last executing test programs: 6.884062618s ago: executing program 1 (id=791): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726", 0x3f}, {&(0x7f0000000540)="e8700e444d50a969ff6734d3cb06376f", 0x10}], 0x2, 0x0, 0x0, 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 6.800640331s ago: executing program 1 (id=794): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1}], 0x1, 0x40800) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x2000000004, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x6, 0xfffffffffffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0xef2}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.52227177s ago: executing program 1 (id=799): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.169086321s ago: executing program 1 (id=804): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000003900), 0x34aa945a513d639, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 3.996327321s ago: executing program 1 (id=809): r0 = syz_usb_connect(0x0, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYRES64=r0, @ANYRESOCT=0x0, @ANYRES32, @ANYRESDEC=r0], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.301595824s ago: executing program 0 (id=819): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000034c0)={0x2020}, 0xcac) 2.232144418s ago: executing program 2 (id=830): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000440)={&(0x7f0000000340)="c4", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000000)={r1}) 2.093405542s ago: executing program 2 (id=832): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r1, &(0x7f00000004c0)=""/57, 0x39) 1.924126268s ago: executing program 2 (id=833): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r1, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) 1.684914966s ago: executing program 2 (id=834): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') read$FUSE(r0, &(0x7f0000000780)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000027c0)={0x2020}, 0x2020) 1.615859198s ago: executing program 0 (id=835): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1.512691711s ago: executing program 2 (id=837): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x5, 0x81, 0x3e, @broadcast}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) connect$nfc_raw(0xffffffffffffffff, &(0x7f00000005c0)={0x27, r1, 0xffffffffffffffff, 0x3}, 0x10) openat$urandom(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x40) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x6, 0x1008b22, 0x0, 0x0, 0x16, 0x11, "fee8a2ab78fc979fd1e00d96072000000ba89de2b7fb0000e6a180b8785d960001000000000041eb8109af00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f422741b13103e52f400003fe2000000000000000000000000000000002000", [0xf, 0x2000000000001]}}) close(r2) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x80800) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="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"]) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r6, 0x10c, 0x8, &(0x7f0000000040)=0x40, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x420b, &(0x7f0000000080)={0x0, 0x0, 0x40, 0x1, 0x8000000, 0x0, 0x0}, 0x0, 0x0, &(0x7f0000000000)) openat$kvm(0x0, 0x0, 0x6200, 0x0) r7 = accept$inet(0xffffffffffffffff, &(0x7f0000000a40)={0x2, 0x0, @multicast1}, &(0x7f0000000e40)=0x10) ioctl$SIOCGETMIFCNT_IN6(r7, 0x89e0, &(0x7f0000000e80)={0xffffffffffffffff}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c0000000706010800df0786040000000000000005000100060000006f6bf7dbbcb35907088f95ad0d7a2fab2543e6f2c9c87efe481637f688fbbeb3aba11e89cbb101480708c5143dafc36fdf0c5c3170090bf531ce497df73a093531526976d9b8906c5d1962577964bb6b6541f09fca5c1d0a7f449b11747f546d5fc9101d57ff338e826ea29ddac029f5279d0eb1b19038c67ff5a12e9741b11b49c77a5314a1a2cf8e8a33b06455f55c8893b790e8e882d35cd1e0e4efaaf7d672360b4bb975d3cc0253e41a4432231c64774ced8e"], 0x1c}}, 0x0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x1, 0xd6, 0x1}}]}}}]}}]}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="3400f7000106010100000000000000000200000a0500010007d5f75998c30008503516d6000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.475841722s ago: executing program 3 (id=838): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b3", 0x40}, {&(0x7f0000000540)="e8700e444d50a969ff6734d3cb06376f", 0x10}], 0x2, 0x0, 0x0, 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 1.344163027s ago: executing program 0 (id=839): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e", 0x36}], 0x1}], 0x1, 0x40800) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x2000000004, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x6, 0xfffffffffffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0xef2}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.343992327s ago: executing program 3 (id=840): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 1.229326851s ago: executing program 0 (id=841): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000740)}], 0x2}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa6", 0x3a}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f0977", 0x8}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2", 0x80}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c4", 0x63}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.150037903s ago: executing program 3 (id=842): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) socket$inet6(0xa, 0x8000c, 0x800) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000002380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f00000023c0)={0x48, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f00000024c0)={0x48, 0xa, r2, 0x0, r1}) 1.048197156s ago: executing program 1 (id=843): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="2011040600000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 997.265378ms ago: executing program 3 (id=844): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa6d9d000) readv(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001f40)={0x0}, 0x1, 0x0, 0x0, 0x200400c5}, 0x4000800) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$XFS_IOC_PATH_TO_HANDLE(r5, 