy_hcd [ 247.661706][ T8467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.690974][ T5736] usb 6-1: Invalid ep0 maxpacket: 64 [ 247.702834][ T5736] usb usb6-port1: unable to enumerate USB device [ 247.722449][ T8467] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.749406][ T6874] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.756627][ T6874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.801135][ T1015] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.808336][ T1015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.998730][ T8467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.100535][ T8467] veth0_vlan: entered promiscuous mode [ 248.129534][ T8467] veth1_vlan: entered promiscuous mode [ 248.209415][ T8467] veth0_macvtap: entered promiscuous mode [ 248.230559][ T8467] veth1_macvtap: entered promiscuous mode [ 248.251165][ T8467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.282010][ T8467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.321356][ T1015] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.352844][ T1015] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.371890][ T1015] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.431417][ T770] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.507529][ T770] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.533903][ T770] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.597409][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.619775][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.330444][ T187] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 249.502092][ T5625] Bluetooth: hci2: command tx timeout [ 249.524637][ T187] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 1.00 [ 249.547546][ T8864] netlink: 24 bytes leftover after parsing attributes in process `syz.3.551'. [ 249.588420][ T187] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.611507][ T8867] netlink: 24 bytes leftover after parsing attributes in process `syz.3.551'. [ 249.626321][ T187] usb 8-1: Product: syz [ 249.653292][ T187] usb 8-1: Manufacturer: syz [ 249.658620][ T8864] netlink: 24 bytes leftover after parsing attributes in process `syz.3.551'. [ 249.683193][ T187] usb 8-1: SerialNumber: syz [ 249.702191][ T8864] netlink: 24 bytes leftover after parsing attributes in process `syz.3.551'. [ 249.734318][ T8864] netlink: 24 bytes leftover after parsing attributes in process `syz.3.551'. [ 249.743644][ T187] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 249.755638][ T187] cdc_wdm 8-1:1.0: Unknown control protocol [ 249.800244][ T8874] usb usb1: usbfs: process 8874 (syz.5.552) did not claim interface 0 before use [ 249.813730][ T8867] netlink: 24 bytes leftover after parsing attributes in process `syz.3.551'. [ 249.845518][ T8864] netlink: 24 bytes leftover after parsing attributes in process `syz.3.551'. [ 249.861463][ T8878] usb usb2: usbfs: process 8878 (syz.5.552) did not claim interface 0 before use [ 249.882230][ T8878] usb usb3: usbfs: process 8878 (syz.5.552) did not claim interface 0 before use [ 249.893041][ T8864] netlink: 24 bytes leftover after parsing attributes in process `syz.3.551'. [ 249.899379][ T8878] usb usb1: usbfs: process 8878 (syz.5.552) did not claim interface 1 before use [ 249.919767][ T8874] usb usb2: usbfs: process 8874 (syz.5.552) did not claim interface 1 before use [ 249.935235][ T8864] netlink: 24 bytes leftover after parsing attributes in process `syz.3.551'. [ 249.945552][ T8874] usb usb3: usbfs: process 8874 (syz.5.552) did not claim interface 1 before use [ 249.956187][ T8874] usb usb1: usbfs: process 8874 (syz.5.552) did not claim interface 1 before use [ 249.967695][ T8874] usb usb2: usbfs: process 8874 (syz.5.552) did not claim interface 1 before use [ 249.990858][ T8874] usb usb3: usbfs: process 8874 (syz.5.552) did not claim interface 1 before use [ 250.381811][ T5670] nintendo 0005:057E:2007.0010: Failed to get joycon info; ret=-110 [ 250.394933][ T5670] nintendo 0005:057E:2007.0010: Failed to retrieve controller info; ret=-110 [ 250.404473][ T187] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 250.419427][ T5670] nintendo 0005:057E:2007.0010: Failed to initialize controller; ret=-110 [ 250.459154][ T5670] nintendo 0005:057E:2007.0010: probe - fail = -110 [ 250.476569][ T5670] nintendo 0005:057E:2007.0010: probe with driver nintendo failed with error -110 [ 250.582530][ T187] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 1.00 [ 250.615881][ T187] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.686668][ T187] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected [ 250.742636][ T187] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 250.937132][ T5722] usb 8-1: USB disconnect, device number 2 [ 250.996235][ T24] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 251.580782][ T5625] Bluetooth: hci2: command tx timeout [ 251.810490][ T8970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.843139][ T8970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.091261][ T5736] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 252.215492][ T24] usb 5-1: New USB device found, idVendor=23ba, idProduct=0001, bcdDevice= 1.00 [ 252.240765][ T24] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 252.250713][ T5736] usb 8-1: New USB device found, idVendor=046d, idProduct=c281, bcdDevice= 0.00 [ 252.255700][ T24] usb 5-1: can't read configurations, error -71 [ 252.271865][ T5736] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.281523][ T5736] usb 8-1: Product: syz [ 252.285758][ T5736] usb 8-1: Manufacturer: syz [ 252.290676][ T5736] usb 8-1: SerialNumber: syz [ 252.916813][ T5736] iforce 8-1:1.0: usb_submit_urb failed: -71 [ 252.947425][ T5736] iforce 8-1:1.0: usb_submit_urb failed: -71 [ 252.960906][ T5736] iforce 8-1:1.0: usb_submit_urb failed: -71 [ 252.968330][ T5736] iforce 8-1:1.0: usb_submit_urb failed: -71 [ 252.976385][ T5736] iforce 8-1:1.0: usb_submit_urb failed: -71 [ 252.986842][ T5736] iforce 8-1:1.0: usb_submit_urb failed: -71 [ 252.993706][ T5736] iforce 8-1:1.0: usb_submit_urb failed: -71 [ 253.000798][ T5736] iforce 8-1:1.0: usb_submit_urb failed: -71 [ 253.007325][ T5736] iforce 8-1:1.0: usb_submit_urb failed: -71 [ 253.020005][ T5736] iforce 8-1:1.0: usb_submit_urb failed: -71 [ 253.029030][ T5736] iforce 8-1:1.0: usb_submit_urb failed: -71 [ 253.049386][ T5736] iforce 8-1:1.0: usb_submit_urb failed: -71 [ 253.056386][ T5736] iforce 8-1:1.0: usb_submit_urb failed: -71 [ 253.063415][ T5736] iforce 8-1:1.0: usb_submit_urb failed: -71 [ 253.070353][ T5736] iforce 8-1:1.0: usb_submit_urb failed: -71 [ 253.077053][ T5736] iforce 8-1:1.0: usb_submit_urb failed: -71 [ 253.087444][ T5736] iforce 8-1:1.0: usb_submit_urb failed: -71 [ 253.094282][ T5736] iforce 8-1:1.0: usb_submit_urb failed: -71 [ 253.107120][ T5736] input input25: Timeout waiting for response from device. [ 253.128512][ T5736] usb 8-1: USB disconnect, device number 3 [ 253.238272][ T5737] usb 6-1: USB disconnect, device number 25 [ 253.276329][ T5737] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 253.322287][ T5737] garmin_gps 6-1:1.0: device disconnected [ 253.661551][ T5625] Bluetooth: hci2: command tx timeout [ 253.701577][ T5737] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 253.871316][ T5737] usb 6-1: New USB device found, idVendor=046d, idProduct=4002, bcdDevice= 0.00 [ 253.903763][ T5737] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.140006][ T24] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 255.168107][ T5737] usbhid 6-1:1.0: can't add hid device: -71 [ 255.185558][ T5737] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 255.217957][ T5737] usb 6-1: USB disconnect, device number 26 [ 255.310612][ T24] usb 8-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice= 1.00 [ 255.330842][ T5722] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 255.349219][ T24] usb 8-1: config 1 descriptor has 1 excess byte, ignoring [ 255.357347][ T24] usb 8-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 255.377463][ T24] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 255.412074][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.430332][ T24] usb 8-1: Product: syz [ 255.434851][ T24] usb 8-1: Manufacturer: syz [ 255.444753][ T24] usb 8-1: SerialNumber: syz [ 255.510742][ T5722] usb 5-1: New USB device found, idVendor=0bfd, idProduct=000b, bcdDevice= 0.01 [ 255.533321][ T5722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.547979][ T5722] usb 5-1: Product: syz [ 255.560823][ T5722] usb 5-1: Manufacturer: syz [ 255.566328][ T5722] usb 5-1: SerialNumber: syz [ 255.601963][ T24] usb 8-1: reset high-speed USB device number 4 using dummy_hcd [ 255.667470][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.675354][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.002034][ T5722] kvaser_usb 5-1:1.0: error -EPROTO: Cannot get software info [ 256.038928][ T5722] kvaser_usb 5-1:1.0: probe with driver kvaser_usb failed with error -71 [ 256.102383][ T5722] usb 5-1: USB disconnect, device number 32 [ 256.819970][ T5737] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 256.919956][ T5722] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 256.990810][ T5737] usb 6-1: New USB device found, idVendor=0553, idProduct=0002, bcdDevice= 1.00 [ 257.013760][ T5737] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.049723][ T5737] gspca_main: cpia1-2.14.0 probing 0553:0002 [ 257.090677][ T5722] usb 5-1: New USB device found, idVendor=1110, idProduct=9001, bcdDevice= 1.00 [ 257.114021][ T5722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.133086][ T5722] usb 5-1: Product: syz [ 257.139937][ T5722] usb 5-1: Manufacturer: syz [ 257.150209][ T5722] usb 5-1: SerialNumber: syz [ 257.300830][ T5722] usb 5-1: reset high-speed USB device number 33 using dummy_hcd [ 257.731881][ T24] usb 8-1: device descriptor read/64, error -71 [ 257.983173][ T24] usb 8-1: reset high-speed USB device number 4 using dummy_hcd [ 258.163283][ T24] usb 8-1: device firmware changed [ 258.208233][ T24] usb 8-1: Direct firmware load for ueagle-atm/930-fpga.bin failed with error -2 [ 258.231494][ T24] usb 8-1: Falling back to sysfs fallback for: ueagle-atm/930-fpga.bin [ 258.301060][ T5737] gspca_cpia1: usb_control_msg 03, error -110 [ 258.319702][ T5737] gspca_cpia1: usb_control_msg 01, error -32 [ 258.333095][ T5737] gspca_cpia1: usb_control_msg 01, error -32 [ 258.347655][ T5737] gspca_cpia1: usb_control_msg 01, error -32 [ 258.362941][ T5737] gspca_cpia1: usb_control_msg 01, error -32 [ 258.375686][ T5737] cpia1 6-1:1.0: only firmware version 1 is supported (got: 0) [ 258.474849][ T5737] usb 6-1: USB disconnect, device number 27 [ 260.507380][ T5722] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware [ 260.524403][ T5679] usb 5-1: Direct firmware load for ueagle-atm/adi930.fw failed with error -2 [ 260.539929][ T5722] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/adi930.fw [ 260.547484][ T5679] usb 5-1: Falling back to sysfs fallback for: ueagle-atm/adi930.fw [ 260.566826][ T5722] usb 5-1: USB disconnect, device number 33 [ 261.032277][ T9196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.069639][ T9196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.539969][ T987] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 261.716874][ T987] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 261.746539][ T987] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.761749][ T987] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.779311][ T9217] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 261.786117][ T9217] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 261.797014][ T987] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 261.811940][ T987] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.823872][ T9217] vhci_hcd vhci_hcd.0: Device attached [ 261.835788][ T987] usb 6-1: config 0 descriptor?? [ 262.061183][ T5707] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 262.266189][ T987] hid_parser_main: 250 callbacks suppressed [ 262.266216][ T987] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 262.298238][ T987] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 262.313791][ T987] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 262.329512][ T987] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 262.345845][ T987] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 262.362424][ T987] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 262.379366][ T987] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 262.395591][ T987] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 262.413629][ T987] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 262.429372][ T987] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 262.485685][ T987] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 262.595865][ T9218] vhci_hcd: connection reset by peer [ 262.615653][ T1015] vhci_hcd vhci_hcd.3: stop threads [ 262.633323][ T1015] vhci_hcd vhci_hcd.3: release socket [ 262.654571][ T1015] vhci_hcd vhci_hcd.3: disconnect device [ 262.964208][ T5736] usb 6-1: USB disconnect, device number 28 [ 263.761583][ T5731] psmouse serio2: Failed to reset mouse on : -5 [ 264.180034][ T9281] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 264.204479][ T9281] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 264.225545][ T9287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.308587][ T6874] wlan1: authenticated [ 264.313189][ T9287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.341053][ T6874] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 264.413129][ T6874] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 264.422318][ T9281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.440344][ T6874] wlan1: associated [ 264.650493][ T5736] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 264.822300][ T5736] usb 6-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 0.00 [ 264.844076][ T5736] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.090361][ T5736] ljca 6-1:1.0: probe with driver ljca failed with error -110 [ 265.219393][ T9315] kvm: user requested TSC rate below hardware speed [ 265.241269][ T9315] kvm: user requested TSC rate below hardware speed [ 266.133400][ T9326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.227706][ T9327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.300275][ T5731] misc userio: Buffer overflowed, userio client isn't keeping up [ 266.312103][ T9326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.170044][ T5707] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 267.914777][ T5737] usb 6-1: USB disconnect, device number 29 [ 268.409948][ T5736] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 268.579975][ T5736] usb 6-1: Invalid ep0 maxpacket: 9 [ 268.720006][ T5736] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 268.890153][ T5736] usb 6-1: Invalid ep0 maxpacket: 9 [ 268.905995][ T5736] usb usb6-port1: attempt power cycle [ 269.260870][ T5736] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 269.300572][ T5736] usb 6-1: Invalid ep0 maxpacket: 9 [ 269.451647][ T5736] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 269.491605][ T5736] usb 6-1: Invalid ep0 maxpacket: 9 [ 269.498680][ T5736] usb usb6-port1: unable to enumerate USB device [ 269.670019][ T5731] misc userio: Buffer overflowed, userio client isn't keeping up [ 270.433362][ T5611] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 270.447699][ T5611] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 270.457555][ T5611] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 270.466846][ T5611] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 270.475230][ T5611] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 271.071634][ T35] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.514835][ T35] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.650018][ T5680] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 271.671500][ T35] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.886411][ T35] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.037856][ T9382] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.057986][ T9382] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.067303][ T9382] bridge_slave_0: entered allmulticast mode [ 272.084954][ T9382] bridge_slave_0: entered promiscuous mode [ 272.105081][ T9382] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.112874][ T9382] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.120823][ T9382] bridge_slave_1: entered allmulticast mode [ 272.131470][ T9382] bridge_slave_1: entered promiscuous mode [ 272.179339][ T9534] process 'syz.7.628' launched './file0' with NULL argv: empty string added [ 272.215553][ T9382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.244508][ T9382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.365979][ T9382] team0: Port device team_slave_0 added [ 272.414934][ T9382] team0: Port device team_slave_1 added [ 272.509155][ T9382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.517434][ T9382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.540647][ T5625] Bluetooth: hci6: command tx timeout [ 272.548156][ T9382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.566316][ T9382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.574278][ T9382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.600797][ T9382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.813929][ T35] bridge_slave_1: left allmulticast mode [ 272.821749][ T35] bridge_slave_1: left promiscuous mode [ 272.829466][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.846279][ T35] bridge_slave_0: left allmulticast mode [ 272.848639][ T5680] usb 6-1: New USB device found, idVendor=23ba, idProduct=0001, bcdDevice= 1.00 [ 272.852225][ T35] bridge_slave_0: left promiscuous mode [ 272.874384][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.889227][ T5680] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 272.907649][ T5680] usb 6-1: can't read configurations, error -71 [ 273.040968][ T5731] misc userio: Buffer overflowed, userio client isn't keeping up [ 273.276380][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.288194][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.314935][ T35] bond0 (unregistering): Released all slaves [ 273.354065][ T9382] hsr_slave_0: entered promiscuous mode [ 273.380613][ T9382] hsr_slave_1: entered promiscuous mode [ 273.407616][ T9382] debugfs: 'hsr0' already exists in 'hsr' [ 273.426897][ T9382] Cannot create hsr debugfs directory [ 273.658322][ T5272] 8021q: adding VLAN 0 to HW filter on device eth9 [ 273.822428][ T35] hsr_slave_0: left promiscuous mode [ 273.838832][ T35] hsr_slave_1: left promiscuous mode [ 273.848895][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.866702][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.885676][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.901249][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.929558][ T35] veth1_macvtap: left promiscuous mode [ 273.949231][ T35] veth0_macvtap: left promiscuous mode [ 273.954973][ T5680] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 273.963163][ T35] veth1_vlan: left promiscuous mode [ 273.975128][ T35] veth0_vlan: left promiscuous mode [ 274.120573][ T5680] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 274.155459][ T5680] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.175423][ T5680] usb 6-1: Product: syz [ 274.188605][ T5680] usb 6-1: Manufacturer: syz [ 274.206850][ T5680] usb 6-1: SerialNumber: syz [ 274.266284][ T42] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 274.620698][ T5625] Bluetooth: hci6: command tx timeout [ 274.695670][ T5736] usb 6-1: USB disconnect, device number 35 [ 274.762390][ T35] team0 (unregistering): Port device team_slave_1 removed [ 274.788424][ T35] team0 (unregistering): Port device team_slave_0 removed [ 274.998732][ T5272] 8021q: adding VLAN 0 to HW filter on device eth10 [ 275.418987][ T9382] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 275.463603][ T9382] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 275.491813][ T9382] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 275.500007][ T42] usb 6-1: Service connection timeout for: 256 [ 275.516298][ T42] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 275.528681][ T9382] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 275.547250][ T42] ath9k_htc: Failed to initialize the device [ 275.563409][ T9382] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 275.574310][ T5736] usb 6-1: ath9k_htc: USB layer deinitialized [ 275.602700][ T9382] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 275.652982][ T9382] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 275.698380][ T9382] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 275.856118][ T9382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.917519][ T9382] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.934654][ T5736] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 275.945692][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.952879][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.986253][ T770] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.993479][ T770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.125719][ T5736] usb 6-1: not running at top speed; connect to a high speed hub [ 276.145533][ T5736] usb 6-1: New USB device found, idVendor=1608, idProduct=0005, bcdDevice= 1.00 [ 276.175393][ T5736] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.190548][ T5736] usb 6-1: Product: syz [ 276.199947][ T5736] usb 6-1: Manufacturer: syz [ 276.206217][ T5736] usb 6-1: SerialNumber: syz [ 276.209327][ T9382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.233335][ T5736] io_edgeport 6-1:1.0: Edgeport 2 port adapter converter detected [ 276.324449][ T9382] veth0_vlan: entered promiscuous mode [ 276.337359][ T5272] 8021q: adding VLAN 0 to HW filter on device eth11 [ 276.372487][ T9382] veth1_vlan: entered promiscuous mode [ 276.410225][ T5731] misc userio: Buffer overflowed, userio client isn't keeping up [ 276.452628][ T9382] veth0_macvtap: entered promiscuous mode [ 276.488112][ T9382] veth1_macvtap: entered promiscuous mode [ 276.534334][ T9382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.566777][ T9382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.645436][ T5736] usb 6-1: detected [ 276.653852][ T76] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.700451][ T5625] Bluetooth: hci6: command tx timeout [ 276.711262][ T76] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.788044][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.836626][ T5736] io_edgeport 6-1:1.0: short epic descriptor received: 0 [ 276.845704][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.901318][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.918380][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.930261][ T6874] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.963404][ T6874] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.037451][ T5736] usb 6-1: error in getting manufacturer descriptor: -5 [ 277.237624][ T5736] usb 6-1: error in getting boot descriptor: -5 [ 277.250341][ T5736] usb 6-1: Device Reported 0 serial ports vs. core thinking we have 2 ports, email greg@kroah.com this information. [ 277.279481][ T5736] usb 6-1: Direct firmware load for edgeport/down.fw failed with error -2 [ 277.298299][ T5736] usb 6-1: Falling back to sysfs fallback for: edgeport/down.fw [ 277.329989][ T5670] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 277.434165][ T5272] 8021q: adding VLAN 0 to HW filter on device eth12 [ 277.501262][ T5670] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 0.00 [ 277.523031][ T5670] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 277.556512][ T5670] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.575300][ T5670] usb 9-1: Product: syz [ 277.589204][ T5670] usb 9-1: Manufacturer: syz [ 277.604340][ T5670] usb 9-1: SerialNumber: syz [ 277.628676][ T9824] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 278.780728][ T5625] Bluetooth: hci6: command tx timeout [ 278.872042][ T5699] usb 9-1: USB disconnect, device number 2 [ 278.884019][ T5611] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 278.898068][ T5611] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 278.906693][ T5611] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 278.916323][ T5611] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 278.924883][ T5611] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 279.533991][ T9879] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.541926][ T9879] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.549159][ T9879] bridge_slave_0: entered allmulticast mode [ 279.557086][ T9879] bridge_slave_0: entered promiscuous mode [ 279.577943][ T9879] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.587780][ T9879] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.595487][ T9879] bridge_slave_1: entered allmulticast mode [ 279.604583][ T9879] bridge_slave_1: entered promiscuous mode [ 279.653642][ T9879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.666667][ T9879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.723869][ T9879] team0: Port device team_slave_0 added [ 279.735452][ T9879] team0: Port device team_slave_1 added [ 279.782614][ T9879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.789696][ T9879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.817903][ T987] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 279.834455][ T9879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.849277][ T9879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.856808][ T9879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.911547][ T9879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.990810][ T987] usb 9-1: New USB device found, idVendor=06cd, idProduct=0101, bcdDevice=80.00 [ 280.007271][ T987] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.023104][ T987] usb 9-1: Product: syz [ 280.030473][ T987] usb 9-1: Manufacturer: syz [ 280.035187][ T987] usb 9-1: SerialNumber: syz [ 280.050759][ T987] keyspan 9-1:1.0: Keyspan - (without firmware) converter detected [ 280.064780][ T987] usb 9-1: Direct firmware load for keyspan/usa28.fw failed with error -2 [ 280.073759][ T987] usb 9-1: Falling back to sysfs fallback for: keyspan/usa28.fw [ 280.120675][ T9879] hsr_slave_0: entered promiscuous mode [ 280.127508][ T9879] hsr_slave_1: entered promiscuous mode [ 280.135565][ T9879] debugfs: 'hsr0' already exists in 'hsr' [ 280.141518][ T9879] Cannot create hsr debugfs directory [ 280.465824][ T9879] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 280.483517][ T9879] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 280.493870][ T9879] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 280.507477][ T9879] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 280.515965][ T9879] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 280.529036][ T9879] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 280.538229][ T9879] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 280.550433][ T9879] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 280.649247][ T9879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.660999][ T5731] misc userio: Buffer overflowed, userio client isn't keeping up [ 280.681900][ T9879] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.695268][ T1015] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.702576][ T1015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.731700][ T1015] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.738878][ T1015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.887372][ T9879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.990152][ T9879] veth0_vlan: entered promiscuous mode [ 281.015945][ T9879] veth1_vlan: entered promiscuous mode [ 281.021787][ T5611] Bluetooth: hci4: command tx timeout [ 281.121761][ T9879] veth0_macvtap: entered promiscuous mode [ 281.159523][ T9879] veth1_macvtap: entered promiscuous mode [ 281.211708][ T9879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.236210][ T9879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.320345][ T1015] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.370160][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.418454][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.439137][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.485125][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.494687][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.510755][ T35] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.529783][ T35] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.763838][ T5731] input: PS/2 Generic Mouse as /devices/serio2/input/input27 [ 283.009950][ T5731] psmouse serio2: Failed to enable mouse on [ 283.101462][ T5611] Bluetooth: hci4: command tx timeout [ 284.298916][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.398955][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.476210][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.499923][ T5737] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 284.552135][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.654190][ T5737] usb 10-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice= 1.00 [ 284.686000][ T5737] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.707774][ T5737] usb 10-1: Product: syz [ 284.721257][ T5737] usb 10-1: Manufacturer: syz [ 284.734619][ T5737] usb 10-1: SerialNumber: syz [ 284.770648][ T5737] gspca_main: mars-2.14.0 probing 093a:050f [ 284.854504][ T12] bridge_slave_1: left allmulticast mode [ 284.876621][ T12] bridge_slave_1: left promiscuous mode [ 284.883074][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.902505][ T12] bridge_slave_0: left allmulticast mode [ 284.918962][ T12] bridge_slave_0: left promiscuous mode [ 284.928592][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.180421][ T5611] Bluetooth: hci4: command tx timeout [ 285.387086][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.415342][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.431769][ T12] bond0 (unregistering): Released all slaves [ 285.915489][ T5272] 8021q: adding VLAN 0 to HW filter on device eth13 [ 285.994153][ T5680] usb 10-1: USB disconnect, device number 2 [ 286.061977][ T12] hsr_slave_0: left promiscuous mode [ 286.075161][ T12] hsr_slave_1: left promiscuous mode [ 286.092328][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.104208][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.114396][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.138736][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.182452][ T12] veth1_macvtap: left promiscuous mode [ 286.199718][ T12] veth0_macvtap: left promiscuous mode [ 286.211419][ T12] veth1_vlan: left promiscuous mode [ 286.225100][ T12] veth0_vlan: left promiscuous mode [ 286.746467][ T12] team0 (unregistering): Port device team_slave_1 removed [ 286.795393][ T12] team0 (unregistering): Port device team_slave_0 removed [ 286.879923][ T187] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 287.149018][ T5272] 8021q: adding VLAN 0 to HW filter on device eth14 [ 287.260673][ T5611] Bluetooth: hci4: command tx timeout [ 287.437522][ T12] IPVS: stop unused estimator thread 0... [ 287.978050][ T5272] 8021q: adding VLAN 0 to HW filter on device eth15 [ 288.058497][ T187] usb 10-1: unable to get BOS descriptor or descriptor too short [ 288.074672][ T187] usb 10-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 0.40 [ 288.096129][ T187] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 288.116368][ T187] usb 10-1: can't read configurations, error -71 [ 288.861010][T10438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.912620][ T5731] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 288.939219][ T5731] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 288.990068][ T770] wlan1: authenticated [ 289.000300][T10438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.022371][ T770] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 289.095328][T10438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.097050][ T770] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 289.134154][ T770] wlan1: associated [ 289.645688][T10492] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 290.131534][ T187] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 290.301767][ T187] usb 10-1: New USB device found, idVendor=056a, idProduct=0360, bcdDevice= 0.00 [ 290.327275][ T187] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.350445][ T187] usb 10-1: Product: syz [ 290.364790][ T187] usb 10-1: Manufacturer: syz [ 290.379059][ T187] usb 10-1: SerialNumber: syz [ 290.909319][ T187] usbhid 10-1:1.0: can't add hid device: -71 [ 290.923232][ T187] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 290.948311][ T187] usb 10-1: USB disconnect, device number 5 [ 291.880354][T10018] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 292.044587][T10018] usb 10-1: New USB device found, idVendor=14aa, idProduct=0301, bcdDevice= 1.00 [ 292.068065][T10018] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 292.086742][T10018] usb 10-1: Product: syz [ 292.096897][T10018] usb 10-1: Manufacturer: syz [ 292.121964][T10018] dvb-usb: found a 'WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)' in warm state. [ 292.327770][ T5272] 8021q: adding VLAN 0 to HW filter on device eth16 [ 293.319450][T10018] dvb-usb: bulk message failed: -71 (2/0) [ 293.337757][T10018] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 293.349383][T10018] dvbdev: DVB: registering new adapter (WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)) [ 293.365694][T10018] usb 10-1: media controller created [ 293.379236][T10018] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 293.427995][T10018] usb 10-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 293.450353][T10018] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 293.538594][T10639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.580322][T10018] rc_core: IR keymap rc-dtt200u not found [ 293.590958][T10018] Registered IR keymap rc-empty [ 293.598831][T10018] rc rc0: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0 [ 293.618833][T10018] input: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0/input30 [ 293.634899][T10644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.655396][T10018] dvb-usb: schedule remote query interval to 300 msecs. [ 293.671446][T10018] dvb-usb: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) successfully initialized and connected. [ 293.711792][T10018] usb 10-1: USB disconnect, device number 6 [ 293.724419][T10639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.987928][T10018] dvb-usb: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T successfully deinitialized and disconnected. [ 294.350032][T10018] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 294.511921][T10018] usb 10-1: New USB device found, idVendor=2912, idProduct=0001, bcdDevice= 0.00 [ 294.538513][T10018] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.557108][T10018] usb 10-1: Product: syz [ 294.567264][T10018] usb 10-1: Manufacturer: syz [ 294.575232][T10018] usb 10-1: SerialNumber: syz [ 294.595735][T10018] cdc_acm 10-1:1.0: Zero length descriptor references [ 294.611500][T10018] cdc_acm 10-1:1.0: probe with driver cdc_acm failed with error -22 [ 295.303634][ T5737] usb 10-1: USB disconnect, device number 7 [ 296.109986][ T5731] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 296.273202][ T5731] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 1.00 [ 296.284135][ T5731] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.295560][ T5731] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 296.311038][ T5731] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.319344][ T5731] usb 10-1: Product: syz [ 296.326404][ T5731] usb 10-1: Manufacturer: syz [ 296.331814][ T5731] usb 10-1: SerialNumber: syz [ 296.345343][ T5731] usb-storage 10-1:1.0: USB Mass Storage device detected [ 296.363381][ T5731] usb-storage 10-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 297.591809][T10761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.664487][T10761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.733961][T10765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.139333][ T5737] usb 10-1: USB disconnect, device number 8 [ 299.679962][ T5670] usb 10-1: new low-speed USB device number 9 using dummy_hcd [ 299.849912][ T5670] usb 10-1: Invalid ep0 maxpacket: 64 [ 299.993049][ T5670] usb 10-1: new low-speed USB device number 10 using dummy_hcd [ 300.160370][ T5670] usb 10-1: Invalid ep0 maxpacket: 64 [ 300.172437][ T5670] usb usb10-port1: attempt power cycle [ 300.521381][ T5670] usb 10-1: new low-speed USB device number 11 using dummy_hcd [ 300.550710][ T5670] usb 10-1: Invalid ep0 maxpacket: 64 [ 300.690065][ T5670] usb 10-1: new low-speed USB device number 12 using dummy_hcd [ 300.714887][ T5670] usb 10-1: Invalid ep0 maxpacket: 64 [ 300.720969][ T5670] usb usb10-port1: unable to enumerate USB device [ 301.699437][T10857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.792645][T10862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.893084][T10857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.329794][T10928] nvme nvme0: rdma_resolve_addr failed (-19). [ 304.187002][T10943] process 'memfd:elf32' started with executable stack [ 307.395350][T10018] nintendo 0005:057E:2007.0012: hidraw0: BLUETOOTH HID v80.00 Gamepad [syz0] on syz0 [ 308.290051][T11055] kvm: user requested TSC rate below hardware speed [ 311.500007][T10018] nintendo 0005:057E:2007.0012: Failed to get joycon info; ret=-110 [ 311.515290][T10018] nintendo 0005:057E:2007.0012: Failed to retrieve controller info; ret=-110 [ 311.524379][T10018] nintendo 0005:057E:2007.0012: Failed to initialize controller; ret=-110 [ 311.552330][T10018] nintendo 0005:057E:2007.0012: probe - fail = -110 [ 311.560859][T10018] nintendo 0005:057E:2007.0012: probe with driver nintendo failed with error -110 [ 314.062914][ T5611] Bluetooth: hci5: command 0x0406 tx timeout [ 314.866994][T11182] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 314.923531][T11182] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 315.065383][T10018] wiimote 0005:057E:0306.0013: hidraw0: BLUETOOTH HID v0.00 Gamepad [syz0] on syz0 [ 315.094825][T10018] wiimote 0005:057E:0306.0013: New device registered [ 315.141320][T11196] wiimote 0005:057E:0306.0013: Device removed [ 315.207767][T11206] fido_id[11206]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 316.140042][ T5731] wiimote 0005:057E:0306.0013: detected device: Nintendo Wii Remote (Gen 1) [ 316.192352][ T5731] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0013/input/input32 [ 316.241485][ T5731] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0013/input/input33 [ 316.302788][ T5731] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0013/input/input31 [ 317.105799][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.112395][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.272788][ T5611] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 319.288282][ T5611] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 319.296603][ T5611] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 319.307969][ T5611] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 319.316145][ T5611] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 319.803218][T11271] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.810616][T11271] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.818127][T11271] bridge_slave_0: entered allmulticast mode [ 319.828259][T11271] bridge_slave_0: entered promiscuous mode [ 319.838044][T11271] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.850576][T11271] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.857788][T11271] bridge_slave_1: entered allmulticast mode [ 319.871189][T11271] bridge_slave_1: entered promiscuous mode [ 319.925367][T11271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.938449][T11271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.997147][T11271] team0: Port device team_slave_0 added [ 320.009190][T11271] team0: Port device team_slave_1 added [ 320.054049][T11271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.063307][T11271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.089509][T11271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.102614][T11271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.109647][T11271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.136463][T11271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.221612][T11271] hsr_slave_0: entered promiscuous mode [ 320.228247][T11271] hsr_slave_1: entered promiscuous mode [ 321.223231][T11271] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 321.274503][T11271] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 321.289610][T11271] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 321.307024][T11271] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 321.318245][T11271] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 321.342126][ T5625] Bluetooth: hci3: command tx timeout [ 321.371156][T11271] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 321.379136][T11271] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 321.396057][T11271] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 321.616265][T11271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.655854][T11271] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.683240][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.690430][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.754698][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.761925][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.895185][T11271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.966620][T11271] veth0_vlan: entered promiscuous mode [ 321.984984][T11271] veth1_vlan: entered promiscuous mode [ 322.033382][T11271] veth0_macvtap: entered promiscuous mode [ 322.048856][T11271] veth1_macvtap: entered promiscuous mode [ 322.078546][T11271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.098869][T11271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.131222][ T1015] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.190911][ T1015] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.213055][ T1015] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.245266][ T24] usb 8-1: [UEAGLE-ATM] firmware ueagle-atm/930-fpga.bin is not available [ 322.255697][ T5679] usb 5-1: [UEAGLE-ATM] firmware is not available [ 322.274855][ T24] usb 8-1: [UEAGLE-ATM] urb submission failed with error -19 [ 322.298112][ T24] ueagle-atm 8-1:1.0: usbatm_usb_probe: bind failed: -19! [ 322.314434][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.399610][ T24] usb 8-1: USB disconnect, device number 4 [ 322.466607][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.497588][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.542376][ T770] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.568671][ T770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.580211][ T5722] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 322.740055][ T24] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 322.761660][ T5722] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.00 [ 322.802266][ T5722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.838195][ T5722] usb 5-1: Product: syz [ 322.855491][ T5722] usb 5-1: Manufacturer: syz [ 322.877575][ T5722] usb 5-1: SerialNumber: syz [ 322.934457][ T24] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 322.972695][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.988106][ T24] usb 8-1: Product: syz [ 322.999756][ T24] usb 8-1: Manufacturer: syz [ 323.017295][ T24] usb 8-1: SerialNumber: syz [ 323.116205][ T5722] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 323.319205][ T24] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 323.354130][ T24] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 323.367620][ T24] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 323.384464][ T24] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 323.406291][ T24] usb 8-1: USB disconnect, device number 5 [ 323.420244][ T5625] Bluetooth: hci3: command tx timeout [ 323.841249][ T5670] usb 5-1: USB disconnect, device number 34 [ 324.429552][T11741] loop0: detected capacity change from 0 to 4096 [ 324.501455][T11745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.525836][T11741] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 324.551334][T11741] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 324.570832][T11741] loop0: [ 324.598186][T11745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.695288][T11747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.000899][ T5699] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 325.183037][ T5699] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 325.206985][ T5699] usb 8-1: config index 0 descriptor too short (expected 39, got 21) [ 325.233478][ T5699] usb 8-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 325.252793][ T5699] usb 8-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 325.299919][ T5699] usb 8-1: config 0 interface 0 has no altsetting 0 [ 325.318060][ T5699] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 325.337315][ T5699] usb 8-1: Product: syz [ 325.349601][ T5699] usb 8-1: Manufacturer: syz [ 325.359916][ T5699] usb 8-1: SerialNumber: syz [ 325.380153][ T5699] usb 8-1: config 0 descriptor?? [ 325.402134][ T5699] hub 8-1:0.0: bad descriptor, ignoring hub [ 325.422269][ T5699] hub 8-1:0.0: probe with driver hub failed with error -5 [ 325.500357][ T5625] Bluetooth: hci3: command tx timeout [ 325.672878][ T5699] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 325.720892][ T5699] usb 8-1: USB disconnect, device number 6 [ 325.759985][ T5670] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 325.768663][ T5738] udevd[5738]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 325.940824][ T5670] usb 5-1: Using ep0 maxpacket: 16 [ 325.958994][ T5670] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 325.986551][ T5670] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.009365][ T5670] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 326.027685][ T5670] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.067880][ T5670] usb 5-1: config 0 descriptor?? [ 326.150235][ T5699] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 326.316503][ T5699] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 326.342341][ T5699] usb 8-1: config index 0 descriptor too short (expected 39, got 21) [ 326.352765][ T5670] usbhid 5-1:0.0: can't add hid device: -71 [ 326.363983][ T5670] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 326.374352][ T5699] usb 8-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 326.393798][ T5699] usb 8-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 326.412532][ T5670] usb 5-1: USB disconnect, device number 35 [ 326.439228][ T5699] usb 8-1: config 0 interface 0 has no altsetting 0 [ 326.466292][ T5699] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 326.481433][ T5699] usb 8-1: Product: syz [ 326.485715][ T5699] usb 8-1: Manufacturer: syz [ 326.490413][ T5699] usb 8-1: SerialNumber: syz [ 326.498257][ T5699] usb 8-1: config 0 descriptor?? [ 326.522512][ T5699] hub 8-1:0.0: bad descriptor, ignoring hub [ 326.531690][ T5699] hub 8-1:0.0: probe with driver hub failed with error -5 [ 326.653394][ T5699] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 326.722827][ T5738] udevd[5738]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 326.861123][ T5699] usb 8-1: USB disconnect, device number 7 [ 327.583517][ T5625] Bluetooth: hci3: command tx timeout [ 327.940529][T11912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.791'. [ 328.088763][T11918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.172455][ T5699] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 328.182598][T11918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.250760][T11918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.340653][ T5699] usb 8-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 328.367915][ T5699] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.386385][ T5699] usb 8-1: Product: syz [ 328.391071][ T5699] usb 8-1: Manufacturer: syz [ 328.399955][ T5699] usb 8-1: SerialNumber: syz [ 328.954481][T11939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.035212][T11939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.141126][T11944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.864665][ T9806] wiimote 0005:057E:0306.0014: hidraw0: BLUETOOTH HID v0.00 Gamepad [syz0] on syz0 [ 329.894245][ T9806] wiimote 0005:057E:0306.0014: New device registered [ 329.920473][T11979] wiimote 0005:057E:0306.0014: Device removed [ 330.024934][T11987] fido_id[11987]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 330.940215][ T24] wiimote 0005:057E:0306.0014: detected device: Nintendo Wii Remote (Gen 1) [ 330.969246][ T5699] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 331.000329][ T5699] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 331.052841][ T24] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0014/input/input35 [ 331.098585][T12042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.128386][ T24] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0014/input/input36 [ 331.203552][T12042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.219075][ T24] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0014/input/input34 [ 331.294987][T12042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.550357][ T5699] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 331.792011][ T5699] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 331.804317][ T5699] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 331.816630][ T5699] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 331.851742][ T5699] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 331.880406][ T5699] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 331.910142][ T5699] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 331.934278][ T5699] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 331.957919][ T5699] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 331.980438][ T5699] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 332.003448][ T5699] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 332.030302][ T5699] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 332.054648][ T5699] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 332.081452][ T5699] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 332.111296][ T5699] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 332.134227][ T5699] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 332.154922][ T5699] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 332.176682][ T5699] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 332.189135][ T5699] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 332.201594][ T5699] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 332.215578][ T5699] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 332.230253][ T5699] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 332.260303][ T5699] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 332.275046][ T5699] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 332.301527][ T5699] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 332.324494][ T5699] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 332.347701][ T5699] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 332.366126][ T5699] ax88179_178a 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 332.405630][ T5699] ax88179_178a 