last executing test programs: 8.02960573s ago: executing program 1 (id=653): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000780)="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", 0x2000, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}, 0x40000003) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0x1, 0x5479, 0x103d, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.624263095s ago: executing program 1 (id=659): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x6, 0x1ff}) 4.595670292s ago: executing program 0 (id=675): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000180)={&(0x7f0000000140)=[{0x6, 0xc200, 0x41, &(0x7f0000000080)="c207f37536eb5d2c8b7c7e0e3d728761285bdb539d9a8aede70c749fe20948acb2dae3b4034c18e1cfba3c8128c7282309994b3f01a6e0606fb7613dd15602cf1d"}], 0x1}) 4.302079732s ago: executing program 1 (id=677): syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000000904"], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) openat$kvm(0xffffffffffffff9c, 0x0, 0x82042, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 3.508865133s ago: executing program 3 (id=693): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0xffff, 0x9}, 'syz1\x00', 0x5}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x72, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000040)=""/107) 3.291454727s ago: executing program 3 (id=694): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010027bd7000fedbdf829d00000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x4004) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="3c09f3ff0200"}) 3.198394766s ago: executing program 3 (id=695): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x2000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) 3.143453704s ago: executing program 3 (id=696): syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000001c0)={0x51, 0x100, 0x560a, {0x803, 0x5d5}, {0xfffa, 0x2}, @cond=[{0x5, 0xf, 0xe327, 0x8, 0x6}, {0x4, 0x8, 0xfffd, 0x6, 0x4, 0x177}]}) 2.954688979s ago: executing program 1 (id=699): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a32000000007c010000020a01"], 0x250}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 2.922039016s ago: executing program 0 (id=701): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.806592629s ago: executing program 1 (id=703): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a8c000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000004c0008800c00024000deffff55c3dd9e0c00014000000000000000000c00024000000000000000000c00024000000000000000090c00014000000000000000060c000140000000000000026314000480080002403cb140bb080001400000000314000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x28}, 0x20040000) 2.729830371s ago: executing program 1 (id=704): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) writev(r1, &(0x7f0000001500)=[{&(0x7f0000001540)="f9", 0x1}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 1.535036566s ago: executing program 3 (id=712): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffff7}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) read$FUSE(r1, 0x0, 0x70) write$FUSE_INIT(r1, 0x0, 0x0) 750.884307ms ago: executing program 0 (id=715): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0) 677.175776ms ago: executing program 3 (id=716): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7}, 0x1c) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)}, 0x0) 644.456532ms ago: executing program 0 (id=717): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'dh\x00', 0x0, 0x88, 0x5d}, 0x2c) 470.052278ms ago: executing program 0 (id=718): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0xfff0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 386.70696ms ago: executing program 0 (id=719): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b45"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x8dff, 0x7}) 304.033908ms ago: executing program 2 (id=720): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000020000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x40) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000002030300000000000000000000000010"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000020301"], 0x30}, 0x1, 0x0, 0x0, 0x40840}, 0x0) 241.388961ms ago: executing program 2 (id=721): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x6c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x4e, 0x33, @mgmt_frame=@reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x5}, @broadcast, @broadcast, @from_mac=@broadcast, {0x3, 0xd}, @value=@ver_80211n={0x0, 0x8, 0x1, 0x2, 0x0, 0x2}}, 0x8000, 0x7, @broadcast, {0x0, 0x6, @default_ap_ssid}, @void, @val={0x2d, 0x1a, {0x1, 0x2, 0x4, 0x0, {0x3, 0x2, 0x0, 0x10, 0x0, 0x1, 0x1, 0x3}, 0x300, 0xe5, 0x86}}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x44800) 142.938223ms ago: executing program 2 (id=722): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000000)="efc1ff", 0x3, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, 0x0, 0x0, 0x775, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x10001, 0x0) 126.801674ms ago: executing program 2 (id=723): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040), 0xfffffffffffffd75, 0x4040000}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 70.653532ms ago: executing program 2 (id=724): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x80, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @val={0x6, 0x2}, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x20, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xe, 0x2, "b61965c846c154afa8fa"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x5, 0x3, "dd"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x80}}, 0x0) 0s ago: executing program 2 (id=725): sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4401000002020102000000000000000002000006800001800c00028005000100840000001400018008000100e000000108000200ac1414aa06000340000200002c000180140003002001000000000000000000000000000014000400fc020000000000000000000000000001060003400002000006000340000300000c00028005000100840000000c000280050001003a00000058000a805402028006000340020000000c000280050001008400000014000180080001006401010108000200ac14143906000340000400001400018008000100ffffffff080002007f0000010c000280050001003a0000005800018014000180080001006401010108000200e00000020c000280050001001100000006000340000300002c00018014000300ff02000000000000000000000000000114000400ff010000000000000000000000000001"], 0x144}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="0a001800030303030303000004005a8020005a8018000080140005"], 0x4c}}, 0x4040810) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.6' (ED25519) to the list of known hosts. [ 82.577549][ T5829] cgroup: Unknown subsys name 'net' [ 82.710484][ T5829] cgroup: Unknown subsys name 'cpuset' [ 82.720000][ T5829] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.478380][ T5829] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.986983][ T5162] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.999190][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.006935][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.014942][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.023734][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.036787][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.056678][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.060233][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.064356][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.074361][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.087011][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.096083][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.107025][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.113402][ T5855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.122543][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.128549][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.132731][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.154424][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.163805][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.172221][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.896467][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 88.045272][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 88.060249][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 88.152464][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.160535][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.168522][ T5838] bridge_slave_0: entered allmulticast mode [ 88.176016][ T5838] bridge_slave_0: entered promiscuous mode [ 88.197980][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 88.230045][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.237568][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.245124][ T5838] bridge_slave_1: entered allmulticast mode [ 88.252725][ T5838] bridge_slave_1: entered promiscuous mode [ 88.370953][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.401046][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.408777][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.417009][ T5840] bridge_slave_0: entered allmulticast mode [ 88.424361][ T5840] bridge_slave_0: entered promiscuous mode [ 88.435827][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.481043][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.488381][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.495796][ T5840] bridge_slave_1: entered allmulticast mode [ 88.503643][ T5840] bridge_slave_1: entered promiscuous mode [ 88.524636][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.531938][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.539579][ T5839] bridge_slave_0: entered allmulticast mode [ 88.547161][ T5839] bridge_slave_0: entered promiscuous mode [ 88.576609][ T5838] team0: Port device team_slave_0 added [ 88.582969][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.590366][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.598075][ T5839] bridge_slave_1: entered allmulticast mode [ 88.605417][ T5839] bridge_slave_1: entered promiscuous mode [ 88.639605][ T5838] team0: Port device team_slave_1 added [ 88.649735][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.705251][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.727548][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.735009][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.742790][ T5841] bridge_slave_0: entered allmulticast mode [ 88.750326][ T5841] bridge_slave_0: entered promiscuous mode [ 88.791284][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.806974][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.814195][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.822418][ T5841] bridge_slave_1: entered allmulticast mode [ 88.830361][ T5841] bridge_slave_1: entered promiscuous mode [ 88.838544][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.845594][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.871911][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.898710][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.933521][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.940769][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.968203][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.981335][ T5840] team0: Port device team_slave_0 added [ 89.028290][ T5840] team0: Port device team_slave_1 added [ 89.038738][ T5839] team0: Port device team_slave_0 added [ 89.048157][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.062083][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.087281][ T5839] team0: Port device team_slave_1 added [ 89.171737][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.179715][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.207198][ T5162] Bluetooth: hci1: command tx timeout [ 89.207205][ T5856] Bluetooth: hci3: command tx timeout [ 89.207392][ T5856] Bluetooth: hci0: command tx timeout [ 89.214176][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.218987][ T5855] Bluetooth: hci2: command tx timeout [ 89.227133][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.248668][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.275169][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.301245][ T5841] team0: Port device team_slave_0 added [ 89.313869][ T5838] hsr_slave_0: entered promiscuous mode [ 89.321180][ T5838] hsr_slave_1: entered promiscuous mode [ 89.336031][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.343357][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.369897][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.383579][ T5841] team0: Port device team_slave_1 added [ 89.422856][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.430162][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.457575][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.469956][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.477448][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.503716][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.538940][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.546196][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.572524][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.663603][ T5840] hsr_slave_0: entered promiscuous mode [ 89.671139][ T5840] hsr_slave_1: entered promiscuous mode [ 89.678276][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 89.684731][ T5840] Cannot create hsr debugfs directory [ 89.761910][ T5839] hsr_slave_0: entered promiscuous mode [ 89.768721][ T5839] hsr_slave_1: entered promiscuous mode [ 89.775119][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 89.781310][ T5839] Cannot create hsr debugfs directory [ 89.807211][ T5841] hsr_slave_0: entered promiscuous mode [ 89.814158][ T5841] hsr_slave_1: entered promiscuous mode [ 89.820966][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 89.826792][ T5841] Cannot create hsr debugfs directory [ 90.272487][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.285650][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.307040][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.328460][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.384971][ T5840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.412019][ T5840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.437872][ T5840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.470107][ T5840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.537322][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.548513][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.561338][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.583911][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.660763][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.672267][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.684636][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.696618][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.813338][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.884060][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.938727][ T3507] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.946707][ T3507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.959762][ T3507] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.967038][ T3507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.984922][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.057680][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.089968][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.110410][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.144700][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.167299][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.200343][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.207924][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.221714][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.229576][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.254905][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.262452][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.280133][ T5855] Bluetooth: hci2: command tx timeout [ 91.283688][ T5856] Bluetooth: hci1: command tx timeout [ 91.287555][ T5855] Bluetooth: hci0: command tx timeout [ 91.293883][ T5856] Bluetooth: hci3: command tx timeout [ 91.313816][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.321425][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.334109][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.341423][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.379687][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.387390][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.648974][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.789608][ T5838] veth0_vlan: entered promiscuous mode [ 91.834458][ T5838] veth1_vlan: entered promiscuous mode [ 91.954160][ T5838] veth0_macvtap: entered promiscuous mode [ 91.994126][ T5838] veth1_macvtap: entered promiscuous mode [ 92.028906][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.104822][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.140998][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.153162][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.211426][ T1163] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.222692][ T1163] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.238547][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.261054][ T1163] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.270975][ T1163] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.321536][ T983] cfg80211: failed to load regulatory.db [ 92.342500][ T5839] veth0_vlan: entered promiscuous mode [ 92.419871][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.437343][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.440643][ T5839] veth1_vlan: entered promiscuous mode [ 92.524334][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.533475][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.554161][ T5841] veth0_vlan: entered promiscuous mode [ 92.578677][ T5841] veth1_vlan: entered promiscuous mode [ 92.588561][ T5840] veth0_vlan: entered promiscuous mode [ 92.631979][ T5840] veth1_vlan: entered promiscuous mode [ 92.632425][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.660306][ T5839] veth0_macvtap: entered promiscuous mode [ 92.691452][ T5839] veth1_macvtap: entered promiscuous mode [ 92.744022][ T5841] veth0_macvtap: entered promiscuous mode [ 92.770243][ T5840] veth0_macvtap: entered promiscuous mode [ 92.806836][ T5841] veth1_macvtap: entered promiscuous mode [ 92.819516][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.835386][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.849147][ T5840] veth1_macvtap: entered promiscuous mode [ 92.876141][ T1163] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.912823][ T1163] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.960788][ T1163] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.978682][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.001630][ T1163] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.031838][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.044653][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.072408][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.094919][ T1163] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.111589][ T1163] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.207756][ T1163] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.263481][ T1163] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.273639][ T1163] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.359740][ T5162] Bluetooth: hci1: command tx timeout [ 93.361327][ T5855] Bluetooth: hci2: command tx timeout [ 93.365494][ T5162] Bluetooth: hci3: command tx timeout [ 93.378734][ T5856] Bluetooth: hci0: command tx timeout [ 93.391949][ T1163] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.478405][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.492339][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.509094][ T1163] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.566003][ T1163] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.638870][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.667995][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.794704][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.811895][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.842952][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.876517][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.024933][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.060293][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.105252][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.162583][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.298251][ T5947] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 95.399084][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.436856][ T5856] Bluetooth: hci2: command tx timeout [ 95.442093][ T5951] process 'syz.0.6' launched './file1' with NULL argv: empty string added [ 95.442352][ T5162] Bluetooth: hci1: command tx timeout [ 95.456608][ T5856] Bluetooth: hci0: command tx timeout [ 95.457895][ T5162] Bluetooth: hci3: command tx timeout [ 96.307035][ T5958] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.502701][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 96.557223][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 96.605049][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 96.614835][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.636987][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 96.707414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 96.717155][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 96.727207][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 96.877201][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.353422][ T5968] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.102066][ T5985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17'. [ 98.159393][ T5894] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 98.248454][ T5985] veth1_macvtap: left promiscuous mode [ 98.336563][ T5894] usb 3-1: Using ep0 maxpacket: 16 [ 98.353768][ T5894] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 98.370753][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 