last executing test programs: 9.568068157s ago: executing program 1 (id=8699): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000380)={0x0, 0xf, 0x19, "16aa7b74573ae261cc8063737b2d231df1035cc5625dddb74e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.437185412s ago: executing program 1 (id=8706): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x14, 0x5a, 0x1}, 0x14}}, 0x0) 6.284588919s ago: executing program 1 (id=8709): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x1fe, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000014f000/0x18000)=nil, &(0x7f0000005700)=[@text16={0x10, 0x0}], 0x1, 0x14, 0x0, 0x0) 6.018608891s ago: executing program 1 (id=8712): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x1, 0x0) 5.780080542s ago: executing program 1 (id=8714): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000380)={0x0, 0xf, 0x19, "16aa7b74573ae261cc8063737b2d231df1035cc5625dddb74e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.262829603s ago: executing program 0 (id=8726): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_clone3(&(0x7f0000000dc0)={0x80002000, 0x0, 0x0, 0x0, {0x7}, &(0x7f0000000a80)=""/245, 0xf5, 0x0, &(0x7f0000000c00)=[0x0, 0xffffffffffffffff, 0x0], 0x3, {r1}}, 0x58) 3.545056375s ago: executing program 0 (id=8731): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 3.382807163s ago: executing program 0 (id=8733): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8", 0x1}], 0x1}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) 3.282269798s ago: executing program 0 (id=8734): write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) 3.172039743s ago: executing program 0 (id=8736): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2006, 0x118, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x7, "0fb3e5a2"}]}}, 0x0}, 0x0) 2.691049575s ago: executing program 3 (id=8743): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) 2.690428895s ago: executing program 1 (id=8744): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) r1 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x100, 0x1}, &(0x7f0000000040)=0x0, &(0x7f0000002a00)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0x9, "00000000020000000000002100", "00004702", "0300", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00"]}) syz_open_dev$dri(0x0, 0x1, 0x0) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x1, 'j'}, @main=@item_4={0x3, 0x0, 0x9, "5f72be78"}]}}, 0x0}, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, 'U\x00', "1575a859", "0725eade", '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) 2.512068484s ago: executing program 2 (id=8745): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r2, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x80, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.418939354s ago: executing program 0 (id=8746): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x0, 0xab, 0x8, &(0x7f0000000180)={0x2a, "247f23e017bb486c5c4b7165a6d6af0b920bf04121f0339400"}}) 1.190086045s ago: executing program 3 (id=8747): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$unix(r2, &(0x7f0000007b00)=[{{0x0, 0x0, &(0x7f0000005b00)=[{&(0x7f0000004b00)="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", 0x74c}], 0x1, 0x0, 0x0, 0x40000}}], 0x1, 0x84) r6 = socket(0x840000000002, 0x3, 0xfa) sendmmsg$inet(r6, &(0x7f0000005240), 0x4000095, 0x0) 1.123919318s ago: executing program 2 (id=8748): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f00000000c0)='W', 0x1}], 0x1) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) arch_prctl$ARCH_SET_GS(0x1001, 0x0) 624.083891ms ago: executing program 3 (id=8749): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000005, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)='k', 0x1}], 0x1) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$packet(0x11, 0x3, 0x300) 552.916774ms ago: executing program 3 (id=8750): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x20, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0x9, 0x0, 0x0, 0x0, @binary="56ccabd869"}]}]}, 0x20}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) 484.210577ms ago: executing program 3 (id=8751): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x14, 0x5a, 0x1}, 0x14}}, 0x0) 409.338581ms ago: executing program 2 (id=8752): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$inet(0x2, 0x3, 0x8d) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1401, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="5bffd08307d80c79b1cb7b5f0c5b4d719c69c8513f748fbe425a7bc388c9019bef114779f7a10dc03a883d6e16a0a704f74297f381ff1db75098a9b38bb67206a7ff22e6ca46dc760bdad8a79d5951988c55a368dd1132ba7f129c2e65441eaa27492c069488df0881f123ca01ae873f5b36eb0fddb8f07420f5484d81cabde167c87ffbab6a94b24b5537bb1a08d56469f516fd4b7c66e2ac50d5ff4e52c628d0a89e53d0e78582a5ab2a2c714f66", 0xfe7c}], 0x1) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) 408.234301ms ago: executing program 3 (id=8753): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000040)={0x0, 0x8, 0x1013}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xb, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r3) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r4, @ANYBLOB="000000004000020028001200001800028014000100000000000000000000000000f824adafa877a7e69246dfeb75239ff3d507735b377c0920f4cb4590a9638629c3bd31e3d755a1e6391c156a77b4264d73e0474ac087fd6017284cf3c0ee2e13e3782ba2dca76539a8c047020a5db4e53f0ec73760bcdb581174cec9fdf04128330d04a9df36f916dda1000000", @ANYRES32=r4, @ANYRES64], 0x48}, 0x1, 0x2000, 0x0, 0x40}, 0x4048880) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) write$cgroup_int(r5, &(0x7f0000000000)=0x2b00, 0x12) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x4, &(0x7f0000000100)=0x2, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}, 0xfffffc01}, {{0x0, 0x0, &(0x7f0000002b80)=[{0x0}, {&(0x7f0000002a40)=""/197, 0xc5}], 0x2}, 0x4}], 0x2, 0x2, 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x4c) connect$inet(r7, &(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10) sendmmsg$inet(r7, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 311.002416ms ago: executing program 2 (id=8754): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 185.516931ms ago: executing program 2 (id=8755): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) dup2(0xffffffffffffffff, 0xffffffffffffffff) 0s ago: executing program 2 (id=8756): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) kernel console output (not intermixed with test programs): D [ 1225.804966][T17324] lan78xx: probe of 1-1:1.0 failed with error -32 [ 1226.699756][T22481] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6790'. [ 1226.811844][T17324] usb 1-1: USB disconnect, device number 50 [ 1226.963282][T22485] netlink: 2076 bytes leftover after parsing attributes in process `syz.0.6792'. [ 1229.178482][ T5863] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1229.386853][ T5863] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1229.408597][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.416673][ T5863] usb 3-1: Product: syz [ 1229.448425][ T5863] usb 3-1: Manufacturer: syz [ 1229.453110][ T5863] usb 3-1: SerialNumber: syz [ 1229.697947][T22510] netlink: 830 bytes leftover after parsing attributes in process `syz.2.6800'. [ 1229.937073][ T5863] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1230.976027][ T5863] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -32 [ 1230.998299][ T5863] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1231.018341][ T5863] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1231.039936][ T5863] lan78xx: probe of 3-1:1.0 failed with error -32 [ 1232.057852][ T5863] usb 3-1: USB disconnect, device number 54 [ 1233.068252][ T5863] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1233.282944][ T5863] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1233.298165][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.308590][ T5863] usb 4-1: Product: syz [ 1233.312851][ T5863] usb 4-1: Manufacturer: syz [ 1233.328754][ T5863] usb 4-1: SerialNumber: syz [ 1233.560584][T22554] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6822'. [ 1233.799110][ T5863] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1234.159384][ T5881] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1234.350767][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1234.373214][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1234.393900][ T5881] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1234.405942][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.421619][ T5881] usb 2-1: config 0 descriptor?? [ 1234.846557][ T5863] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -32 [ 1234.866602][ T5863] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1234.890054][ T5863] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1234.930915][ T5863] lan78xx: probe of 4-1:1.0 failed with error -32 [ 1235.084200][ T5881] usbhid 2-1:0.0: can't add hid device: -71 [ 1235.108284][ T5881] usbhid: probe of 2-1:0.0 failed with error -71 [ 1235.128457][ T5881] usb 2-1: USB disconnect, device number 76 [ 1235.927333][ T27] usb 4-1: USB disconnect, device number 63 [ 1239.205556][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.212262][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.577216][T22681] netlink: 2088 bytes leftover after parsing attributes in process `syz.3.6880'. [ 1243.065631][T22710] netlink: 2088 bytes leftover after parsing attributes in process `syz.0.6890'. [ 1244.700212][T22732] netlink: 1832 bytes leftover after parsing attributes in process `syz.3.6904'. [ 1246.520498][T22775] netlink: 1832 bytes leftover after parsing attributes in process `syz.3.6925'. [ 1248.341133][T22805] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6939'. [ 1250.927384][T22852] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1250.933990][T22852] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1250.968440][T22852] vhci_hcd vhci_hcd.0: Device attached [ 1250.988868][T22853] vhci_hcd: cannot find the pending unlink 1 [ 1251.268246][ T5852] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 1251.278406][ T27] usb 36-1: SetAddress Request (2) to port 0 [ 1251.284909][ T27] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1251.450291][ T5852] usb 2-1: config 0 has an invalid interface number: 125 but max is 0 [ 1251.467841][ T5852] usb 2-1: config 0 has no interface number 0 [ 1251.484425][ T5852] usb 2-1: New USB device found, idVendor=00a7, idProduct=07bc, bcdDevice=de.99 [ 1251.509035][ T5852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.548302][ T5852] usb 2-1: config 0 descriptor?? [ 1251.566079][ T5852] usb-storage 2-1:0.125: USB Mass Storage device detected [ 1251.805730][ T5852] usb 2-1: USB disconnect, device number 77 [ 1251.848198][T22853] vhci_hcd: connection reset by peer [ 1251.855055][ T2891] vhci_hcd: stop threads [ 1251.888570][ T2891] vhci_hcd: release socket [ 1251.901227][ T2891] vhci_hcd: disconnect device [ 1252.724307][T22889] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6976'. [ 1252.775465][T22891] netlink: 2088 bytes leftover after parsing attributes in process `syz.0.6977'. [ 1254.401575][T22916] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6988'. [ 1254.467856][T22920] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6989'. [ 1254.484032][T22920] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6989'. [ 1256.400528][ T27] usb 36-1: device descriptor read/8, error -110 [ 1256.840870][ T27] usb usb36-port1: attempt power cycle [ 1257.499934][ T27] usb usb36-port1: unable to enumerate USB device [ 1257.500524][T22977] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7018'. [ 1257.538485][T22977] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7018'. [ 1260.081623][T23033] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7043'. [ 1260.848841][T23057] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7056'. [ 1262.245047][T23078] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7065'. [ 1262.274788][T23078] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7065'. [ 1262.918809][T23088] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1262.925542][T23088] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1262.958368][T23088] vhci_hcd vhci_hcd.0: Device attached [ 1262.989732][T23089] vhci_hcd: connection closed [ 1262.999614][T17247] vhci_hcd: stop threads [ 1263.027083][T17247] vhci_hcd: release socket [ 1263.031693][T17247] vhci_hcd: disconnect device [ 1264.947593][T23108] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1264.954219][T23108] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1264.991799][T23108] vhci_hcd vhci_hcd.0: Device attached [ 1265.013215][T23109] vhci_hcd: connection closed [ 1265.013501][ T49] vhci_hcd: stop threads [ 1265.038523][ T49] vhci_hcd: release socket [ 1265.043029][ T49] vhci_hcd: disconnect device [ 1266.028198][ T27] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1266.240792][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1266.262425][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1266.288177][ T27] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1266.314112][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.343922][ T27] usb 2-1: config 0 descriptor?? [ 1266.576372][ T27] usbhid 2-1:0.0: can't add hid device: -71 [ 1266.594338][ T27] usbhid: probe of 2-1:0.0 failed with error -71 [ 1266.620851][ T27] usb 2-1: USB disconnect, device number 78 [ 1268.537925][ T5803] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1268.549756][ T5803] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1268.565070][ T5803] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1268.574245][ T5803] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1268.586701][ T5803] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1268.595770][ T5803] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1268.662024][ T2891] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.799067][ T2891] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.842625][T23131] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7090'. [ 1268.869538][T23131] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7090'. [ 1268.941973][ T2891] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.173390][ T2891] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.794846][T23124] chnl_net:caif_netlink_parms(): no params data found [ 1270.212539][T23162] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7100'. [ 1270.525214][T23124] bridge0: port 1(bridge_slave_0) entered blocking state [ 1270.544619][T23124] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.571241][T23124] bridge_slave_0: entered allmulticast mode [ 1270.601692][T23124] bridge_slave_0: entered promiscuous mode [ 1270.648747][T19336] Bluetooth: hci0: command tx timeout [ 1270.730002][T23124] bridge0: port 2(bridge_slave_1) entered blocking state [ 1270.737221][T23124] bridge0: port 2(bridge_slave_1) entered disabled state [ 1270.798638][T23124] bridge_slave_1: entered allmulticast mode [ 1270.840973][T23124] bridge_slave_1: entered promiscuous mode [ 1270.973772][T23181] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7104'. [ 