8-1:1.0 eth1: register 'ax88179_178a' at usb-dummy_hcd.7-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, 1a:94:42:52:1a:49 [ 332.436937][ T5699] usb 8-1: USB disconnect, device number 8 [ 332.451029][ T5699] ax88179_178a 8-1:1.0 eth1: unregister 'ax88179_178a' usb-dummy_hcd.7-1, ASIX AX88179 USB 3.0 Gigabit Ethernet [ 333.434048][T12126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.506841][T12129] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 333.518357][T12126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.605132][T12126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.766606][ T5679] playstation 0003:054C:05C4.0015: hidraw1: USB HID v0.01 Gamepad [syz1] on syz1 [ 333.793692][ T5679] playstation 0003:054C:05C4.0015: Failed to retrieve feature with reportID 18: -5 [ 333.803576][ T5679] playstation 0003:054C:05C4.0015: Failed to retrieve DualShock4 pairing info: -5 [ 333.813420][ T5679] playstation 0003:054C:05C4.0015: Failed to get MAC address from DualShock4 [ 333.829893][ T5679] playstation 0003:054C:05C4.0015: Failed to create dualshock4. [ 333.870395][ T5679] playstation 0003:054C:05C4.0015: probe with driver playstation failed with error -5 [ 333.910536][T12147] fido_id[12147]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 335.662301][ T5722] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 335.820380][ T5722] usb 8-1: Using ep0 maxpacket: 16 [ 335.833657][ T5722] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 335.844673][ T5722] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.856135][ T5722] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 335.869968][ T5722] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.883601][ T5722] usb 8-1: config 0 descriptor?? [ 336.317795][ T5722] usbhid 8-1:0.0: can't add hid device: -71 [ 336.330862][ T5722] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 336.347314][ T5722] usb 8-1: USB disconnect, device number 9 [ 337.119959][ T5722] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 337.280696][ T5722] usb 8-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice= 1.00 [ 337.291926][ T5722] usb 8-1: config 1 descriptor has 1 excess byte, ignoring [ 337.299236][ T5722] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 337.315251][ T5722] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.323717][ T5722] usb 8-1: Product: syz [ 337.327951][ T5722] usb 8-1: Manufacturer: syz [ 337.332952][ T5722] usb 8-1: SerialNumber: syz [ 337.596787][ T5736] usb 6-1: Failed to load image "edgeport/down.fw" err -110 [ 337.605452][ T5736] usb 6-1: Direct firmware load for edgeport/boot.fw failed with error -2 [ 337.614492][ T5736] usb 6-1: Falling back to sysfs fallback for: edgeport/boot.fw [ 338.382331][ T5722] peak_usb 8-1:1.0 can0: sending cmd f=0x6 n=0x1 failure: -110 [ 338.390384][ T5722] peak_usb 8-1:1.0: unable to read PCAN-USB serial number (err -110) [ 338.476383][ T5722] peak_usb 8-1:1.0: probe with driver peak_usb failed with error -110 [ 338.664375][T12279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.729480][T12279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.792897][T12279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.554588][ T5670] usb 8-1: USB disconnect, device number 10 [ 339.620121][ T187] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 340.291481][ T187] usb 5-1: unable to get BOS descriptor or descriptor too short [ 340.311607][ T187] usb 5-1: New USB device found, idVendor=31e9, idProduct=0001, bcdDevice= 0.40 [ 340.331372][ T187] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 340.339141][ T187] usb 5-1: can't read configurations, error -71 [ 340.498542][ T6874] nvmet: connect request for invalid subsystem testsubsys! [ 340.512801][T12311] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 341.799903][T12334] loop0: detected capacity change from 0 to 4096 [ 341.854565][T12334] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 341.885351][T12334] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 341.902811][T12334] loop0: [ 342.109909][ T5670] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 342.272447][ T5670] usb 5-1: New USB device found, idVendor=1608, idProduct=0201, bcdDevice= 1.00 [ 342.289568][ T5670] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 342.300370][ T5670] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 342.310742][ T5670] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 342.321560][ T5670] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 342.331458][ T5670] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 342.342992][ T5670] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.355504][T12339] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 342.369086][T12339] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 342.379362][T12339] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 342.389074][T12339] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 342.401599][ T5670] io_ti 5-1:1.0: Edgeport TI 2 port adapter converter detected [ 342.413040][ T5670] io_ti 5-1:1.0: Direct firmware load for edgeport/down3.bin failed with error -2 [ 342.422949][ T5670] io_ti 5-1:1.0: Falling back to sysfs fallback for: edgeport/down3.bin [ 342.509990][ T187] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 342.664524][ T187] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.00 [ 342.677442][ T187] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 342.688255][ T187] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 342.698836][ T187] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 342.712912][ T987] usb 9-1: ezusb_ihex_firmware_download - request "keyspan/usa28.fw" failed [ 342.713926][ T187] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.723188][ T987] usb 9-1: failed to load firmware "keyspan/usa28.fw" [ 342.737333][ T987] keyspan 9-1:1.0: probe with driver keyspan failed with error -2 [ 342.757917][ T987] usb 9-1: USB disconnect, device number 3 [ 342.765575][ T187] usb 8-1: 0:1 : does not exist [ 343.109912][ T987] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 343.261520][ T987] usb 9-1: not running at top speed; connect to a high speed hub [ 343.280275][ T987] usb 9-1: New USB device found, idVendor=0553, idProduct=0002, bcdDevice= 1.00 [ 343.303436][ T987] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.312602][ T987] usb 9-1: Product: syz [ 343.329962][ T987] usb 9-1: Manufacturer: syz [ 343.334620][ T987] usb 9-1: SerialNumber: syz [ 343.356175][ T987] gspca_main: cpia1-2.14.0 probing 0553:0002 [ 343.513929][ T987] gspca_cpia1: usb_control_msg 05, error -71 [ 343.515743][ T187] usb 8-1: USB disconnect, device number 11 [ 343.529747][ T987] gspca_cpia1: usb_control_msg 01, error -71 [ 343.546906][ T987] cpia1 9-1:1.0: only firmware version 1 is supported (got: 0) [ 343.583657][ T987] usb 9-1: USB disconnect, device number 4 [ 343.950880][ T987] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 344.119037][T12435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.120491][ T987] usb 9-1: Using ep0 maxpacket: 8 [ 344.152982][ T987] usb 9-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 344.171010][ T987] usb 9-1: config 0 has an invalid interface number: 143 but max is 0 [ 344.186066][T12435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.190844][ T987] usb 9-1: config 0 has no interface number 0 [ 344.212284][ T987] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.225855][ T987] usb 9-1: config 0 descriptor?? [ 344.251658][T12438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.352100][ T987] viperboard 9-1:0.143: version 0.00 found at bus 009 address 005 [ 344.390978][ T987] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 344.403999][ T987] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 344.455664][T12413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.469189][T12413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.479795][ T987] usb 9-1: USB disconnect, device number 5 [ 344.838621][T12472] netlink: 64 bytes leftover after parsing attributes in process `syz.7.854'. [ 344.853406][T12472] netlink: 64 bytes leftover after parsing attributes in process `syz.7.854'. [ 344.868809][T12472] netlink: 64 bytes leftover after parsing attributes in process `syz.7.854'. [ 344.880883][T12472] netlink: 64 bytes leftover after parsing attributes in process `syz.7.854'. [ 344.892716][T12472] netlink: 64 bytes leftover after parsing attributes in process `syz.7.854'. [ 344.902394][T12472] netlink: 64 bytes leftover after parsing attributes in process `syz.7.854'. [ 344.914347][T12472] netlink: 64 bytes leftover after parsing attributes in process `syz.7.854'. [ 344.926864][T12472] netlink: 64 bytes leftover after parsing attributes in process `syz.7.854'. [ 344.939256][T12472] netlink: 64 bytes leftover after parsing attributes in process `syz.7.854'. [ 344.952036][T12472] netlink: 64 bytes leftover after parsing attributes in process `syz.7.854'. [ 345.106248][T12478] loop0: detected capacity change from 0 to 4096 [ 345.153253][T12478] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 345.177295][T12478] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 345.198444][T12478] loop0: [ 345.600447][ T5737] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 345.772727][ T5737] usb 9-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 345.786389][ T5737] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.794918][ T5737] usb 9-1: Product: syz [ 345.799189][ T5737] usb 9-1: Manufacturer: syz [ 345.807127][ T5737] usb 9-1: SerialNumber: syz [ 346.289062][T12506] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 346.301019][T12506] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 346.681466][T12527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.713477][ T5699] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 346.723044][ T5699] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 346.744090][ T6874] wlan1: authenticated [ 346.749366][T12527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.771405][ T13] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 346.814823][ T13] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 346.824742][T12528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.835047][ T13] wlan1: associated [ 346.870368][ T187] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 347.028090][ T5737] ax88179_178a 9-1:1.0: probe with driver ax88179_178a failed with error -71 [ 347.055392][ T187] usb 8-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice= 0.00 [ 347.079200][ T187] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 347.088387][ T187] usb 8-1: Product: syz [ 347.096122][ T5737] usb 9-1: USB disconnect, device number 6 [ 347.110651][ T187] usb 8-1: Manufacturer: syz [ 347.162286][ T187] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 347.686635][ T187] gspca_topro: reg_w err -110 [ 347.730767][ T187] gspca_topro: Sensor soi763a [ 347.775714][T12560] loop0: detected capacity change from 0 to 4096 [ 347.835203][T12560] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 347.851680][T12560] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 347.867149][T12560] loop0: [ 347.871645][ T5699] usb 8-1: USB disconnect, device number 12 [ 348.031916][ T5737] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 348.217742][ T5737] usb 9-1: Using ep0 maxpacket: 16 [ 348.232873][ T5737] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 348.261288][ T5737] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.296220][ T5737] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 348.321719][ T5737] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.349585][ T5737] usb 9-1: config 0 descriptor?? [ 348.668642][T12611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.738417][T12612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.802656][T12611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.839893][ T187] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 349.013725][ T187] usb 8-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 1.00 [ 349.036453][ T187] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.051148][ T187] usb 8-1: Product: syz [ 349.055408][ T187] usb 8-1: Manufacturer: syz [ 349.060437][ T187] usb 8-1: SerialNumber: syz [ 349.078644][ T187] usb 8-1: USB2VGA dongle found at address 13 [ 349.088222][ T187] usb 8-1: Allocated 8 output buffers [ 349.290593][ T5737] usbhid 9-1:0.0: can't add hid device: -71 [ 349.301879][ T5737] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 349.324488][ T5737] usb 9-1: USB disconnect, device number 7 [ 349.484141][ T987] IPVS: starting estimator thread 0... [ 349.609957][T12630] IPVS: using max 30 ests per chain, 72000 per kthread [ 349.964221][T12641] loop0: detected capacity change from 0 to 4096 [ 350.083093][T12641] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 350.102297][T12641] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 