0xc0385869, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000300)=0x10) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x40a0ae49, &(0x7f0000000080)={0x7ff}) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc004aeba, &(0x7f00000003c0)={0x3, 0x1, &(0x7f0000000380)={&(0x7f0000ea9000/0x1000)=nil, 0xfec00000, 0x1}}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000000)={0x0, 0x300000, 0x8}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') fsopen(&(0x7f0000000000)='udf\x00', 0x0) pread64(r7, &(0x7f0000000480)=""/147, 0x93, 0x8000000007) setsockopt$inet_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000240), 0x3) 295.1082ms ago: executing program 3 (id=845): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000180)={@hyper, 0x1}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@any, 0x1}) 228.325692ms ago: executing program 0 (id=846): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="b8", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000080) 124.095506ms ago: executing program 3 (id=847): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000080)) 107.042697ms ago: executing program 0 (id=848): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 0s ago: executing program 2 (id=849): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b3", 0x40}, {&(0x7f0000000540)="e8700e444d50a969ff6734d3cb06376f", 0x10}], 0x2, 0x0, 0x0, 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.103' (ED25519) to the list of known hosts. [ 64.120222][ T5756] cgroup: Unknown subsys name 'net' [ 64.252940][ T5756] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.650999][ T5756] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.197583][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.207094][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.214464][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.222455][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.231203][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.236646][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.239107][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.253941][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.254750][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.268707][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.268962][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.276695][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.283781][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.291397][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.297850][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.304963][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.318612][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.326374][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.334084][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.336369][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.346451][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.364035][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.371695][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.378323][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.740056][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 67.812421][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 67.875994][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.884725][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.892362][ T5773] bridge_slave_0: entered allmulticast mode [ 67.910138][ T5773] bridge_slave_0: entered promiscuous mode [ 67.951580][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 67.961322][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.968881][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.976112][ T5773] bridge_slave_1: entered allmulticast mode [ 67.983064][ T5773] bridge_slave_1: entered promiscuous mode [ 68.047050][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 68.061633][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.080752][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.088050][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.095142][ T5771] bridge_slave_0: entered allmulticast mode [ 68.102000][ T5771] bridge_slave_0: entered promiscuous mode [ 68.115276][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.122601][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.129985][ T5771] bridge_slave_1: entered allmulticast mode [ 68.137014][ T5771] bridge_slave_1: entered promiscuous mode [ 68.145228][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.207024][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.228524][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.242244][ T5773] team0: Port device team_slave_0 added [ 68.278226][ T5773] team0: Port device team_slave_1 added [ 68.300332][ T5771] team0: Port device team_slave_0 added [ 68.319702][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.327055][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.334391][ T5779] bridge_slave_0: entered allmulticast mode [ 68.341353][ T5779] bridge_slave_0: entered promiscuous mode [ 68.350081][ T5771] team0: Port device team_slave_1 added [ 68.356050][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.363359][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.370584][ T5779] bridge_slave_1: entered allmulticast mode [ 68.377338][ T5779] bridge_slave_1: entered promiscuous mode [ 68.418849][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.425814][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.452483][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.473405][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.480461][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.507458][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.528214][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.535261][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.561640][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.581597][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.590439][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.597766][ T5772] bridge_slave_0: entered allmulticast mode [ 68.604394][ T5772] bridge_slave_0: entered promiscuous mode [ 