1270.998846][T23181] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7104'. [ 1271.021669][T23124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1271.065188][T23124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1271.257436][T23124] team0: Port device team_slave_0 added [ 1271.281809][T23124] team0: Port device team_slave_1 added [ 1271.452021][T23124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1271.468153][T23124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1271.528172][T23124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1271.600096][T23124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1271.628190][T23124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1271.680287][T23124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1272.054008][T23124] hsr_slave_0: entered promiscuous mode [ 1272.092030][T23124] hsr_slave_1: entered promiscuous mode [ 1272.118981][T23124] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1272.138188][T23124] Cannot create hsr debugfs directory [ 1272.569741][ T2891] hsr_slave_0: left promiscuous mode [ 1272.609353][ T2891] hsr_slave_1: left promiscuous mode [ 1272.648600][ T2891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1272.666978][ T2891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1272.690467][ T2891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1272.718259][ T2891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1272.718542][T19336] Bluetooth: hci0: command tx timeout [ 1272.739183][ T2891] bridge_slave_1: left allmulticast mode [ 1272.744904][ T2891] bridge_slave_1: left promiscuous mode [ 1272.808134][ T2891] bridge0: port 2(bridge_slave_1) entered disabled state [ 1272.850462][ T2891] bridge_slave_0: left allmulticast mode [ 1272.878431][ T2891] bridge_slave_0: left promiscuous mode [ 1272.904304][ T2891] bridge0: port 1(bridge_slave_0) entered disabled state [ 1273.001355][ T2891] veth1_macvtap: left promiscuous mode [ 1273.027424][ T2891] veth0_macvtap: left promiscuous mode [ 1273.033286][ T2891] veth1_vlan: left promiscuous mode [ 1273.058366][ T2891] veth0_vlan: left promiscuous mode [ 1274.662710][ T2891] team0 (unregistering): Port device team_slave_1 removed [ 1274.770358][ T2891] team0 (unregistering): Port device team_slave_0 removed [ 1274.809439][T19336] Bluetooth: hci0: command tx timeout [ 1274.891305][ T2891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1275.113982][ T2891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1276.510588][ T2891] bond0 (unregistering): Released all slaves [ 1276.888440][T19336] Bluetooth: hci0: command tx timeout [ 1278.032476][T23124] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1278.063158][T23124] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1278.084065][T23124] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1278.126420][T23124] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1278.504343][T23124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1278.603673][T23124] 8021q: adding VLAN 0 to HW filter on device team0 [ 1278.627248][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1278.634527][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1278.668532][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1278.675828][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1279.317965][T23124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1279.483272][T23124] veth0_vlan: entered promiscuous mode [ 1279.526164][T23124] veth1_vlan: entered promiscuous mode [ 1279.659439][T23124] veth0_macvtap: entered promiscuous mode [ 1279.690593][T23124] veth1_macvtap: entered promiscuous mode [ 1279.752766][T23124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1279.788598][T23124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.814174][T23124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1279.845749][T23124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.868739][T23124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1279.901189][T23124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.933780][T23124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1279.988041][T23124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1280.024747][T23124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1280.055342][T23124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1280.076630][T23124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1280.110537][T23124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1280.139495][T23124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1280.174127][T23124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1280.219409][T23124] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.237560][T23124] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.257079][T23124] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.280035][T23124] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.560419][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1280.585574][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1280.679018][T17246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1280.713963][T17246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1283.235671][T23329] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7134'. [ 1283.286178][T23329] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7134'. [ 1283.339043][ T5803] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1283.349215][ T5803] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1283.361313][ T5803] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1283.373213][ T5803] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1283.381192][ T5803] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1283.389758][ T5803] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1284.183177][T23330] chnl_net:caif_netlink_parms(): no params data found [ 1284.557477][T23330] bridge0: port 1(bridge_slave_0) entered blocking state [ 1284.565486][T23330] bridge0: port 1(bridge_slave_0) entered disabled state [ 1284.574061][T23330] bridge_slave_0: entered allmulticast mode [ 1284.582502][T23330] bridge_slave_0: entered promiscuous mode [ 1284.602093][T23330] bridge0: port 2(bridge_slave_1) entered blocking state [ 1284.649344][T23330] bridge0: port 2(bridge_slave_1) entered disabled state [ 1284.685383][T23330] bridge_slave_1: entered allmulticast mode [ 1284.704023][T23330] bridge_slave_1: entered promiscuous mode [ 1284.907106][T23330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1284.951947][T23330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1285.145632][T11467] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1285.223655][T23330] team0: Port device team_slave_0 added [ 1285.270210][T23330] team0: Port device team_slave_1 added [ 1285.360668][T11467] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1285.438670][T19336] Bluetooth: hci2: command tx timeout [ 1285.571322][T11467] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1285.620778][T23330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1285.627798][T23330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1285.697156][T23330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1285.781061][T11467] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1285.823379][T23330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1285.869013][T23330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1285.958119][T23330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1286.129666][T23330] hsr_slave_0: entered promiscuous mode [ 1286.153119][T23330] hsr_slave_1: entered promiscuous mode [ 1286.172985][T23330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1286.216448][T23330] Cannot create hsr debugfs directory [ 1287.518985][T19336] Bluetooth: hci2: command tx timeout [ 1287.934994][T23330] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1288.065515][T23330] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1288.091728][T23330] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1288.232479][T23330] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1288.936432][T11467] hsr_slave_0: left promiscuous mode [ 1288.957900][T11467] hsr_slave_1: left promiscuous mode [ 1288.989423][T11467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1288.996914][T11467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1289.040162][T11467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1289.068005][T11467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1289.076870][T11467] bridge_slave_1: left allmulticast mode [ 1289.091155][T11467] bridge_slave_1: left promiscuous mode [ 1289.107425][T11467] bridge0: port 2(bridge_slave_1) entered disabled state [ 1289.129639][T11467] bridge_slave_0: left allmulticast mode [ 1289.135701][T11467] bridge_slave_0: left promiscuous mode [ 1289.154369][T11467] bridge0: port 1(bridge_slave_0) entered disabled state [ 1289.221480][T11467] veth1_macvtap: left promiscuous mode [ 1289.227186][T11467] veth0_macvtap: left promiscuous mode [ 1289.247548][T11467] veth1_vlan: left promiscuous mode [ 1289.253347][T11467] veth0_vlan: left promiscuous mode [ 1289.598446][T19336] Bluetooth: hci2: command tx timeout [ 1290.471274][T11467] team0 (unregistering): Port device team_slave_1 removed [ 1290.609155][T11467] team0 (unregistering): Port device team_slave_0 removed [ 1290.712822][T11467] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1290.829447][T11467] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1291.681122][T19336] Bluetooth: hci2: command tx timeout [ 1292.040736][T11467] bond0 (unregistering): Released all slaves [ 1292.318524][T23330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1292.337351][T23436] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7151'. [ 1292.370844][T23436] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7151'. [ 1292.469983][T23330] 8021q: adding VLAN 0 to HW filter on device team0 [ 1292.511136][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1292.518354][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1292.711639][ T2891] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.718923][ T2891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1292.895518][T23330] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1292.928916][T23330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1293.573933][T23330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1293.737546][T23330] veth0_vlan: entered promiscuous mode [ 1293.797835][T23330] veth1_vlan: entered promiscuous mode [ 1293.931219][T23330] veth0_macvtap: entered promiscuous mode [ 1293.963009][T23330] veth1_macvtap: entered promiscuous mode [ 1294.032380][T23330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1294.068098][T23330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.078035][T23330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1294.108196][T23330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.128168][T23330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1294.148617][T23330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.180162][T23330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1294.206617][T23330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1294.239727][T23330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.268552][T23330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1294.288429][T23330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.308448][T23330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1294.328357][T23330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.351700][T23330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1294.406173][T23330] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.428109][T23330] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.449199][T23330] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.473671][T23330] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.649931][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1294.686915][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1294.799101][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1294.823602][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1296.487725][T23518] program syz.1.7182 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1297.853758][ T5803] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1297.864305][ T5803] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1297.873768][ T5803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1297.882461][ T5803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1297.891295][ T5803] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1297.898947][ T5803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1298.924264][T23535] chnl_net:caif_netlink_parms(): no params data found [ 1299.083314][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.242806][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.553732][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.661084][T23535] bridge0: port 1(bridge_slave_0) entered blocking state [ 1299.678211][T23535] bridge0: port 1(bridge_slave_0) entered disabled state [ 1299.686032][T23535] bridge_slave_0: entered allmulticast mode [ 1299.700275][T23535] bridge_slave_0: entered promiscuous mode [ 1299.783024][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.865589][T23535] bridge0: port 2(bridge_slave_1) entered blocking state [ 1299.882692][T23535] bridge0: port 2(bridge_slave_1) entered disabled state [ 1299.900555][T23535] bridge_slave_1: entered allmulticast mode [ 1299.916080][T23535] bridge_slave_1: entered promiscuous mode [ 1299.998946][T19336] Bluetooth: hci3: command tx timeout [ 1300.155157][T23535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1300.266560][T23535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1300.487118][T23535] team0: Port device team_slave_0 added [ 1300.644144][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.650671][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.721362][T23535] team0: Port device team_slave_1 added [ 1300.965186][T23535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1300.986807][T23535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1301.048221][T23535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1301.077946][T23535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1301.100681][T23535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1301.144263][T23535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1301.493604][T23535] hsr_slave_0: entered promiscuous mode [ 1301.517098][T23535] hsr_slave_1: entered promiscuous mode [ 1301.543861][T23535] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1301.562141][T23535] Cannot create hsr debugfs directory [ 1301.783943][T23612] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7212'. [ 1302.084383][T19336] Bluetooth: hci3: command tx timeout [ 1303.038438][ T9] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1303.190512][ T12] hsr_slave_0: left promiscuous mode [ 1303.211589][ T12] hsr_slave_1: left promiscuous mode [ 1303.259446][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1303.267549][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1303.317369][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1303.348613][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1303.371134][ T12] bridge_slave_1: left allmulticast mode [ 1303.376858][ T12] bridge_slave_1: left promiscuous mode [ 1303.389300][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1303.460766][ T12] bridge_slave_0: left allmulticast mode [ 1303.474477][ T12] bridge_slave_0: left promiscuous mode [ 1303.481645][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1303.532177][ T12] veth1_macvtap: left promiscuous mode [ 1303.548407][ T12] veth0_macvtap: left promiscuous mode [ 1303.555359][ T12] veth1_vlan: left promiscuous mode [ 1303.568348][ T12] veth0_vlan: left promiscuous mode [ 1304.158386][T19336] Bluetooth: hci3: command tx timeout [ 1304.866149][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1304.941659][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1305.006731][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1305.079500][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1305.828207][ T12] bond0 (unregistering): Released all slaves [ 1305.968315][T23682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7238'. [ 1306.081805][T23682] bond0: (slave bond_slave_1): Releasing backup interface [ 1306.238599][T19336] Bluetooth: hci3: command tx timeout [ 1306.661804][T23535] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1306.731231][T23535] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1306.781909][T23535] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1306.816504][T23535] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1307.146591][T23535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1307.222475][T23535] 8021q: adding VLAN 0 to HW filter on device team0 [ 1307.291111][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1307.298396][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1307.345073][T17247] bridge0: port 2(bridge_slave_1) entered blocking state [ 1307.352387][T17247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1308.313145][T23535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1308.475130][T23535] veth0_vlan: entered promiscuous mode [ 1308.527187][T23535] veth1_vlan: entered promiscuous mode [ 1308.615436][T23535] veth0_macvtap: entered promiscuous mode [ 1308.627546][T23535] veth1_macvtap: entered promiscuous mode [ 1308.698354][T23535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1308.741639][T23535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.762764][T23535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1308.776854][T23535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.797234][T23535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1308.827841][T23535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.847115][T23535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1308.876476][T23535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1308.917005][T23535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.944603][T23535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1308.972544][T23535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.999169][T23535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1309.032797][T23535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.070986][T23535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1309.115344][T23535] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.131760][T23535] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.143690][T23535] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.153002][T23535] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.408355][ T2891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1309.449338][ T2891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1309.548597][T11467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1309.556495][T11467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1310.689231][T23382] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1310.890330][T23835] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7283'. [ 1310.920797][T23382] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1310.921353][T23835] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7283'. [ 1310.955270][T23382] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1310.975998][T23382] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1310.996154][T23382] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.019979][T23382] usb 1-1: config 0 descriptor?? [ 1311.500661][T23382] usbhid 1-1:0.0: can't add hid device: -71 [ 1311.514758][T23382] usbhid: probe of 1-1:0.0 failed with error -71 [ 1311.547937][T23382] usb 1-1: USB disconnect, device number 52 [ 1312.489833][T23850] fuse: Bad value for 'rootmode' [ 1312.534350][T23382] IPVS: starting estimator thread 0... [ 1312.648314][T23851] IPVS: using max 26 ests per chain, 62400 per kthread [ 1316.553107][T23885] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7303'. [ 1318.154549][T23913] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7317'. [ 1318.288213][ T5863] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1319.318169][T23382] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1319.524027][T23382] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1319.543627][T23382] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.563914][T23382] usb 2-1: Product: syz [ 1319.578197][T23382] usb 2-1: Manufacturer: syz [ 1319.582872][T23382] usb 2-1: SerialNumber: syz [ 1319.839209][T23382] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1319.885476][T23382] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1319.909611][T23382] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 1319.928245][T23382] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1319.948280][T23382] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1319.970292][T23382] lan78xx: probe of 2-1:1.0 failed with error -32 [ 1322.102397][T23382] usb 2-1: USB disconnect, device number 79 [ 1322.569747][T23986] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7346'. [ 1323.388213][ T5852] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1323.583897][ T5852] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1323.602148][ T5852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.619132][ T5852] usb 3-1: Product: syz [ 1323.633812][ T5852] usb 3-1: Manufacturer: syz [ 1323.650125][ T5852] usb 3-1: SerialNumber: syz [ 1323.891803][ T5852] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1323.918708][ T5852] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1323.938558][ T5852] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 1323.953211][ T5852] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1323.963605][ T5852] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1323.975480][ T5852] lan78xx: probe of 3-1:1.0 failed with error -32 [ 1324.485430][T24017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7360'. [ 1324.598289][T24017] bond0: (slave bond_slave_1): Releasing backup interface [ 1325.064829][T24028] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7365'. [ 1326.179542][ T5852] usb 3-1: USB disconnect, device number 55 [ 1326.639402][T24085] netlink: 2088 bytes leftover after parsing attributes in process `syz.1.7389'. [ 1326.978200][ T5863] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1327.201289][ T5863] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1327.221947][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.242301][ T5863] usb 1-1: Product: syz [ 1327.246541][ T5863] usb 1-1: Manufacturer: syz [ 1327.266263][ T5863] usb 1-1: SerialNumber: syz [ 1327.509617][ T5863] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1327.548567][ T5863] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1327.579567][ T5863] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 1327.607619][ T5863] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1327.632692][ T5863] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1327.660817][ T5863] lan78xx: probe of 1-1:1.0 failed with error -32 [ 1327.788180][T23382] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1327.948589][ T27] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1327.988235][T23382] usb 4-1: Using ep0 maxpacket: 32 [ 1327.999740][T23382] usb 4-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=cb.d7 [ 1328.009071][T23382] usb 4-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 1328.017162][T23382] usb 4-1: Product: syz [ 1328.021419][T23382] usb 4-1: Manufacturer: syz [ 1328.026135][T23382] usb 4-1: SerialNumber: syz [ 1328.033623][T23382] usb 4-1: config 0 descriptor?? [ 1328.042547][T23382] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 1328.053644][T23382] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 1328.151643][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1328.162909][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1328.173197][ T27] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1328.182447][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.192768][ T27] usb 3-1: config 0 descriptor?? [ 1328.207807][ T5863] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1328.248877][ T5881] usb 4-1: USB disconnect, device number 65 [ 1328.389378][ T5863] usb 2-1: Using ep0 maxpacket: 16 [ 1328.397008][ T5863] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1328.408410][ T5863] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1328.425894][ T5863] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1328.434158][ T5863] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1328.448755][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.465032][ T5863] usb 2-1: config 0 descriptor?? [ 1328.561672][ T27] usbhid 3-1:0.0: can't add hid device: -71 [ 1328.569096][ T27] usbhid: probe of 3-1:0.0 failed with error -71 [ 1328.578823][ T27] usb 3-1: USB disconnect, device number 56 [ 1328.901096][ T5863] usbhid 2-1:0.0: can't add hid device: -71 [ 1328.908623][ T5863] usbhid: probe of 2-1:0.0 failed with error -71 [ 1328.918524][ T5863] usb 2-1: USB disconnect, device number 80 [ 1329.750719][ T27] usb 1-1: USB disconnect, device number 53 [ 1330.581916][ T5881] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1330.648739][ T27] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1330.788720][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1330.825294][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1330.846058][ T5881] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1330.869015][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.879948][ T27] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1330.913867][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.914235][ T5881] usb 2-1: config 0 descriptor?? [ 1330.938239][ T27] usb 3-1: Product: syz [ 1330.942486][ T27] usb 3-1: Manufacturer: syz [ 1330.955275][ T27] usb 3-1: SerialNumber: syz [ 1331.206897][ T27] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1331.239180][ T27] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1331.264324][ T27] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 1331.285608][ T27] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1331.308890][ T27] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1331.332390][ T27] lan78xx: probe of 3-1:1.0 failed with error -32 [ 1331.388682][ T5881] usbhid 2-1:0.0: can't add hid device: -71 [ 1331.398171][ T5881] usbhid: probe of 2-1:0.0 failed with error -71 [ 1331.415237][ T5881] usb 2-1: USB disconnect, device number 81 [ 1332.520981][T24229] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7452'. [ 1333.453508][ T27] usb 3-1: USB disconnect, device number 57 [ 1337.460348][T24273] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1337.472166][T24273] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1337.498662][T24273] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1337.526221][T24273] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1337.548367][T24273] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1337.558446][T24273] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1338.473719][T24270] chnl_net:caif_netlink_parms(): no params data found [ 1338.663823][T24270] bridge0: port 1(bridge_slave_0) entered blocking state [ 1338.672328][T24270] bridge0: port 1(bridge_slave_0) entered disabled state [ 1338.679957][T24270] bridge_slave_0: entered allmulticast mode [ 1338.687634][T24270] bridge_slave_0: entered promiscuous mode [ 1338.701517][T24270] bridge0: port 2(bridge_slave_1) entered blocking state [ 1338.709044][T24270] bridge0: port 2(bridge_slave_1) entered disabled state [ 1338.716311][T24270] bridge_slave_1: entered allmulticast mode [ 1338.725323][T24270] bridge_slave_1: entered promiscuous mode [ 1338.788823][ T5852] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1338.816500][T24270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1338.841888][T24270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1338.928705][T24270] team0: Port device team_slave_0 added [ 1338.946636][T24270] team0: Port device team_slave_1 added [ 1338.992979][ T5852] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1339.012819][ T5852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.041777][ T5852] usb 1-1: Product: syz [ 1339.046185][ T5852] usb 1-1: Manufacturer: syz [ 1339.061537][ T5852] usb 1-1: SerialNumber: syz [ 1339.069122][T24270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1339.082954][T24270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1339.126455][T24270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1339.159624][T24270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1339.166672][T24270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1339.201049][T24270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1339.291888][ T5852] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1339.308684][ T5852] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1339.401574][T24270] hsr_slave_0: entered promiscuous mode [ 1339.422052][T24270] hsr_slave_1: entered promiscuous mode [ 1339.436608][T24270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1339.446577][T24270] Cannot create hsr debugfs directory [ 1339.681153][T19336] Bluetooth: hci4: command tx timeout [ 1339.735183][ T5852] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 1339.758299][ T5852] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1339.759731][ T2891] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.778627][ T5852] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1339.790675][ T5852] lan78xx: probe of 1-1:1.0 failed with error -32 [ 1339.992126][ T2891] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.102875][ T2891] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.222882][ T2891] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.565332][ T5863] usb 1-1: USB disconnect, device number 54 [ 1341.755083][T24270] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1341.758359][T19336] Bluetooth: hci4: command tx timeout [ 1341.812054][T24270] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1341.910588][T24329] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7483'. [ 1341.926781][T24270] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1341.971417][T24270] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1342.408231][ T5852] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1342.640160][ T2891] hsr_slave_0: left promiscuous mode [ 1342.668975][ T2891] hsr_slave_1: left promiscuous mode [ 1342.724043][ T2891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1342.738224][ T2891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1342.764934][ T2891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1342.778230][ T2891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1342.796852][ T2891] bridge_slave_1: left allmulticast mode [ 1342.805879][ T2891] bridge_slave_1: left promiscuous mode [ 1342.818623][ T2891] bridge0: port 2(bridge_slave_1) entered disabled state [ 1342.829608][ T2891] bridge_slave_0: left allmulticast mode [ 1342.835316][ T2891] bridge_slave_0: left promiscuous mode [ 1342.858306][ T2891] bridge0: port 1(bridge_slave_0) entered disabled state [ 1342.910215][ T2891] veth1_macvtap: left promiscuous mode [ 1342.915848][ T2891] veth0_macvtap: left promiscuous mode [ 1342.929878][ T2891] veth1_vlan: left promiscuous mode [ 1342.945565][ T2891] veth0_vlan: left promiscuous mode [ 1343.838193][T19336] Bluetooth: hci4: command tx timeout [ 1344.342009][ T2891] team0 (unregistering): Port device team_slave_1 removed [ 1344.477086][ T2891] team0 (unregistering): Port device team_slave_0 removed [ 1344.591122][ T2891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1345.691270][ T2891] bond0 (unregistering): Released all slaves [ 1345.824113][T24270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1345.916463][T24270] 8021q: adding VLAN 0 to HW filter on device team0 [ 1345.924049][T19336] Bluetooth: hci4: command tx timeout [ 1345.960997][T23817] bridge0: port 1(bridge_slave_0) entered blocking state [ 1345.968229][T23817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1345.998942][T11467] bridge0: port 2(bridge_slave_1) entered blocking state [ 1346.006197][T11467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1346.765995][T24270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1346.884748][T24270] veth0_vlan: entered promiscuous mode [ 1346.898203][T23382] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1346.927203][T24270] veth1_vlan: entered promiscuous mode [ 1346.976528][T24270] veth0_macvtap: entered promiscuous mode [ 1346.994003][T24270] veth1_macvtap: entered promiscuous mode [ 1347.020973][T24270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1347.032333][T24270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1347.043475][T24270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1347.056504][T24270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1347.067499][T24270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1347.083523][T24270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1347.105988][T23382] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1347.118403][T23382] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.127535][T24270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1347.138187][T23382] usb 3-1: Product: syz [ 1347.142408][T23382] usb 3-1: Manufacturer: syz [ 1347.152532][T23382] usb 3-1: SerialNumber: syz [ 1347.167164][T24270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1347.207027][T24270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1347.223912][T24270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1347.235014][T24270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1347.248149][T24270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1347.263519][T24270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1347.277264][T24270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1347.297201][T24387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7494'. [ 1347.312054][T24387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1347.320217][T24387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1347.329223][T24387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1347.341948][T24387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1347.393926][T23382] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1347.408816][T23382] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1347.469648][T24270] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.487906][T24270] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.496884][T24270] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.510301][T24270] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.756395][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1347.780710][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1347.831216][T23382] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 1347.866112][T23382] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1347.874958][T23817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1347.885970][T23817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1347.897000][T23382] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1347.927999][T23382] lan78xx: probe of 3-1:1.0 failed with error -32 [ 1349.222741][T24413] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7505'. [ 1349.332194][T24413] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7505'. [ 1349.674290][T11336] usb 3-1: USB disconnect, device number 58 [ 1350.483077][T24441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7514'. [ 1350.502486][T24441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1350.518557][T24441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1350.535867][T24441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1350.547704][T24441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1350.798198][ T9] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1351.046095][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1351.055316][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.078907][ T9] usb 3-1: Product: syz [ 1351.083159][ T9] usb 3-1: Manufacturer: syz [ 1351.098549][ T9] usb 3-1: SerialNumber: syz [ 1351.338178][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1351.362007][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1351.793498][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 1351.818223][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1351.850586][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1351.873036][ T9] lan78xx: probe of 3-1:1.0 failed with error -32 [ 1352.198159][T11336] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1353.600279][ T9] usb 3-1: USB disconnect, device number 59 [ 1354.478445][ T9] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1354.494213][T24530] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7554'. [ 1354.673795][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1354.693514][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1354.708094][ T9] usb 3-1: Product: syz [ 1354.712339][ T9] usb 3-1: Manufacturer: syz [ 1354.727862][ T9] usb 3-1: SerialNumber: syz [ 1354.963132][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1354.999735][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1355.147731][T24556] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7566'. [ 1355.423231][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 1355.451331][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1355.472593][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1355.501035][ T9] lan78xx: probe of 3-1:1.0 failed with error -32 [ 1355.644476][T24572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7574'. [ 1355.740871][T24572] bond0: (slave bond_slave_1): Releasing backup interface [ 1355.912829][T24581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7577'. [ 1355.938402][ T9] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1355.976399][T24583] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7578'. [ 1356.151683][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1356.178175][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1356.189458][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1356.210300][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.239569][ T9] usb 2-1: config 0 descriptor?? [ 1356.649391][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 1356.655473][ T9] usbhid: probe of 2-1:0.0 failed with error -71 [ 1356.688745][ T9] usb 2-1: USB disconnect, device number 82 [ 1356.827537][T24606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7588'. [ 1356.910230][T24609] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7589'. [ 1357.270686][T11336] usb 3-1: USB disconnect, device number 60 [ 1357.587596][T24628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7598'. [ 1357.597028][T24628] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1357.608392][T24628] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1357.616709][T24628] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1357.635016][T24628] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1357.722685][ T9] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1357.948175][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1357.961188][ T9] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1357.979277][ T9] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1358.002686][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1358.020549][ T9] usb 1-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1358.030642][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.052108][ T9] usb 1-1: config 0 descriptor?? [ 1358.279586][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 1358.295911][ T9] usbhid: probe of 1-1:0.0 failed with error -71 [ 1358.302902][T23528] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1358.318499][ T9] usb 1-1: USB disconnect, device number 57 [ 1358.543480][T23528] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1358.563479][T23528] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.581863][T23528] usb 2-1: Product: syz [ 1358.588355][T23528] usb 2-1: Manufacturer: syz [ 1358.598100][T23528] usb 2-1: SerialNumber: syz [ 1358.843792][T23528] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1358.867340][T23528] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1359.322094][T23528] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 1359.349617][T23528] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1359.380320][T23528] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1359.407503][T23528] lan78xx: probe of 2-1:1.0 failed with error -32 [ 1361.087693][ T5852] usb 2-1: USB disconnect, device number 83 [ 1362.084650][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.091685][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.158455][ T5852] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1362.346083][ T5852] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1362.366047][ T5852] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.374963][ T5852] usb 2-1: Product: syz [ 1362.379724][ T5852] usb 2-1: Manufacturer: syz [ 1362.384386][ T5852] usb 2-1: SerialNumber: syz [ 1362.618744][ T5852] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1362.639891][ T5852] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1363.041884][T24719] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7641'. [ 1363.078519][ T5852] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 1363.104161][ T5852] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1363.125510][ T5852] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1363.156385][ T5852] lan78xx: probe of 2-1:1.0 failed with error -32 [ 1364.941397][T24737] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7647'. [ 1364.950905][ T5881] usb 2-1: USB disconnect, device number 84 [ 1365.073622][T24737] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7647'. [ 1365.969592][T23382] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1366.165916][T23382] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1366.185754][T23382] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.205659][T23382] usb 1-1: Product: syz [ 1366.220280][T23382] usb 1-1: Manufacturer: syz [ 1366.225068][T23382] usb 1-1: SerialNumber: syz [ 1366.460427][T23382] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1366.489726][T23382] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1367.131967][T23382] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -32 [ 1367.147312][T23382] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1367.177080][T23382] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1367.208299][T23382] lan78xx: probe of 1-1:1.0 failed with error -32 [ 1367.814099][T24803] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7677'. [ 1368.748404][ T9] usb 1-1: USB disconnect, device number 58 [ 1371.248355][T11336] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1371.453009][T11336] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1371.474868][T11336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.493470][T11336] usb 3-1: Product: syz [ 1371.507951][T11336] usb 3-1: Manufacturer: syz [ 1371.514224][T11336] usb 3-1: SerialNumber: syz [ 1371.736726][T11336] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1371.769744][T11336] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1372.401255][T11336] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -32 [ 1372.418163][T11336] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1372.439547][T11336] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1372.462889][T11336] lan78xx: probe of 3-1:1.0 failed with error -32 [ 1374.039549][ T5881] usb 3-1: USB disconnect, device number 61 [ 1376.298781][T11336] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1376.492640][T11336] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1376.508180][T11336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.516324][T11336] usb 4-1: Product: syz [ 1376.538341][T11336] usb 4-1: Manufacturer: syz [ 1376.543104][T11336] usb 4-1: SerialNumber: syz [ 1376.789298][T11336] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1376.830623][T11336] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1377.452537][T11336] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -32 [ 1377.478343][T11336] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1377.499834][T11336] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1377.514556][T11336] lan78xx: probe of 4-1:1.0 failed with error -32 [ 1377.618359][T23382] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1377.808242][T23382] usb 2-1: Using ep0 maxpacket: 16 [ 1377.821004][T23382] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1377.839307][T23382] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1377.872777][T23382] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1377.888130][T23382] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1377.907795][T23382] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1377.930801][T23382] usb 2-1: config 0 descriptor?? [ 1378.358312][T23382] usbhid 2-1:0.0: can't add hid device: -71 [ 1378.374663][T23382] usbhid: probe of 2-1:0.0 failed with error -71 [ 1378.393290][T23382] usb 2-1: USB disconnect, device number 85 [ 1379.081653][ T5881] usb 4-1: USB disconnect, device number 66 [ 1380.195555][T24936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7735'. [ 1380.888479][T23382] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1380.965825][T24961] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7742'. [ 