last executing test programs: 7.328927552s ago: executing program 0 (id=863): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$AUDIT_USER_AVC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x20000}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080) 6.588955118s ago: executing program 0 (id=867): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) getrlimit(0xa, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x0, 0x4, 0x0, 0x7}, 0x76e0}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r3, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000400)=0x2a12, 0x4) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) r4 = add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r4, &(0x7f00000000c0)=""/4096, 0x1000) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x1, 0x1000, 0x8, 0x100, 0x3, 0x0, 0x3}) 4.811115876s ago: executing program 2 (id=872): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellinkprop={0x38, 0x6d, 0x2ec9b2c728e3c67, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_PROP_LIST={0x4}, @IFLA_IFNAME={0x14, 0x3, 'ip_vti0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4.61581122s ago: executing program 2 (id=874): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f705fb", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd0911809", 0x78}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f8", 0x2d}, {&(0x7f0000000b80)}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c4", 0x66}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.042494733s ago: executing program 3 (id=876): syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) r0 = io_uring_setup(0x669, &(0x7f00000002c0)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) writev(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) 3.976488894s ago: executing program 0 (id=877): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x0, 0xf5}}], 0x48}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x109}) syz_usb_connect$midi(0x5, 0x31, 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x200, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x3c}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0xe0) 2.940921017s ago: executing program 3 (id=878): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r1, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000600)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24000004}, 0x195) 2.879438068s ago: executing program 1 (id=879): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)={0x18, 0x41, 0x107, 0x70bd2d, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) 2.838557329s ago: executing program 1 (id=880): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r0, 0x0, 0x0) 2.77797546s ago: executing program 2 (id=881): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4008810) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.724973931s ago: executing program 3 (id=882): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r2, 0x708, 0xb8f7) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x40}}, 0x0) close(0x3) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x7, 0x104, 0x3}) 2.705681271s ago: executing program 1 (id=883): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1608e2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x8, 0x4000000000000ff8, 0x0, 0x0, 0x12, 0xd, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc964e3e2874df2cfc06c89f3d9e234b305d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a4b8aed1ef800", "715200601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0x5, 0xa]}}) 2.643931663s ago: executing program 3 (id=884): r0 = socket(0x10, 0x3, 0x0) write(r0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x18da82, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x300, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0xfffc, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x0, 0xfe, 0x22, 0x0, 0x7, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xe) shutdown(r2, 0x1) 2.536938775s ago: executing program 1 (id=885): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) getrlimit(0xa, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x0, 0x4, 0x0, 0x7}, 0x76e0}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r3, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000400)=0x2a12, 0x4) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0x2, r4, &(0x7f00000000c0)=""/4096, 0x1000) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x1, 0x1000, 0x8, 0x100, 0x3, 0x0, 0x3}) 1.625565945s ago: executing program 3 (id=886): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040)=0x200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff70) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4008854}, 0x4008004) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0xfffffffffffffff7) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000000380)={{0x0, 0x4, 0xc621, 0x6, 0x1000, 0xa, 0x7fffffffffffffff, 0x5, 0x80000001, 0x80, 0x97e2, 0x7fffffffffffffff, 0x4, 0xfffffffffffff825, 0x7}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000000c0)={{0x0, 0x9, 0x1, 0x7, 0x0, 0x94d, 0xdb, 0x1, 0x5, 0x9, 0xc, 0x0, 0x3, 0xa6d, 0x7670}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0x4) 1.591199805s ago: executing program 2 (id=887): syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$nullb(0xffffff9c, &(0x7f0000000080), 0x200, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) 1.38384541s ago: executing program 3 (id=888): r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x0, 0xd, 0x2, 'Vx'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, &(0x7f00000001c0)={0x20, 0x22, 0x9, {0x9, 0x23, "910f69fb3b8c40"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000280)={0x14, &(0x7f00000002c0)=ANY=[], 0x0}, 0x0) 832.808172ms ago: executing program 0 (id=889): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) socket$inet6(0xa, 0x2, 0x3a) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 771.997153ms ago: executing program 0 (id=890): r0 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') read$FUSE(r2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 273.837774ms ago: executing program 2 (id=891): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rt_sigprocmask(0x0, &(0x7f0000000300)={[0xfffffffffffffff9]}, 0x0, 0x8) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000780)={r2, 0x0, 0x4, 0x0, 0x2, [], [0x0, 0x0, 0x400, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]}) 273.253044ms ago: executing program 1 (id=892): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r2, 0x708, 0xb8f7) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x40}}, 0x0) close(0x3) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x7, 0x104, 0x3}) 197.078196ms ago: executing program 0 (id=893): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000062940d580000000003000b0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000018500000086000040bf09000000000000550901000000000095000000000000002d6a010000000000bf91000000000000b7020000ffffffff8500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xe, 0xff6, &(0x7f0000001cc0)=""/4086, 0x41100, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 33.833119ms ago: executing program 2 (id=894): r0 = socket(0x10, 0x3, 0x0) write(r0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x18da82, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x300, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0xfffc, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x0, 0xfe, 0x22, 0x0, 0x7, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xe) shutdown(r2, 0x1) 0s ago: executing program 1 (id=895): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)={0x20, 0xe, 0x2, "02cf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)={0x0, 0x16, 0x2, "f610"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f00000006c0)={0x40, 0xa, 0x1, '#'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 47.441530][ T5437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.458304][ T5437] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.10' (ED25519) to the list of known hosts. syzkaller login: [ 71.915803][ T5759] cgroup: Unknown subsys name 'net' [ 72.048816][ T5759] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.412462][ T5759] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.796152][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.805398][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.814266][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.822320][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.830859][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.830866][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.847662][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.855277][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.855408][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.863963][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.880080][ T5088] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.887593][ T5088] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.922077][ T5773] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.937900][ T5773] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.949178][ T5773] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.972344][ T5773] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.980567][ T5773] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.980946][ T5777] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.996096][ T5777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.013013][ T5088] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.024349][ T5088] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.036372][ T5088] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.048327][ T5088] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.059053][ T5088] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.370182][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 75.391083][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 75.528090][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 75.557689][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.565691][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.573548][ T5774] bridge_slave_0: entered allmulticast mode [ 75.580283][ T5774] bridge_slave_0: entered promiscuous mode [ 75.614010][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.621309][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.628516][ T5774] bridge_slave_1: entered allmulticast mode [ 75.635733][ T5774] bridge_slave_1: entered promiscuous mode [ 75.672002][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 75.711459][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.718828][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.726040][ T5770] bridge_slave_0: entered allmulticast mode [ 75.733458][ T5770] bridge_slave_0: entered promiscuous mode [ 75.747962][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.773762][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.780885][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.789077][ T5770] bridge_slave_1: entered allmulticast mode [ 75.795933][ T5770] bridge_slave_1: entered promiscuous mode [ 75.815442][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.871760][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.881081][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.891374][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.898720][ T5778] bridge_slave_0: entered allmulticast mode [ 75.907870][ T5778] bridge_slave_0: entered promiscuous mode [ 75.933271][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.942849][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.949977][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.957242][ T5778] bridge_slave_1: entered allmulticast mode [ 75.964136][ T5778] bridge_slave_1: entered promiscuous mode [ 75.982565][ T5774] team0: Port device team_slave_0 added [ 76.025807][ T5774] team0: Port device team_slave_1 added [ 76.035850][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.056438][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.063715][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.070808][ T5781] bridge_slave_0: entered allmulticast mode [ 76.077727][ T5781] bridge_slave_0: entered promiscuous mode [ 76.087450][ T5770] team0: Port device team_slave_0 added [ 76.097334][ T5770] team0: Port device team_slave_1 added [ 76.116817][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.126543][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.133935][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.141520][ T5781] bridge_slave_1: entered allmulticast mode [ 76.148571][ T5781] bridge_slave_1: entered promiscuous mode [ 76.201691][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.208708][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.234984][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.258990][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.268701][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.276024][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.301999][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.333767][ T5778] team0: Port device team_slave_0 added [ 76.341160][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.348713][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.374790][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.389751][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.400223][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.407322][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.433420][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.459739][ T5778] team0: Port device team_slave_1 added [ 76.508216][ T5781] team0: Port device team_slave_0 added [ 76.528015][ T5781] team0: Port device team_slave_1 added [ 76.535868][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.543042][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.569167][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.604835][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.611806][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.637869][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.687626][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.695005][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.721703][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.739190][ T5774] hsr_slave_0: entered promiscuous mode [ 76.745745][ T5774] hsr_slave_1: entered promiscuous mode [ 76.778004][ T5770] hsr_slave_0: entered promiscuous mode [ 76.784406][ T5770] hsr_slave_1: entered promiscuous mode [ 76.790457][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.798675][ T5770] Cannot create hsr debugfs directory [ 76.804791][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.811738][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.840138][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.899784][ T5778] hsr_slave_0: entered promiscuous mode [ 76.906258][ T5778] hsr_slave_1: entered promiscuous mode [ 76.914608][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.922346][ T5778] Cannot create hsr debugfs directory [ 76.943130][ T51] Bluetooth: hci1: command tx timeout [ 76.948760][ T51] Bluetooth: hci0: command tx timeout [ 77.029504][ T5781] hsr_slave_0: entered promiscuous mode [ 77.036174][ T5781] hsr_slave_1: entered promiscuous mode [ 77.042951][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.050509][ T5781] Cannot create hsr debugfs directory [ 77.102235][ T5088] Bluetooth: hci2: command tx timeout [ 77.108041][ T51] Bluetooth: hci3: command tx timeout [ 77.340720][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.354257][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.383661][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.393043][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.447974][ T5770] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.473185][ T5770] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.483258][ T5770] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.517334][ T5770] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.591699][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.604388][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.618312][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.627974][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.711471][ T5781] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.740352][ T5781] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.754955][ T5781] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.764964][ T5781] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.793898][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.851393][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.876602][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.884115][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.926467][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.947552][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.954735][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.982614][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.019008][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.026168][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.054313][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.061433][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.084620][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.168263][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.200713][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.236858][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.259117][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.266291][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.285895][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.293095][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.309525][ T3498] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.316718][ T3498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.395473][ T3498] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.402860][ T3498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.469221][ T5778] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.487507][ T5778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.605405][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.765903][ T5774] veth0_vlan: entered promiscuous mode [ 78.799821][ T5774] veth1_vlan: entered promiscuous mode [ 78.826751][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.931640][ T5774] veth0_macvtap: entered promiscuous mode [ 78.961336][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.970130][ T5774] veth1_macvtap: entered promiscuous mode [ 78.981371][ T5770] veth0_vlan: entered promiscuous mode [ 79.008339][ T5770] veth1_vlan: entered promiscuous mode [ 79.023864][ T51] Bluetooth: hci0: command tx timeout [ 79.025810][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.029279][ T51] Bluetooth: hci1: command tx timeout [ 79.047755][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.069618][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.078883][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.089071][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.098133][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.128806][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.177837][ T5778] veth0_vlan: entered promiscuous mode [ 79.193634][ T51] Bluetooth: hci3: command tx timeout [ 79.193653][ T5088] Bluetooth: hci2: command tx timeout [ 79.227382][ T5770] veth0_macvtap: entered promiscuous mode [ 79.241994][ T5778] veth1_vlan: entered promiscuous mode [ 79.271611][ T5770] veth1_macvtap: entered promiscuous mode [ 79.297253][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.306875][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.341047][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.355248][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.362321][ T5781] veth0_vlan: entered promiscuous mode [ 79.417366][ T5781] veth1_vlan: entered promiscuous mode [ 79.429511][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.443400][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.455501][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.465319][ T5778] veth0_macvtap: entered promiscuous mode [ 79.484217][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.496337][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.514532][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.525542][ T5778] veth1_macvtap: entered promiscuous mode [ 79.554223][ T5770] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.568556][ T5770] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.578391][ T5770] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.593476][ T5770] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.631231][ T5781] veth0_macvtap: entered promiscuous mode [ 79.641697][ T5781] veth1_macvtap: entered promiscuous mode [ 79.699782][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.711054][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.748396][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.759858][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.776138][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.790238][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.805320][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.817631][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.834117][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.848477][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.861482][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.876507][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.913480][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.936313][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.948247][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.965667][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.979675][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.001294][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.021003][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.037504][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.048930][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.063590][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.079279][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.094203][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.123083][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.131901][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.148671][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.159740][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.230626][ T5781] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.251816][ T5781] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.274954][ T5781] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.288519][ T5781] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.479180][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.514725][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.591455][ T1006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.610074][ T1006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.657843][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.667145][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.697106][ T1006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.718396][ T1006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.754117][ T1006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.761988][ T1006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.783283][ T5832] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 80.873533][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.891225][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.143228][ T5832] usb 4-1: Using ep0 maxpacket: 32 [ 81.153585][ T5832] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 81.176718][ T5088] Bluetooth: hci1: command tx timeout [ 81.182612][ T51] Bluetooth: hci0: command tx timeout [ 81.313006][ T5851] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 81.848019][ T5088] Bluetooth: hci2: command tx timeout [ 81.848048][ T51] Bluetooth: hci3: command tx timeout [ 81.937934][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.194801][ T5832] usb 4-1: config 0 descriptor?? [ 82.502485][ T5832] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 82.564703][ T5832] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 82.607621][ T5832] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 82.642237][ T5832] usb 4-1: media controller created [ 82.756707][ T5832] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 82.764794][ T5857] Zero length message leads to an empty skb [ 82.827786][ T5832] az6027: usb out operation failed. (-71) [ 82.853174][ T5832] az6027: usb out operation failed. (-71) [ 82.872523][ T5832] stb0899_attach: Driver disabled by Kconfig [ 82.872691][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 82.878535][ T5832] az6027: no front-end attached [ 82.878535][ T5832] [ 82.902480][ T5832] az6027: usb out operation failed. (-71) [ 82.908265][ T5832] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 82.957027][ T5832] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 82.970116][ T5859] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8'. [ 83.001943][ T5832] dvb-usb: schedule remote query interval to 400 msecs. [ 83.039561][ T5832] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 83.082314][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 83.087071][ T5832] usb 4-1: USB disconnect, device number 2 [ 83.098502][ T23] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 83.114658][ T23] usb 1-1: config 0 has no interface number 0 [ 83.147198][ T23] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 83.172201][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.202692][ T23] usb 1-1: Product: syz [ 83.207878][ T23] usb 1-1: Manufacturer: syz [ 83.222930][ T23] usb 1-1: SerialNumber: syz [ 83.242939][ T23] usb 1-1: config 0 descriptor?? [ 83.262366][ T23] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 83.273186][ T51] Bluetooth: hci1: command tx timeout [ 83.278614][ T51] Bluetooth: hci0: command tx timeout [ 83.313380][ T5832] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 83.902204][ T51] Bluetooth: hci2: command tx timeout [ 83.982463][ T51] Bluetooth: hci3: command tx timeout [ 85.888585][ T23] usb 1-1: qt2_attach - failed to power on unit: -71 [ 85.922483][ T23] quatech2: probe of 1-1:0.51 failed with error -71 [ 85.948789][ T23] usb 1-1: USB disconnect, device number 2 [ 86.076201][ T5883] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.872926][ T2134] cfg80211: failed to load regulatory.db [ 86.944262][ T5779] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 87.142314][ T5779] usb 1-1: Using ep0 maxpacket: 32 [ 87.163730][ T5779] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 87.182239][ T5779] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.221617][ T5779] usb 1-1: config 0 descriptor?? [ 87.629375][ T5779] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 87.649689][ T5779] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 87.688175][ T5779] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 87.698413][ T5779] usb 1-1: media controller created [ 87.736053][ T5779] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 87.828567][ T5779] az6027: usb out operation failed. (-71) [ 87.840706][ T5779] az6027: usb out operation failed. (-71) [ 88.049223][ T5779] stb0899_attach: Driver disabled by Kconfig [ 88.057394][ T5779] az6027: no front-end attached [ 88.057394][ T5779] [ 88.065619][ T5779] az6027: usb out operation failed. (-71) [ 88.071667][ T5779] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 88.182046][ T5779] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 88.198161][ T5779] dvb-usb: schedule remote query interval to 400 msecs. [ 88.205274][ T5779] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 88.212915][ T5839] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 88.218994][ T5779] usb 1-1: USB disconnect, device number 3 [ 88.308451][ T5779] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 88.442227][ T5839] usb 3-1: Using ep0 maxpacket: 32 [ 88.462536][ T5839] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 88.471157][ T5839] usb 3-1: config 0 has no interface number 0 [ 88.525425][ T5839] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 