68.619093][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.626043][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.655039][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.671142][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.680620][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.688015][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.695152][ T5772] bridge_slave_1: entered allmulticast mode [ 68.701966][ T5772] bridge_slave_1: entered promiscuous mode [ 68.740362][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.800742][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.814050][ T5771] hsr_slave_0: entered promiscuous mode [ 68.821140][ T5771] hsr_slave_1: entered promiscuous mode [ 68.846050][ T5773] hsr_slave_0: entered promiscuous mode [ 68.852493][ T5773] hsr_slave_1: entered promiscuous mode [ 68.859458][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.867801][ T5773] Cannot create hsr debugfs directory [ 68.875132][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.890016][ T5779] team0: Port device team_slave_0 added [ 68.931412][ T5779] team0: Port device team_slave_1 added [ 68.955484][ T5772] team0: Port device team_slave_0 added [ 68.982277][ T5772] team0: Port device team_slave_1 added [ 69.024464][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.031587][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.059857][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.071542][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.078872][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.104842][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.117636][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.124594][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.150567][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.183805][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.190888][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.217203][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.306734][ T5779] hsr_slave_0: entered promiscuous mode [ 69.313317][ T5779] hsr_slave_1: entered promiscuous mode [ 69.319521][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.327122][ T5779] Cannot create hsr debugfs directory [ 69.375263][ T5772] hsr_slave_0: entered promiscuous mode [ 69.381833][ T5772] hsr_slave_1: entered promiscuous mode [ 69.388039][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.395585][ T5772] Cannot create hsr debugfs directory [ 69.401516][ T51] Bluetooth: hci2: command tx timeout [ 69.406356][ T5088] Bluetooth: hci3: command tx timeout [ 69.477217][ T5088] Bluetooth: hci0: command tx timeout [ 69.477232][ T51] Bluetooth: hci1: command tx timeout [ 69.562636][ T5771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.597925][ T5771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.609842][ T5771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.634932][ T5771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.693378][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.725052][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.744087][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.753432][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.835402][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.858834][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.875642][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.913452][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.957042][ T5779] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.968110][ T5779] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.978562][ T5779] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.989959][ T5779] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.058166][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.114484][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.141888][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.171682][ T3425] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.179012][ T3425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.203650][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.222971][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.230139][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.244934][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.252087][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.282805][ T3460] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.289969][ T3460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.330934][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.348242][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.398272][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.421982][ T3460] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.429134][ T3460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.445193][ T5771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.466014][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.473155][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.483511][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.506101][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.513214][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.558477][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.565640][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.893861][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.973555][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.995514][ T5771] veth0_vlan: entered promiscuous mode [ 71.039757][ T5771] veth1_vlan: entered promiscuous mode [ 71.099033][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.131375][ T5771] veth0_macvtap: entered promiscuous mode [ 71.140688][ T5771] veth1_macvtap: entered promiscuous mode [ 71.175281][ T5773] veth0_vlan: entered promiscuous mode [ 71.188942][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.202596][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.220072][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.249782][ T5773] veth1_vlan: entered promiscuous mode [ 71.268999][ T5771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.278776][ T5771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.288288][ T5771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.297339][ T5771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.308439][ T5772] veth0_vlan: entered promiscuous mode [ 71.359775][ T5772] veth1_vlan: entered promiscuous mode [ 71.405407][ T5773] veth0_macvtap: entered promiscuous mode [ 71.446654][ T5773] veth1_macvtap: entered promiscuous mode [ 71.477378][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.486330][ T5088] Bluetooth: hci3: command tx timeout [ 71.488710][ T51] Bluetooth: hci2: command tx timeout [ 71.494042][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.501593][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.503669][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.534061][ T5779] veth0_vlan: entered promiscuous mode [ 71.556514][ T51] Bluetooth: hci1: command tx timeout [ 71.556901][ T5088] Bluetooth: hci0: command tx timeout [ 71.564303][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.581254][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.592476][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.611594][ T5772] veth0_macvtap: entered promiscuous mode [ 71.631409][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.641382][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.653279][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.656819][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.672688][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.681412][ T5772] veth1_macvtap: entered promiscuous mode [ 71.693252][ T5779] veth1_vlan: entered promiscuous mode [ 71.718877][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.729696][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.739025][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.748594][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.786798][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.809454][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.819569][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.830107][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.844702][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.875577][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.897182][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.927172][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.950105][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.977768][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.999725][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.012431][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.022283][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.031352][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.041980][ T5834] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 72.084996][ T5779] veth0_macvtap: entered promiscuous mode [ 72.103965][ T5779] veth1_macvtap: entered promiscuous mode [ 72.208538][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.210734][ T3460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.221357][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.241638][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.244890][ T3460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.268646][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.281017][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.294925][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.323656][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.356098][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.369402][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.388674][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.399467][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.409881][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.421219][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.432283][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.449870][ T5779] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.459089][ T5779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.468750][ T5779] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.480115][ T5779] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.532569][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.546968][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.590450][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.636418][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.743481][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.768355][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.878142][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.913772][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.969936][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.004876][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.566748][ T5088] Bluetooth: hci3: command tx timeout [ 73.566883][ T51] Bluetooth: hci2: command tx timeout [ 73.638982][ T51] Bluetooth: hci0: command tx timeout [ 73.638995][ T5088] Bluetooth: hci1: command tx timeout [ 74.023801][ T8] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 74.230018][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 74.265193][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.290059][ T8] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 74.313076][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.352016][ T8] usb 3-1: config 0 descriptor?? [ 74.793382][ T8] isku 0003:1E7D:319C.0001: item fetching failed at offset 5/7 [ 74.834344][ T8] isku 0003:1E7D:319C.0001: parse failed [ 74.853424][ T8] isku: probe of 0003:1E7D:319C.0001 failed with error -22 [ 74.956726][ T5761] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 75.002834][ T8] usb 3-1: USB disconnect, device number 2 [ 75.142636][ T5761] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 75.154474][ T5761] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.175256][ T5761] usb 1-1: config 0 descriptor?? [ 75.198619][ T5761] pwc: Samsung MPC-C10 USB webcam detected. [ 75.403303][ T5761] pwc: send_video_command error -71 [ 75.418812][ T5761] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 