1381.093396][T23382] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1381.108811][T23382] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.125498][T23382] usb 4-1: Product: syz [ 1381.138168][T23382] usb 4-1: Manufacturer: syz [ 1381.144757][T23382] usb 4-1: SerialNumber: syz [ 1381.371917][T23382] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1381.402319][T23382] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1382.034049][T23382] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -32 [ 1382.058661][T23382] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1382.078754][T23382] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1382.161023][T23382] lan78xx: probe of 4-1:1.0 failed with error -32 [ 1382.248239][T24984] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7753'. [ 1383.324199][T25022] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7769'. [ 1383.334822][T25022] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7769'. [ 1383.625720][T23382] usb 4-1: USB disconnect, device number 67 [ 1384.144320][T25047] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7781'. [ 1384.578360][ T5852] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1384.782975][ T5852] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1384.802435][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.818151][ T5852] usb 4-1: Product: syz [ 1384.828122][ T5852] usb 4-1: Manufacturer: syz [ 1384.838106][ T5852] usb 4-1: SerialNumber: syz [ 1384.888124][ T9] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1385.075499][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1385.090322][ T5852] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1385.100271][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1385.118651][ T5852] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1385.128112][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1385.148100][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.188874][ T9] usb 3-1: config 0 descriptor?? [ 1385.643797][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 1385.659354][ T9] usbhid: probe of 3-1:0.0 failed with error -71 [ 1385.678432][ T9] usb 3-1: USB disconnect, device number 62 [ 1385.744518][ T5852] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -32 [ 1385.776721][ T5852] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1385.800243][ T5852] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1385.831292][ T5852] lan78xx: probe of 4-1:1.0 failed with error -32 [ 1386.718215][ T5852] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1386.909347][ T5852] usb 2-1: Using ep0 maxpacket: 16 [ 1386.923314][ T5852] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1386.949742][ T5852] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1386.976035][ T5852] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1386.983578][ T5852] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1386.994297][ T5852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1387.012178][ T5852] usb 2-1: config 0 descriptor?? [ 1387.223615][ T5852] usbhid 2-1:0.0: can't add hid device: -71 [ 1387.232987][ T5852] usbhid: probe of 2-1:0.0 failed with error -71 [ 1387.258468][ T5852] usb 2-1: USB disconnect, device number 86 [ 1387.334410][ T5863] usb 4-1: USB disconnect, device number 68 [ 1387.617255][T25103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7803'. [ 1388.328848][ T9] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1388.532886][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1388.542484][ T5863] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1388.550786][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.570131][ T9] usb 2-1: Product: syz [ 1388.574379][ T9] usb 2-1: Manufacturer: syz [ 1388.588098][ T9] usb 2-1: SerialNumber: syz [ 1388.759706][ T5863] usb 3-1: Using ep0 maxpacket: 16 [ 1388.769065][ T5863] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1388.798339][ T5863] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1388.835349][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1388.848426][ T5863] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1388.855102][ T5863] usb 3-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1388.865287][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1388.874513][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1388.897658][ T5863] usb 3-1: config 0 descriptor?? [ 1389.332921][ T5863] usbhid 3-1:0.0: can't add hid device: -71 [ 1389.343118][ T5863] usbhid: probe of 3-1:0.0 failed with error -71 [ 1389.376922][ T5863] usb 3-1: USB disconnect, device number 63 [ 1389.506304][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -32 [ 1389.531476][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1389.549868][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1389.569598][ T9] lan78xx: probe of 2-1:1.0 failed with error -32 [ 1390.041911][T25154] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7826'. [ 1390.406072][T25160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7828'. [ 1391.106575][ T5852] usb 2-1: USB disconnect, device number 87 [ 1391.378191][ T9] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1391.578259][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1391.593747][ T9] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1391.616153][ T9] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1391.650044][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1391.656760][ T9] usb 3-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1391.687391][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.717496][ T9] usb 3-1: config 0 descriptor?? [ 1392.140083][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 1392.161592][ T9] usbhid: probe of 3-1:0.0 failed with error -71 [ 1392.189609][ T9] usb 3-1: USB disconnect, device number 64 [ 1392.738157][ T9] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1392.842147][T25202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7848'. [ 1392.851523][T25202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1392.860585][T25202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1392.870450][T25202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1392.877917][T25202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1392.934899][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1392.949818][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.968223][ T9] usb 1-1: Product: syz [ 1392.975653][ T9] usb 1-1: Manufacturer: syz [ 1392.982107][ T9] usb 1-1: SerialNumber: syz [ 1393.228891][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1393.262590][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1393.914551][T25216] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7855'. [ 1394.718099][T25231] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7863'. [ 1394.878531][T24273] Bluetooth: hci0: command 0x0406 tx timeout [ 1394.924825][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -71 [ 1394.940073][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1394.950517][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1394.964657][ T9] lan78xx: probe of 1-1:1.0 failed with error -71 [ 1394.991092][ T9] usb 1-1: USB disconnect, device number 59 [ 1395.999439][T25265] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7880'. [ 1396.505848][T25291] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7892'. [ 1396.648332][ T5852] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1396.838114][ T5852] usb 3-1: Using ep0 maxpacket: 16 [ 1396.845666][ T5852] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1396.870595][ T5852] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1396.894236][ T5852] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1396.908716][ T5852] usb 3-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1396.928693][ T5852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.940645][ T5852] usb 3-1: config 0 descriptor?? [ 1397.124663][T25318] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7903'. [ 1397.153239][ T5852] usbhid 3-1:0.0: can't add hid device: -71 [ 1397.168399][ T5852] usbhid: probe of 3-1:0.0 failed with error -71 [ 1397.190004][ T5852] usb 3-1: USB disconnect, device number 65 [ 1397.214482][T25320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7904'. [ 1398.242009][T25348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7917'. [ 1398.370123][T25348] bond0: (slave bond_slave_1): Releasing backup interface [ 1398.500330][ T9] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1398.609142][T25356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7920'. [ 1398.692641][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1398.715112][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1398.738229][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1398.759779][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1398.803745][ T9] usb 2-1: config 0 descriptor?? [ 1399.269082][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 1399.275360][ T9] usbhid: probe of 2-1:0.0 failed with error -71 [ 1399.286268][ T9] usb 2-1: USB disconnect, device number 88 [ 1399.348481][T23528] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1399.538178][T23528] usb 3-1: Using ep0 maxpacket: 32 [ 1399.555131][T23528] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1399.567470][T23528] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1399.577465][T23528] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1399.587120][T23528] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1399.605964][T23528] usb 3-1: config 0 descriptor?? [ 1400.039364][T23528] ft260 0003:0403:6030.0001: unknown main item tag 0x7 [ 1400.238688][T23528] ft260 0003:0403:6030.0001: chip code: 6424 8183 [ 1400.610133][T25400] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7939'. [ 1400.684217][T23528] usb 3-1: USB disconnect, device number 66 [ 1401.388455][T25420] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7951'. [ 1401.555607][T25425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7953'. [ 1401.578291][T25425] netlink: 'syz.2.7953': attribute type 14 has an invalid length. [ 1401.586189][T25425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7953'. [ 1401.613466][T25425] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1401.622869][T25425] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1401.631897][T25425] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1401.640746][T25425] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1401.710550][T25425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7953'. [ 1401.728382][T25425] netlink: 'syz.2.7953': attribute type 14 has an invalid length. [ 1401.736845][T25425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7953'. [ 1402.370440][T25443] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7961'. [ 1402.476354][T25445] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7962'. [ 1404.671315][T25483] __nla_validate_parse: 1 callbacks suppressed [ 1404.671336][T25483] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7978'. [ 1405.766838][T25503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7983'. [ 1409.866068][T25567] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8011'. [ 1410.238285][T19336] Bluetooth: hci2: command 0x0406 tx timeout [ 1410.328346][ T9] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1410.528436][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1410.559415][ T9] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1410.585729][ T9] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1410.614829][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1410.622421][ T9] usb 3-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1410.635441][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.646632][ T9] usb 3-1: config 0 descriptor?? [ 1410.869392][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 1410.875482][ T9] usbhid: probe of 3-1:0.0 failed with error -71 [ 1410.918504][ T9] usb 3-1: USB disconnect, device number 67 [ 1412.215374][T25611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8025'. [ 1413.300314][T25638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8038'. [ 1414.266941][T25658] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8044'. [ 1415.082703][T25671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8048'. [ 1416.285392][T25683] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8054'. [ 1418.945202][T25725] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8072'. [ 1420.478105][T19336] Bluetooth: hci3: command 0x0406 tx timeout [ 1421.828285][T23528] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1422.022185][T23528] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1422.048508][T23528] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1422.068087][T23528] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1422.077343][T23528] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1422.104667][T23528] usb 3-1: config 0 descriptor?? [ 1422.609600][T23528] usbhid 3-1:0.0: can't add hid device: -71 [ 1422.615785][T23528] usbhid: probe of 3-1:0.0 failed with error -71 [ 1422.643654][T23528] usb 3-1: USB disconnect, device number 68 [ 1423.528643][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.535125][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.848320][T11336] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1424.058076][T11336] usb 3-1: Using ep0 maxpacket: 32 [ 1424.069923][T11336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1424.098079][T11336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1424.118127][T11336] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1424.127243][T11336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.160879][T11336] usb 3-1: config 0 descriptor?? [ 1424.597721][T11336] ft260 0003:0403:6030.0002: unknown main item tag 0x7 [ 1424.792907][T11336] ft260 0003:0403:6030.0002: chip code: aa7b 7457 [ 1424.965482][T25795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8106'. [ 1424.975703][T25795] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8106'. [ 1424.994464][T11336] ft260 0003:0403:6030.0002: failed to retrieve system status [ 1425.000278][T25795] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1425.004076][T11336] ft260: probe of 0003:0403:6030.0002 failed with error -71 [ 1425.010946][T25795] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1425.028194][T25795] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1425.037190][T25795] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1425.063425][T11336] usb 3-1: USB disconnect, device number 69 [ 1425.109352][T25795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8106'. [ 1425.129177][T25795] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8106'. [ 1426.650884][T25825] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8122'. [ 1428.038140][T11336] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1428.201283][T25877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8145'. [ 1428.210566][T25877] netlink: 'syz.1.8145': attribute type 14 has an invalid length. [ 1428.218645][T11336] usb 1-1: Using ep0 maxpacket: 16 [ 