98.389433][ T5894] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 98.402640][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.413303][ T5894] usb 3-1: Product: syz [ 98.422510][ T5894] usb 3-1: Manufacturer: syz [ 98.472256][ T5894] usb 3-1: SerialNumber: syz [ 98.522249][ T5894] usb 3-1: config 0 descriptor?? [ 98.580907][ T5894] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 98.791230][ T5894] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 99.340078][ T5894] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 99.348441][ T5894] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 99.982227][ T5894] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 100.017205][ T5894] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 100.025369][ T5894] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 100.644218][ T5894] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 100.677585][ T5894] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 100.711031][ T6027] could not allocate digest TFM handle cryptd(streebog512-generic) [ 100.725109][ T5894] usb 3-1: USB disconnect, device number 2 [ 101.047517][ T24] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 101.253707][ T24] usb 4-1: config 0 has no interfaces? [ 101.280058][ T24] usb 4-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.00 [ 101.317307][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.347936][ T24] usb 4-1: config 0 descriptor?? [ 101.376946][ T6053] netlink: 'syz.1.45': attribute type 10 has an invalid length. [ 101.523250][ T6053] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 101.628718][ T116] usb 4-1: USB disconnect, device number 2 [ 101.808532][ T983] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 101.988226][ T983] usb 1-1: config index 0 descriptor too short (expected 50, got 18) [ 101.998014][ T983] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 102.016727][ T983] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.039984][ T983] usb 1-1: config 0 descriptor?? [ 102.065591][ T983] gspca_main: spca508-2.14.0 probing 8086:0110 [ 102.260466][ T983] gspca_spca508: reg_read err -32 [ 102.796428][ T983] gspca_spca508: reg_read err -110 [ 102.805326][ T983] gspca_spca508: reg_read err -32 [ 102.828231][ T983] gspca_spca508: reg_read err -32 [ 102.846400][ T983] gspca_spca508: reg write: error -32 [ 102.855502][ T983] spca508 1-1:0.0: probe with driver spca508 failed with error -32 [ 103.479761][ T5162] Bluetooth: hci1: unexpected event 0x2f length: 1017 > 260 [ 103.696355][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 104.916455][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 104.926185][ T24] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 104.935160][ T24] usb 2-1: config 0 has no interface number 0 [ 104.942608][ T24] usb 2-1: config 0 interface 184 has no altsetting 0 [ 104.962214][ T24] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 104.962263][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.962285][ T24] usb 2-1: Product: syz [ 104.962300][ T24] usb 2-1: Manufacturer: syz [ 104.962317][ T24] usb 2-1: SerialNumber: syz [ 104.969875][ T24] usb 2-1: config 0 descriptor?? [ 105.007061][ T24] smsc75xx v1.0.0 [ 105.128507][ T5925] usb 1-1: USB disconnect, device number 2 [ 105.197732][ T5162] Bluetooth: hci2: command tx timeout [ 105.277422][ T5162] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 105.286804][ T5162] Bluetooth: hci3: Injecting HCI hardware error event [ 105.294733][ T5162] Bluetooth: hci3: hardware error 0x00 [ 105.596795][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 105.596832][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 105.696646][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 105.729624][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 105.776347][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 105.806381][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 105.848830][ T24] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 105.883045][ T24] usb 2-1: USB disconnect, device number 2 [ 106.016426][ T6107] syzkaller1: entered promiscuous mode [ 106.021967][ T6107] syzkaller1: entered allmulticast mode [ 106.037130][ T6107] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 106.802110][ T6125] netlink: 'syz.1.67': attribute type 10 has an invalid length. [ 106.809970][ T6125] netlink: 40 bytes leftover after parsing attributes in process `syz.1.67'. [ 106.819790][ T6125] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 106.827352][ T6125] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 106.849852][ T6125] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 107.079620][ T6137] dns_resolver: Unsupported server list version (0) [ 107.294225][ T6148] netlink: 'syz.2.76': attribute type 27 has an invalid length. [ 107.335846][ T6135] "syz.0.71" (6135) uses obsolete ecb(arc4) skcipher [ 107.436778][ T5162] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 107.556727][ T983] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 107.736451][ T983] usb 4-1: Using ep0 maxpacket: 8 [ 107.753520][ T983] usb 4-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 107.772288][ T983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.789733][ T983] usb 4-1: Product: syz [ 107.803606][ T983] usb 4-1: Manufacturer: syz [ 107.814114][ T983] usb 4-1: SerialNumber: syz [ 107.941785][ T6154] infiniband syz2: set active [ 107.948713][ T6154] infiniband syz2: added bond_slave_0 [ 108.101401][ T6154] RDS/IB: syz2: added [ 108.261373][ T983] mxuport 4-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 108.291521][ T983] mxuport 4-1:254.0: probe with driver mxuport failed with error -5 [ 108.336716][ T983] usb 4-1: USB disconnect, device number 3 [ 112.456403][ T983] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 112.547379][ T5908] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 112.621420][ T983] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 112.630942][ T983] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 112.644505][ T983] usb 4-1: config 220 has no interface number 2 [ 112.654952][ T983] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 112.674510][ T983] usb 4-1: config 220 interface 0 has no altsetting 0 [ 112.685258][ T983] usb 4-1: config 220 interface 76 has no altsetting 0 [ 112.706448][ T983] usb 4-1: config 220 interface 1 has no altsetting 0 [ 112.718326][ T983] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 112.729792][ T5908] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 112.743732][ T983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.752201][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.761740][ T983] usb 4-1: Product: syz [ 112.765946][ T983] usb 4-1: Manufacturer: syz [ 112.774474][ T5908] usb 2-1: config 0 descriptor?? [ 112.789154][ T983] usb 4-1: SerialNumber: syz [ 112.797843][ T5908] cp210x 2-1:0.0: cp210x converter detected [ 113.037253][ T5908] usb 2-1: cp210x converter now attached to ttyUSB0 [ 113.076161][ T983] usb 4-1: selecting invalid altsetting 0 [ 113.093309][ T983] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 113.126553][ T983] uvcvideo 4-1:220.0: No valid video chain found. [ 113.163444][ T983] usb 4-1: selecting invalid altsetting 0 [ 113.175513][ T983] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 113.217865][ T983] usb 4-1: USB disconnect, device number 4 [ 113.299487][ T6217] netlink: 112 bytes leftover after parsing attributes in process `syz.1.99'. [ 113.420936][ T983] usb 2-1: USB disconnect, device number 3 [ 113.461213][ T983] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 113.474598][ T983] cp210x 2-1:0.0: device disconnected [ 113.555232][ T6259] capability: warning: `syz.0.118' uses 32-bit capabilities (legacy support in use) [ 114.019860][ T6217] syz.1.99 (6217) used greatest stack depth: 17832 bytes left [ 114.050892][ T6272] xfrm0: mtu less than device minimum [ 117.682614][ T5162] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 117.693206][ T5162] Bluetooth: hci0: Injecting HCI hardware error event [ 117.702041][ T5162] Bluetooth: hci0: hardware error 0x00 [ 117.749316][ T6404] Zero length message leads to an empty skb [ 117.820330][ T6406] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 117.870246][ T5855] Bluetooth: hci1: unexpected subevent 0x0a length: 122 > 30 [ 118.054969][ T6421] netlink: 'syz.1.180': attribute type 46 has an invalid length. [ 119.261374][ T6456] comedi comedi0: Minor 3 specified more than once! [ 119.567060][ T5925] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 119.730801][ T5925] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 119.741377][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.760163][ T5925] usb 1-1: config 0 descriptor?? [ 119.766345][ T5162] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 119.793249][ T5925] cp210x 1-1:0.0: cp210x converter detected [ 119.807362][ T6475] Invalid ELF header magic: != ELF [ 119.916364][ T5162] Bluetooth: hci1: command tx timeout [ 120.002367][ T5925] usb 1-1: cp210x converter now attached to ttyUSB0 [ 120.347363][ T6488] netlink: 112 bytes leftover after parsing attributes in process `syz.0.188'. [ 120.690183][ T5925] usb 1-1: USB disconnect, device number 3 [ 120.760720][ T5925] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 120.784271][ T5925] cp210x 1-1:0.0: device disconnected [ 120.841953][ T6502] vlan0: entered promiscuous mode [ 120.848285][ T6502] vlan0: entered allmulticast mode [ 120.853872][ T6502] veth0_vlan: entered allmulticast mode [ 121.799296][ T6543] nftables ruleset with unbound chain [ 122.256344][ T6559] syz_tun: entered allmulticast mode [ 122.526934][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.242'. [ 122.658982][ T5162] Bluetooth: hci2: Malformed LE Event: 0x0d [ 122.874440][ T6589] comedi comedi0: No channels found! [ 122.887968][ T6590] warning: `syz.2.251' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 123.390275][ T6616] netlink: 'syz.1.261': attribute type 2 has an invalid length. [ 123.421708][ T6616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.261'. [ 124.396472][ T983] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 124.547525][ T983] usb 1-1: Using ep0 maxpacket: 8 [ 124.563374][ T983] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 124.582242][ T983] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 124.592779][ T983] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 124.601266][ T983] usb 1-1: Product: syz [ 124.605517][ T983] usb 1-1: Manufacturer: syz [ 124.610217][ T983] usb 1-1: SerialNumber: syz [ 124.776357][ T5925] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 124.808296][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 124.822789][ T983] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 124.831931][ T983] usb 1-1: Handspring Visor / Palm OS: port 0, is for HotSync use [ 124.840046][ T983] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 124.848201][ T983] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 124.948462][ T5925] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 