350.109637][T12641] loop0: [ 351.059954][ T5699] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 351.219961][ T5699] usb 9-1: Using ep0 maxpacket: 8 [ 351.228809][ T5699] usb 9-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 351.242112][ T5699] usb 9-1: config 0 has an invalid interface number: 143 but max is 0 [ 351.251902][ T5699] usb 9-1: config 0 has no interface number 0 [ 351.258070][ T5699] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.274846][ T5699] usb 9-1: config 0 descriptor?? [ 351.401112][ T5699] viperboard 9-1:0.143: version 0.00 found at bus 009 address 008 [ 351.491865][ T5699] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 351.510729][T12665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.536730][ T5699] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 351.544892][T12665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.575231][T12665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.610701][T12665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.637760][T12665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.666691][T12665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.704904][ T5699] usb 9-1: USB disconnect, device number 8 [ 351.745140][T12700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.788487][ T187] usb 8-1: Failed to early initialize device [ 351.838236][T12700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.844106][ T187] usb 8-1: USB disconnect, device number 13 [ 351.939369][T12731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 352.240003][ T187] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 352.420659][ T187] usb 8-1: New USB device found, idVendor=18b4, idProduct=1001, bcdDevice= 1.00 [ 352.431137][ T187] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.444729][ T187] usb 8-1: string descriptor 0 read error: -22 [ 352.451281][ T187] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.473967][ T187] usbhid 8-1:1.0: couldn't find an input interrupt endpoint [ 352.569763][T12745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 352.601544][ T987] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 352.633887][T12745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 352.772113][ T987] usb 9-1: unable to get BOS descriptor or descriptor too short [ 352.790535][ T987] usb 9-1: not running at top speed; connect to a high speed hub [ 352.809948][ T987] usb 9-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 352.831144][ T987] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 352.864644][ T987] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.872930][ T987] usb 9-1: Product: syz [ 352.877161][ T987] usb 9-1: Manufacturer: syz [ 352.882079][ T987] usb 9-1: SerialNumber: syz [ 353.109631][ T987] usb 9-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 353.129867][ T987] usb 9-1: found format II with max.bitrate = 512, frame size=4095 [ 353.147439][ T987] usb 9-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 353.169874][ T987] usb 9-1: found format II with max.bitrate = 512, frame size=4095 [ 353.194179][ T987] usb 9-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 353.316692][ T987] usb 9-1: USB disconnect, device number 9 [ 353.593056][ T187] dvb_usb_ec168 8-1:1.1: probe with driver dvb_usb_ec168 failed with error -110 [ 353.759158][T12795] loop0: detected capacity change from 0 to 4096 [ 353.814728][T12795] ldm_validate_privheads(): Primary and backup PRIVHEADs don't match. [ 353.836855][T12795] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 353.859938][T12795] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 353.879899][T12795] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 353.900385][T12795] ldm_validate_tocblocks(): The bitmaps are out of range. Giving up. [ 353.919987][T12795] loop0: [ 354.694692][ T187] usb 8-1: USB disconnect, device number 14 [ 355.666142][T12841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.752280][T12841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 356.029902][ T5603] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 356.190679][ T5603] usb 8-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice= 1.00 [ 356.213432][ T5603] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 356.230169][ T5603] usb 8-1: Product: syz [ 356.244127][ T5603] usb 8-1: Manufacturer: syz [ 356.267495][ T5603] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 356.907391][T12870] loop0: detected capacity change from 0 to 4096 [ 356.963319][T12870] ldm_validate_privheads(): Primary and backup PRIVHEADs don't match. [ 356.979041][ T5603] pwc: Failed to set LED on/off time (-71) [ 356.990694][T12870] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 357.000859][T12870] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 357.009320][ T5603] pwc: send_video_command error -71 [ 357.014753][ T5603] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 357.034548][ T5603] Philips webcam 8-1:1.0: probe with driver Philips webcam failed with error -71 [ 357.036442][T12870] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 357.060703][ T5603] usb 8-1: USB disconnect, device number 15 [ 357.083978][T12870] ldm_validate_tocblocks(): The bitmaps are out of range. Giving up. [ 357.109333][T12870] loop0: [ 357.903729][ T5737] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 358.602953][ T5737] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 358.652364][ T5737] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 358.679847][ T5737] usb 8-1: can't read configurations, error -71 [ 358.928630][ T5611] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 358.942468][ T5611] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 358.953071][ T5611] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 358.961254][ T5611] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 358.970415][ T5611] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 359.270229][T12928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.374524][T12944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.916193][T12911] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.934301][T12911] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.954504][T12911] bridge_slave_0: entered allmulticast mode [ 359.988654][T12911] bridge_slave_0: entered promiscuous mode [ 360.026044][T12911] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.045329][T12911] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.060983][T12911] bridge_slave_1: entered allmulticast mode [ 360.084957][T12911] bridge_slave_1: entered promiscuous mode [ 360.231542][T12911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.259596][T12911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.381539][T12911] team0: Port device team_slave_0 added [ 360.401865][T12911] team0: Port device team_slave_1 added [ 360.488585][T12911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.510753][T12911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.564549][T12911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.609375][T12911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.629877][T12911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.689895][T12911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.812839][T12911] hsr_slave_0: entered promiscuous mode [ 360.819548][T12911] hsr_slave_1: entered promiscuous mode [ 360.841471][T12911] debugfs: 'hsr0' already exists in 'hsr' [ 360.848459][T12911] Cannot create hsr debugfs directory [ 360.900214][ T987] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 361.020885][ T5611] Bluetooth: hci7: command tx timeout [ 361.061267][ T987] usb 8-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice= 0.01 [ 361.086296][ T987] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.106213][ T987] usb 8-1: Product: syz [ 361.119949][ T987] usb 8-1: Manufacturer: syz [ 361.128425][ T987] usb 8-1: SerialNumber: syz [ 361.366614][ T987] hdpvr 8-1:1.0: firmware version 0x5 dated Ð< [ 361.389922][ T987] hdpvr 8-1:1.0: untested firmware, the driver might not work. [ 362.295029][T13229] loop0: detected capacity change from 0 to 4096 [ 362.383866][T13229] ldm_validate_privheads(): Primary and backup PRIVHEADs don't match. [ 362.423445][T13229] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 362.462123][T13229] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 362.486862][T13229] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 362.508537][T12911] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 362.562029][T12911] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 362.581836][T13229] ldm_validate_tocblocks(): The bitmaps are out of range. Giving up. [ 362.602518][T12911] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 362.625530][T13229] loop0: [ 362.645723][T12911] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 362.686766][T12911] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 362.774672][T12911] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 362.793782][ T987] hdpvr 8-1:1.0: Could not setup controls [ 362.818512][T12911] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 362.831629][ T987] hdpvr 8-1:1.0: registering videodev failed [ 362.905265][T12911] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 362.941372][ T987] hdpvr 8-1:1.0: probe with driver hdpvr failed with error -71 [ 363.002013][ T987] usb 8-1: USB disconnect, device number 18 [ 363.101566][ T5611] Bluetooth: hci7: command tx timeout [ 363.431595][T10018] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 363.514211][T12911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.586435][T12911] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.620531][T10018] usb 9-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice= 1.00 [ 363.656797][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.663991][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.690280][T10018] usb 9-1: config index 0 descriptor too short (expected 50, got 32) [ 363.712593][T10018] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.764241][T10018] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 363.775731][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.782929][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.803250][ T187] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 363.858808][T13299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 363.952805][ T187] usb 8-1: device descriptor read/64, error -71 [ 363.984022][T13299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.070155][T12911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.220225][ T187] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 364.237993][T10018] gspca_sonixj: reg_r err -32 [ 364.251986][T10018] sonixj 9-1:1.0: probe with driver sonixj failed with error -32 [ 364.280362][T12911] veth0_vlan: entered promiscuous mode [ 364.332270][T12911] veth1_vlan: entered promiscuous mode [ 364.400243][ T187] usb 8-1: device descriptor read/64, error -71 [ 364.441477][T12911] veth0_macvtap: entered promiscuous mode [ 364.484623][T12911] veth1_macvtap: entered promiscuous mode [ 364.530965][ T187] usb usb8-port1: attempt power cycle [ 364.557151][T12911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.601362][T12911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.690051][T12828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.860719][T12828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.899895][ T187] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 364.907786][T12828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.907829][T12828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.994313][ T187] usb 8-1: device descriptor read/8, error -71 [ 365.117196][ T770] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.156611][ T770] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.180902][ T5611] Bluetooth: hci7: command tx timeout [ 365.260839][ T187] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 365.277583][T12828] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.315888][T12828] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.329067][ T187] usb 8-1: device descriptor read/8, error -71 [ 365.460400][ T187] usb usb8-port1: unable to enumerate USB device [ 366.210664][T10018] usb 9-1: USB disconnect, device number 10 [ 366.417127][T13379] loop0: detected capacity change from 0 to 4096 [ 366.499396][T13379] ldm_validate_privheads(): Primary and backup PRIVHEADs don't match. [ 366.527475][T13379] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 366.568670][T13379] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 366.580013][T13379] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 366.650764][T13379] ldm_validate_tocblocks(): The bitmaps are out of range. Giving up. [ 366.705856][T13379] loop0: [ 367.071092][ T5679] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 367.253847][ T5679] usb 8-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 367.263116][ T5611] Bluetooth: hci7: command tx timeout [ 367.298781][ T5679] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.335759][ T5679] gspca_main: spca501-2.14.0 probing 0000:0000 [ 367.870260][ T5679] gspca_spca501: reg write: error -110 [ 367.887045][ T5679] spca501 8-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 367.914372][ T5679] spca501 8-1:1.0: probe with driver spca501 failed with error -22 [ 368.040223][ T9806] usb 8-1: USB disconnect, device number 23 [ 368.067946][T13424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.164474][T13424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.191740][T13424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.919907][ T9806] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 369.091094][ T9806] usb 8-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 369.124098][ T9806] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 369.146914][ T9806] usb 8-1: Product: syz [ 369.159389][ T9806] usb 8-1: Manufacturer: syz [ 369.180424][ T187] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 369.208618][ T9806] usbserial_generic 8-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 369.264591][ T9806] usbserial_generic 8-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 369.306369][ T9806] usbserial_generic 8-1:1.0: generic converter detected [ 369.328734][ T9806] usb 8-1: generic converter now attached to ttyUSB0 [ 369.360316][ T187] usb 9-1: Using ep0 maxpacket: 32 [ 369.374484][ T187] usb 9-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 369.413081][ T187] usb 9-1: config index 0 descriptor too short (expected 18, got 11) [ 369.445973][ T187] usb 9-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 369.479929][ T187] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 369.510929][ T187] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.536111][ T187] usb 9-1: config 0 descriptor?? [ 370.390148][ T5611] Bluetooth: hci2: command 0x0406 tx timeout [ 371.404970][ T9] usb 8-1: USB disconnect, device number 24 [ 371.433976][ T9] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 371.454339][ T9] usbserial_generic 8-1:1.0: device disconnected [ 372.366698][T13582] loop0: detected capacity change from 0 to 4096 [ 372.460209][T13582] ldm_validate_privheads(): Primary and backup PRIVHEADs don't match. [ 372.492591][T13582] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 372.516271][T13582] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 372.540251][T13582] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 372.561513][T13582] ldm_validate_tocblocks(): The bitmaps are out of range. Giving up. [ 372.574890][T13582] loop0: [ 372.752943][T13600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.799128][ T5722] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 372.851444][ T5722] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 372.853047][T13600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.884820][ T6874] wlan1: authenticated [ 372.896361][T13600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.940317][ T770] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 373.069883][ T770] wlan1: associate with 08:02:11:00:00:00 (try 2/3) [ 373.190436][T12828] wlan1: associate with 08:02:11:00:00:00 (try 3/3) [ 373.280240][ T10] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 373.309907][T12828] wlan1: association with 08:02:11:00:00:00 timed out [ 373.451533][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 373.460988][ T10] usb 8-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 373.477974][ T10] usb 8-1: config 0 has an invalid interface number: 143 but max is 0 [ 373.496984][ T10] usb 8-1: config 0 has no interface number 0 [ 373.505719][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.533648][ T10] usb 8-1: config 0 descriptor?? [ 373.683499][ T10] viperboard 8-1:0.143: version 0.00 found at bus 008 address 025 [ 373.743506][ T10] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 373.764672][ T10] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 373.786707][T13620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.828437][T13620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.857432][ T5722] usb 8-1: USB disconnect, device number 25 [ 375.700304][ T187] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 375.861833][ T187] usb 8-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.00 [ 375.872621][ T187] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.047225][ T187] msi2500 8-1:1.0: Registered as swradio24 [ 376.069211][ T187] msi2500 8-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 376.606865][ T5679] usb 8-1: USB disconnect, device number 26 [ 376.805042][T13776] loop0: detected capacity change from 0 to 4096 [ 376.854294][T13776] ldm_validate_privheads(): Primary and backup PRIVHEADs don't match. [ 376.874091][T13776] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 376.905781][T13776] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 376.930171][T13776] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 376.949051][T13776] ldm_validate_tocblocks(): The bitmaps are out of range. Giving up. [ 376.958651][T13776] loop0: [ 377.204141][T13787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.267311][T13787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.279273][T13787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.179923][ T5679] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 378.341475][ T5679] usb 8-1: New USB device found, idVendor=2912, idProduct=0001, bcdDevice= 0.00 [ 378.355244][ T5679] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.364029][ T5679] usb 8-1: Product: syz [ 378.368296][ T5679] usb 8-1: Manufacturer: syz [ 378.376537][ T5679] usb 8-1: SerialNumber: syz [ 378.545332][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.553037][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.969579][ T5679] cdc_acm 8-1:1.0: ttyACM0: USB ACM device [ 381.010350][ T5679] usb 8-1: USB disconnect, device number 27 [ 381.076408][T13866] loop0: detected capacity change from 0 to 4096 [ 381.133784][T13866] ldm_validate_privheads(): Primary and backup PRIVHEADs don't match. [ 381.145873][T13866] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 381.159766][T13866] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 381.168491][T13866] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 381.177403][T13866] ldm_validate_tocblocks(): The bitmaps are out of range. Giving up. [ 381.186766][T13866] loop0: [ 381.309652][T13874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 381.434287][T13874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.410040][ T9] usb 8-1: new full-speed USB device number 28 using dummy_hcd [ 383.588625][ T9] usb 8-1: unable to get BOS descriptor or descriptor too short [ 383.608441][ T9] usb 8-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 383.621065][ T9] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 383.628833][ T9] usb 8-1: can't read configurations, error -71 [ 383.992422][ T5625] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 384.006396][ T5625] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 384.014611][ T5625] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 384.027846][ T5625] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 384.035750][ T5625] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 384.098922][T13950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.137409][ T5679] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 384.174462][ T5679] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 384.212465][T13950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.310847][ T35] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 384.430532][ T12] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 384.549932][ T12] wlan1: authentication with 08:02:11:00:00:00 timed out [ 384.665388][T13951] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.673097][T13951] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.680799][T13951] bridge_slave_0: entered allmulticast mode [ 384.688746][T13951] bridge_slave_0: entered promiscuous mode [ 384.699639][T13951] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.708620][T13951] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.717966][T13951] bridge_slave_1: entered allmulticast mode [ 384.726444][T13951] bridge_slave_1: entered promiscuous mode [ 384.791056][T13951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.806776][T13951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.873263][T13951] team0: Port device team_slave_0 added [ 384.882262][T13951] team0: Port device team_slave_1 added [ 384.950015][T13951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.957251][T13951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.988605][T13951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.004855][T13951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.012168][T13951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.060057][T13951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.220198][T13951] hsr_slave_0: entered promiscuous mode [ 385.247113][T13951] hsr_slave_1: entered promiscuous mode [ 385.258355][T13951] debugfs: 'hsr0' already exists in 'hsr' [ 385.267715][T13951] Cannot create hsr debugfs directory [ 385.644498][T13951] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.679896][ T5679] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 385.804015][T13951] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.840519][ T5679] usb 8-1: New USB device found, idVendor=18b4, idProduct=1001, bcdDevice= 0.00 [ 385.858970][ T5679] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 385.879040][ T5679] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 385.901303][ T5679] usb 8-1: Product: syz [ 385.909184][ T5679] usb 8-1: Manufacturer: syz [ 386.005845][T13951] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.061067][ T5611] Bluetooth: hci8: command tx timeout [ 386.154588][ T5679] usb 8-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 386.171526][T13951] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.202644][ T5679] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 386.238363][ T5679] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 386.263408][ T5679] usb 8-1: media controller created [ 386.292200][T14261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.314492][ T5679] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 386.424031][T14261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.537288][T13951] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 386.548698][T13951] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 386.559706][T13951] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 386.571117][T13951] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 386.579555][T13951] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 386.592307][T13951] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 386.602621][T13951] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 386.615725][T13951] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 386.759032][T13951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.789458][T13951] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.804994][T12828] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.812347][T12828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.836423][T12828] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.843662][T12828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.958216][T13951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.094960][T13951] veth0_vlan: entered promiscuous mode [ 387.113231][T13951] veth1_vlan: entered promiscuous mode [ 387.147760][T13951] veth0_macvtap: entered promiscuous mode [ 387.167802][T13951] veth1_macvtap: entered promiscuous mode [ 387.199388][T13951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.222331][T13951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.310319][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.347369][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.412508][ T6874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.423029][T12828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.433011][ T5679] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 387.444301][ T6874] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.463563][T12828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.574034][ T770] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.587210][ T770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.722021][T14305] loop0: detected capacity change from 0 to 4096 [ 387.801966][T14305] ldm_validate_privheads(): Primary and backup PRIVHEADs don't match. [ 387.811149][T14305] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 387.819556][T14305] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 387.837087][T14305] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 