1428.224204][T25877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8145'. [ 1428.235983][T11336] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1428.247784][T25877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8145'. [ 1428.256944][T11336] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1428.270243][T25877] netlink: 'syz.1.8145': attribute type 14 has an invalid length. [ 1428.278240][T25877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8145'. [ 1428.287335][T11336] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1428.294111][T11336] usb 1-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1428.305587][T11336] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1428.339087][T11336] usb 1-1: config 0 descriptor?? [ 1428.551657][T11336] usbhid 1-1:0.0: can't add hid device: -71 [ 1428.559690][T11336] usbhid: probe of 1-1:0.0 failed with error -71 [ 1428.576082][T11336] usb 1-1: USB disconnect, device number 60 [ 1429.388112][ T5863] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1429.599172][ T5863] usb 4-1: Using ep0 maxpacket: 32 [ 1429.606627][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1429.634070][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1429.659667][ T5863] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1429.669914][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.687571][ T5863] usb 4-1: config 0 descriptor?? [ 1430.132990][ T5863] usbhid 4-1:0.0: can't add hid device: -71 [ 1430.148232][ T5863] usbhid: probe of 4-1:0.0 failed with error -71 [ 1430.165500][ T5863] usb 4-1: USB disconnect, device number 69 [ 1431.460224][T25933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8171'. [ 1431.900879][T25948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8179'. [ 1431.919321][T25948] netlink: 'syz.1.8179': attribute type 14 has an invalid length. [ 1431.934009][T25948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8179'. [ 1431.945604][T25948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8179'. [ 1431.954761][T25948] netlink: 'syz.1.8179': attribute type 14 has an invalid length. [ 1431.963237][T25948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8179'. [ 1432.149766][T25956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8183'. [ 1434.765268][T26000] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8198'. [ 1435.001269][T26004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8204'. [ 1435.589216][T26022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8207'. [ 1435.891162][T26030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8213'. [ 1435.933471][T26030] netlink: 'syz.0.8213': attribute type 14 has an invalid length. [ 1435.954597][T26030] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1435.963759][T26030] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1435.973012][T26030] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1435.983026][T26030] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1435.995108][T26030] netlink: 'syz.0.8213': attribute type 14 has an invalid length. [ 1436.138099][T23382] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1436.318676][T23382] usb 4-1: Using ep0 maxpacket: 32 [ 1436.330240][T23382] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1436.357217][T23382] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1436.377646][T23382] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1436.398603][T23382] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1436.419603][T23382] usb 4-1: config 0 descriptor?? [ 1436.469980][T26050] __nla_validate_parse: 3 callbacks suppressed [ 1436.469999][T26050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8221'. [ 1436.599668][T26050] bond0: (slave bond_slave_1): Releasing backup interface [ 1436.839325][T23382] usbhid 4-1:0.0: can't add hid device: -71 [ 1436.845408][T23382] usbhid: probe of 4-1:0.0 failed with error -71 [ 1436.875901][T23382] usb 4-1: USB disconnect, device number 70 [ 1437.982408][T26074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8233'. [ 1438.008415][T26074] netlink: 'syz.3.8233': attribute type 14 has an invalid length. [ 1438.016384][T26074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8233'. [ 1438.069399][T26074] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1438.078584][T26074] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1438.087353][T26074] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1438.096228][T26074] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1438.122694][T26074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8233'. [ 1438.158210][T26074] netlink: 'syz.3.8233': attribute type 14 has an invalid length. [ 1438.176312][T26074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8233'. [ 1438.628169][T23382] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1438.819346][T23382] usb 4-1: Using ep0 maxpacket: 16 [ 1438.832428][T23382] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1438.848099][T23382] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1438.882000][T23382] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1438.889113][T23382] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1438.909177][T23382] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1438.917680][T26097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8243'. [ 1438.949698][T23382] usb 4-1: config 0 descriptor?? [ 1439.369050][T23382] usbhid 4-1:0.0: can't add hid device: -71 [ 1439.375139][T23382] usbhid: probe of 4-1:0.0 failed with error -71 [ 1439.416933][T23382] usb 4-1: USB disconnect, device number 71 [ 1439.769321][T26110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8248'. [ 1440.051563][T26121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8252'. [ 1440.968146][ T5852] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1441.158194][ T5852] usb 1-1: Using ep0 maxpacket: 32 [ 1441.171102][ T5852] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1441.193042][ T5852] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1441.218424][ T5852] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1441.228700][ T5852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1441.248812][ T5852] usb 1-1: config 0 descriptor?? [ 1441.660941][T26171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8276'. [ 1441.670235][T26171] netlink: 'syz.3.8276': attribute type 14 has an invalid length. [ 1441.683038][T26171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8276'. [ 1441.698248][ T5852] usbhid 1-1:0.0: can't add hid device: -71 [ 1441.713538][ T5852] usbhid: probe of 1-1:0.0 failed with error -71 [ 1441.725561][T26171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8276'. [ 1441.743676][ T5852] usb 1-1: USB disconnect, device number 61 [ 1441.759523][T26171] netlink: 'syz.3.8276': attribute type 14 has an invalid length. [ 1441.779274][T26171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8276'. [ 1441.986280][T26177] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8277'. [ 1442.189515][T26186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8280'. [ 1442.490505][T26193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8282'. [ 1442.615761][T26199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8286'. [ 1442.625940][T26199] netlink: 'syz.1.8286': attribute type 14 has an invalid length. [ 1442.636956][T26199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8286'. [ 1442.656475][T26199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8286'. [ 1442.676137][T26199] netlink: 'syz.1.8286': attribute type 14 has an invalid length. [ 1443.569507][T26225] netlink: 'syz.0.8297': attribute type 14 has an invalid length. [ 1443.577959][T26225] netlink: 'syz.0.8297': attribute type 14 has an invalid length. [ 1444.638730][ T5863] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1444.828115][ T5863] usb 1-1: Using ep0 maxpacket: 16 [ 1444.845073][ T5863] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1444.856551][ T5863] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1444.871196][ T5863] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1444.879327][ T5863] usb 1-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1444.894787][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.922017][ T5863] usb 1-1: config 0 descriptor?? [ 1445.150494][ T5863] usbhid 1-1:0.0: can't add hid device: -71 [ 1445.156565][ T5863] usbhid: probe of 1-1:0.0 failed with error -71 [ 1445.194698][ T5863] usb 1-1: USB disconnect, device number 62 [ 1445.358533][ T9] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1445.562943][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1445.582267][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1445.633372][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1445.663200][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1445.699866][ T9] usb 3-1: SerialNumber: syz [ 1445.712582][T26310] syz.3.8328: attempt to access beyond end of device [ 1445.712582][T26310] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1445.947336][ T9] usb 3-1: 0:2 : does not exist [ 1445.980378][ T9] usb 3-1: USB disconnect, device number 70 [ 1446.547463][T26324] netlink: 'syz.3.8338': attribute type 14 has an invalid length. [ 1446.599353][T26324] netlink: 'syz.3.8338': attribute type 14 has an invalid length. [ 1446.754526][T26336] __nla_validate_parse: 11 callbacks suppressed [ 1446.754547][T26336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8343'. [ 1446.968678][ T5852] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1447.158088][ T5852] usb 2-1: Using ep0 maxpacket: 16 [ 1447.165875][ T5852] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1447.177443][ T5852] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1447.191027][ T5852] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1447.197776][ T5852] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1447.208580][ T5852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1447.221363][ T5852] usb 2-1: config 0 descriptor?? [ 1447.437674][ T5852] usbhid 2-1:0.0: can't add hid device: -71 [ 1447.457237][ T5852] usbhid: probe of 2-1:0.0 failed with error -71 [ 1447.474406][ T5852] usb 2-1: USB disconnect, device number 89 [ 1447.723837][T26363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8354'. [ 1451.738314][ T9] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1451.928139][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1451.935491][ T9] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1451.958130][ T9] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1452.001964][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1452.028151][ T9] usb 1-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1452.037271][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1452.077252][ T9] usb 1-1: config 0 descriptor?? [ 1452.301051][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 1452.327574][ T9] usbhid: probe of 1-1:0.0 failed with error -71 [ 1452.366948][ T9] usb 1-1: USB disconnect, device number 63 [ 1453.018502][T26493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8408'. [ 1453.111135][T26491] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8407'. [ 1453.125003][T26491] syz.3.8407: attempt to access beyond end of device [ 1453.125003][T26491] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1454.549868][T26516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8417'. [ 1454.779088][ T5852] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1454.968095][ T5852] usb 3-1: Using ep0 maxpacket: 32 [ 1454.978991][ T5852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1455.000639][ T5852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1455.021009][ T5852] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1455.042762][ T5852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1455.074015][ T5852] usb 3-1: config 0 descriptor?? [ 1455.503573][ T5852] usbhid 3-1:0.0: can't add hid device: -71 [ 1455.516769][ T5852] usbhid: probe of 3-1:0.0 failed with error -71 [ 1455.554922][ T5852] usb 3-1: USB disconnect, device number 71 [ 1458.339834][T26544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8429'. [ 1458.736044][T26542] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8427'. [ 1458.806015][T26542] syz.3.8427: attempt to access beyond end of device [ 1458.806015][T26542] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1459.008320][T23382] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1459.198113][T23382] usb 2-1: Using ep0 maxpacket: 16 [ 1459.205438][T23382] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1459.240605][T23382] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1459.287891][T23382] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1459.305941][T23382] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1459.346184][T23382] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1459.408942][T23382] usb 2-1: config 0 descriptor?? [ 1459.823817][T23382] usbhid 2-1:0.0: can't add hid device: -71 [ 1459.858228][T23382] usbhid: probe of 2-1:0.0 failed with error -71 [ 1459.878152][T23382] usb 2-1: USB disconnect, device number 90 [ 1460.011798][T26576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8443'. [ 1460.021142][T26576] netlink: 'syz.0.8443': attribute type 14 has an invalid length. [ 1460.030393][T26576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8443'. [ 1460.046442][T26576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8443'. [ 1460.055890][T26576] netlink: 'syz.0.8443': attribute type 14 has an invalid length. [ 1460.064700][T26576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8443'. [ 1461.398101][ T5863] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1461.438161][T19336] Bluetooth: hci4: command 0x0406 tx timeout [ 1461.449605][T23382] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1461.594889][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1461.606252][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1461.616642][ T5863] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1461.629112][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1461.638077][T23382] usb 4-1: Using ep0 maxpacket: 16 [ 1461.648380][ T5863] usb 2-1: config 0 descriptor?? [ 1461.649201][T23382] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1461.678118][T23382] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1461.692690][T23382] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1461.700785][T23382] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1461.710909][T23382] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1461.729380][T23382] usb 4-1: config 0 descriptor?? [ 1462.026441][ T5863] usbhid 2-1:0.0: can't add hid device: -71 [ 1462.038194][ T5863] usbhid: probe of 2-1:0.0 failed with error -71 [ 1462.055264][ T5863] usb 2-1: USB disconnect, device number 91 [ 1462.151118][T23382] usbhid 4-1:0.0: can't add hid device: -71 [ 1462.157187][T23382] usbhid: probe of 4-1:0.0 failed with error -71 [ 1462.193778][T23382] usb 4-1: USB disconnect, device number 72 [ 1462.781200][T26646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8476'. [ 1463.183939][T26655] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8477'. [ 1463.194836][T26655] syz.0.8477: attempt to access beyond end of device [ 