124.959919][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.969671][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 124.977747][ T5925] usb 4-1: Product: syz [ 124.982098][ T5925] usb 4-1: Manufacturer: syz [ 124.987529][ T5925] usb 4-1: SerialNumber: syz [ 124.993273][ T10] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 125.003932][ T10] usb 2-1: config 0 has no interface number 0 [ 125.012596][ T5925] usb 4-1: config 0 descriptor?? [ 125.020421][ T10] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 125.035782][ T5925] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 125.044397][ T983] usb 1-1: palm_os_3_probe - error -71 getting bytes available request [ 125.052333][ T10] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 125.059285][ T983] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 125.066575][ T10] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 125.081890][ T983] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 125.095818][ T10] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 125.107100][ T983] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 125.107233][ T10] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 125.122490][ T983] usb 1-1: USB disconnect, device number 4 [ 125.162651][ T983] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 125.170837][ T10] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 125.179637][ T983] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 125.194767][ T983] visor 1-1:1.0: device disconnected [ 125.208875][ T10] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 125.219165][ T10] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 125.229557][ T10] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.252888][ T10] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 125.262541][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.270738][ T10] usb 2-1: Product: syz [ 125.275050][ T10] usb 2-1: Manufacturer: syz [ 125.279881][ T10] usb 2-1: SerialNumber: syz [ 125.287735][ T10] usb 2-1: config 0 descriptor?? [ 125.294175][ T6678] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 125.304047][ T10] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 125.314421][ T10] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 125.453820][ T5925] input: sonixb as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 125.531211][ T5925] usb 2-1: USB disconnect, device number 4 [ 125.659184][ T10] usb 4-1: USB disconnect, device number 5 [ 126.456425][ T5925] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 126.616385][ T5925] usb 1-1: Using ep0 maxpacket: 16 [ 126.623317][ T5925] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.633486][ T5925] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 126.644333][ T5925] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 126.653663][ T5925] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 126.662180][ T5925] usb 1-1: Manufacturer: syz [ 126.670391][ T5925] usb 1-1: config 0 descriptor?? [ 126.898158][ T6710] netlink: 17223 bytes leftover after parsing attributes in process `syz.0.300'. [ 126.923549][ T983] usb 1-1: USB disconnect, device number 5 [ 127.059625][ T6730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.308'. [ 128.846453][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 129.018388][ T10] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 129.036547][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.074655][ T10] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 129.087592][ T10] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 129.099301][ T10] usb 1-1: Manufacturer: syz [ 129.110522][ T10] usb 1-1: config 0 descriptor?? [ 129.200391][ T5887] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 129.208457][ T10] rc_core: IR keymap rc-hauppauge not found [ 129.214488][ T10] Registered IR keymap rc-empty [ 129.224364][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 129.238672][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 129.343787][ T10] usb 1-1: USB disconnect, device number 6 [ 129.350020][ T5925] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 129.386635][ T5887] usb 4-1: Using ep0 maxpacket: 32 [ 129.394123][ T5887] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.404853][ T5887] usb 4-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 129.416319][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.427408][ T5887] usb 4-1: config 0 descriptor?? [ 129.443646][ T5887] dvb-usb: found a 'TeVii S662' in warm state. [ 129.450146][ T5887] dw2102: su3000_power_ctrl: 1, initialized 0 [ 129.457197][ T5887] dvb-usb: bulk message failed: -22 (2/0) [ 129.466949][ T5887] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 129.478445][ T5887] dvbdev: DVB: registering new adapter (TeVii S662) [ 129.485353][ T5887] usb 4-1: media controller created [ 129.491118][ T5887] dvb-usb: bulk message failed: -22 (6/0) [ 129.498299][ T5887] dw2102: i2c transfer failed. [ 129.504045][ T5887] dvb-usb: bulk message failed: -22 (6/0) [ 129.509941][ T5887] dw2102: i2c transfer failed. [ 129.514813][ T5887] dvb-usb: bulk message failed: -22 (6/0) [ 129.520619][ T5925] usb 2-1: Using ep0 maxpacket: 16 [ 129.525898][ T5887] dw2102: i2c transfer failed. [ 129.531190][ T5887] dvb-usb: bulk message failed: -22 (6/0) [ 129.537964][ T5887] dw2102: i2c transfer failed. [ 129.542999][ T5887] dvb-usb: bulk message failed: -22 (6/0) [ 129.549868][ T5887] dw2102: i2c transfer failed. [ 129.550040][ T5925] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.564818][ T5887] dvb-usb: bulk message failed: -22 (6/0) [ 129.570725][ T5887] dw2102: i2c transfer failed. [ 129.575696][ T5887] dvb-usb: MAC address: 02:02:02:02:02:02 [ 129.581514][ T5925] usb 2-1: config 0 interface 0 has no altsetting 0 [ 129.588302][ T5925] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 129.607434][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.621748][ T5887] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 129.633928][ T5925] usb 2-1: config 0 descriptor?? [ 129.644474][ T6822] dvb-usb: bulk message failed: -22 (3/0) [ 129.657859][ T6822] dw2102: i2c transfer failed. [ 129.668249][ T6822] dvb-usb: bulk message failed: -22 (4/0) [ 129.675717][ T6822] dw2102: i2c transfer failed. [ 129.681788][ T5887] dvb-usb: bulk message failed: -22 (3/0) [ 129.688896][ T5887] dw2102: command 0x0e transfer failed. [ 129.694697][ T5887] dvb-usb: bulk message failed: -22 (3/0) [ 129.700735][ T5887] dw2102: command 0x0e transfer failed. [ 130.016437][ T5887] dvb-usb: bulk message failed: -22 (3/0) [ 130.022626][ T5887] dw2102: command 0x0e transfer failed. [ 130.051399][ T5887] dvb-usb: bulk message failed: -22 (3/0) [ 130.091968][ T5887] dw2102: command 0x0e transfer failed. [ 130.108547][ T5887] dvb-usb: bulk message failed: -22 (1/0) [ 130.118553][ T5925] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 130.125668][ T5925] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 130.132971][ T5887] dw2102: command 0x51 transfer failed. [ 130.138714][ T5887] dvb-usb: bulk message failed: -22 (5/0) [ 130.144650][ T5887] dw2102: i2c probe for address 0x68 failed. [ 130.151794][ T5925] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 130.159899][ T5887] dvb-usb: bulk message failed: -22 (5/0) [ 130.165916][ T5887] dw2102: i2c probe for address 0x69 failed. [ 130.172102][ T5925] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 130.179404][ T5925] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 130.187253][ T5887] dvb-usb: bulk message failed: -22 (5/0) [ 130.193285][ T5887] dw2102: i2c probe for address 0x6a failed. [ 130.200041][ T5925] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 130.207498][ T5887] dw2102: probing for demodulator failed. Is the external power switched on? [ 130.216720][ T5925] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 130.223925][ T5925] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 130.231343][ T5887] dvb-usb: no frontend was attached by 'TeVii S662' [ 130.238647][ T5925] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 130.245749][ T5925] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 130.266807][ T5925] cougar 0003:060B:500A.0001: ignoring exceeding usage max [ 130.275378][ T5925] cougar 0003:060B:500A.0001: unexpected long global item [ 130.312645][ T5925] cougar 0003:060B:500A.0001: parse failed [ 130.328202][ T5925] cougar 0003:060B:500A.0001: probe with driver cougar failed with error -22 [ 130.354966][ T5925] usb 2-1: USB disconnect, device number 5 [ 130.386170][ T5887] rc_core: IR keymap rc-tt-1500 not found [ 130.392365][ T5887] Registered IR keymap rc-empty [ 130.403796][ T5887] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 130.427425][ T5887] input: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input7 [ 130.455155][ T5887] dvb-usb: schedule remote query interval to 250 msecs. [ 130.464658][ T5887] dw2102: su3000_power_ctrl: 0, initialized 1 [ 130.471256][ T5887] dvb-usb: TeVii S662 successfully initialized and connected. [ 130.495608][ T5887] usb 4-1: USB disconnect, device number 6 [ 130.589019][ T5887] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 130.937037][ T5887] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 131.096364][ T5887] usb 4-1: Using ep0 maxpacket: 8 [ 131.103347][ T5887] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 131.115554][ T5887] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 131.124882][ T5887] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 131.133301][ T5887] usb 4-1: Product: syz [ 131.137731][ T5887] usb 4-1: Manufacturer: syz [ 131.142494][ T5887] usb 4-1: SerialNumber: syz [ 131.468373][ T5887] usb 4-1: palm_os_3_probe - error -110 getting connection information [ 131.486726][ T5887] visor 4-1:1.0: probe with driver visor failed with error -110 [ 131.692491][ T6887] xt_l2tp: invalid flags combination: 0 [ 133.284983][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.294117][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.352262][ T5925] usb 4-1: USB disconnect, device number 7 [ 133.465807][ T6962] netlink: 40 bytes leftover after parsing attributes in process `syz.3.399'. [ 133.488161][ T6962] tipc: Invalid UDP bearer configuration [ 133.488236][ T6962] tipc: Enabling of bearer rejected, failed to enable media [ 133.847535][ T5925] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 133.866969][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 134.010073][ T5925] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 134.022671][ T5925] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 134.033512][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 134.038871][ T5925] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 134.049352][ T5925] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 134.062940][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.074896][ T5925] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 134.092674][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.102869][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 134.112460][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.121183][ T5887] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 134.139462][ T5925] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 134.151539][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 134.161096][ T10] usb 4-1: config 0 descriptor?? [ 134.174969][ T5925] usb 1-1: Product: syz [ 134.181131][ T5925] usb 1-1: Manufacturer: syz [ 134.222920][ T5925] cdc_wdm 1-1:1.0: skipping garbage [ 134.229481][ T5925] cdc_wdm 1-1:1.0: skipping garbage [ 134.248960][ T5925] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 134.255145][ T5925] cdc_wdm 1-1:1.0: Unknown control protocol [ 134.338507][ T5887] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 134.347817][ T5887] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 134.359004][ T5887] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 134.370792][ T5887] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 134.383345][ T5887] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 134.397150][ T5887] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 134.405003][ T5887] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 134.416007][ T5887] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 134.428428][ T5887] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 134.431893][ T5894] usb 1-1: USB disconnect, device number 7 [ 134.446262][ T5887] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 134.466424][ T5887] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 134.474059][ T5887] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 134.485121][ T5887] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 134.497246][ T5887] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 134.508595][ T5887] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 134.521577][ T5887] usb 2-1: string descriptor 0 read error: -22 [ 134.529238][ T5887] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 134.539327][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.561085][ T5887] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 134.612175][ T10] savu 0003:1E7D:2D5A.0002: unknown global tag 0xd [ 134.619585][ T10] savu 0003:1E7D:2D5A.0002: item 0 4 1 13 parsing failed [ 134.628027][ T10] savu 0003:1E7D:2D5A.0002: parse failed [ 134.634090][ T10] savu 0003:1E7D:2D5A.0002: probe with driver savu failed with error -22 [ 134.759031][ T5894] usb 2-1: USB disconnect, device number 6 [ 134.810351][ T10] usb 4-1: USB disconnect, device number 8 [ 135.246340][ T5894] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 135.397077][ T5894] usb 1-1: Using ep0 maxpacket: 8 [ 135.426604][ T5894] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 135.455527][ T5894] usb 1-1: config 0 has no interface number 0 [ 135.464643][ T7010] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 135.477082][ T5894] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 135.510242][ T5894] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 135.549104][ T5894] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 135.580108][ T5894] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 135.612813][ T5894] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 135.643062][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.671764][ T5894] usb 1-1: config 0 descriptor?? [ 135.707341][ T5894] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 137.396331][ T983] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 137.571191][ T983] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 137.580608][ T983] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 137.592432][ T983] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 137.605516][ T983] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 137.617849][ T983] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 137.640085][ T983] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 137.649741][ T983] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 137.659999][ T983] usb 2-1: Product: syz [ 137.664982][ T983] usb 2-1: Manufacturer: syz [ 137.690593][ T983] cdc_wdm 2-1:1.0: skipping garbage [ 137.697095][ T983] cdc_wdm 2-1:1.0: skipping garbage [ 137.707709][ T983] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 137.713857][ T983] cdc_wdm 2-1:1.0: Unknown control protocol [ 137.715073][ T7079] xt_l2tp: missing protocol rule (udp|l2tpip) [ 137.720444][ T5908] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 137.886369][ T5908] usb 4-1: Using ep0 maxpacket: 32 [ 137.898800][ T5908] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.914842][ T5908] usb 4-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 137.930171][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.947058][ T5908] usb 4-1: config 0 descriptor?? [ 137.958249][ T5908] dvb-usb: found a 'TeVii S662' in warm state. [ 137.971650][ T5908] dw2102: su3000_power_ctrl: 1, initialized 0 [ 137.982975][ T5908] dvb-usb: bulk message failed: -22 (2/0) [ 137.994483][ T5908] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 138.008512][ T10] usb 1-1: USB disconnect, device number 8 [ 138.008578][ C1] ldusb 1-1:0.55: usb_submit_urb failed (-19) [ 138.029838][ T5908] dvbdev: DVB: registering new adapter (TeVii S662) [ 138.050216][ T5908] usb 4-1: media controller created [ 138.050889][ T10] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 138.066702][ T5908] dvb-usb: bulk message failed: -22 (6/0) [ 138.073714][ T5908] dw2102: i2c transfer failed. [ 138.084198][ T5908] dvb-usb: bulk message failed: -22 (6/0) [ 138.096650][ T5908] dw2102: i2c transfer failed. [ 138.101478][ T5908] dvb-usb: bulk message failed: -22 (6/0) [ 138.107699][ T5908] dw2102: i2c transfer failed. [ 138.112510][ T5908] dvb-usb: bulk message failed: -22 (6/0) [ 138.134840][ T5908] dw2102: i2c transfer failed. [ 138.146422][ T5908] dvb-usb: bulk message failed: -22 (6/0) [ 138.167206][ T5908] dw2102: i2c transfer failed. [ 138.177757][ T7073] dvb-usb: bulk message failed: -22 (27/0) [ 138.187599][ T7073] dw2102: i2c transfer failed. [ 138.192760][ T5908] dvb-usb: bulk message failed: -22 (6/0) [ 138.200420][ T5908] dw2102: i2c transfer failed. [ 138.205325][ T5908] dvb-usb: MAC address: 02:02:02:02:02:02 [ 138.461873][ T5908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 138.509604][ T5908] dvb-usb: bulk message failed: -22 (3/0) [ 138.867842][ T5908] dw2102: command 0x0e transfer failed. [ 138.873559][ T5908] dvb-usb: bulk message failed: -22 (3/0) [ 138.880014][ T5908] dw2102: command 0x0e transfer failed. [ 138.985126][ T10] IPVS: starting estimator thread 0... [ 139.186903][ T5908] dvb-usb: bulk message failed: -22 (3/0) [ 139.205513][ T5908] dw2102: command 0x0e transfer failed. [ 139.212665][ T7111] IPVS: using max 24 ests per chain, 57600 per kthread [ 139.226337][ T5908] dvb-usb: bulk message failed: -22 (3/0) [ 139.232604][ T5908] dw2102: command 0x0e transfer failed. [ 139.239759][ T5908] dvb-usb: bulk message failed: -22 (1/0) [ 139.245627][ T5908] dw2102: command 0x51 transfer failed. [ 139.252427][ T5908] dvb-usb: bulk message failed: -22 (5/0) [ 139.258812][ T5908] dw2102: i2c probe for address 0x68 failed. [ 139.265231][ T5908] dvb-usb: bulk message failed: -22 (5/0) [ 139.273196][ T5908] dw2102: i2c probe for address 0x69 failed. [ 139.289198][ T5908] dvb-usb: bulk message failed: -22 (5/0) [ 139.302276][ T5908] dw2102: i2c probe for address 0x6a failed. [ 139.312533][ T5908] dw2102: probing for demodulator failed. Is the external power switched on? [ 139.321921][ T5908] dvb-usb: no frontend was attached by 'TeVii S662' [ 139.437485][ T5908] rc_core: IR keymap rc-tt-1500 not found [ 139.453611][ T5908] Registered IR keymap rc-empty [ 139.467700][ T5908] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 139.512733][ T5908] input: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input8 [ 139.559536][ T5908] dvb-usb: schedule remote query interval to 250 msecs. [ 139.578191][ T5908] dw2102: su3000_power_ctrl: 0, initialized 1 [ 139.591653][ T5908] dvb-usb: TeVii S662 successfully initialized and connected. [ 139.608215][ T5908] usb 4-1: USB disconnect, device number 9 [ 139.721791][ T5908] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 140.036369][ T5908] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 140.194915][ T5894] usb 2-1: USB disconnect, device number 7 [ 140.220811][ T5908] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 140.264624][ T5908] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 140.286731][ T5908] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 140.296161][ T5908] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 140.308050][ T5908] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 140.321463][ T5908] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 140.332541][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 140.340940][ T5908] usb 4-1: Product: syz [ 140.345410][ T5908] usb 4-1: Manufacturer: syz [ 140.362606][ T5908] cdc_wdm 4-1:1.0: skipping garbage [ 140.368178][ T5908] cdc_wdm 4-1:1.0: skipping garbage [ 140.374745][ T5908] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 140.380884][ T5908] cdc_wdm 4-1:1.0: Unknown control protocol [ 140.506104][ T7169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.476'. [ 140.959350][ T5908] usb 4-1: USB disconnect, device number 10 [ 141.952357][ T7223] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 142.051621][ T7227] ======================================================= [ 142.051621][ T7227] WARNING: The mand mount option has been deprecated and [ 142.051621][ T7227] and is ignored by this kernel. Remove the mand [ 142.051621][ T7227] option from the mount to silence this warning. [ 142.051621][ T7227] ======================================================= [ 142.142210][ T7227] evm: overlay not supported [ 143.416668][ T5908] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 143.649509][ T5908] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 143.665721][ T5908] usb 2-1: config 0 has no interface number 0 [ 143.728000][ T5908] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 143.754952][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.774494][ T5908] usb 2-1: Product: syz [ 143.779452][ T5908] usb 2-1: Manufacturer: syz [ 143.784125][ T5908] usb 2-1: SerialNumber: syz [ 143.813075][ T5908] usb 2-1: config 0 descriptor?? [ 144.039985][ T5908] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 144.064985][ T5908] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 144.068715][ T7293] netlink: 'syz.0.526': attribute type 16 has an invalid length. [ 144.084542][ T7293] netlink: 'syz.0.526': attribute type 2 has an invalid length. [ 144.086575][ T5908] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 144.093814][ T7293] netlink: 'syz.0.526': attribute type 2 has an invalid length. [ 144.106354][ T5908] usb 2-1: media controller created [ 144.116391][ T7293] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.526'. [ 144.153011][ T5908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 144.990780][ T7313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.534'. [ 145.276797][ T5908] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 145.377777][ T5908] usb 2-1: USB disconnect, device number 8 [ 145.826316][ T5887] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 145.976741][ T5887] usb 4-1: Using ep0 maxpacket: 16 [ 145.992640][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.011458][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.031644][ T5887] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 146.056382][ T5887] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 146.065485][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.083304][ T5887] usb 4-1: config 0 descriptor?? [ 146.305978][ T7346] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 146.551055][ T5887] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 146.579266][ T5887] hid_parser_main: 50 callbacks suppressed [ 146.579294][ T5887] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 146.593636][ T5887] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 146.601741][ T5887] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 146.609521][ T5887] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 146.621126][ T5887] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 146.628874][ T5887] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 146.654490][ T5887] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 146.662354][ T5887] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 146.673861][ T5887] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 146.681897][ T5887] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 146.715886][ T5887] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0003/input/input9 [ 146.809955][ T5887] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 146.856549][ T5887] usb 4-1: USB disconnect, device number 11 [ 146.955080][ T7361] fido_id[7361]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 147.387657][ T7371] netlink: 28 bytes leftover after parsing attributes in process `syz.3.558'. [ 147.547165][ T7379] netlink: 20 bytes leftover after parsing attributes in process `syz.2.561'. [ 148.576964][ T7427] netlink: 'syz.3.583': attribute type 25 has an invalid length. [ 148.594563][ T7427] netlink: 'syz.3.583': attribute type 28 has an invalid length. [ 148.805416][ T7440] netlink: 1 bytes leftover after parsing attributes in process `syz.1.589'. [ 149.026444][ T5887] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 149.176338][ T5887] usb 4-1: Using ep0 maxpacket: 8 [ 149.184905][ T5887] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 149.201007][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.250430][ T5887] pvrusb2: Hardware description: Terratec Grabster AV400 [ 149.277335][ T5887] pvrusb2: ********** [ 149.281793][ T5887] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 149.302417][ T5887] pvrusb2: Important functionality might not be entirely working. [ 149.333241][ T5887] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 149.366071][ T5887] pvrusb2: ********** [ 149.433245][ T7457] random: crng reseeded on system resumption [ 149.457823][ T2345] pvrusb2: Invalid write control endpoint [ 149.531428][ T2345] pvrusb2: Invalid write control endpoint [ 149.548933][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 149.573187][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 149.584520][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 149.595121][ T2345] pvrusb2: Device being rendered inoperable [ 149.609381][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 149.635851][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 149.659712][ T2345] pvrusb2: Attached sub-driver cx25840 [ 149.667078][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 149.681020][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 149.698362][ T7438] pvrusb2: Attempted to execute control transfer when device not ok [ 149.728611][ T5887] usb 4-1: USB disconnect, device number 12 [ 150.021066][ T7472] capability: warning: `syz.2.604' uses deprecated v2 capabilities in a way that may be insecure [ 150.100208][ T7474] netlink: 'syz.2.605': attribute type 2 has an invalid length. [ 150.108072][ T5925] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 150.267452][ T5925] usb 2-1: Using ep0 maxpacket: 32 [ 150.275174][ T5925] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 150.285106][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.302567][ T5925] usb 2-1: config 0 descriptor?? [ 150.536750][ T5925] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 150.549120][ T5925] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 150.562917][ T5925] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 150.573774][ T5925] usb 2-1: media controller created [ 150.609600][ T5925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 150.740665][ T5925] az6027: usb out operation failed. (-71) [ 150.772705][ T5925] az6027: usb out operation failed. (-71) [ 150.787113][ T5925] stb0899_attach: Driver disabled by Kconfig [ 150.794878][ T5925] az6027: no front-end attached [ 150.794878][ T5925] [ 150.810188][ T5925] az6027: usb out operation failed. (-71) [ 150.815987][ T5925] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 150.835302][ T5925] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10 [ 150.863565][ T5925] dvb-usb: schedule remote query interval to 400 msecs. [ 150.881041][ T5925] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 150.909676][ T5925] usb 2-1: USB disconnect, device number 9 [ 151.043522][ T5925] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 151.214537][ T5162] Bluetooth: hci1: connection err: -111 [ 151.603798][ T5162] Bluetooth: hci2: Malformed LE Event: 0x0d [ 151.726501][ T5925] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 151.767294][ T7544] netlink: 'syz.3.635': attribute type 25 has an invalid length. [ 151.896440][ T5925] usb 2-1: Using ep0 maxpacket: 8 [ 151.905350][ T5925] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 151.925393][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.957283][ T5925] pvrusb2: Hardware description: Terratec Grabster AV400 [ 151.976471][ T5925] pvrusb2: ********** [ 151.980526][ T5925] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 151.998420][ T5925] pvrusb2: Important functionality might not be entirely working. [ 152.007238][ T5925] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 152.019290][ T5925] pvrusb2: ********** [ 152.165619][ T2345] pvrusb2: Invalid write control endpoint [ 152.243325][ T2345] pvrusb2: Invalid write control endpoint [ 152.253605][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 152.267936][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 152.275621][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 152.286530][ T2345] pvrusb2: Device being rendered inoperable [ 152.292531][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 152.301584][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 152.311128][ T2345] pvrusb2: Attached sub-driver cx25840 [ 152.324423][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 152.335095][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 152.343092][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 152.377987][ T7531] pvrusb2: Attempted to execute control transfer when device not ok [ 152.387826][ T5887] usb 2-1: USB disconnect, device number 10 [ 152.478131][ T5162] Bluetooth: hci1: command 0x0406 tx timeout [ 152.506593][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 152.512615][ T10] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 152.524280][ T10] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 152.532717][ T10] usb 4-1: config 0 has no interface number 0 [ 152.543409][ T10] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 152.543876][ T5855] Bluetooth: hci2: connection err: -111 [ 152.552232][ T10] usb 4-1: config 0 has no interface number 0 [ 152.570799][ T10] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 152.579635][ T10] usb 4-1: config 0 has no interface number 0 [ 152.588518][ T10] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 152.597194][ T10] usb 4-1: config 0 has no interface number 0 [ 152.604630][ T10] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 152.613515][ T10] usb 4-1: config 0 has no interface number 0 [ 152.639373][ T10] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 152.647764][ T10] usb 4-1: config 0 has no interface number 0 [ 152.678596][ T10] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 152.690173][ T10] usb 4-1: config 0 has no interface number 0 [ 152.698371][ T10] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 152.708019][ T10] usb 4-1: config 0 has no interface number 0 [ 152.728998][ T10] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 152.747259][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.759413][ T10] usb 4-1: Product: syz [ 152.763730][ T10] usb 4-1: Manufacturer: syz [ 152.769077][ T10] usb 4-1: SerialNumber: syz [ 152.787158][ T10] usb 4-1: config 0 descriptor?? [ 152.797483][ T10] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz) [ 153.002277][ T10] etas_es58x 4-1:0.2: could not parse product info: '' [ 153.551810][ C1] etas_es58x 4-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x015D. [ 153.563352][ C1] etas_es58x 4-1:0.2: es58x_check_rx_urb: Biggest expected size for rx urb_cmd is 7809 but receive a command of size 46447 [ 153.576909][ C1] etas_es58x 4-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 153.585045][ C1] etas_es58x 4-1:0.2: es58x_split_urb() returned error -EBADMSG [ 153.597307][ T5507] etas_es58x 4-1:0.2 can0: bit-timing not yet defined [ 153.752874][ C1] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 153.762265][ C1] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 153.771542][ C1] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 153.780820][ C1] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 153.790013][ C1] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 153.799591][ C1] etas_es58x 4-1:0.2 can0: es58x_write_bulk_callback: error -EPROTO [ 153.807922][ T5507] etas_es58x 4-1:0.2 can0: es58x_open: Could not open the network device: -EINVAL [ 153.810062][ T5894] usb 4-1: USB disconnect, device number 13 [ 153.825789][ T5894] etas_es58x 4-1:0.2: Disconnecting syz syz [ 154.230398][ T7609] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 154.676326][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 154.837438][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 154.869147][ T24] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 154.899080][ T24] usb 1-1: config 179 has no interface number 0 [ 154.929122][ T24] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 154.968317][ T24] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 154.997686][ T24] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 155.028209][ T7641] netlink: 16 bytes leftover after parsing attributes in process `syz.2.663'. [ 155.034639][ T24] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 155.133568][ T24] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 155.167692][ T24] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 155.190294][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.239843][ T7621] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 155.515664][ T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input11 [ 156.066405][ T24] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 