88.543443][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.551726][ T5839] usb 3-1: Product: syz [ 88.556402][ T5839] usb 3-1: Manufacturer: syz [ 88.561021][ T5839] usb 3-1: SerialNumber: syz [ 88.581934][ T5839] usb 3-1: config 0 descriptor?? [ 88.595541][ T5839] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 90.991923][ T5839] usb 3-1: qt2_attach - failed to power on unit: -71 [ 91.022581][ T5839] quatech2: probe of 3-1:0.51 failed with error -71 [ 91.088333][ T5839] usb 3-1: USB disconnect, device number 2 [ 91.642364][ T5779] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 91.883025][ T5779] usb 4-1: Using ep0 maxpacket: 32 [ 91.996775][ T5941] netlink: 'syz.2.32': attribute type 6 has an invalid length. [ 92.005252][ T5941] netlink: 'syz.2.32': attribute type 6 has an invalid length. [ 92.029520][ T5779] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 92.038854][ T5779] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.066012][ T5779] usb 4-1: config 0 descriptor?? [ 92.284349][ T5779] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 92.633137][ T5779] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 92.655766][ T5779] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 92.663978][ T5779] usb 4-1: media controller created [ 92.743120][ T5779] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 92.805946][ T5779] az6027: usb out operation failed. (-71) [ 92.817409][ T5779] az6027: usb out operation failed. (-71) [ 92.841945][ T5779] stb0899_attach: Driver disabled by Kconfig [ 92.848515][ T5779] az6027: no front-end attached [ 92.848515][ T5779] [ 92.859312][ T5779] az6027: usb out operation failed. (-71) [ 92.866242][ T5779] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 92.891073][ T5779] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 92.938389][ T5779] dvb-usb: schedule remote query interval to 400 msecs. [ 92.967745][ T5779] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 92.997334][ T5779] usb 4-1: USB disconnect, device number 3 [ 93.403533][ T5779] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 93.642202][ T172] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 94.102550][ T172] usb 3-1: Using ep0 maxpacket: 32 [ 94.120725][ T172] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 94.154837][ T172] usb 3-1: config 0 has no interface number 0 [ 94.205022][ T172] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 94.227686][ T172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.247889][ T172] usb 3-1: Product: syz [ 94.256780][ T172] usb 3-1: Manufacturer: syz [ 94.270392][ T172] usb 3-1: SerialNumber: syz [ 95.123507][ T172] usb 3-1: config 0 descriptor?? [ 95.135188][ T172] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 95.847649][ T5979] netlink: 'syz.3.44': attribute type 6 has an invalid length. [ 95.860452][ T5979] netlink: 'syz.3.44': attribute type 6 has an invalid length. [ 96.532404][ T5779] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 96.722248][ T5779] usb 1-1: Using ep0 maxpacket: 32 [ 96.741572][ T5779] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 96.773088][ T5779] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.800727][ T172] usb 3-1: qt2_attach - failed to power on unit: -71 [ 96.822282][ T5779] usb 1-1: config 0 descriptor?? [ 96.872590][ T172] quatech2: probe of 3-1:0.51 failed with error -71 [ 96.914779][ T172] usb 3-1: USB disconnect, device number 3 [ 96.992146][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 97.119913][ T5779] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 97.151131][ T5779] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 97.168988][ T5779] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 97.185148][ T5779] usb 1-1: media controller created [ 97.241538][ T5779] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 97.363108][ T5779] az6027: usb out operation failed. (-71) [ 97.434838][ T5779] az6027: usb out operation failed. (-71) [ 97.485340][ T5779] stb0899_attach: Driver disabled by Kconfig [ 97.533338][ T5779] az6027: no front-end attached [ 97.533338][ T5779] [ 97.615640][ T5779] az6027: usb out operation failed. (-71) [ 97.663420][ T5779] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 97.724048][ T5779] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 98.150732][ T5779] dvb-usb: schedule remote query interval to 400 msecs. [ 98.160251][ T5779] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 98.211286][ T5779] usb 1-1: USB disconnect, device number 4 [ 100.145564][ T5779] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 100.168582][ T6017] netlink: 'syz.2.55': attribute type 6 has an invalid length. [ 100.360389][ T6019] netlink: 'syz.2.55': attribute type 6 has an invalid length. [ 101.132262][ T5832] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 101.215590][ T172] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.473172][ T5832] usb 1-1: Using ep0 maxpacket: 32 [ 101.534915][ T172] usb 2-1: Using ep0 maxpacket: 32 [ 101.552577][ T5832] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 101.562489][ T172] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 101.572033][ T5832] usb 1-1: config 0 has no interface number 0 [ 101.579986][ T172] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.590817][ T5832] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 101.600440][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.609277][ T5832] usb 1-1: Product: syz [ 101.615512][ T172] usb 2-1: config 0 descriptor?? [ 101.632487][ T5832] usb 1-1: Manufacturer: syz [ 101.637947][ T5832] usb 1-1: SerialNumber: syz [ 101.648747][ T5832] usb 1-1: config 0 descriptor?? [ 101.667335][ T5832] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 101.842134][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 101.963012][ T172] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 102.270677][ T172] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 102.285969][ T172] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 102.301410][ T172] usb 2-1: media controller created [ 102.544459][ T172] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 102.643905][ T172] az6027: usb out operation failed. (-71) [ 102.650992][ T172] az6027: usb out operation failed. (-71) [ 102.660840][ T172] stb0899_attach: Driver disabled by Kconfig [ 102.674077][ T172] az6027: no front-end attached [ 102.674077][ T172] [ 102.824487][ T172] az6027: usb out operation failed. (-71) [ 102.830261][ T172] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 102.853188][ T172] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 102.881348][ T172] dvb-usb: schedule remote query interval to 400 msecs. [ 102.890984][ T172] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 102.904988][ T172] usb 2-1: USB disconnect, device number 2 [ 103.081517][ T172] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 103.142540][ T6050] lo speed is unknown, defaulting to 1000 [ 103.149008][ T6050] lo speed is unknown, defaulting to 1000 [ 103.164638][ T6050] lo speed is unknown, defaulting to 1000 [ 103.192771][ T6050] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 103.236984][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801c79f800: rx timeout, send abort [ 103.248426][ T6050] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 103.737633][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801c79fc00: rx timeout, send abort [ 103.746275][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801c79f800: abort rx timeout. Force session deactivation [ 103.845736][ T6050] lo speed is unknown, defaulting to 1000 [ 103.860213][ T6050] lo speed is unknown, defaulting to 1000 [ 103.873386][ T6050] lo speed is unknown, defaulting to 1000 [ 103.886106][ T6050] lo speed is unknown, defaulting to 1000 [ 104.245952][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801c79fc00: abort rx timeout. Force session deactivation [ 104.362734][ T5832] usb 1-1: qt2_attach - failed to power on unit: -71 [ 104.402372][ T5832] quatech2: probe of 1-1:0.51 failed with error -71 [ 104.462878][ T5832] usb 1-1: USB disconnect, device number 5 [ 105.535639][ T6066] netlink: 'syz.2.69': attribute type 6 has an invalid length. [ 105.558494][ T6066] netlink: 'syz.2.69': attribute type 6 has an invalid length. [ 105.854143][ T6074] capability: warning: `syz.3.73' uses deprecated v2 capabilities in a way that may be insecure [ 106.683748][ T172] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 106.956120][ T172] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.992334][ T172] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 107.022359][ T172] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 107.056131][ T172] usb 2-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 107.074180][ T172] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.089131][ T172] usb 2-1: Product: syz [ 107.097690][ T172] usb 2-1: Manufacturer: syz [ 107.626005][ T5811] IPVS: starting estimator thread 0... [ 107.658464][ T172] usb 2-1: SerialNumber: syz [ 107.715901][ T5832] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 107.727588][ T172] usb 2-1: config 0 descriptor?? [ 107.783104][ T6082] IPVS: using max 23 ests per chain, 55200 per kthread [ 107.795836][ T5838] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 107.853162][ T6087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.78'. [ 107.914656][ T5832] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.925821][ T5832] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 107.943276][ T5832] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 107.959562][ T5832] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 107.969160][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.977563][ T5832] usb 3-1: Product: syz [ 107.981955][ T5832] usb 3-1: Manufacturer: syz [ 107.991156][ T5832] usb 3-1: SerialNumber: syz [ 108.172294][ T5838] usb 4-1: Using ep0 maxpacket: 32 [ 108.190476][ T5838] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 108.200050][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.226038][ T5838] usb 4-1: config 0 descriptor?? [ 108.491801][ T5838] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 108.523314][ T5838] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 108.537327][ T5838] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 108.544871][ T5838] usb 4-1: media controller created [ 108.702872][ T5838] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 108.768966][ T5811] usb 2-1: USB disconnect, device number 3 [ 108.776492][ T5838] az6027: usb out operation failed. (-71) [ 108.790611][ T5838] az6027: usb out operation failed. (-71) [ 108.816760][ T5838] stb0899_attach: Driver disabled by Kconfig [ 108.829628][ T5838] az6027: no front-end attached [ 108.829628][ T5838] [ 108.843976][ T5838] az6027: usb out operation failed. (-71) [ 108.849755][ T5838] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 108.872398][ T5838] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 108.903833][ T5838] dvb-usb: schedule remote query interval to 400 msecs. [ 108.930851][ T5838] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 109.106233][ T5838] usb 4-1: USB disconnect, device number 4 [ 109.154701][ T5838] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 109.745679][ T5832] cdc_ncm 3-1:1.0: bind() failure [ 109.790514][ T5832] usbtest: probe of 3-1:1.1 failed with error -71 [ 109.899608][ T5832] usb 3-1: USB disconnect, device number 4 [ 112.042475][ T5832] IPVS: starting estimator thread 0... [ 112.232402][ T6119] IPVS: using max 18 ests per chain, 43200 per kthread [ 113.052587][ T5808] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 113.242278][ T5808] usb 4-1: Using ep0 maxpacket: 32 [ 113.297538][ T5808] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 113.448879][ T5808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.543035][ T5808] usb 4-1: config 0 descriptor?? [ 113.781830][ T5808] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 113.804545][ T5808] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 113.824673][ T5808] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 113.832652][ T5808] usb 4-1: media controller created [ 113.858542][ T5808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 114.002469][ T5808] az6027: usb out operation failed. (-71) [ 114.010335][ T5808] az6027: usb out operation failed. (-71) [ 114.012300][ T2134] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 114.023572][ T5808] stb0899_attach: Driver disabled by Kconfig [ 114.023586][ T5808] az6027: no front-end attached [ 114.023586][ T5808] [ 114.029825][ T5808] az6027: usb out operation failed. (-71) [ 114.029863][ T5808] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 114.031637][ T5808] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11 [ 114.110831][ T5808] dvb-usb: schedule remote query interval to 400 msecs. [ 114.125664][ T5808] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 114.171690][ T5808] usb 4-1: USB disconnect, device number 5 [ 114.790128][ T2134] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.823750][ T2134] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 114.834873][ T2134] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 114.857674][ T2134] usb 1-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 114.867829][ T2134] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.875947][ T2134] usb 1-1: Product: syz [ 114.880833][ T2134] usb 1-1: Manufacturer: syz [ 114.885979][ T2134] usb 1-1: SerialNumber: syz [ 114.917570][ T2134] usb 1-1: config 0 descriptor?? [ 115.316927][ T5808] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 115.882434][ T2134] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 116.092240][ T2134] usb 3-1: Using ep0 maxpacket: 32 [ 116.106838][ T2134] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.118307][ T2134] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.132244][ T5808] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 116.132301][ T2134] usb 3-1: New USB device found, idVendor=25dd, idProduct=f3d2, bcdDevice=d2.37 [ 116.151780][ T2134] usb 3-1: New USB device strings: Mfr=84, Product=45, SerialNumber=0 [ 116.160445][ T2134] usb 3-1: Product: syz [ 116.164887][ T2134] usb 3-1: Manufacturer: syz [ 116.173612][ T5811] usb 1-1: USB disconnect, device number 6 [ 116.175153][ T2134] usb 3-1: config 0 descriptor?? [ 116.352223][ T5808] usb 4-1: Using ep0 maxpacket: 32 [ 116.359643][ T5808] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 116.382944][ T5808] usb 4-1: config 0 has no interface number 0 [ 116.398410][ T5808] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 116.414098][ T6151] kernel profiling enabled (shift: 9) [ 116.422331][ T5808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.430374][ T5808] usb 4-1: Product: syz [ 116.434819][ T5808] usb 4-1: Manufacturer: syz [ 116.439449][ T5808] usb 4-1: SerialNumber: syz [ 116.447024][ T5808] usb 4-1: config 0 descriptor?? [ 116.472642][ T5808] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 117.035137][ T2134] hid-generic 0003:25DD:F3D2.