1463.194836][T26655] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1464.138165][T23382] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1464.324376][T23382] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1464.336521][T26681] syz.0.8491: attempt to access beyond end of device [ 1464.336521][T26681] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1464.352307][T23382] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1464.378392][T23382] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1464.387506][T23382] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1464.419627][T23382] usb 3-1: config 0 descriptor?? [ 1464.813661][ T5863] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1464.819689][T23382] usbhid 3-1:0.0: can't add hid device: -71 [ 1464.831206][T23382] usbhid: probe of 3-1:0.0 failed with error -71 [ 1464.855412][T23382] usb 3-1: USB disconnect, device number 72 [ 1464.981648][ T5863] usb 1-1: device descriptor read/64, error -71 [ 1465.258121][T26299] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1465.266768][ T5863] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1465.428505][ T5863] usb 1-1: device descriptor read/64, error -71 [ 1465.462688][T26299] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1465.476226][T26299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.491105][T26299] usb 2-1: Product: syz [ 1465.498828][T26299] usb 2-1: Manufacturer: syz [ 1465.503487][T26299] usb 2-1: SerialNumber: syz [ 1465.568556][ T5863] usb usb1-port1: attempt power cycle [ 1465.745994][T26299] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1465.768165][T26299] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1465.998253][ T5863] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1466.029127][ T5863] usb 1-1: device descriptor read/8, error -71 [ 1466.318307][ T5863] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1466.359162][ T5863] usb 1-1: device descriptor read/8, error -71 [ 1466.479065][ T5863] usb usb1-port1: unable to enumerate USB device [ 1466.992556][T26299] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 1467.018957][T26299] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -32 [ 1467.048257][T26299] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 1467.068633][T26299] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 1467.092001][T26299] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 1467.124671][T26299] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 1467.157436][T26299] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 1467.178519][T26299] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 1467.210588][T26299] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1467.230814][T26299] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1467.253258][T26299] lan78xx: probe of 2-1:1.0 failed with error -71 [ 1467.286614][T26299] usb 2-1: USB disconnect, device number 92 [ 1468.408175][T11336] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1468.568164][T11336] usb 3-1: device descriptor read/64, error -71 [ 1468.648948][T26745] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8523'. [ 1468.848483][T11336] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1469.018382][T11336] usb 3-1: device descriptor read/64, error -71 [ 1469.148312][T11336] usb usb3-port1: attempt power cycle [ 1469.225178][T26751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8527'. [ 1469.259117][T26751] netlink: 'syz.1.8527': attribute type 14 has an invalid length. [ 1469.267014][T26751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8527'. [ 1469.290804][T26751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8527'. [ 1469.299876][T26751] netlink: 'syz.1.8527': attribute type 14 has an invalid length. [ 1469.308039][T26751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8527'. [ 1469.578167][T11336] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1469.618866][T11336] usb 3-1: device descriptor read/8, error -71 [ 1469.888261][T11336] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1469.927092][T11336] usb 3-1: device descriptor read/8, error -71 [ 1470.068444][T11336] usb usb3-port1: unable to enumerate USB device [ 1470.173575][T26774] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8535'. [ 1470.186134][T26774] syz.3.8535: attempt to access beyond end of device [ 1470.186134][T26774] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1470.208804][T26781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8539'. [ 1470.905803][T26802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8548'. [ 1470.915024][T26802] netlink: 'syz.0.8548': attribute type 14 has an invalid length. [ 1470.923311][T26802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8548'. [ 1470.933332][T26802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8548'. [ 1470.943033][T26802] netlink: 'syz.0.8548': attribute type 14 has an invalid length. [ 1472.203036][T26821] syz.2.8555: attempt to access beyond end of device [ 1472.203036][T26821] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1472.898118][T23382] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1473.049083][T23382] usb 2-1: device descriptor read/64, error -71 [ 1473.318513][T23382] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1473.468149][T23382] usb 2-1: device descriptor read/64, error -71 [ 1473.588576][T23382] usb usb2-port1: attempt power cycle [ 1474.008158][T23382] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1474.032840][T26849] __nla_validate_parse: 2 callbacks suppressed [ 1474.032861][T26849] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8568'. [ 1474.049323][T23382] usb 2-1: device descriptor read/8, error -71 [ 1474.057266][T26849] syz.2.8568: attempt to access beyond end of device [ 1474.057266][T26849] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1474.118106][ T5852] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1474.323444][ T5852] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1474.332903][T23382] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1474.340696][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.366187][ T5852] usb 4-1: Product: syz [ 1474.373610][ T5852] usb 4-1: Manufacturer: syz [ 1474.386645][ T5852] usb 4-1: SerialNumber: syz [ 1474.392345][T23382] usb 2-1: device descriptor read/8, error -71 [ 1474.519339][T23382] usb usb2-port1: unable to enumerate USB device [ 1474.648170][ T5852] net_ratelimit: 2 callbacks suppressed [ 1474.648195][ T5852] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1474.676022][T26857] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8570'. [ 1474.686913][ T5852] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1475.919934][ T5852] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 1475.942915][ T5852] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -32 [ 1475.970474][ T5852] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 1475.995564][ T5852] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 1476.018292][ T5852] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 1476.038555][ T5852] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 1476.062448][ T5852] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 1476.084958][ T5852] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 1476.109212][ T5852] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1476.130444][ T5852] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1476.151113][ T5852] lan78xx: probe of 4-1:1.0 failed with error -71 [ 1476.174796][ T5852] usb 4-1: USB disconnect, device number 73 [ 1476.625758][T26875] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8580'. [ 1477.365322][T26890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8587'. [ 1477.394989][T26890] netlink: 'syz.3.8587': attribute type 14 has an invalid length. [ 1477.415273][T26890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8587'. [ 1477.428791][T26890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8587'. [ 1477.440492][T26890] netlink: 'syz.3.8587': attribute type 14 has an invalid length. [ 1477.458698][T26890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8587'. [ 1478.101846][T26894] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8588'. [ 1478.157639][T26894] syz.0.8588: attempt to access beyond end of device [ 1478.157639][T26894] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1479.380710][T26922] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8600'. [ 1479.978138][T26299] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1480.148112][T26299] usb 2-1: device descriptor read/64, error -71 [ 1480.418200][T26299] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1480.588093][T26299] usb 2-1: device descriptor read/64, error -71 [ 1480.718595][T26299] usb usb2-port1: attempt power cycle [ 1481.178306][T26299] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1481.209108][T26299] usb 2-1: device descriptor read/8, error -71 [ 1481.478184][T26299] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1481.536162][T26299] usb 2-1: device descriptor read/8, error -71 [ 1481.667548][T26299] usb usb2-port1: unable to enumerate USB device [ 1483.318422][ T5863] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1483.542965][ T5863] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1483.568102][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.576195][ T5863] usb 2-1: Product: syz [ 1483.595089][ T5863] usb 2-1: Manufacturer: syz [ 1483.608085][ T5863] usb 2-1: SerialNumber: syz [ 1483.849109][ T5863] net_ratelimit: 2 callbacks suppressed [ 1483.849135][ T5863] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1483.904065][ T5863] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1484.670017][T26980] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8629'. [ 1484.701406][T26980] syz.2.8629: attempt to access beyond end of device [ 1484.701406][T26980] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1484.978991][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.987285][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.212847][ T5863] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 1485.260506][ T5863] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -32 [ 1485.298209][ T5863] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 1485.320924][ T5863] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 1485.338149][ T5863] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 1485.358602][ T5863] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 1485.390820][ T5863] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 1485.413925][ T5863] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 1485.469164][ T5863] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1485.497307][ T5863] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1485.529328][ T5863] lan78xx: probe of 2-1:1.0 failed with error -71 [ 1485.588390][ T5881] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1485.624597][ T5863] usb 2-1: USB disconnect, device number 101 [ 1485.674942][T26993] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8628'. [ 1485.690695][T26993] syz.0.8628: attempt to access beyond end of device [ 1485.690695][T26993] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1485.758202][ T5881] usb 4-1: device descriptor read/64, error -71 [ 1486.058150][ T5881] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1486.245633][ T5881] usb 4-1: device descriptor read/64, error -71 [ 1486.368383][ T5881] usb usb4-port1: attempt power cycle [ 1486.778121][ T5881] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1486.831138][ T5881] usb 4-1: device descriptor read/8, error -71 [ 1487.108148][ T5881] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1487.139144][ T5881] usb 4-1: device descriptor read/8, error -71 [ 1487.280337][ T5881] usb usb4-port1: unable to enumerate USB device [ 1487.779310][T27013] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8640'. [ 1487.790029][T27013] syz.0.8640: attempt to access beyond end of device [ 1487.790029][T27013] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1488.708193][ T5852] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1488.903391][ T5852] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1488.918670][ T5852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.937477][ T5852] usb 3-1: Product: syz [ 1488.942093][ T5852] usb 3-1: Manufacturer: syz [ 1488.946734][ T5852] usb 3-1: SerialNumber: syz [ 1489.196911][ T5852] net_ratelimit: 2 callbacks suppressed [ 1489.196932][ T5852] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1489.236517][ T5852] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1489.310228][ T5863] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1489.508075][ T5863] usb 2-1: Using ep0 maxpacket: 16 [ 1489.518913][ T5863] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1489.529227][ T5863] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1489.539615][ T5863] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1489.549118][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1489.568898][ T5863] usb 2-1: config 0 descriptor?? [ 1489.793557][ T5863] usb 2-1: USB disconnect, device number 102 [ 1489.935637][T27057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8661'. [ 1489.946689][T27057] netlink: 'syz.0.8661': attribute type 14 has an invalid length. [ 1489.955104][T27057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8661'. [ 1489.965459][T27057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8661'. [ 1489.976043][T27057] netlink: 'syz.0.8661': attribute type 14 has an invalid length. [ 1489.984679][T27057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8661'. [ 1490.467212][ T5852] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 1490.483346][ T5852] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -32 [ 1490.504270][ T5852] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 1490.518088][ T5852] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 1490.533784][ T5852] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 1490.546134][ T5852] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 1490.560592][ T5852] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 1490.573282][ T5852] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 1490.586226][ T5852] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1490.596932][ T5852] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1490.608144][ T5852] lan78xx: probe of 3-1:1.0 failed with error -71 [ 1490.626600][ T5852] usb 3-1: USB disconnect, device number 77 [ 1494.968091][ T5852] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1495.070307][ T9] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1495.168059][ T5852] usb 4-1: Using ep0 maxpacket: 16 [ 1495.175685][ T5852] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1495.198521][ T5852] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1495.207572][ T5852] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1495.228450][ T5852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1495.258529][ T5852] usb 4-1: config 0 descriptor?? [ 1495.268957][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1495.279258][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1495.300359][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1495.318073][ T9] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1495.337660][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1495.359956][ T9] usb 3-1: config 0 descriptor?? [ 1495.472900][ T5881] usb 4-1: USB disconnect, device number 78 [ 1495.795794][ T9] ft260 0003:0403:6030.0003: unknown main item tag 0x7 [ 1495.991880][ T9] ft260 0003:0403:6030.0003: failed to retrieve chip version [ 1496.018747][ T9] ft260: probe of 0003:0403:6030.0003 failed with error -32 [ 1497.207544][T27109] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8685'. [ 1497.846597][T23382] usb 3-1: USB disconnect, device number 78 [ 1498.336469][T27125] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8690'. [ 1500.218145][ T5852] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1500.428109][ T5852] usb 2-1: Using ep0 maxpacket: 32 [ 1500.440367][ T5852] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1500.458092][ T5852] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1500.467922][ T5852] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1500.491869][ T5852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1500.512448][ T5852] usb 2-1: config 0 descriptor?? [ 1500.946954][ T5852] ft260 0003:0403:6030.0004: unknown main item tag 0x7 [ 1501.130092][ T5852] ft260 0003:0403:6030.0004: failed to retrieve chip version [ 1501.158589][ T5852] ft260: probe of 0003:0403:6030.0004 failed with error -32 [ 1502.180667][T27156] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8703'. [ 1502.221288][T27156] syz.0.8703: attempt to access beyond end of device [ 1502.221288][T27156] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1502.963277][T23382] usb 2-1: USB disconnect, device number 103 [ 1503.227447][T27167] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8707'. [ 1503.988825][ T9] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1504.178349][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1504.200415][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1504.222056][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1504.253486][ T9] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1504.273080][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1504.311164][ T9] usb 2-1: config 0 descriptor?? [ 1504.740042][ T9] ft260 0003:0403:6030.0005: unknown main item tag 0x7 [ 1504.926295][ T9] ft260 0003:0403:6030.0005: failed to retrieve chip version [ 1504.947042][ T9] ft260: probe of 0003:0403:6030.0005 failed with error -32 [ 1505.670710][T27212] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8729'. [ 1506.578079][ T5881] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1506.735000][ T9] usb 2-1: USB disconnect, device number 104 [ 1506.769275][ T5881] usb 1-1: Using ep0 maxpacket: 32 [ 1506.780213][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1506.800198][ T5881] usb 1-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 1506.819643][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1506.839915][ T5881] usb 1-1: config 0 descriptor?? [ 1507.264860][ T5881] hkems 0003:2006:0118.0006: item fetching failed at offset 0/2 [ 1507.285299][ T5881] hkems 0003:2006:0118.0006: parse failed [ 1507.295131][ T5881] hkems: probe of 0003:2006:0118.0006 failed with error -22 [ 1507.308207][ T9] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1507.466869][ T27] usb 1-1: USB disconnect, device number 68 [ 1507.478118][ T9] usb 2-1: device descriptor read/64, error -71 [ 1507.758214][ T9] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1507.928111][ T9] usb 2-1: device descriptor read/64, error -71 [ 1508.059055][ T9] usb usb2-port1: attempt power cycle [ 1508.348162][ T5863] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1508.468081][ T9] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1508.509239][ T9] usb 2-1: device descriptor read/8, error -71 [ 1508.542351][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1508.558043][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1508.568875][ T5863] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1508.580744][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1508.591998][ T5863] usb 1-1: config 0 descriptor?? [ 1508.788421][ T9] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1508.838821][ T9] usb 2-1: device descriptor read/8, error -71 [ 1508.960093][ T9] usb usb2-port1: unable to enumerate USB device [ 1509.013215][ T5863] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 1509.048976][ T5863] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 1509.212681][ T5863] cp2112 0003:10C4:EA90.0007: Part Number: 0x82 Device Version: 0xFE [ 1509.547411][T27268] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8753'. [ 1509.596556][T27268] syz.3.8753: attempt to access beyond end of device [ 1509.596556][T27268] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1509.825854][T27249] ================================================================== [ 1509.833969][T27249] BUG: KASAN: stack-out-of-bounds in cp2112_xfer+0x714/0xf00 [ 1509.841484][T27249] Read of size 42 at addr ffffc9000ba47d41 by task syz.0.8746/27249 [ 1509.849499][T27249] [ 1509.851840][T27249] CPU: 0 PID: 27249 Comm: syz.0.8746 Not tainted syzkaller #0 [ 1509.859301][T27249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1509.869470][T27249] Call Trace: [ 1509.873041][T27249] [ 1509.876002][T27249] dump_stack_lvl+0x16c/0x230 [ 1509.880830][T27249] ? cp2112_xfer+0x714/0xf00 [ 1509.885469][T27249] ? show_regs_print_info+0x20/0x20 [ 1509.890715][T27249] ? load_image+0x3b0/0x3b0 [ 1509.895285][T27249] ? register_lock_class+0xb5/0x890 [ 1509.900550][T27249] ? __virt_addr_valid+0xc3/0x540 [ 1509.905645][T27249] print_report+0xac/0x220 [ 1509.910107][T27249] ? cp2112_xfer+0x714/0xf00 [ 1509.914746][T27249] kasan_report+0x117/0x150 [ 1509.919331][T27249] ? cp2112_xfer+0x714/0xf00 [ 1509.923980][T27249] kasan_check_range+0x288/0x290 [ 1509.928964][T27249] ? cp2112_xfer+0x714/0xf00 [ 1509.933596][T27249] __asan_memcpy+0x29/0x70 [ 1509.938086][T27249] cp2112_xfer+0x714/0xf00 [ 1509.942757][T27249] ? cp2112_i2c_xfer+0xe70/0xe70 [ 1509.947748][T27249] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1509.953794][T27249] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 1509.959959][T27249] __i2c_smbus_xfer+0x888/0x1d90 [ 1509.964946][T27249] ? cp2112_i2c_xfer+0xe70/0xe70 [ 1509.969904][T27249] ? i2c_smbus_write_i2c_block_data+0x1b0/0x1b0 [ 1509.976157][T27249] ? rt_mutex_adjust_prio_chain+0x2400/0x2400 [ 1509.982356][T27249] ? i2c_smbus_xfer+0x121/0x3a0 [ 1509.987289][T27249] i2c_smbus_xfer+0x267/0x3a0 [ 1509.991977][T27249] ? i2c_smbus_read_byte+0x1b0/0x1b0 [ 1509.997276][T27249] ? __might_fault+0xaa/0x120 [ 1510.001992][T27249] ? __might_fault+0xc6/0x120 [ 1510.006676][T27249] ? __might_fault+0xaa/0x120 [ 1510.011365][T27249] i2cdev_ioctl_smbus+0x423/0x670 [ 1510.016420][T27249] ? i2cdev_ioctl_rdwr+0x690/0x690 [ 1510.021663][T27249] ? __might_fault+0xaa/0x120 [ 1510.026426][T27249] ? __might_fault+0xc6/0x120 [ 1510.031127][T27249] ? __might_fault+0xaa/0x120 [ 1510.035817][T27249] i2cdev_ioctl+0x5d1/0x7e0 [ 1510.040340][T27249] ? i2cdev_write+0x120/0x120 [ 1510.045033][T27249] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1510.050006][T27249] ? security_file_ioctl+0x80/0xa0 [ 1510.055158][T27249] ? i2cdev_write+0x120/0x120 [ 1510.059847][T27249] __se_sys_ioctl+0xfd/0x170 [ 1510.064461][T27249] do_syscall_64+0x55/0xb0 [ 1510.068887][T27249] ? clear_bhb_loop+0x40/0x90 [ 1510.073625][T27249] ? clear_bhb_loop+0x40/0x90 [ 1510.078315][T27249] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1510.084220][T27249] RIP: 0033:0x7f7be218f6c9 [ 1510.088670][T27249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1510.108293][T27249] RSP: 002b:00007f7be300f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1510.116733][T27249] RAX: ffffffffffffffda RBX: 00007f7be23e5fa0 RCX: 00007f7be218f6c9 [ 1510.124717][T27249] RDX: 0000200000000200 RSI: 0000000000000720 RDI: 0000000000000004 [ 1510.132693][T27249] RBP: 00007f7be2211f91 R08: 0000000000000000 R09: 0000000000000000 [ 1510.140666][T27249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1510.148644][T27249] R13: 00007f7be23e6038 R14: 00007f7be23e5fa0 R15: 00007ffde03fd7c8 [ 1510.156697][T27249] [ 1510.159715][T27249] [ 1510.162033][T27249] The buggy address belongs to stack of task syz.0.8746/27249 [ 1510.169483][T27249] and is located at offset 33 in frame: [ 1510.175137][T27249] i2cdev_ioctl_smbus+0x0/0x670 [ 1510.180002][T27249] [ 1510.182324][T27249] This frame has 1 object: [ 1510.186735][T27249] [32, 66) 'temp' [ 1510.186746][T27249] [ 1510.192774][T27249] The buggy address belongs to a 8-page vmalloc region starting at 0xffffc9000ba40000 allocated at copy_process+0x549/0x3d70 [ 1510.205768][T27249] The buggy address belongs to the physical page: [ 1510.212212][T27249] page:ffffea000188f7c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x623df [ 1510.222373][T27249] memcg:ffff88802e8a6502 [ 1510.226614][T27249] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1510.233742][T27249] page_type: 0xffffffff() [ 1510.238077][T27249] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 1510.246670][T27249] raw: 0000000000000000 0000000000000000 00000001ffffffff ffff88802e8a6502 [ 1510.255273][T27249] page dumped because: kasan: bad access detected [ 1510.261696][T27249] page_owner tracks the page as allocated [ 1510.267411][T27249] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 27153, tgid 27153 (syz.0.8703), ts 1502369946820, free_ts 1478239683310 [ 1510.286089][T27249] post_alloc_hook+0x1cd/0x210 [ 1510.290960][T27249] get_page_from_freelist+0x195c/0x19f0 [ 1510.296517][T27249] __alloc_pages+0x1e3/0x460 [ 1510.301116][T27249] __vmalloc_node_range+0x96b/0x1320 [ 1510.306409][T27249] dup_task_struct+0x3d0/0x7c0 [ 1510.311174][T27249] copy_process+0x549/0x3d70 [ 1510.315764][T27249] kernel_clone+0x21b/0x840 [ 1510.320285][T27249] __se_sys_clone3+0x252/0x2c0 [ 1510.325079][T27249] do_syscall_64+0x55/0xb0 [ 1510.329538][T27249] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1510.335433][T27249] page last free stack trace: [ 1510.340109][T27249] free_unref_page_prepare+0x7ce/0x8e0 [ 1510.345578][T27249] free_unref_page_list+0xbe/0x860 [ 1510.350699][T27249] release_pages+0x1fa0/0x2220 [ 1510.355463][T27249] tlb_flush_mmu+0x368/0x4f0 [ 1510.360060][T27249] tlb_finish_mmu+0xc3/0x1d0 [ 1510.364663][T27249] exit_mmap+0x3f0/0xb50 [ 1510.368913][T27249] __mmput+0x118/0x3c0 [ 1510.372982][T27249] exit_mm+0x1da/0x2c0 [ 1510.377068][T27249] do_exit+0x88e/0x23c0 [ 1510.381238][T27249] do_group_exit+0x21b/0x2d0 [ 1510.385833][T27249] get_signal+0x12fc/0x1400 [ 1510.390348][T27249] arch_do_signal_or_restart+0x9c/0x7b0 [ 1510.395932][T27249] exit_to_user_mode_loop+0x70/0x110 [ 1510.401230][T27249] exit_to_user_mode_prepare+0xf6/0x180 [ 1510.406782][T27249] syscall_exit_to_user_mode+0x1a/0x50 [ 1510.412243][T27249] do_syscall_64+0x61/0xb0 [ 1510.416665][T27249] [ 1510.419170][T27249] Memory state around the buggy address: [ 1510.424806][T27249] ffffc9000ba47c00: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 f3 f3 f3 [ 1510.432877][T27249] ffffc9000ba47c80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1510.441129][T27249] >ffffc9000ba47d00: 00 00 00 00 f1 f1 f1 f1 00 00 00 00 02 f3 f3 f3 [ 1510.449215][T27249] ^ [ 1510.456454][T27249] ffffc9000ba47d80: f3 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 [ 1510.464525][T27249] ffffc9000ba47e00: f1 f1 f1 f1 04 f2 00 00 f2 f2 00 00 f3 f3 f3 f3 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1510.472595][T27249] ================================================================== [ 1510.571249][T27249] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1510.578514][T27249] CPU: 0 PID: 27249 Comm: syz.0.8746 Not tainted syzkaller #0 [ 1510.586009][T27249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1510.596108][T27249] Call Trace: [ 1510.599423][T27249] [ 1510.602384][T27249] dump_stack_lvl+0x16c/0x230 [ 1510.607100][T27249] ? show_regs_print_info+0x20/0x20 [ 1510.612314][T27249] ? load_image+0x3b0/0x3b0 [ 1510.616834][T27249] panic+0x2c0/0x710 [ 1510.620749][T27249] ? bpf_jit_dump+0xd0/0xd0 [ 1510.625267][T27249] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 1510.631176][T27249] ? _raw_spin_unlock+0x40/0x40 [ 1510.636044][T27249] ? print_memory_metadata+0x314/0x400 [ 1510.641520][T27249] ? cp2112_xfer+0x714/0xf00 [ 1510.646152][T27249] check_panic_on_warn+0x84/0xa0 [ 1510.651109][T27249] ? cp2112_xfer+0x714/0xf00 [ 1510.655715][T27249] end_report+0x6f/0x140 [ 1510.660059][T27249] kasan_report+0x128/0x150 [ 1510.664574][T27249] ? cp2112_xfer+0x714/0xf00 [ 1510.669184][T27249] kasan_check_range+0x288/0x290 [ 1510.674154][T27249] ? cp2112_xfer+0x714/0xf00 [ 1510.678764][T27249] __asan_memcpy+0x29/0x70 [ 1510.683201][T27249] cp2112_xfer+0x714/0xf00 [ 1510.687635][T27249] ? cp2112_i2c_xfer+0xe70/0xe70 [ 1510.692605][T27249] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1510.698626][T27249] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 1510.704545][T27249] __i2c_smbus_xfer+0x888/0x1d90 [ 1510.709500][T27249] ? cp2112_i2c_xfer+0xe70/0xe70 [ 1510.714464][T27249] ? i2c_smbus_write_i2c_block_data+0x1b0/0x1b0 [ 1510.720726][T27249] ? rt_mutex_adjust_prio_chain+0x2400/0x2400 [ 1510.726816][T27249] ? i2c_smbus_xfer+0x121/0x3a0 [ 1510.731685][T27249] i2c_smbus_xfer+0x267/0x3a0 [ 1510.736402][T27249] ? i2c_smbus_read_byte+0x1b0/0x1b0 [ 1510.741718][T27249] ? __might_fault+0xaa/0x120 [ 1510.746439][T27249] ? __might_fault+0xc6/0x120 [ 1510.751142][T27249] ? __might_fault+0xaa/0x120 [ 1510.755842][T27249] i2cdev_ioctl_smbus+0x423/0x670 [ 1510.760900][T27249] ? i2cdev_ioctl_rdwr+0x690/0x690 [ 1510.766052][T27249] ? __might_fault+0xaa/0x120 [ 1510.770742][T27249] ? __might_fault+0xc6/0x120 [ 1510.775428][T27249] ? __might_fault+0xaa/0x120 [ 1510.780120][T27249] i2cdev_ioctl+0x5d1/0x7e0 [ 1510.784636][T27249] ? i2cdev_write+0x120/0x120 [ 1510.789332][T27249] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1510.794281][T27249] ? security_file_ioctl+0x80/0xa0 [ 1510.799411][T27249] ? i2cdev_write+0x120/0x120 [ 1510.804107][T27249] __se_sys_ioctl+0xfd/0x170 [ 1510.808830][T27249] do_syscall_64+0x55/0xb0 [ 1510.813267][T27249] ? clear_bhb_loop+0x40/0x90 [ 1510.817972][T27249] ? clear_bhb_loop+0x40/0x90 [ 1510.822689][T27249] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1510.828603][T27249] RIP: 0033:0x7f7be218f6c9 [ 1510.833036][T27249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1510.852666][T27249] RSP: 002b:00007f7be300f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1510.861100][T27249] RAX: ffffffffffffffda RBX: 00007f7be23e5fa0 RCX: 00007f7be218f6c9 [ 1510.869088][T27249] RDX: 0000200000000200 RSI: 0000000000000720 RDI: 0000000000000004 [ 1510.877086][T27249] RBP: 00007f7be2211f91 R08: 0000000000000000 R09: 0000000000000000 [ 1510.885078][T27249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1510.893078][T27249] R13: 00007f7be23e6038 R14: 00007f7be23e5fa0 R15: 00007ffde03fd7c8 [ 1510.901077][T27249] [ 1510.904394][T27249] Kernel Offset: disabled [ 1510.908724][T27249] Rebooting in 86400 seconds..