156.239749][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 156.268882][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 156.300969][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 156.329351][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 156.392689][ T983] usb 1-1: USB disconnect, device number 9 [ 156.392757][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 156.408199][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 156.429755][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 156.440122][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.455970][ T24] usb 4-1: config 0 descriptor?? [ 156.465222][ T7663] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 156.921964][ T24] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 156.963750][ T24] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 156.981851][ T24] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 156.996359][ T24] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 157.016635][ T24] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 157.036048][ T24] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 157.057294][ T24] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 157.082264][ T24] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 157.114145][ T24] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 157.124185][ T24] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 157.168689][ T24] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 157.218860][ T24] usb 4-1: USB disconnect, device number 14 [ 157.338995][ T7690] fido_id[7690]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 157.733829][ T7699] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input12 [ 157.836328][ T5925] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 158.000033][ T5925] usb 1-1: Using ep0 maxpacket: 16 [ 158.012841][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 158.036441][ T5925] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 158.053192][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.072563][ T5925] usb 1-1: Product: syz [ 158.084124][ T5925] usb 1-1: Manufacturer: syz [ 158.096329][ T5894] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 158.096494][ T5925] usb 1-1: SerialNumber: syz [ 158.130858][ T5925] usb 1-1: config 0 descriptor?? [ 158.141172][ T5925] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 158.150900][ T5925] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 158.267719][ T5894] usb 2-1: Using ep0 maxpacket: 16 [ 158.286554][ T5894] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.310045][ T5894] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 158.330437][ T5894] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 158.366357][ T5894] usb 2-1: Manufacturer: syz [ 158.375356][ T5894] usb 2-1: config 0 descriptor?? [ 158.416731][ T5925] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 158.499354][ T5925] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 158.524625][ T5925] em28xx 1-1:0.0: board has no eeprom [ 158.596419][ T5925] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 158.607040][ T5887] usb 2-1: USB disconnect, device number 11 [ 158.613841][ T5925] em28xx 1-1:0.0: dvb set to bulk mode. [ 158.623204][ T10] em28xx 1-1:0.0: Binding DVB extension [ 158.646766][ T5925] usb 1-1: USB disconnect, device number 10 [ 158.689685][ T5925] em28xx 1-1:0.0: Disconnecting em28xx [ 158.726533][ T7739] input: syz1 as /devices/virtual/input/input13 [ 158.745073][ T10] em28xx 1-1:0.0: Registering input extension [ 158.764102][ T5925] em28xx 1-1:0.0: Closing input extension [ 158.798975][ T5925] em28xx 1-1:0.0: Freeing device [ 159.214173][ T7752] netlink: 360 bytes leftover after parsing attributes in process `syz.1.699'. [ 159.233388][ T5894] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 159.415026][ T5894] usb 4-1: Using ep0 maxpacket: 8 [ 159.424919][ T5894] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 159.445544][ T5894] usb 4-1: config 179 has no interface number 0 [ 159.452190][ T5894] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 159.465569][ T5894] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 159.477147][ T5894] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 159.490621][ T5894] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 159.503060][ T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 159.512026][ T5894] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 159.533984][ T5894] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 159.543442][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.558994][ T7746] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 159.656386][ T5887] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 159.678149][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 159.687755][ T24] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 159.696617][ T24] usb 1-1: config 0 has no interface number 0 [ 159.702922][ T24] usb 1-1: config 0 interface 12 has no altsetting 0 [ 159.714270][ T24] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 159.723701][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.731977][ T24] usb 1-1: Product: syz [ 159.736562][ T24] usb 1-1: Manufacturer: syz [ 159.741329][ T24] usb 1-1: SerialNumber: syz [ 159.750162][ T24] usb 1-1: config 0 descriptor?? [ 159.793508][ T5894] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input15 [ 159.826978][ T5887] usb 2-1: Using ep0 maxpacket: 8 [ 159.849466][ T5887] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 159.859620][ T5887] usb 2-1: config 0 has no interface number 0 [ 159.866864][ T5887] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 159.879737][ T5887] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 159.893729][ T5887] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 159.908474][ T5887] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 159.922071][ T5887] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 159.931245][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.943674][ T5887] usb 2-1: config 0 descriptor?? [ 159.961874][ T5887] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 159.991097][ T5887] usb 4-1: USB disconnect, device number 15 [ 159.991148][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 160.006336][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 160.153803][ T7771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.707'. [ 160.626688][ T7784] sg_write: process 363 (syz.3.712) changed security contexts after opening file descriptor, this is not allowed. [ 160.784433][ T24] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 160.792573][ T24] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 160.803073][ T24] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 160.812570][ T24] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 160.826523][ T24] usb 1-1: USB disconnect, device number 11 [ 161.572470][ T5894] IPVS: starting estimator thread 0... [ 161.580635][ T7796] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 161.686456][ T7799] IPVS: using max 25 ests per chain, 60000 per kthread [ 161.832032][ T7805] netlink: 28 bytes leftover after parsing attributes in process `syz.2.720'. [ 162.006390][ T5894] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 162.117370][ C1] ------------[ cut here ]------------ [ 162.123057][ C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 162.133848][ C1] WARNING: net/mac80211/rate.c:406 at __rate_control_send_low+0x5e2/0x820, CPU#1: syz-executor/5841 [ 162.144987][ C1] Modules linked in: [ 162.149143][ C1] CPU: 1 UID: 0 PID: 5841 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 162.158766][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 162.168875][ T5925] usb 2-1: USB disconnect, device number 12 [ 162.169041][ C1] RIP: 0010:__rate_control_send_low+0x5e2/0x820 [ 162.181358][ C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 c0 90 8c 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 af 43 c0 f6 90 <0f> 0b 90 90 e9 70 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 162.201698][ C1] RSP: 0018:ffffc90000a08538 EFLAGS: 00010246 [ 162.202515][ T5925] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 162.207922][ C1] RAX: 5f8d07252ae18400 RBX: 000000000000000c RCX: ffff88807e6f3c80 [ 162.207945][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 162.231110][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 162.239174][ C1] R10: dffffc0000000000 R11: fffffbfff1bfa650 R12: ffff888077a07de8 [ 162.247413][ C1] R13: 0000000000000000 R14: ffff88807c178e80 R15: ffff88807c17b138 [ 162.255454][ C1] FS: 0000555589a08500(0000) GS:ffff888125e18000(0000) knlGS:0000000000000000 [ 162.264534][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 162.271320][ C1] CR2: 00007f2bd4b156c0 CR3: 0000000075928000 CR4: 00000000003526f0 [ 162.279504][ C1] Call Trace: [ 162.282879][ C1] [ 162.285740][ C1] rate_control_send_low+0x1a7/0x7b0 [ 162.291216][ C1] rate_control_get_rate+0x20b/0x5d0 [ 162.296572][ C1] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 162.302385][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 162.308790][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 162.314485][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 162.320310][ C1] ieee80211_beacon_get_ap+0x1868/0x1f30 [ 162.326084][ C1] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 162.332277][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 162.337928][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 162.343546][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 162.349237][ C1] __ieee80211_beacon_get+0x118e/0x1880 [ 162.354836][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 162.360699][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 162.366404][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 162.372534][ C1] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 162.378213][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 162.385694][ C1] __iterate_interfaces+0x2ab/0x590 [ 162.390997][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 162.397246][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 162.404888][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 162.411176][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 162.418923][ C1] mac80211_hwsim_beacon+0xbb/0x180 [ 162.424174][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 162.430107][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 162.435464][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 162.441310][ C1] ? read_tsc+0x9/0x20 [ 162.445438][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 162.450757][ C1] handle_softirqs+0x286/0x870 [ 162.455572][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 162.460575][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 162.466009][ C1] __irq_exit_rcu+0xca/0x1f0 [ 162.470712][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 162.475962][ C1] irq_exit_rcu+0x9/0x30 [ 162.480310][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 162.486081][ C1] [ 162.489277][ C1] [ 162.492268][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 162.498343][ C1] RIP: 