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.2-1/input0 [ 117.039106][ T5808] usb 4-1: qt2_attach - failed to power on unit: -71 [ 117.132381][ T5808] quatech2: probe of 4-1:0.51 failed with error -71 [ 117.135367][ T2134] usb 3-1: USB disconnect, device number 5 [ 117.243709][ T5808] usb 4-1: USB disconnect, device number 6 [ 118.264609][ T6158] fido_id[6158]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 120.064450][ T5811] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 120.252192][ T5811] usb 3-1: Using ep0 maxpacket: 32 [ 120.272246][ T5808] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 120.957112][ T5811] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 120.966678][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.983310][ T5811] usb 3-1: config 0 descriptor?? [ 121.256592][ T5808] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.285227][ T5811] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 121.300184][ T5808] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 121.314560][ T5811] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 121.479214][ T5808] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 121.603245][ T5811] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 121.665997][ T5808] usb 1-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 121.675681][ T5808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.684303][ T5811] usb 3-1: media controller created [ 121.689720][ T5808] usb 1-1: Product: syz [ 121.709984][ T5808] usb 1-1: Manufacturer: syz [ 121.715064][ T5808] usb 1-1: SerialNumber: syz [ 121.725780][ T5811] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 121.736577][ T5808] usb 1-1: config 0 descriptor?? [ 121.799901][ T5811] az6027: usb out operation failed. (-71) [ 121.826448][ T5811] az6027: usb out operation failed. (-71) [ 121.836278][ T5811] stb0899_attach: Driver disabled by Kconfig [ 121.851199][ T5811] az6027: no front-end attached [ 121.851199][ T5811] [ 121.872595][ T5811] az6027: usb out operation failed. (-71) [ 121.878379][ T5811] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 121.914168][ T5811] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 121.936710][ T5811] dvb-usb: schedule remote query interval to 400 msecs. [ 122.080601][ T6231] syzkaller0: entered promiscuous mode [ 122.096511][ T6231] syzkaller0: entered allmulticast mode [ 122.151857][ T5811] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 122.164009][ T5811] usb 3-1: USB disconnect, device number 6 [ 122.181703][ T6235] netlink: 44 bytes leftover after parsing attributes in process `syz.1.114'. [ 122.720096][ T5838] usb 1-1: USB disconnect, device number 7 [ 122.720442][ T5811] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 123.522356][ T5811] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 124.143720][ T5811] usb 3-1: unable to get BOS descriptor or descriptor too short [ 124.334641][ T5811] usb 3-1: not running at top speed; connect to a high speed hub [ 124.412489][ T5811] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.482349][ T5811] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.503482][ T5811] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 124.554984][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.581431][ T5811] usb 3-1: Product: syz [ 124.608281][ T5811] usb 3-1: Manufacturer: syz [ 124.615607][ T5811] usb 3-1: SerialNumber: syz [ 125.025282][ T5838] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 125.202433][ T5838] usb 4-1: Using ep0 maxpacket: 32 [ 125.219812][ T5838] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 125.233028][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.273500][ T5838] usb 4-1: config 0 descriptor?? [ 125.307643][ T5811] usb 3-1: unit 3 not found! [ 125.343357][ T5811] usb 3-1: USB disconnect, device number 7 [ 125.518437][ T5838] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 125.537061][ T5838] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 125.559293][ T5838] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 125.572955][ T5838] usb 4-1: media controller created [ 125.604285][ T5838] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 125.740677][ T5838] az6027: usb out operation failed. (-71) [ 125.763003][ T5838] az6027: usb out operation failed. (-71) [ 125.787303][ T5838] stb0899_attach: Driver disabled by Kconfig [ 125.847637][ T5838] az6027: no front-end attached [ 125.847637][ T5838] [ 125.986113][ T5838] az6027: usb out operation failed. (-71) [ 126.052574][ T5838] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 126.220144][ T5838] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input13 [ 126.475436][ T5838] dvb-usb: schedule remote query interval to 400 msecs. [ 126.558364][ T5838] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 126.649885][ T5838] usb 4-1: USB disconnect, device number 7 [ 126.793763][ T6281] netlink: 'syz.1.130': attribute type 6 has an invalid length. [ 126.810265][ T6281] netlink: 'syz.1.130': attribute type 6 has an invalid length. [ 126.920439][ T172] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 126.954104][ T5838] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 128.095056][ T172] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.112493][ T172] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 128.121446][ T172] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 128.187592][ T172] usb 1-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 128.206360][ T172] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.236623][ T172] usb 1-1: Product: syz [ 128.240849][ T172] usb 1-1: Manufacturer: syz [ 128.260792][ T172] usb 1-1: SerialNumber: syz [ 128.281723][ T172] usb 1-1: config 0 descriptor?? [ 129.296489][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.132'. [ 129.855251][ T5811] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 130.243325][ T5839] usb 1-1: USB disconnect, device number 8 [ 130.252313][ T5811] usb 4-1: Using ep0 maxpacket: 32 [ 130.260606][ T5811] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 130.270512][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.297088][ T5811] usb 4-1: config 0 descriptor?? [ 130.418349][ T6311] netlink: 'syz.2.143': attribute type 6 has an invalid length. [ 130.426996][ T6311] netlink: 'syz.2.143': attribute type 6 has an invalid length. [ 130.519051][ T5811] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 130.534104][ T5811] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 130.564459][ T5811] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 130.584477][ T5811] usb 4-1: media controller created [ 130.644866][ T5811] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.008110][ T5811] az6027: usb out operation failed. (-71) [ 132.948297][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.955240][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.054315][ T5811] az6027: usb out operation failed. (-71) [ 133.060103][ T5811] stb0899_attach: Driver disabled by Kconfig [ 133.177522][ T5811] az6027: no front-end attached [ 133.177522][ T5811] [ 133.185403][ T5811] az6027: usb out operation failed. (-71) [ 133.191156][ T5811] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 133.200130][ T5811] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14 [ 133.222570][ T5811] dvb-usb: schedule remote query interval to 400 msecs. [ 133.229616][ T5811] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 133.255193][ T5811] usb 4-1: USB disconnect, device number 8 [ 133.557836][ T5811] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 134.321875][ T6337] Bluetooth: MGMT ver 1.22 [ 134.363840][ T2134] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 134.632375][ T2134] usb 3-1: Using ep0 maxpacket: 32 [ 134.650953][ T2134] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 134.660129][ T2134] usb 3-1: config 0 has no interface number 0 [ 134.666658][ T2134] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 134.677866][ T2134] usb 3-1: config 0 interface 85 has no altsetting 0 [ 134.732304][ T2134] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 134.742255][ T2134] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.751234][ T2134] usb 3-1: Product: syz [ 134.756828][ T2134] usb 3-1: Manufacturer: syz [ 134.762243][ T2134] usb 3-1: SerialNumber: syz [ 134.915657][ T2134] usb 3-1: config 0 descriptor?? [ 135.589926][ T2134] appletouch 3-1:0.85: Geyser mode initialized. [ 135.610035][ T2134] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input15 [ 135.913600][ T2134] usb 3-1: USB disconnect, device number 8 [ 135.968125][ T2134] appletouch 3-1:0.85: input: appletouch disconnected [ 138.277151][ T6365] capability: warning: `syz.1.161' uses 32-bit capabilities (legacy support in use) [ 139.139347][ T5811] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 139.376824][ T5811] usb 1-1: Using ep0 maxpacket: 8 [ 139.394838][ T5811] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.446920][ T5811] usb 1-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 139.535252][ T5811] usb 1-1: config 0 interface 0 has no altsetting 0 [ 139.619777][ T5811] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 139.714863][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.840378][ T5811] usb 1-1: Product: syz [ 139.886144][ T5811] usb 1-1: Manufacturer: syz [ 139.890800][ T5811] usb 1-1: SerialNumber: syz [ 139.933168][ T5811] usb 1-1: config 0 descriptor?? [ 139.948014][ T5811] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 140.159708][ T5811] snd_usb_toneport 1-1:0.0: cannot get proper max packet size [ 140.173244][ T5811] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 140.185320][ T5811] snd_usb_toneport: probe of 1-1:0.0 failed with error -22 [ 140.382937][ T5811] usb 1-1: USB disconnect, device number 9 [ 143.775795][ T6429] syzkaller0: entered promiscuous mode [ 143.781330][ T6429] syzkaller0: entered allmulticast mode [ 143.936525][ T6429] netlink: 44 bytes leftover after parsing attributes in process `syz.2.183'. [ 144.259530][ T6436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.184'. [ 144.280158][ T6436] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 144.287860][ T6436] IPv6: NLM_F_CREATE should be set when creating new route [ 144.412462][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.184'. [ 144.523011][ T6437] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 145.942223][ T5811] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 146.152196][ T5811] usb 2-1: Using ep0 maxpacket: 16 [ 146.201528][ T5811] usb 2-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 146.256470][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.292511][ T5811] usb 2-1: Product: syz [ 146.296732][ T5811] usb 2-1: Manufacturer: syz [ 146.301369][ T5811] usb 2-1: SerialNumber: syz [ 146.399561][ T5811] usb 2-1: config 0 descriptor?? [ 146.758700][ T5811] usb 2-1: USB disconnect, device number 4 [ 146.940130][ T6469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.194'. [ 146.953433][ T6469] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 146.960726][ T6469] IPv6: NLM_F_CREATE should be set when creating new route [ 146.987247][ T6469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.194'. [ 147.001870][ T6469] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 147.034303][ T6473] syzkaller0: entered promiscuous mode [ 147.039941][ T6473] syzkaller0: entered allmulticast mode [ 147.068093][ T6473] netlink: 44 bytes leftover after parsing attributes in process `syz.2.196'. [ 147.228384][ T5808] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 147.521816][ T5808] usb 4-1: Using ep0 maxpacket: 8 [ 147.606475][ T5808] usb 4-1: config 0 has an invalid interface number: 33 but max is 1 [ 147.640013][ T5808] usb 4-1: config 0 has no interface number 1 [ 147.672464][ T5808] usb 4-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 147.701478][ T5808] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 147.745592][ T5808] usb 4-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 147.755024][ T5808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.767259][ T5808] usb 4-1: Product: syz [ 147.771522][ T5808] usb 4-1: Manufacturer: syz [ 147.778625][ T5808] usb 4-1: SerialNumber: syz [ 147.805379][ T5808] usb 4-1: config 0 descriptor?? [ 147.814328][ T5808] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 148.024171][ T2323] pvrusb2: Invalid read control endpoint [ 148.039085][ T5808] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 148.089222][ T2323] usb 4-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 148.098989][ T2323] usb 4-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 148.265718][ T5808] usb 4-1: USB disconnect, device number 9 [ 149.112296][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.205'. [ 149.132846][ T6499] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 149.171655][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.205'. [ 149.187318][ T6499] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 149.273556][ T6502] syz.3.206[6502]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 149.311423][ T6506] syzkaller0: entered promiscuous mode [ 149.346727][ T6506] syzkaller0: entered allmulticast mode [ 149.628006][ T6512] netlink: 44 bytes leftover after parsing attributes in process `syz.1.207'. [ 150.899360][ T6532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.215'. [ 150.908822][ T6532] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 150.917953][ T6532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.215'. [ 150.936723][ T6532] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 151.354004][ T2134] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 151.572329][ T2134] usb 2-1: Using ep0 maxpacket: 8 [ 151.593792][ T2134] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 151.616116][ T2134] usb 2-1: config 0 has no interface number 0 [ 151.658992][ T2134] usb 2-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 151.670343][ T2134] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 151.681543][ T2134] usb 2-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x9A, skipping [ 151.693911][ T2134] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 151.716365][ T2134] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 151.725659][ T2134] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.733728][ T2134] usb 2-1: Product: syz [ 151.738400][ T2134] usb 2-1: Manufacturer: syz [ 151.744973][ T2134] usb 2-1: SerialNumber: syz [ 151.759368][ T2134] usb 2-1: config 0 descriptor?? [ 151.774192][ T2134] iowarrior 2-1:0.186: no interrupt-in endpoint found [ 151.775290][ T6541] syzkaller0: entered promiscuous mode [ 151.790962][ T6541] syzkaller0: entered allmulticast mode [ 151.840525][ T6541] netlink: 44 bytes leftover after parsing attributes in process `syz.0.219'. [ 152.037543][ T172] usb 2-1: USB disconnect, device number 5 [ 152.440715][ T6553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.224'. [ 152.449673][ T6553] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 152.456928][ T6553] IPv6: NLM_F_CREATE should be set when creating new route [ 152.466242][ T6553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.224'. [ 152.475411][ T6553] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 153.616093][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025480400: rx timeout, send abort [ 154.124437][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025480400: abort rx timeout. Force session deactivation [ 154.741483][ T6582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.233'. [ 154.797116][ T6582] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 154.947921][ T6587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.233'. [ 154.962667][ T6587] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 157.342161][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 159.248582][ T6636] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 159.257985][ T6636] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 161.449885][ T6661] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 161.492461][ T6661] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.026310][ T5811] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 162.203062][ T6679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.264'. [ 162.300347][ T5811] usb 3-1: config 16 has an invalid interface number: 231 but max is 0 [ 162.310561][ T5811] usb 3-1: config 16 has no interface number 0 [ 162.329079][ T5811] usb 3-1: config 16 interface 231 has no altsetting 0 [ 162.343214][ T5811] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10ae, bcdDevice=39.33 [ 162.369120][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.462172][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 162.514334][ T5811] usb 3-1: Product: syz [ 162.518512][ T5811] usb 3-1: Manufacturer: syz [ 162.547293][ T5811] usb 3-1: SerialNumber: syz [ 163.410094][ T5811] usb 3-1: USB disconnect, device number 9 [ 163.574911][ T6694] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 163.607383][ T6694] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 164.852283][ T6718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.279'. [ 164.864800][ T6718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.279'. [ 166.021647][ T6737] netlink: 36 bytes leftover after parsing attributes in process `syz.2.285'. [ 166.042511][ T6737] netlink: 'syz.2.285': attribute type 10 has an invalid length. [ 166.063161][ T6737] syz_tun: entered promiscuous mode [ 166.082175][ T6737] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 166.268832][ T6744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.288'. [ 166.286408][ T6744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.288'. [ 167.283660][ T6753] ======================================================= [ 167.283660][ T6753] WARNING: The mand mount option has been deprecated and [ 167.283660][ T6753] and is ignored by this kernel. Remove the mand [ 167.283660][ T6753] option from the mount to silence this warning. [ 167.283660][ T6753] ======================================================= [ 168.702090][ C0] sched: RT throttling activated [ 169.362484][ T172] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 169.552218][ T172] usb 2-1: Using ep0 maxpacket: 8 [ 169.572600][ T172] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.590497][ T172] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 169.590528][ T172] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.593481][ T172] usb 2-1: config 0 descriptor?? [ 169.609790][ T172] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 169.942120][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 170.459776][ T172] gspca_vc032x: reg_w err -71 [ 170.466135][ T172] vc032x: probe of 2-1:0.0 failed with error -71 [ 170.490177][ T172] usb 2-1: USB disconnect, device number 6 [ 171.911288][ T6796] syzkaller0: entered promiscuous mode [ 171.917770][ T6796] syzkaller0: entered allmulticast mode [ 171.950724][ T6796] netlink: 44 bytes leftover after parsing attributes in process `syz.0.308'. [ 173.688698][ T6823] loop9: detected capacity change from 0 to 7 [ 173.717240][ T6823] Dev loop9: unable to read RDB block 7 [ 173.732575][ T6823] loop9: unable to read partition table [ 173.748758][ T6823] loop9: partition table beyond EOD, truncated [ 173.778365][ T6823] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 174.142325][ T5779] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 174.547733][ T5779] usb 3-1: unable to get BOS descriptor or descriptor too short [ 174.570638][ T5779] usb 3-1: not running at top speed; connect to a high speed hub [ 174.693157][ T5779] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 174.703799][ T5779] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 174.722545][ T5779] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 174.933320][ T5779] usb 3-1: string descriptor 0 read error: -22 [ 174.940137][ T5779] usb 3-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 174.949813][ T5779] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.968595][ T5779] usb 3-1: 0:2 : does not exist [ 176.051034][ T5779] usb 3-1: USB disconnect, device number 10 [ 176.482434][ T6859] syzkaller0: entered promiscuous mode [ 176.487956][ T6859] syzkaller0: entered allmulticast mode [ 176.516367][ T6859] netlink: 44 bytes leftover after parsing attributes in process `syz.1.326'. [ 183.292708][ T6944] netlink: 'syz.2.356': attribute type 6 has an invalid length. [ 183.498088][ T6948] netlink: 'syz.2.356': attribute type 6 has an invalid length. [ 184.369488][ T6961] syzkaller0: entered promiscuous mode [ 184.500833][ T6961] syzkaller0: entered allmulticast mode [ 184.634119][ T6961] netlink: 44 bytes leftover after parsing attributes in process `syz.0.362'. [ 187.887541][ T6996] syzkaller0: entered promiscuous mode [ 187.936989][ T6996] syzkaller0: entered allmulticast mode [ 187.991650][ T6996] netlink: 44 bytes leftover after parsing attributes in process `syz.1.374'. [ 191.902187][ T5779] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 192.142587][ T5779] usb 1-1: Using ep0 maxpacket: 16 [ 192.170422][ T5779] usb 1-1: config 16 has an invalid interface number: 75 but max is 0 [ 192.189223][ T5779] usb 1-1: config 16 has no interface number 0 [ 192.201470][ T5779] usb 1-1: config 16 interface 75 has no altsetting 0 [ 192.214054][ T5779] usb 1-1: New USB device found, idVendor=2833, idProduct=0211, bcdDevice=1b.63 [ 192.232157][ T5779] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.232754][ T51] Bluetooth: hci3: command tx timeout [ 192.256405][ T5779] usb 1-1: Product: syz [ 192.261548][ T5779] usb 1-1: Manufacturer: syz [ 192.280595][ T5779] usb 1-1: SerialNumber: syz [ 192.561857][ T5779] usb 1-1: USB disconnect, device number 10 [ 194.392836][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.400399][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.332566][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 196.356785][ T7093] netlink: 'syz.2.407': attribute type 6 has an invalid length. [ 196.383125][ T7093] netlink: 'syz.2.407': attribute type 6 has an invalid length. [ 197.271145][ T7105] tmpfs: Unknown parameter '' [ 197.892541][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 198.302109][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 200.590281][ T7130] netlink: 68 bytes leftover after parsing attributes in process `syz.3.418'. [ 201.594366][ T5773] Bluetooth: hci2: command 0x0406 tx timeout [ 201.600421][ T5773] Bluetooth: hci0: command 0x0406 tx timeout [ 201.672492][ T5773] Bluetooth: hci1: command 0x0406 tx timeout [ 202.366760][ T7138] overlayfs: missing 'lowerdir' [ 202.458057][ T7141] netlink: 116 bytes leftover after parsing attributes in process `syz.3.426'. [ 204.488417][ T7172] overlayfs: missing 'lowerdir' [ 205.713613][ T2134] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 205.912190][ T2134] usb 3-1: Using ep0 maxpacket: 8 [ 205.920739][ T2134] usb 3-1: unable to get BOS descriptor or descriptor too short [ 205.933302][ T2134] usb 3-1: config 4 interface 0 has no altsetting 0 [ 205.946326][ T2134] usb 3-1: string descriptor 0 read error: -22 [ 205.960688][ T2134] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 205.971506][ T2134] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 205.998621][ T2134] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 206.027566][ T2134] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 206.057104][ T2134] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 206.071086][ T2134] usb 3-1: media controller created [ 206.107530][ T2134] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 207.184414][ T2134] zl10353_read_register: readreg error (reg=127, ret==0) [ 207.233130][ T7178] usb 3-1: dvb_usb_au6610: wlen=4100, aborting [ 207.402918][ T2134] usb 3-1: USB disconnect, device number 11 [ 208.145668][ T7203] overlayfs: missing 'lowerdir' [ 210.094477][ T2323] pvrusb2: request_firmware fatal error with code=-110 [ 210.101536][ T2323] pvrusb2: Failure uploading firmware1 [ 210.138787][ T2323] pvrusb2: Device initialization was not successful. [ 210.159407][ T2323] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 210.172165][ T2323] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 210.182251][ T2323] pvrusb2: Failed to submit write-control URB status=-19 [ 210.189808][ T2323] usb 4-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 210.197984][ T5808] pvrusb2: Device being rendered inoperable [ 210.228688][ T2323] usb 4-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 211.015475][ T7232] overlayfs: missing 'lowerdir' [ 214.449158][ T7260] overlayfs: missing 'lowerdir' [ 218.004842][ T7284] overlayfs: missing 'lowerdir' [ 225.217186][ T7352] netlink: 20 bytes leftover after parsing attributes in process `syz.2.494'. [ 226.578204][ T7359] netlink: 'syz.0.497': attribute type 6 has an invalid length. [ 226.588961][ T7359] netlink: 'syz.0.497': attribute type 6 has an invalid length. [ 226.597150][ T5811] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 226.806314][ T5811] usb 3-1: Using ep0 maxpacket: 16 [ 227.044249][ T5811] usb 3-1: unable to get BOS descriptor or descriptor too short [ 227.169058][ T5811] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 233, changing to 7 [ 227.291826][ T5811] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 240, changing to 7 [ 227.313736][ T5811] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1600, setting to 1024 [ 227.376392][ T5811] usb 3-1: language id specifier not provided by device, defaulting to English [ 228.628623][ T5811] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 228.652141][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.660330][ T5811] usb 3-1: Product: syz [ 228.664617][ T5811] usb 3-1: Manufacturer: syz [ 228.669239][ T5811] usb 3-1: SerialNumber: syz [ 229.015535][ T5811] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 229.044496][ T5811] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 229.060133][ T5811] usb 3-1: USB disconnect, device number 12 [ 229.105588][ T5765] udevd[5765]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.636893][ T7391] netlink: 'syz.1.507': attribute type 6 has an invalid length. [ 229.726487][ T7389] netlink: 'syz.1.507': attribute type 6 has an invalid length. [ 234.234229][ T7452] netlink: 20 bytes leftover after parsing attributes in process `syz.1.525'. [ 234.272244][ T5811] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 234.934997][ T7457] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.527'. [ 235.003140][ T7457] netlink: 24 bytes leftover after parsing attributes in process `syz.3.527'. [ 235.204101][ T5811] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.228172][ T5811] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 235.253122][ T5811] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 235.314679][ T5811] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 235.323864][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.331856][ T5811] usb 3-1: Product: syz [ 235.336204][ T5811] usb 3-1: Manufacturer: syz [ 235.341095][ T5811] usb 3-1: SerialNumber: syz [ 235.349639][ T5811] usb 3-1: config 0 descriptor?? [ 236.263229][ T7465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.524'. [ 236.874341][ T172] usb 3-1: USB disconnect, device number 13 [ 238.830598][ T7494] 8021q: VLANs not supported on ip6gre0 [ 239.152405][ T5771] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 239.352224][ T5771] usb 3-1: Using ep0 maxpacket: 32 [ 239.567951][ T5771] usb 3-1: unable to get BOS descriptor or descriptor too short [ 239.583192][ T5771] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 239.591165][ T5771] usb 3-1: can't read configurations, error -71 [ 241.812167][ T5811] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 242.012229][ T5811] usb 1-1: Using ep0 maxpacket: 16 [ 242.021869][ T5811] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.076736][ T5811] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 242.091465][ T5811] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 242.107200][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.117964][ T5811] usb 1-1: Product: syz [ 242.142629][ T5811] usb 1-1: Manufacturer: syz [ 242.147637][ T5811] usb 1-1: SerialNumber: syz [ 242.636051][ T5811] usb 1-1: 0:2 : does not exist [ 242.736024][ T5811] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 242.816782][ T5811] usb 1-1: USB disconnect, device number 11 [ 242.888641][ T5765] udevd[5765]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 244.927656][ T7561] netlink: 'syz.2.557': attribute type 1 has an invalid length. [ 245.962210][ T5771] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 246.179597][ T5771] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.252674][ T5771] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 246.348746][ T5771] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 246.506858][ T5771] usb 1-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 246.601719][ T5771] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.665276][ T5771] usb 1-1: Product: syz [ 246.669495][ T5771] usb 1-1: Manufacturer: syz [ 246.688391][ T5771] usb 1-1: SerialNumber: syz [ 246.753127][ T5771] usb 1-1: config 0 descriptor?? [ 247.267985][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.563'. [ 247.715520][ T5771] usb 1-1: USB disconnect, device number 12 [ 248.162156][ T42] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 248.352193][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 248.359635][ T42] usb 3-1: config 1 interface 0 has no altsetting 0 [ 248.370826][ T42] usb 3-1: New USB device found, idVendor=05ac, idProduct=0267, bcdDevice= 0.40 [ 248.381298][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.390028][ T42] usb 3-1: Product: చ [ 248.394487][ T42] usb 3-1: Manufacturer: 䒈熕鹘疛췐ꔓ턨䏽ﴤ뉆寧铍䣁顂㮆鼸웂匛迪嚑릸쮌ỏ訒 [ 248.405978][ T42] usb 3-1: SerialNumber: ҵŻ▊溸蹐⃊ᨐ뚼褠桩ⳛ邮璞䰙ꪡଫ줮楺㔭뭞괜ⴻꡢ쿼ℶ的唼飻ँ볾缄愕㒪䆘抷⯑ᄷ䉣궴ဧ䴳ඝ㕇̸ࣂ᣷맺橅坳帉̣ힺ䗯⎔登짧쒾᱄膙莃傰킬娙ᐬ틨⟕糹䁔҃ⓨ㧧웥孊趮扰ⵆ륓చ쾪쨊銲 [ 248.657550][ T7585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.667697][ T7585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.686770][ T7585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.791659][ T7585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.835147][ T42] usbhid 3-1:1.0: can't add hid device: -71 [ 248.854811][ T42] usbhid: probe of 3-1:1.0 failed with error -71 [ 248.885774][ T42] usb 3-1: USB disconnect, device number 16 [ 251.242536][ T2134] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 251.563661][ T2134] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.573901][ T2134] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 251.583363][ T2134] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 251.605206][ T2134] usb 1-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 251.614668][ T2134] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.629426][ T2134] usb 1-1: Product: syz [ 251.650537][ T2134] usb 1-1: Manufacturer: syz [ 251.722855][ T2134] usb 1-1: SerialNumber: syz [ 251.782984][ T2134] usb 1-1: config 0 descriptor?? [ 252.574105][ T7634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.576'. [ 253.014257][ T5811] usb 1-1: USB disconnect, device number 13 [ 256.772594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 256.887334][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.893811][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.990350][ T7679] netlink: 'syz.1.594': attribute type 6 has an invalid length. [ 260.022725][ T7679] netlink: 'syz.1.594': attribute type 6 has an invalid length. [ 260.990956][ T7691] syz.0.598 uses obsolete (PF_INET,SOCK_PACKET) [ 261.090097][ T5809] IPVS: starting estimator thread 0... [ 261.165105][ T7696] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 261.192872][ T7695] IPVS: using max 20 ests per chain, 48000 per kthread [ 265.897746][ T7726] netlink: 'syz.1.607': attribute type 6 has an invalid length. [ 265.971722][ T7724] netlink: 'syz.1.607': attribute type 6 has an invalid length. [ 266.095496][ T7738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.612'. [ 267.024530][ T5837] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 267.588196][ T5837] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.650389][ T5837] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 267.687905][ T5837] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 267.724073][ T5837] usb 1-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 267.789196][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.804697][ T5837] usb 1-1: Product: syz [ 267.808868][ T5837] usb 1-1: Manufacturer: syz [ 267.813610][ T5837] usb 1-1: SerialNumber: syz [ 267.841937][ T5837] usb 1-1: config 0 descriptor?? [ 268.419500][ T5811] IPVS: starting estimator thread 0... [ 268.537056][ T7760] IPVS: using max 18 ests per chain, 43200 per kthread [ 268.578890][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.614'. [ 269.058081][ T5779] usb 1-1: USB disconnect, device number 14 [ 270.125726][ T7771] netlink: 'syz.2.621': attribute type 6 has an invalid length. [ 270.267803][ T7775] netlink: 'syz.2.621': attribute type 6 has an invalid length. [ 270.312152][ T5837] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 270.513842][ T5837] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 270.532652][ T5837] usb 2-1: config 0 interface 0 has no altsetting 0 [ 270.542256][ T5779] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 270.561619][ T5837] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 270.572875][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 270.596918][ T5837] usb 2-1: Product: syz [ 270.607593][ T5837] usb 2-1: Manufacturer: syz [ 270.619305][ T5837] usb 2-1: SerialNumber: syz [ 270.652732][ T5837] usb 2-1: config 0 descriptor?? [ 270.666252][ T5837] usb 2-1: selecting invalid altsetting 0 [ 270.736651][ T5779] usb 1-1: unable to get BOS descriptor or descriptor too short [ 270.773561][ T5779] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.824343][ T5779] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 270.852119][ T5779] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 270.886360][ T5837] usb 2-1: USB disconnect, device number 7 [ 270.900955][ T5779] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 270.947105][ T5779] usb 1-1: config 1 interface 1 has no altsetting 1 [ 270.966520][ T5779] usb 1-1: string descriptor 0 read error: -22 [ 270.973160][ T5779] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 270.982485][ T5779] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.100996][ T5779] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 271.127771][ T5761] udevd[5761]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 271.191229][ T2323] pvrusb2: request_firmware fatal error with code=-110 [ 271.205936][ T2323] pvrusb2: Failure uploading firmware1 [ 271.222099][ T2323] pvrusb2: Device initialization was not successful. [ 271.228806][ T2323] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 271.242274][ T5779] usb 1-1: USB disconnect, device number 15 [ 271.283917][ T2323] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 271.294723][ T5808] pvrusb2: Device being rendered inoperable [ 274.352221][ T5808] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 274.555014][ T5808] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.810137][ T5808] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 274.930620][ T5808] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 275.024906][ T5808] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 275.044152][ T5808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.208451][ T5808] usb 3-1: Product: syz [ 275.228739][ T5808] usb 3-1: Manufacturer: syz [ 275.246088][ T5808] usb 3-1: SerialNumber: syz [ 275.278300][ T5808] usb 3-1: config 0 descriptor?? [ 277.048035][ T7816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.631'. [ 278.582125][ T5808] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 279.275628][ T5837] usb 3-1: USB disconnect, device number 17 [ 279.312442][ T5808] usb 2-1: Using ep0 maxpacket: 16 [ 279.421203][ T5808] usb 2-1: device descriptor read/all, error -71 [ 294.443822][ T7927] netlink: 'syz.0.675': attribute type 6 has an invalid length. [ 294.452240][ T7927] netlink: 'syz.0.675': attribute type 6 has an invalid length. [ 294.954222][ T51] Bluetooth: hci1: Invalid handle: 0x3f00 > 0x0eff [ 298.612854][ T7962] syzkaller0: entered promiscuous mode [ 298.628321][ T7962] syzkaller0: entered allmulticast mode [ 298.681350][ T7962] netlink: 44 bytes leftover after parsing attributes in process `syz.3.684'. [ 299.420267][ T7975] netlink: 'syz.0.686': attribute type 4 has an invalid length. [ 301.028144][ T7991] nbd0: detected capacity change from 0 to 63 [ 301.112046][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 301.305265][ T7994] PKCS7: Unknown OID: [4] 0.0 [ 301.310287][ T7994] PKCS7: Only support pkcs7_signedData type [ 301.513044][ T51] block nbd0: Receive control failed (result -104) [ 312.429610][ T27] audit: type=1326 audit(1782773442.602:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8081 comm="syz.1.720" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9099ce59 code=0x7ffc0000 [ 312.501349][ T27] audit: type=1326 audit(1782773442.602:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8081 comm="syz.1.720" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9099ce59 code=0x7ffc0000 [ 312.591420][ T27] audit: type=1326 audit(1782773442.602:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8081 comm="syz.1.720" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7efe9099ce59 code=0x7ffc0000 [ 312.643290][ T27] audit: type=1326 audit(1782773442.602:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8081 comm="syz.1.720" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9099ce59 code=0x7ffc0000 [ 312.667730][ T27] audit: type=1326 audit(1782773442.602:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8081 comm="syz.1.720" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7efe9099ce59 code=0x7ffc0000 [ 312.918996][ T27] audit: type=1326 audit(1782773442.602:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8081 comm="syz.1.720" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9099ce59 code=0x7ffc0000 [ 312.966861][ T27] audit: type=1326 audit(1782773442.602:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8081 comm="syz.1.720" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9099ce59 code=0x7ffc0000 [ 314.774408][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 315.178204][ T8092] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 315.196527][ T8092] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 316.562119][ T5779] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 316.745055][ T5779] usb 2-1: Using ep0 maxpacket: 32 [ 316.820325][ T5779] usb 2-1: config 0 has an invalid descriptor of length 221, skipping remainder of the config [ 316.931940][ T5779] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 317.068875][ T5779] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 317.164774][ T5779] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 317.250326][ T5779] usb 2-1: Product: syz [ 317.265198][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.271554][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.312794][ T5779] usb 2-1: Manufacturer: syz [ 317.360553][ T5779] usb 2-1: SerialNumber: syz [ 317.455786][ T5779] usb 2-1: config 0 descriptor?? [ 318.417928][ T172] usb 2-1: USB disconnect, device number 10 [ 319.664114][ T8134] netlink: 'syz.3.732': attribute type 6 has an invalid length. [ 319.690623][ T8134] netlink: 'syz.3.732': attribute type 6 has an invalid length. [ 321.352145][ T5088] Bluetooth: hci3: command 0x0406 tx timeout [ 321.841482][ T8157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.742'. [ 324.764492][ T8182] ALSA: mixer_oss: invalid OSS volume 'G(`*_' [ 324.922306][ T8182] ALSA: mixer_oss: invalid OSS volume 'vh(ڠI0 `k-XK' [ 324.941742][ T8182] ALSA: mixer_oss: invalid OSS volume 'ćPSTG#4l2vIU' [ 324.988860][ T8182] ALSA: mixer_oss: invalid OSS volume '[0AN1qQ5B_' [ 324.997984][ T8182] ALSA: mixer_oss: invalid OSS volume '%JoR=UK̒H.ab' [ 325.018058][ T8182] ALSA: mixer_oss: invalid OSS volume '"ö8g' [ 325.045919][ T8182] ALSA: mixer_oss: invalid OSS volume 'gQzļP↗Bǂ,[/TIOk' [ 325.054702][ T8182] ALSA: mixer_oss: invalid OSS volume '\Xޔ쾓~mЗ$\H$ߢfAT,_' [ 325.063440][ T8182] ALSA: mixer_oss: invalid OSS volume 'c,ȅZ).aKnЕL27' [ 325.072056][ T8182] ALSA: mixer_oss: invalid OSS volume '0&' [ 325.080700][ T8182] ALSA: mixer_oss: invalid OSS volume '&v't>2{pn6\-NB>' [ 325.089420][ T8182] ALSA: mixer_oss: invalid OSS volume 'cpdRk?vxr0& I' [ 325.098184][ T8182] ALSA: mixer_oss: invalid OSS volume 'bi^ѝke"bAY' [ 325.106952][ T8182] ALSA: mixer_oss: invalid OSS volume 'E`լw;l/r48,ra\mk' [ 325.166480][ T8182] ALSA: mixer_oss: invalid OSS volume 'c!<;а+j"澯qE'ê' [ 325.211310][ T8182] ALSA: mixer_oss: invalid OSS volume 'qWn' [ 325.239228][ T8182] ALSA: mixer_oss: invalid OSS volume ',?|Xl!+ilbuS' [ 325.729795][ T8182] ALSA: mixer_oss: invalid OSS volume 'JtjF(' [ 325.787649][ T8182] ALSA: mixer_oss: invalid OSS volume '%5Sjulʺ,-z՝ԕ2' [ 325.812318][ T8182] ALSA: mixer_oss: invalid OSS volume 'QFoȠK' [ 325.819235][ T8182] ALSA: mixer_oss: invalid OSS volume 'xSy_uv*Ľ؈' [ 325.856704][ T8182] ALSA: mixer_oss: invalid OSS volume 'ZuVj1(#xNKZ|' [ 325.868300][ T8182] ALSA: mixer_oss: invalid OSS volume 'xLދM\o' [ 325.882191][ T8182] ALSA: mixer_oss: invalid OSS volume '9^}}"prc[`' [ 325.882684][ T8196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.757'. [ 325.890565][ T8182] ALSA: mixer_oss: invalid OSS volume 'P?3Pv$ 0[b6' [ 325.890611][ T8182] ALSA: mixer_oss: invalid OSS volume 'Ԓ헸ͳ*=V5Ε(?T}BdnS=^' [ 325.942181][ T8182] ALSA: mixer_oss: invalid OSS volume ';iQG*ԳҖwַ$LȖ7' [ 325.972110][ T8182] ALSA: mixer_oss: invalid OSS volume '2"Ek$4 -"`' [ 325.998038][ T8182] ALSA: mixer_oss: invalid OSS volume ']-, priority 0 [ 326.050756][ T8182] ALSA: mixer_oss: invalid OSS volume 'U|4M' [ 326.076561][ T8182] ALSA: mixer_oss: invalid OSS volume 'Fy~`SrbHD̩+'(' [ 326.094514][ T8182] ALSA: mixer_oss: invalid OSS volume 'ŕ!jI=DfG>),<' [ 326.105079][ T8199] syzkaller0: entered promiscuous mode [ 326.112581][ T8199] syzkaller0: entered allmulticast mode [ 326.118356][ T8182] ALSA: mixer_oss: invalid OSS volume 'sN-P! L'' [ 326.129565][ T8182] ALSA: mixer_oss: invalid OSS volume '@?)]