387.847514][T14305] ldm_validate_tocblocks(): The bitmaps are out of range. Giving up. [ 387.856182][T14305] loop0: [ 388.140371][ T5611] Bluetooth: hci8: command tx timeout [ 388.365159][ T5737] usb 8-1: USB disconnect, device number 30 Stopping sshd: stopped /usr/sbin/sshd (pid 5367) OK [ 389.420999][ T30] INFO: task syz.1.498:7726 blocked for more than 143 seconds. [ 389.445871][ T30] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 389.467220][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 389.511384][ T30] task:syz.1.498 state:D stack:25640 pid:7726 tgid:7726 ppid:5618 task_flags:0x400040 flags:0x00080002 [ 389.563299][ T30] Call Trace: [ 389.577639][ T30] [ 389.596676][ T30] __schedule+0x17d9/0x56c0 [ 389.629327][ T30] ? __lock_acquire+0x683/0x2cf0 [ 389.667680][ T30] ? __lock_acquire+0x683/0x2cf0 [ 389.703631][ T30] ? stack_depot_save_flags+0x33/0x800 Stopping crond: [ 389.732503][ T30] ? __pfx___schedule+0x10/0x10 [ 389.750801][ T30] ? schedule+0x90/0x2b0 [ 389.764644][ T30] schedule+0x164/0x2b0 [ 389.779438][ T30] schedule_preempt_disabled+0x13/0x30 [ 389.802645][ T30] __mutex_lock+0x7bf/0x1550 [ 389.818689][ T30] ? __mutex_lock+0x5d4/0x1550 [ 389.838486][ T30] ? kvm_gmem_release+0xdf/0x3e0 [ 389.859603][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 389.878624][ T30] ? ima_iint_find+0x53/0x110 [ 389.906227][ T30] ? __pfx_ima_file_free+0x10/0x10 stopped /usr/sbin/crond (pid 5350) [ 389.925638][ T30] kvm_gmem_release+0xdf/0x3e0 OK [ 389.938607][ T30] ? __pfx_kvm_gmem_release+0x10/0x10 [ 389.954987][ T30] ? evm_file_release+0x100/0x1e0 [ 389.971031][ T30] ? __pfx_kvm_gmem_release+0x10/0x10 [ 389.977925][ T30] __fput+0x418/0xa50 [ 390.001620][ T30] task_work_run+0x1d9/0x270 [ 390.009857][ T30] ? __pfx_task_work_run+0x10/0x10 [ 390.019883][ T30] exit_to_user_mode_loop+0x1fa/0x730 [ 390.037429][ T30] ? rcu_is_watching+0x15/0xb0 [ 390.051351][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.068831][ T30] do_syscall_64+0x353/0x580 [ 390.081656][ T30] ? clear_bhb_loop+0x70/0xc0 [ 390.090951][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.112035][ T30] RIP: 0033:0x7ff5d819e0d9 [ 390.127090][ T30] RSP: 002b:00007ff5d854fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 390.169910][ T30] RAX: 0000000000000000 RBX: 00007ff5d8427da0 RCX: 00007ff5d819e0d9 [ 390.178097][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 390.199833][ T30] RBP: 00007ff5d8427da0 R08: 0000000000000006 R09: 0000000000000000 [ 390.211078][ T30] R10: 00007ff5d8427cb0 R11: 0000000000000246 R12: 00000000000385f2 [ 390.229866][ T30] R13: 00007ff5d8425fac R14: 00000000000382f8 R15: 00007ff5d854fcb0 [ 390.230004][ T5611] Bluetooth: hci8: command tx timeout [ 390.260106][ T30] [ 390.263340][ T30] [ 390.263340][ T30] Showing all locks held in the system: [ 390.271226][ T30] 1 lock held by khungtaskd/30: [ 390.276126][ T30] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 390.337590][ T30] 3 locks held by kworker/1:1/42: [ 390.342758][ T30] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 390.353871][ T30] #1: ffffc90000b27c40 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 390.366028][ T30] #2: ffff8880217041d8 (&dev->mutex){....}-{4:4}, at: ath9k_hif_usb_firmware_cb+0x32f/0x4b0 [ 390.376588][ T30] 2 locks held by getty/5368: [ 390.391037][ T30] #0: ffff888035d7e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 390.402003][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 390.412279][ T30] 4 locks held by udevd/5669: [ 390.416993][ T30] #0: ffff888076795878 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 390.425943][ T30] #1: ffff888055683080 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 390.435512][ T30] #2: ffff88805ba63c38 (kn->active#29){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 390.445491][ T30] #3: ffff8880260911d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 390.455898][ T30] 6 locks held by kworker/0:4/5670: [ 390.461808][ T30] #0: ffff88801eaca940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 390.475009][ T30] #1: ffffc900041bfc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 390.500087][ T30] #2: ffff88802a6781d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 390.520101][ T30] #3: ffff88807c6351d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 Stopping dhcpcd... [ 390.539917][ T30] #4: ffff88807c6311a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 390.560918][ T30] #5: ffffffff8e9f5988 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xfc/0x2c0 [ 390.590053][ T30] 6 locks held by kworker/0:7/5736: [ 390.596387][ T30] #0: ffff88801eaca940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 390.620384][ T30] #1: ffffc90004c0fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 390.649856][ T30] #2: ffff8880217041d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 390.672298][ T30] #3: ffff8880260911d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 390.691768][ T30] #4: ffff8880333bd1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 stopped /sbin/dhcpcd (pid 5271) [ 390.719844][ T30] #5: ffffffff8e9f5988 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xfc/0x2c0 [ 390.739932][ T30] 1 lock held by syz.1.498/7726: [ 390.749892][ T30] #0: ffff888056e0c0a0 (&kvm->slots_lock){+.+.}-{4:4}, at: kvm_gmem_release+0xdf/0x3e0 [ 390.769826][ T30] 1 lock held by syz.1.498/7728: [ 390.780364][ T30] 1 lock held by syz-executor/8467: [ 390.791857][ T30] 3 locks held by kworker/1:9/9806: [ 390.803099][ T30] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 390.839860][ T30] #1: ffffc90005da7c40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 390.870248][ T30] #2: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 390.909897][ T30] 1 lock held by dhcpcd/10642: [ 390.929869][ T30] #0: ffff8880571cc740 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 390.957480][ T30] 1 lock held by dhcpcd/10699: [ 390.981477][ T30] #0: ffff8880572aef80 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 391.020051][ T30] 1 lock held by dhcpcd/10782: [ 391.027780][ T30] #0: ffff8880571c6400 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 391.050208][ T30] 1 lock held by dhcpcd/10796: [ 391.059992][ T30] #0: ffff8880571c4d00 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 391.077694][ T30] 1 lock held by dhcpcd/10832: [ 391.087677][ T30] #0: ffff888057291380 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x82/0x220 Stopping network: [ 391.109860][ T30] 1 lock held by syz.9.724/10938: [ 391.129873][ T30] #0: ffff8880217041d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x770 [ 391.139152][ T30] 1 lock held by syz.4.849/12394: [ 391.151820][ T30] #0: ffff88802a6781d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x770 [ 391.169990][ T30] 1 lock held by syz.4.849/12395: [ 391.180608][ T30] #0: ffff8880217041d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x770 [ 391.196272][ T30] 1 lock held by syz.8.936/13457: [ 391.219069][ T30] #0: ffff88802a6781d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x770 [ 391.239867][ T30] 1 lock held by syz.2.998/14323: [ 391.244964][ T30] #0: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 391.269826][ T30] 2 locks held by ifdown/14376: [ 391.440005][ T30] [ 391.442480][ T30] ============================================= [ 391.442480][ T30] [ 391.545356][ T30] NMI backtrace for cpu 1 [ 391.545386][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 391.545407][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 391.545419][ T30] Call Trace: [ 391.545426][ T30] [ 391.545434][ T30] dump_stack_lvl+0xe8/0x150 [ 391.545485][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 391.545599][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 391.545635][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 391.545668][ T30] sys_info+0x135/0x170 [ 391.545694][ T30] watchdog+0xfd7/0x1030 [ 391.545743][ T30] ? watchdog+0x1c7/0x1030 [ 391.545771][ T30] kthread+0x388/0x470 [ 391.545797][ T30] ? __pfx_watchdog+0x10/0x10 [ 391.545817][ T30] ? __pfx_kthread+0x10/0x10 [ 391.545844][ T30] ret_from_fork+0x514/0xb70 [ 391.545883][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 391.545909][ T30] ? __switch_to+0xc89/0x1420 [ 391.545934][ T30] ? __pfx_kthread+0x10/0x10 [ 391.545961][ T30] ret_from_fork_asm+0x1a/0x30 [ 391.546003][ T30] [ 391.546010][ T30] Sending NMI from CPU 1 to CPUs 0: [ 391.661806][ C0] NMI backtrace for cpu 0 [ 391.661830][ C0] CPU: 0 UID: 0 PID: 14285 Comm: syz.0.995 Not tainted syzkaller #0 PREEMPT(full) [ 391.661849][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 391.661859][ C0] RIP: 0010:__page_table_check_pte_clear+0x7/0x80 [ 391.661886][ C0] Code: 90 0f 0b e8 6b b6 86 ff 90 0f 0b 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 56 <53> 48 89 d3 49 89 fe e8 3d b6 86 ff 49 81 fe c0 78 c8 8e 40 0f 95 [ 391.661900][ C0] RSP: 0018:ffffc90005a67860 EFLAGS: 00000293 [ 391.661914][ C0] RAX: ffffffff82228c61 RBX: 800000003bfa4063 RCX: ffff888020b29f00 [ 391.661927][ C0] RDX: 800000003bfa4063 RSI: ffffc90016d4f000 RDI: ffffffff8ec878c0 [ 391.661938][ C0] RBP: ffff88805d4c6001 R08: ffff88805d4c6a7f R09: 1ffff1100ba98d4f [ 391.661950][ C0] R10: dffffc0000000000 R11: ffffed100ba98d50 R12: ffffc90016d4f000 [ 391.661962][ C0] R13: ffff88805d4c6a78 R14: 000000005d4c6000 R15: ffffc90016dac000 [ 391.661973][ C0] FS: 0000000000000000(0000) GS:ffff888124f49000(0000) knlGS:0000000000000000 [ 391.661987][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 391.661997][ C0] CR2: 00007f4cb5f8ccd0 CR3: 000000007fbc4000 CR4: 00000000003526f0 [ 391.662011][ C0] Call Trace: [ 391.662017][ C0] [ 391.662023][ C0] __vunmap_range_noflush+0x7f3/0xb10 [ 391.662073][ C0] remove_vm_area+0x29c/0x2f0 [ 391.662090][ C0] vfree+0x63/0x4a0 [ 391.662107][ C0] ? __pfx_kcov_close+0x10/0x10 [ 391.662124][ C0] kcov_close+0x28/0x50 [ 391.662140][ C0] __fput+0x418/0xa50 [ 391.662163][ C0] task_work_run+0x1d9/0x270 [ 391.662187][ C0] ? __pfx_task_work_run+0x10/0x10 [ 391.662209][ C0] ? do_exit+0x735/0x2360 [ 391.662229][ C0] ? kmem_cache_free+0x182/0x650 [ 391.662249][ C0] ? put_net+0x191/0x260 [ 391.662267][ C0] do_exit+0x73a/0x2360 [ 391.662291][ C0] ? __pfx_do_exit+0x10/0x10 [ 391.662313][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 391.662335][ C0] do_group_exit+0x22d/0x2f0 [ 391.662356][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 391.662373][ C0] get_signal+0x121b/0x12c0 [ 391.662400][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 391.662422][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 391.662445][ C0] ? __fget_files+0x2a/0x420 [ 391.662475][ C0] exit_to_user_mode_loop+0x104/0x730 [ 391.662495][ C0] ? rcu_is_watching+0x15/0xb0 [ 391.662518][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.662534][ C0] do_syscall_64+0x353/0x580 [ 391.662552][ C0] ? trace_irq_disable+0x3b/0x140 [ 391.662576][ C0] ? clear_bhb_loop+0x70/0xc0 [ 391.662612][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.662629][ C0] RIP: 0033:0x7f8904f9dd6b [ 391.662643][ C0] Code: Unable to access opcode bytes at 0x7f8904f9dd41. [ 391.662651][ C0] RSP: 002b:00007f8905db9f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 391.662668][ C0] RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00007f8904f9dd6b [ 391.662679][ C0] RDX: 00007f8905dbafd0 RSI: 0000000080085502 RDI: 0000000000000003 [ 391.662690][ C0] RBP: 00007f8905dbafd0 R08: 0000000000000001 R09: 00000000ffffffff [ 391.662700][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 391.662711][ C0] R13: 0000000800000000 R14: 0000000000000000 R15: 00007f89050538e2 [ 391.662731][ C0] [ 392.057536][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 392.064459][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 392.073597][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 392.083673][ T30] Call Trace: [ 392.086977][ T30] [ 392.089927][ T30] vpanic+0x56c/0xa60 [ 392.093959][ T30] ? __pfx___schedule+0x10/0x10 [ 392.098838][ T30] ? __pfx_vpanic+0x10/0x10 [ 392.103363][ T30] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 392.109549][ T30] panic+0xc5/0xd0 [ 392.114169][ T30] ? __pfx_panic+0x10/0x10 [ 392.118614][ T30] ? preempt_schedule_common+0x82/0xd0 [ 392.124093][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 392.129500][ T30] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 392.135692][ T30] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 392.141887][ T30] watchdog+0x1030/0x1030 [ 392.146273][ T30] ? watchdog+0x1c7/0x1030 [ 392.150723][ T30] kthread+0x388/0x470 [ 392.154833][ T30] ? __pfx_watchdog+0x10/0x10 [ 392.159537][ T30] ? __pfx_kthread+0x10/0x10 [ 392.164153][ T30] ret_from_fork+0x514/0xb70 [ 392.168785][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 392.173939][ T30] ? __switch_to+0xc89/0x1420 [ 392.178677][ T30] ? __pfx_kthread+0x10/0x10 [ 392.183308][ T30] ret_from_fork_asm+0x1a/0x30 [ 392.188128][ T30] [ 392.191335][ T30] Kernel Offset: disabled [ 392.195669][ T30] Rebooting in 86400 seconds..