0010:deref_stack_reg+0x0/0x230 [ 162.503762][ C1] Code: 4c 24 18 e8 22 a6 b1 00 48 8b 4c 24 18 e9 f2 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <55> 41 57 41 56 41 55 41 54 53 48 83 ec 20 48 89 54 24 18 49 89 f0 [ 162.523751][ C1] RSP: 0018:ffffc9000417f2f0 EFLAGS: 00000287 [ 162.529912][ C1] RAX: fffffffffffffff0 RBX: ffffffff903895d2 RCX: 0000000000000000 [ 162.538486][ C1] RDX: ffffc9000417f408 RSI: ffffc9000417f9f0 RDI: ffffc9000417f3c8 [ 162.546704][ C1] RBP: dffffc0000000000 R08: ffffc9000417f427 R09: 0000000000000000 [ 162.555143][ C1] R10: ffffc9000417f418 R11: fffff5200082fe85 R12: ffffc9000417f9f0 [ 162.563224][ C1] R13: ffffc9000417f418 R14: ffffc9000417f3c8 R15: 1ffffffff20712ba [ 162.571343][ C1] unwind_next_frame+0x17c4/0x2390 [ 162.576621][ C1] ? unwind_next_frame+0xa5/0x2390 [ 162.581831][ C1] ? dup_mmap+0x903/0x1b10 [ 162.586437][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 162.592630][ C1] arch_stack_walk+0x11c/0x150 [ 162.597501][ C1] ? copy_mm+0x13c/0x4b0 [ 162.601796][ C1] stack_trace_save+0x9c/0xe0 [ 162.606572][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 162.611977][ C1] ? css_rstat_updated+0x23a/0x4f0 [ 162.617205][ C1] ? __pfx_css_rstat_updated+0x10/0x10 [ 162.622789][ C1] kasan_save_track+0x3e/0x80 [ 162.627575][ C1] ? kasan_save_track+0x3e/0x80 [ 162.632882][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 162.637987][ C1] ? kmem_cache_alloc_noprof+0x367/0x6e0 [ 162.643763][ C1] ? vm_area_dup+0x2b/0x680 [ 162.648328][ C1] ? dup_mmap+0x903/0x1b10 [ 162.652932][ C1] __kasan_slab_alloc+0x6c/0x80 [ 162.657855][ C1] kmem_cache_alloc_noprof+0x367/0x6e0 [ 162.663523][ C1] ? vm_area_dup+0x2b/0x680 [ 162.668192][ C1] ? kmem_cache_alloc_noprof+0x210/0x6e0 [ 162.674221][ C1] vm_area_dup+0x2b/0x680 [ 162.678633][ C1] dup_mmap+0x903/0x1b10 [ 162.682972][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 162.687769][ C1] ? mm_init+0xd74/0xfa0 [ 162.692179][ C1] copy_mm+0x13c/0x4b0 [ 162.696438][ C1] copy_process+0x1706/0x3c00 [ 162.701170][ C1] ? copy_process+0x97f/0x3c00 [ 162.705989][ C1] ? __pfx_copy_process+0x10/0x10 [ 162.711127][ C1] kernel_clone+0x21e/0x840 [ 162.715859][ C1] ? css_rstat_updated+0x23a/0x4f0 [ 162.721067][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 162.726266][ C1] ? count_memcg_event_mm+0x21/0x260 [ 162.731613][ C1] __x64_sys_clone+0x18b/0x1e0 [ 162.736575][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 162.741957][ C1] ? do_user_addr_fault+0xc85/0x1380 [ 162.747360][ C1] ? do_syscall_64+0xbe/0xfa0 [ 162.752085][ C1] do_syscall_64+0xfa/0xfa0 [ 162.756763][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 162.762026][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.768258][ C1] ? clear_bhb_loop+0x60/0xb0 [ 162.773087][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.779151][ C1] RIP: 0033:0x7f2bd3d85613 [ 162.783604][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 162.803639][ C1] RSP: 002b:00007ffdba89fc58 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 162.812420][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2bd3d85613 [ 162.820475][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 162.828639][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 162.836689][ C1] R10: 0000555589a087d0 R11: 0000000000000246 R12: 0000000000000000 [ 162.844711][ C1] R13: 00000000000927c0 R14: 00000000000278f2 R15: 00007ffdba89fdf0 [ 162.852785][ C1] [ 162.855921][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 162.863229][ C1] CPU: 1 UID: 0 PID: 5841 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 162.872798][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 162.883249][ C1] Call Trace: [ 162.886893][ C1] [ 162.889762][ C1] dump_stack_lvl+0x99/0x250 [ 162.894369][ C1] ? __asan_memcpy+0x40/0x70 [ 162.899056][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.904359][ C1] ? __pfx__printk+0x10/0x10 [ 162.908964][ C1] vpanic+0x237/0x6d0 [ 162.912956][ C1] ? __pfx_vpanic+0x10/0x10 [ 162.917552][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 162.922785][ C1] panic+0xb9/0xc0 [ 162.926511][ C1] ? __pfx_panic+0x10/0x10 [ 162.931125][ C1] __warn+0x334/0x4c0 [ 162.935198][ C1] ? __rate_control_send_low+0x5e2/0x820 [ 162.940845][ C1] ? __rate_control_send_low+0x5e2/0x820 [ 162.946933][ C1] report_bug+0x2be/0x4f0 [ 162.951277][ C1] ? __rate_control_send_low+0x5e2/0x820 [ 162.956918][ C1] ? __rate_control_send_low+0x5e2/0x820 [ 162.962570][ C1] ? __rate_control_send_low+0x5e4/0x820 [ 162.968301][ C1] handle_bug+0x84/0x160 [ 162.972553][ C1] exc_invalid_op+0x1a/0x50 [ 162.977077][ C1] asm_exc_invalid_op+0x1a/0x20 [ 162.982019][ C1] RIP: 0010:__rate_control_send_low+0x5e2/0x820 [ 162.988357][ C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 c0 90 8c 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 af 43 c0 f6 90 <0f> 0b 90 90 e9 70 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 163.007968][ C1] RSP: 0018:ffffc90000a08538 EFLAGS: 00010246 [ 163.014138][ C1] RAX: 5f8d07252ae18400 RBX: 000000000000000c RCX: ffff88807e6f3c80 [ 163.022114][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 163.030090][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 163.038248][ C1] R10: dffffc0000000000 R11: fffffbfff1bfa650 R12: ffff888077a07de8 [ 163.046227][ C1] R13: 0000000000000000 R14: ffff88807c178e80 R15: ffff88807c17b138 [ 163.054216][ C1] ? __rate_control_send_low+0x5e1/0x820 [ 163.059969][ C1] rate_control_send_low+0x1a7/0x7b0 [ 163.065269][ C1] rate_control_get_rate+0x20b/0x5d0 [ 163.070567][ C1] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 163.076386][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 163.082751][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 163.088139][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 163.094088][ C1] ieee80211_beacon_get_ap+0x1868/0x1f30 [ 163.099749][ C1] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 163.105876][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 163.111639][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 163.117210][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 163.122860][ C1] __ieee80211_beacon_get+0x118e/0x1880 [ 163.128512][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 163.134197][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 163.139937][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 163.146367][ C1] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 163.151944][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 163.159243][ C1] __iterate_interfaces+0x2ab/0x590 [ 163.164626][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 163.170825][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 163.178049][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 163.184313][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 163.191614][ C1] mac80211_hwsim_beacon+0xbb/0x180 [ 163.197369][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 163.203292][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 163.208613][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 163.214441][ C1] ? read_tsc+0x9/0x20 [ 163.218563][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 163.223689][ C1] handle_softirqs+0x286/0x870 [ 163.228498][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 163.233290][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 163.238854][ C1] __irq_exit_rcu+0xca/0x1f0 [ 163.243452][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 163.248750][ C1] irq_exit_rcu+0x9/0x30 [ 163.253022][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 163.258764][ C1] [ 163.261713][ C1] [ 163.264750][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 163.270758][ C1] RIP: 0010:deref_stack_reg+0x0/0x230 [ 163.276153][ C1] Code: 4c 24 18 e8 22 a6 b1 00 48 8b 4c 24 18 e9 f2 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <55> 41 57 41 56 41 55 41 54 53 48 83 ec 20 48 89 54 24 18 49 89 f0 [ 163.295940][ C1] RSP: 0018:ffffc9000417f2f0 EFLAGS: 00000287 [ 163.302022][ C1] RAX: fffffffffffffff0 RBX: ffffffff903895d2 RCX: 0000000000000000 [ 163.310010][ C1] RDX: ffffc9000417f408 RSI: ffffc9000417f9f0 RDI: ffffc9000417f3c8 [ 163.318073][ C1] RBP: dffffc0000000000 R08: ffffc9000417f427 R09: 0000000000000000 [ 163.326133][ C1] R10: ffffc9000417f418 R11: fffff5200082fe85 R12: ffffc9000417f9f0 [ 163.334115][ C1] R13: ffffc9000417f418 R14: ffffc9000417f3c8 R15: 1ffffffff20712ba [ 163.342285][ C1] unwind_next_frame+0x17c4/0x2390 [ 163.347514][ C1] ? unwind_next_frame+0xa5/0x2390 [ 163.352641][ C1] ? dup_mmap+0x903/0x1b10 [ 163.357156][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 163.363403][ C1] arch_stack_walk+0x11c/0x150 [ 163.368193][ C1] ? copy_mm+0x13c/0x4b0 [ 163.372654][ C1] stack_trace_save+0x9c/0xe0 [ 163.378008][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 163.383472][ C1] ? css_rstat_updated+0x23a/0x4f0 [ 163.388966][ C1] ? __pfx_css_rstat_updated+0x10/0x10 [ 163.394638][ C1] kasan_save_track+0x3e/0x80 [ 163.399534][ C1] ? kasan_save_track+0x3e/0x80 [ 163.404698][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 163.410270][ C1] ? kmem_cache_alloc_noprof+0x367/0x6e0 [ 163.416480][ C1] ? vm_area_dup+0x2b/0x680 [ 163.421104][ C1] ? dup_mmap+0x903/0x1b10 [ 163.425582][ C1] __kasan_slab_alloc+0x6c/0x80 [ 163.430555][ C1] kmem_cache_alloc_noprof+0x367/0x6e0 [ 163.436055][ C1] ? vm_area_dup+0x2b/0x680 [ 163.440662][ C1] ? kmem_cache_alloc_noprof+0x210/0x6e0 [ 163.446543][ C1] vm_area_dup+0x2b/0x680 [ 163.451000][ C1] dup_mmap+0x903/0x1b10 [ 163.455793][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 163.461002][ C1] ? mm_init+0xd74/0xfa0 [ 163.465570][ C1] copy_mm+0x13c/0x4b0 [ 163.469794][ C1] copy_process+0x1706/0x3c00 [ 163.474540][ C1] ? copy_process+0x97f/0x3c00 [ 163.479359][ C1] ? __pfx_copy_process+0x10/0x10 [ 163.484749][ C1] kernel_clone+0x21e/0x840 [ 163.489415][ C1] ? css_rstat_updated+0x23a/0x4f0 [ 163.494755][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 163.499826][ C1] ? count_memcg_event_mm+0x21/0x260 [ 163.505150][ C1] __x64_sys_clone+0x18b/0x1e0 [ 163.510033][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 163.515455][ C1] ? do_user_addr_fault+0xc85/0x1380 [ 163.521100][ C1] ? do_syscall_64+0xbe/0xfa0 [ 163.525961][ C1] do_syscall_64+0xfa/0xfa0 [ 163.530722][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 163.536471][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.542653][ C1] ? clear_bhb_loop+0x60/0xb0 [ 163.547463][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.553432][ C1] RIP: 0033:0x7f2bd3d85613 [ 163.558059][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 163.578117][ C1] RSP: 002b:00007ffdba89fc58 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 163.586904][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2bd3d85613 [ 163.594900][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 163.603056][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 163.611135][ C1] R10: 0000555589a087d0 R11: 0000000000000246 R12: 0000000000000000 [ 163.619219][ C1] R13: 00000000000927c0 R14: 00000000000278f2 R15: 00007ffdba89fdf0 [ 163.627235][ C1] [ 163.630631][ C1] Kernel Offset: disabled [ 163.635039][ C1] Rebooting in 86400 seconds..