>ÕzPt_x' [ 326.147412][ T8182] ALSA: mixer_oss: invalid OSS volume 'q0~`($6+vzZrwJ' [ 326.157634][ T8199] netlink: 44 bytes leftover after parsing attributes in process `syz.0.759'. [ 326.166991][ T8182] ALSA: mixer_oss: invalid OSS volume 'qx&bZ56I7lD$@f' [ 326.177472][ T8198] tipc: Resetting bearer [ 326.184409][ T8182] ALSA: mixer_oss: invalid OSS volume '~S)t`٥T' [ 326.213345][ T8182] ALSA: mixer_oss: invalid OSS volume ',v;Iצ(-' [ 326.221315][ T8182] ALSA: mixer_oss: invalid OSS volume 'gI)ZJ+5uKY' [ 326.268965][ T8198] tipc: Disabling bearer [ 326.272352][ T8182] ALSA: mixer_oss: invalid OSS volume 'U]+v/*Ꞵ7p ' [ 326.306159][ T8182] ALSA: mixer_oss: invalid OSS volume 'ŠoڪgD7' [ 326.326422][ T8182] ALSA: mixer_oss: invalid OSS volume 'QzI?;L' [ 326.345335][ T8182] ALSA: mixer_oss: invalid OSS volume '' [ 326.366558][ T8182] ALSA: mixer_oss: invalid OSS volume '#_M{<<=-Vh*' [ 326.382608][ T8182] ALSA: mixer_oss: invalid OSS volume '}nY%ԣv)}9k@' [ 326.411685][ T8182] ALSA: mixer_oss: invalid OSS volume 'IEg1FT|Djb' [ 326.433347][ T8182] ALSA: mixer_oss: invalid OSS volume 'Ű9Y:j1j龍U+j' [ 326.451949][ T8182] ALSA: mixer_oss: invalid OSS volume '>6Up>C'9J*]1.' [ 326.496094][ T8182] ALSA: mixer_oss: invalid OSS volume 'euk]MF&;2'֪ e"RqC' [ 326.522117][ T8182] ALSA: mixer_oss: invalid OSS volume 'IX)^]ĹIQw%Eӱ0' [ 326.530160][ T8182] ALSA: mixer_oss: invalid OSS volume 'KL(b+v_t'CJ~' [ 326.538687][ T8182] ALSA: mixer_oss: invalid OSS volume 'ZPvP(zb{4hz5$c' [ 326.547094][ T8182] ALSA: mixer_oss: invalid OSS volume 'W'Ra&$ѯ5nj' [ 326.558973][ T8182] ALSA: mixer_oss: invalid OSS volume 'Bfh,Ӹ' [ 326.567983][ T8182] ALSA: mixer_oss: invalid OSS volume 'Dp{5̈3N(aDo@B=(' [ 326.581118][ T8182] ALSA: mixer_oss: invalid OSS volume '@|czA5i' [ 326.588100][ T8182] ALSA: mixer_oss: invalid OSS volume 'd=*q>nC㮯f' [ 329.063097][ T8233] tipc: Enabling of bearer rejected, failed to enable media [ 329.217892][ T8236] netlink: 44 bytes leftover after parsing attributes in process `syz.2.771'. [ 330.022418][ T5832] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 330.545650][ T5832] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 330.555842][ T5832] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 330.566690][ T5832] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 330.575990][ T5832] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 330.587307][ T5832] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 330.632872][ T5832] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 330.728709][ T5832] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 330.745745][ T5832] usb 2-1: Product: syz [ 330.760070][ T5832] usb 2-1: Manufacturer: syz [ 330.804430][ T5832] cdc_wdm 2-1:1.0: skipping garbage [ 330.832850][ T5832] cdc_wdm 2-1:1.0: skipping garbage [ 330.862917][ T5832] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 330.869635][ T5832] cdc_wdm 2-1:1.0: Unknown control protocol [ 331.060409][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 331.067159][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 331.073501][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 331.080104][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 331.086363][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 331.092965][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 331.099254][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 331.105859][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 331.112232][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 331.118864][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 331.125971][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 331.132561][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 331.139127][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 331.145754][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 331.152244][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 331.158881][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 331.165201][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 331.171812][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 331.178782][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 331.185374][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 331.220770][ T5832] usb 2-1: USB disconnect, device number 11 [ 331.226861][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 332.025206][ T96] block nbd0: Possible stuck request ffff8880225e8000: control (read@0,1024B). Runtime 30 seconds [ 332.037733][ T96] block nbd0: Possible stuck request ffff8880225e8200: control (read@1024,1024B). Runtime 30 seconds [ 332.048646][ T96] block nbd0: Possible stuck request ffff8880225e8400: control (read@2048,1024B). Runtime 30 seconds [ 332.059549][ T96] block nbd0: Possible stuck request ffff8880225e8600: control (read@3072,1024B). Runtime 30 seconds [ 333.307816][ T8269] ceph: No mds server is up or the cluster is laggy [ 336.202129][ T172] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 336.394476][ T172] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 336.420198][ T172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.446723][ T172] usb 3-1: config 0 descriptor?? [ 336.464961][ T172] cp210x 3-1:0.0: cp210x converter detected [ 336.886988][ T172] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 336.917831][ T172] usb 3-1: cp210x converter now attached to ttyUSB0 [ 337.117997][ T172] usb 3-1: USB disconnect, device number 18 [ 337.148331][ T172] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 337.181085][ T172] cp210x 3-1:0.0: device disconnected [ 341.593242][ T8340] ceph: No mds server is up or the cluster is laggy [ 343.660126][ T8355] netlink: 12 bytes leftover after parsing attributes in process `syz.1.807'. [ 344.795318][ T8371] tipc: Started in network mode [ 344.805725][ T8371] tipc: Node identity 4a57ca328cef, cluster identity 4711 [ 344.824236][ T8371] tipc: Enabled bearer , priority 0 [ 344.846708][ T8371] syzkaller0: entered promiscuous mode [ 344.857433][ T8371] syzkaller0: entered allmulticast mode [ 344.891561][ T8371] netlink: 44 bytes leftover after parsing attributes in process `syz.1.813'. [ 344.927461][ T8371] tipc: Resetting bearer [ 344.955880][ T8370] tipc: Resetting bearer [ 345.035630][ T8370] tipc: Disabling bearer [ 345.538900][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.815'. [ 348.227752][ T8399] tipc: Started in network mode [ 348.233309][ T8399] tipc: Node identity 8a4b7340b714, cluster identity 4711 [ 348.240814][ T8399] tipc: Enabled bearer , priority 0 [ 348.249437][ T8399] syzkaller0: entered promiscuous mode [ 348.259300][ T8399] syzkaller0: entered allmulticast mode [ 348.272349][ T8399] netlink: 44 bytes leftover after parsing attributes in process `syz.3.823'. [ 348.287829][ T8399] tipc: Resetting bearer [ 348.299150][ T8398] tipc: Resetting bearer [ 348.321759][ T8398] tipc: Disabling bearer [ 351.651597][ T8412] ceph: No mds server is up or the cluster is laggy [ 351.982152][ T8426] 9pnet_fd: Insufficient options for proto=fd [ 352.192702][ T8429] tipc: Enabled bearer , priority 0 [ 352.234860][ T8429] syzkaller0: entered promiscuous mode [ 352.310144][ T8429] syzkaller0: entered allmulticast mode [ 352.351465][ T8429] netlink: 44 bytes leftover after parsing attributes in process `syz.0.833'. [ 352.401451][ T8429] tipc: Resetting bearer [ 352.463782][ T8428] tipc: Resetting bearer [ 353.524869][ T8428] tipc: Disabling bearer [ 353.564552][ T5809] tipc: Node number set to 3123039721 [ 353.915766][ T8449] fuse: Bad value for 'fd' [ 355.592322][ T5779] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 355.612223][ T8451] ceph: No mds server is up or the cluster is laggy [ 355.792189][ T5779] usb 3-1: Using ep0 maxpacket: 16 [ 355.913550][ T5779] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 355.941261][ T5779] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 355.978885][ T5779] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.003918][ T5779] usb 3-1: Product: syz [ 356.026429][ T5779] usb 3-1: Manufacturer: syz [ 356.044998][ T5779] usb 3-1: SerialNumber: syz [ 356.086083][ T5779] usb 3-1: config 0 descriptor?? [ 356.354857][ T8471] tipc: Enabled bearer , priority 0 [ 356.365997][ T8471] syzkaller0: entered promiscuous mode [ 356.371564][ T8471] syzkaller0: entered allmulticast mode [ 356.386797][ T8471] netlink: 44 bytes leftover after parsing attributes in process `syz.3.847'. [ 356.404552][ T8471] tipc: Resetting bearer [ 356.413470][ T8470] tipc: Resetting bearer [ 356.433169][ T8470] tipc: Disabling bearer [ 358.404487][ T8486] 9pnet_fd: Insufficient options for proto=fd [ 358.411468][ T5837] usb 3-1: USB disconnect, device number 19 [ 358.625929][ T8494] netlink: 14902 bytes leftover after parsing attributes in process `syz.3.854'. [ 358.842097][ T5779] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 359.052169][ T5779] usb 2-1: Using ep0 maxpacket: 16 [ 359.072906][ T5779] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 359.087993][ T5779] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.108807][ T5779] usb 2-1: Product: syz [ 359.120031][ T5779] usb 2-1: Manufacturer: syz [ 359.127259][ T5779] usb 2-1: SerialNumber: syz [ 359.147736][ T5779] usb 2-1: config 0 descriptor?? [ 359.166406][ T5779] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 360.362506][ T5779] ssu100: probe of 2-1:0.0 failed with error -71 [ 360.391914][ T5779] usb 2-1: USB disconnect, device number 12 [ 362.153638][ T96] block nbd0: Possible stuck request ffff8880225e8000: control (read@0,1024B). Runtime 60 seconds [ 362.165587][ T96] block nbd0: Possible stuck request ffff8880225e8200: control (read@1024,1024B). Runtime 60 seconds [ 362.177087][ T96] block nbd0: Possible stuck request ffff8880225e8400: control (read@2048,1024B). Runtime 60 seconds [ 362.222417][ T5875] block nbd0: Possible stuck request ffff8880225e8600: control (read@3072,1024B). Runtime 60 seconds [ 362.921007][ T5779] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 363.822355][ T5779] usb 4-1: Using ep0 maxpacket: 8 [ 363.838727][ T5779] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 363.901650][ T5779] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 363.911521][ T5779] usb 4-1: Product: syz [ 363.916487][ T5779] usb 4-1: Manufacturer: syz [ 363.921188][ T5779] usb 4-1: SerialNumber: syz [ 363.938733][ T5779] usb 4-1: config 0 descriptor?? [ 363.955592][ T5779] gspca_main: sq905-2.14.0 probing 2770:9120 [ 364.472994][ T5779] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 364.481101][ T5779] sq905: probe of 4-1:0.0 failed with error -110 [ 364.549748][ T5779] usb 4-1: USB disconnect, device number 10 [ 364.660235][ T8554] tipc: Started in network mode [ 364.665467][ T8554] tipc: Node identity 7659bf5d53e6, cluster identity 4711 [ 364.675887][ T8554] tipc: Enabled bearer , priority 0 [ 364.692506][ T8554] syzkaller0: entered promiscuous mode [ 364.702205][ T8554] syzkaller0: entered allmulticast mode [ 364.726155][ T8554] netlink: 44 bytes leftover after parsing attributes in process `syz.2.870'. [ 364.751486][ T8554] tipc: Resetting bearer [ 364.770873][ T8553] tipc: Resetting bearer [ 364.798010][ T8553] tipc: Disabling bearer [ 366.796122][ T8581] netlink: 'syz.1.879': attribute type 1 has an invalid length. [ 367.007436][ T8587] tipc: Enabled bearer , priority 0 [ 367.019089][ T8587] syzkaller0: entered promiscuous mode [ 367.027655][ T8587] syzkaller0: entered allmulticast mode [ 367.073046][ T8587] netlink: 44 bytes leftover after parsing attributes in process `syz.2.881'. [ 367.118725][ T8587] tipc: Resetting bearer [ 367.145445][ T8586] tipc: Resetting bearer [ 367.170876][ T8586] tipc: Disabling bearer [ 368.672085][ T5837] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 369.371378][ T5837] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 369.425661][ T5837] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 369.452072][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.467874][ T5837] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 370.033444][ T1144] ------------[ cut here ]------------ [ 370.039356][ T1144] WARNING: CPU: 1 PID: 1144 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 370.050729][ T1144] Modules linked in: [ 370.054712][ T1144] CPU: 1 PID: 1144 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 370.062383][ T1144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 370.072526][ T1144] Workqueue: phy10 ieee80211_csa_finalize_work [ 370.078733][ T1144] RIP: 0010:ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 370.086174][ T1144] Code: 48 89 df e8 a4 8d d8 f7 e9 d6 fc ff ff e8 4a 19 80 f7 eb 24 e8 43 19 80 f7 c7 04 24 f4 ff ff ff e9 cc f5 ff ff e8 32 19 80 f7 <0f> 0b 0f 0b e9 b7 f5 ff ff e8 24 19 80 f7 48 8b 7c 24 08 4c 8b 74 [ 370.105945][ T1144] RSP: 0018:ffffc9000489f9c0 EFLAGS: 00010293 [ 370.112182][ T1144] RAX: ffffffff8a06c812 RBX: 0000000000000001 RCX: ffff88802472bc00 [ 370.120209][ T1144] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 370.128232][ T1144] RBP: dffffc0000000000 R08: ffff88805ed7562f R09: 1ffff1100bdaeac5 [ 370.137647][ C1] ------------[ cut here ]------------ [ 370.137684][ C1] WARNING: CPU: 1 PID: 1144 at net/mac80211/tx.c:5033 __ieee80211_beacon_get+0x1141/0x1520 [ 370.137732][ C1] Modules linked in: [ 370.137747][ C1] CPU: 1 PID: 1144 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 370.137768][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 370.137782][ C1] Workqueue: phy10 ieee80211_csa_finalize_work [ 370.137816][ C1] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 370.137848][ C1] Code: f7 4c 89 ef e8 b0 a4 c2 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 7b c6 84 f7 0f 0b e9 61 f8 ff ff e8 6f c6 84 f7 <0f> 0b e9 85 fb ff ff e8 63 c6 84 f7 48 c7 c7 40 50 64 8e 4c 89 e6 [ 370.137865][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 370.137885][ C1] RAX: ffffffff8a021ee1 RBX: dffffc0000000000 RCX: ffff88802472bc00 [ 370.137901][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 370.137915][ C1] RBP: 0000000000000000 R08: ffff88802472bc00 R09: 0000000000000003 [ 370.137927][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805ee3e440 [ 370.137940][ C1] R13: ffff88805fe0fc24 R14: ffff88805ee3e930 R15: ffff88805fe0fc00 [ 370.137955][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 370.137973][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 370.137988][ C1] CR2: 00007f89133ea540 CR3: 00000000300ec000 CR4: 00000000003506e0 [ 370.138007][ C1] Call Trace: [ 370.138092][ C1] [ 370.138130][ C1] ? __ieee80211_beacon_get+0x36/0x1520 [ 370.138207][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 370.138243][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 370.138286][ C1] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 370.138358][ C1] __iterate_interfaces+0x225/0x4c0 [ 370.138384][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 370.138413][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 370.138440][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 370.138469][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 370.138506][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 370.138532][ C1] ? hw_scan_work+0xf10/0xf10 [ 370.138558][ C1] __hrtimer_run_queues+0x525/0xc10 [ 370.138608][ C1] ? hrtimer_interrupt+0x980/0x980 [ 370.138629][ C1] ? read_tsc+0x9/0x20 [ 370.138663][ C1] hrtimer_run_softirq+0x177/0x290 [ 370.138691][ C1] handle_softirqs+0x27d/0x820 [ 370.138712][ C1] ? read_tsc+0x9/0x20 [ 370.138733][ C1] ? ktime_get+0x24b/0x280 [ 370.138757][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 370.138782][ C1] ? do_softirq+0x1a0/0x1a0 [ 370.138809][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 370.138839][ C1] __irq_exit_rcu+0xd3/0x190 [ 370.138861][ C1] ? irq_exit_rcu+0x20/0x20 [ 370.138891][ C1] irq_exit_rcu+0x9/0x20 [ 370.138910][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 370.138956][ C1] [ 370.138964][ C1] [ 370.139005][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 370.139056][ C1] RIP: 0010:console_flush_all+0x883/0xcf0 [ 370.139080][ C1] Code: ed 01 00 00 e8 8e 74 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 7f 74 1b 00 eb 06 e8 78 74 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 58 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 370.139097][ C1] RSP: 0018:ffffc9000489f360 EFLAGS: 00000293 [ 370.139118][ C1] RAX: ffffffff816b70d8 RBX: ffffc9000489f4df RCX: ffff88802472bc00 [ 370.139134][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 370.139148][ C1] RBP: ffffc9000489f4b0 R08: ffffffff911bc507 R09: 1ffffffff22378a0 [ 370.139164][ C1] R10: dffffc0000000000 R11: fffffbfff22378a1 R12: ffffffff8d8b7260 [ 370.139180][ C1] R13: 1ffffffff19f96d8 R14: ffffffff8d8b72b8 R15: dffffc0000000000 [ 370.139205][ C1] ? console_flush_all+0x878/0xcf0 [ 370.139242][ C1] ? console_flush_all+0x10b/0xcf0 [ 370.139277][ C1] ? is_console_locked+0x20/0x20 [ 370.139303][ C1] ? lock_chain_count+0x20/0x20 [ 370.139331][ C1] ? __down_trylock_console_sem+0xf6/0x1f0 [ 370.139362][ C1] console_unlock+0xad/0x350 [ 370.139389][ C1] ? other_cpu_in_panic+0xf0/0xf0 [ 370.139412][ C1] ? vprintk_emit+0x53d/0x610 [ 370.139440][ C1] ? printk_sprint+0x460/0x460 [ 370.139466][ C1] ? __wake_up_klogd+0xd9/0x100 [ 370.139501][ C1] vprintk_emit+0x497/0x610 [ 370.139529][ C1] ? printk_sprint+0x460/0x460 [ 370.139554][ C1] ? _printk+0xde/0x130 [ 370.139581][ C1] ? copy_from_kernel_nofault+0x17b/0x2f0 [ 370.139620][ C1] _printk+0xde/0x130 [ 370.139641][ C1] ? ieee80211_vif_use_reserved_switch+0x10e4/0x2900 [ 370.139675][ C1] ? load_image+0x420/0x420 [ 370.139710][ C1] __show_regs+0x1bf/0x600 [ 370.139742][ C1] ? dump_stack_print_info+0xf5/0x150 [ 370.139770][ C1] show_regs+0x44/0x90 [ 370.139798][ C1] __warn+0x160/0x470 [ 370.139825][ C1] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 370.139857][ C1] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 370.139887][ C1] report_bug+0x2be/0x4f0 [ 370.139913][ C1] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 370.139943][ C1] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 370.139973][ C1] ? ieee80211_vif_use_reserved_switch+0x1110/0x2900 [ 370.140002][ C1] handle_bug+0xcf/0x120 [ 370.140028][ C1] exc_invalid_op+0x1a/0x50 [ 370.140053][ C1] asm_exc_invalid_op+0x1a/0x20 [ 370.140082][ C1] RIP: 0010:ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 370.140112][ C1] Code: 48 89 df e8 a4 8d d8 f7 e9 d6 fc ff ff e8 4a 19 80 f7 eb 24 e8 43 19 80 f7 c7 04 24 f4 ff ff ff e9 cc f5 ff ff e8 32 19 80 f7 <0f> 0b 0f 0b e9 b7 f5 ff ff e8 24 19 80 f7 48 8b 7c 24 08 4c 8b 74 [ 370.140129][ C1] RSP: 0018:ffffc9000489f9c0 EFLAGS: 00010293 [ 370.140149][ C1] RAX: ffffffff8a06c812 RBX: 0000000000000001 RCX: ffff88802472bc00 [ 370.140164][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 370.140177][ C1] RBP: dffffc0000000000 R08: ffff88805ed7562f R09: 1ffff1100bdaeac5 [ 370.140192][ C1] R10: dffffc0000000000 R11: ffffed100bdaeac6 R12: 0000000000000001 [ 370.140207][ C1] R13: ffff88805ed76659 R14: ffff88805efead48 R15: ffff888028e6df00 [ 370.140232][ C1] ? ieee80211_vif_use_reserved_switch+0xd02/0x2900 [ 370.140282][ C1] ieee80211_link_use_reserved_context+0x37b/0x5c0 [ 370.140318][ C1] ieee80211_csa_finalize+0x571/0xeb0 [ 370.140349][ C1] ? mutex_lock_nested+0x20/0x20 [ 370.140389][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 370.140414][ C1] ? ieee80211_csa_finalize_work+0x140/0x140 [ 370.140445][ C1] ? read_lock_is_recursive+0x20/0x20 [ 370.140478][ C1] ieee80211_csa_finalize_work+0xf6/0x140 [ 370.140514][ C1] ? process_scheduled_works+0x975/0x1600 [ 370.140543][ C1] process_scheduled_works+0xa60/0x1600 [ 370.140597][ C1] ? worker_attach_to_pool+0x370/0x370 [ 370.140630][ C1] ? assign_work+0x3cc/0x5d0 [ 370.140661][ C1] worker_thread+0xa5e/0xfe0 [ 370.140700][ C1] ? _raw_spin_unlock+0x40/0x40 [ 370.140727][ C1] ? __kthread_parkme+0x71/0x1c0 [ 370.140758][ C1] kthread+0x2fa/0x390 [ 370.140777][ C1] ? pr_cont_work+0x550/0x550 [ 370.140804][ C1] ? kthread_blkcg+0xd0/0xd0 [ 370.140824][ C1] ret_from_fork+0x48/0x80 [ 370.140848][ C1] ? kthread_blkcg+0xd0/0xd0 [ 370.140870][ C1] ret_from_fork_asm+0x11/0x20 [ 370.140912][ C1] [ 370.140922][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 370.140933][ C1] CPU: 1 PID: 1144 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 370.140951][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 370.140963][ C1] Workqueue: phy10 ieee80211_csa_finalize_work [ 370.140991][ C1] Call Trace: [ 370.140998][ C1] [ 370.141004][ C1] dump_stack_lvl+0x18c/0x250 [ 370.141031][ C1] ? show_regs_print_info+0x20/0x20 [ 370.141054][ C1] ? load_image+0x420/0x420 [ 370.141085][ C1] panic+0x2ca/0x720 [ 370.141118][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 370.141153][ C1] ? ret_from_fork_asm+0x11/0x20 [ 370.141183][ C1] __warn+0x2e0/0x470 [ 370.141208][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 370.141239][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 370.141267][ C1] report_bug+0x2be/0x4f0 [ 370.141290][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 370.141318][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 370.141345][ C1] ? __ieee80211_beacon_get+0x1143/0x1520 [ 370.141373][ C1] handle_bug+0xcf/0x120 [ 370.141397][ C1] exc_invalid_op+0x1a/0x50 [ 370.141420][ C1] asm_exc_invalid_op+0x1a/0x20 [ 370.141446][ C1] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 370.141475][ C1] Code: f7 4c 89 ef e8 b0 a4 c2 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 7b c6 84 f7 0f 0b e9 61 f8 ff ff e8 6f c6 84 f7 <0f> 0b e9 85 fb ff ff e8 63 c6 84 f7 48 c7 c7 40 50 64 8e 4c 89 e6 [ 370.141496][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 370.141512][ C1] RAX: ffffffff8a021ee1 RBX: dffffc0000000000 RCX: ffff88802472bc00 [ 370.141526][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 370.141538][ C1] RBP: 0000000000000000 R08: ffff88802472bc00 R09: 0000000000000003 [ 370.141550][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805ee3e440 [ 370.141562][ C1] R13: ffff88805fe0fc24 R14: ffff88805ee3e930 R15: ffff88805fe0fc00 [ 370.141584][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 370.141619][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 370.141646][ C1] ? __ieee80211_beacon_get+0x36/0x1520 [ 370.141685][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 370.141718][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 370.141757][ C1] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 370.141791][ C1] __iterate_interfaces+0x225/0x4c0 [ 370.141813][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 370.141840][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 370.141865][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 370.141891][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 370.141919][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 370.141942][ C1] ? hw_scan_work+0xf10/0xf10 [ 370.141966][ C1] __hrtimer_run_queues+0x525/0xc10 [ 370.142005][ C1] ? hrtimer_interrupt+0x980/0x980 [ 370.142023][ C1] ? read_tsc+0x9/0x20 [ 370.142048][ C1] hrtimer_run_softirq+0x177/0x290 [ 370.142071][ C1] handle_softirqs+0x27d/0x820 [ 370.142087][ C1] ? read_tsc+0x9/0x20 [ 370.142106][ C1] ? ktime_get+0x24b/0x280 [ 370.142127][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 370.142149][ C1] ? do_softirq+0x1a0/0x1a0 [ 370.142167][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 370.142194][ C1] __irq_exit_rcu+0xd3/0x190 [ 370.142212][ C1] ? irq_exit_rcu+0x20/0x20 [ 370.142237][ C1] irq_exit_rcu+0x9/0x20 [ 370.142251][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 370.142278][ C1] [ 370.142284][ C1] [ 370.142292][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 370.142319][ C1] RIP: 0010:console_flush_all+0x883/0xcf0 [ 370.142343][ C1] Code: ed 01 00 00 e8 8e 74 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 7f 74 1b 00 eb 06 e8 78 74 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 58 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 370.142358][ C1] RSP: 0018:ffffc9000489f360 EFLAGS: 00000293 [ 370.142373][ C1] RAX: ffffffff816b70d8 RBX: ffffc9000489f4df RCX: ffff88802472bc00 [ 370.142388][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 370.142398][ C1] RBP: ffffc9000489f4b0 R08: ffffffff911bc507 R09: 1ffffffff22378a0 [ 370.142412][ C1] R10: dffffc0000000000 R11: fffffbfff22378a1 R12: ffffffff8d8b7260 [ 370.142426][ C1] R13: 1ffffffff19f96d8 R14: ffffffff8d8b72b8 R15: dffffc0000000000 [ 370.142448][ C1] ? console_flush_all+0x878/0xcf0 [ 370.142482][ C1] ? console_flush_all+0x10b/0xcf0 [ 370.142523][ C1] ? is_console_locked+0x20/0x20 [ 370.142546][ C1] ? lock_chain_count+0x20/0x20 [ 370.142572][ C1] ? __down_trylock_console_sem+0xf6/0x1f0 [ 370.142599][ C1] console_unlock+0xad/0x350 [ 370.142625][ C1] ? other_cpu_in_panic+0xf0/0xf0 [ 370.142645][ C1] ? vprintk_emit+0x53d/0x610 [ 370.142670][ C1] ? printk_sprint+0x460/0x460 [ 370.142694][ C1] ? __wake_up_klogd+0xd9/0x100 [ 370.142720][ C1] vprintk_emit+0x497/0x610 [ 370.142745][ C1] ? printk_sprint+0x460/0x460 [ 370.142769][ C1] ? _printk+0xde/0x130 [ 370.142786][ C1] ? copy_from_kernel_nofault+0x17b/0x2f0 [ 370.142823][ C1] _printk+0xde/0x130 [ 370.142841][ C1] ? ieee80211_vif_use_reserved_switch+0x10e4/0x2900 [ 370.142873][ C1] ? load_image+0x420/0x420 [ 370.142905][ C1] __show_regs+0x1bf/0x600 [ 370.142934][ C1] ? dump_stack_print_info+0xf5/0x150 [ 370.142960][ C1] show_regs+0x44/0x90 [ 370.142983][ C1] __warn+0x160/0x470 [ 370.143007][ C1] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 370.143037][ C1] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 370.143065][ C1] report_bug+0x2be/0x4f0 [ 370.143088][ C1] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 370.143116][ C1] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 370.143144][ C1] ? ieee80211_vif_use_reserved_switch+0x1110/0x2900 [ 370.143171][ C1] handle_bug+0xcf/0x120 [ 370.143195][ C1] exc_invalid_op+0x1a/0x50 [ 370.143218][ C1] asm_exc_invalid_op+0x1a/0x20 [ 370.143243][ C1] RIP: 0010:ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 370.143272][ C1] Code: 48 89 df e8 a4 8d d8 f7 e9 d6 fc ff ff e8 4a 19 80 f7 eb 24 e8 43 19 80 f7 c7 04 24 f4 ff ff ff e9 cc f5 ff ff e8 32 19 80 f7 <0f> 0b 0f 0b e9 b7 f5 ff ff e8 24 19 80 f7 48 8b 7c 24 08 4c 8b 74 [ 370.143287][ C1] RSP: 0018:ffffc9000489f9c0 EFLAGS: 00010293 [ 370.143303][ C1] RAX: ffffffff8a06c812 RBX: 0000000000000001 RCX: ffff88802472bc00 [ 370.143317][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 370.143328][ C1] RBP: dffffc0000000000 R08: ffff88805ed7562f R09: 1ffff1100bdaeac5 [ 370.143342][ C1] R10: dffffc0000000000 R11: ffffed100bdaeac6 R12: 0000000000000001 [ 370.143355][ C1] R13: ffff88805ed76659 R14: ffff88805efead48 R15: ffff888028e6df00 [ 370.143377][ C1] ? ieee80211_vif_use_reserved_switch+0xd02/0x2900 [ 370.143424][ C1] ieee80211_link_use_reserved_context+0x37b/0x5c0 [ 370.143457][ C1] ieee80211_csa_finalize+0x571/0xeb0 [ 370.143492][ C1] ? mutex_lock_nested+0x20/0x20 [ 370.143517][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 370.143539][ C1] ? ieee80211_csa_finalize_work+0x140/0x140 [ 370.143568][ C1] ? read_lock_is_recursive+0x20/0x20 [ 370.143598][ C1] ieee80211_csa_finalize_work+0xf6/0x140 [ 370.143626][ C1] ? process_scheduled_works+0x975/0x1600 [ 370.143652][ C1] process_scheduled_works+0xa60/0x1600 [ 370.143703][ C1] ? worker_attach_to_pool+0x370/0x370 [ 370.143733][ C1] ? assign_work+0x3cc/0x5d0 [ 370.143762][ C1] worker_thread+0xa5e/0xfe0 [ 370.143798][ C1] ? _raw_spin_unlock+0x40/0x40 [ 370.143823][ C1] ? __kthread_parkme+0x71/0x1c0 [ 370.143852][ C1] kthread+0x2fa/0x390 [ 370.143869][ C1] ? pr_cont_work+0x550/0x550 [ 370.143893][ C1] ? kthread_blkcg+0xd0/0xd0 [ 370.143912][ C1] ret_from_fork+0x48/0x80 [ 370.143933][ C1] ? kthread_blkcg+0xd0/0xd0 [ 370.143953][ C1] ret_from_fork_asm+0x11/0x20 [ 370.143991][ C1] [ 370.144319][ C1] Kernel Offset: disabled