75.427723][ T5761] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 75.441178][ T5761] usb 1-1: USB disconnect, device number 2 [ 75.636923][ T51] Bluetooth: hci2: command tx timeout [ 75.637222][ T5088] Bluetooth: hci3: command tx timeout [ 75.716457][ T5088] Bluetooth: hci1: command tx timeout [ 75.716565][ T51] Bluetooth: hci0: command tx timeout [ 75.853174][ T5918] netlink: 16 bytes leftover after parsing attributes in process `syz.1.30'. [ 76.012085][ T5761] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 76.218452][ T5761] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 76.247142][ T5761] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.275652][ T5761] usb 1-1: config 0 descriptor?? [ 76.293733][ T5761] pwc: Samsung MPC-C10 USB webcam detected. [ 76.314170][ T5934] binder: 5933:5934 unknown command 1074553619 [ 76.336763][ T5934] binder: 5933:5934 ioctl c0306201 200000000040 returned -22 [ 76.348548][ T5934] binder: 5933:5934 unknown command 1074553620 [ 76.355823][ T5934] binder: 5933:5934 ioctl c0306201 200000000640 returned -22 [ 76.519979][ T5940] Dead loop on virtual device ip6_vti0, fix it urgently! [ 76.529392][ T5944] netlink: 'syz.1.43': attribute type 12 has an invalid length. [ 76.544828][ T5944] netlink: 132 bytes leftover after parsing attributes in process `syz.1.43'. [ 76.592704][ T5944] lo: entered allmulticast mode [ 76.649225][ T5944] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 76.693120][ T5761] pwc: recv_control_msg error -32 req 02 val 2b00 [ 76.725850][ T5761] pwc: recv_control_msg error -32 req 02 val 2700 [ 76.729359][ T5944] syz.1.43 (5944) used greatest stack depth: 20648 bytes left [ 76.919018][ T5956] netlink: 'syz.3.48': attribute type 10 has an invalid length. [ 76.949823][ T5956] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 76.970962][ T5761] pwc: recv_control_msg error -71 req 02 val 2c00 [ 76.983691][ T5761] pwc: recv_control_msg error -71 req 04 val 1000 [ 76.993742][ T5960] netlink: 14 bytes leftover after parsing attributes in process `syz.3.48'. [ 76.993897][ T5761] pwc: recv_control_msg error -71 req 04 val 1300 [ 77.010570][ T5761] pwc: recv_control_msg error -71 req 04 val 1400 [ 77.022552][ T5761] pwc: recv_control_msg error -71 req 02 val 2000 [ 77.048884][ T5761] pwc: recv_control_msg error -71 req 02 val 2100 [ 77.066463][ T5761] pwc: recv_control_msg error -71 req 02 val 2200 [ 77.080182][ T5761] pwc: recv_control_msg error -71 req 06 val 0600 [ 77.104133][ T5761] pwc: recv_control_msg error -71 req 04 val 1500 [ 77.117364][ T5761] pwc: recv_control_msg error -71 req 02 val 2500 [ 77.126376][ T788] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 77.134643][ T5761] pwc: recv_control_msg error -71 req 02 val 2400 [ 77.143707][ T5960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.147457][ T5761] pwc: recv_control_msg error -71 req 02 val 2600 [ 77.184492][ T5761] pwc: recv_control_msg error -71 req 02 val 2900 [ 77.197726][ T5761] pwc: recv_control_msg error -71 req 02 val 2800 [ 77.200858][ T5960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.209245][ T5761] pwc: recv_control_msg error -71 req 04 val 1100 [ 77.227421][ T5761] pwc: recv_control_msg error -71 req 04 val 1200 [ 77.245885][ T5761] pwc: Registered as video103. [ 77.267543][ T5761] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 77.288006][ T5960] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 77.329882][ T788] usb 3-1: config 0 interface 0 has no altsetting 0 [ 77.339933][ T5761] usb 1-1: USB disconnect, device number 3 [ 77.342269][ T5960] bond0 (unregistering): Released all slaves [ 77.358912][ T788] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 77.383264][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.425713][ T788] usb 3-1: config 0 descriptor?? [ 77.727229][ T5960] Zero length message leads to an empty skb [ 77.863769][ T788] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x2 [ 77.899343][ T788] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x6 [ 77.947153][ T5960] mmap: syz.3.48 (5960) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 77.959232][ T788] cm6533_jd 0003:0D8C:0022.0002: ignoring exceeding usage max [ 78.015901][ T788] cm6533_jd 0003:0D8C:0022.0002: No inputs registered, leaving [ 78.168392][ T788] cm6533_jd 0003:0D8C:0022.0002: hiddev0,hidraw0: USB HID v0.03 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 78.277266][ T788] usb 3-1: USB disconnect, device number 3 [ 78.480116][ T6012] fido_id[6012]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 79.054803][ T6040] process 'syz.3.63' launched './file2' with NULL argv: empty string added [ 79.246516][ T788] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 79.438232][ T788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.471041][ T788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.496901][ T788] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 79.520327][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.536054][ T788] usb 2-1: config 0 descriptor?? [ 79.980987][ T6059] netlink: 'syz.0.68': attribute type 10 has an invalid length. [ 79.997876][ T788] arvo 0003:1E7D:30D4.0003: unknown main item tag 0x0 [ 80.007059][ T6059] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 80.022883][ T788] arvo 0003:1E7D:30D4.0003: unknown main item tag 0x0 [ 80.039219][ T788] arvo 0003:1E7D:30D4.0003: unknown main item tag 0x0 [ 80.049211][ T6059] netlink: 14 bytes leftover after parsing attributes in process `syz.0.68'. [ 80.080290][ T788] arvo 0003:1E7D:30D4.0003: unknown main item tag 0x0 [ 80.097501][ T788] arvo 0003:1E7D:30D4.0003: unknown main item tag 0x0 [ 80.104418][ T788] arvo 0003:1E7D:30D4.0003: unknown main item tag 0x0 [ 80.117059][ T788] arvo 0003:1E7D:30D4.0003: unknown main item tag 0x0 [ 80.141146][ T788] arvo 0003:1E7D:30D4.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 80.201920][ T788] arvo 0003:1E7D:30D4.0003: couldn't init struct arvo_device [ 80.239307][ T788] arvo 0003:1E7D:30D4.0003: couldn't install keyboard [ 80.252145][ T6059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.265990][ T788] arvo: probe of 0003:1E7D:30D4.0003 failed with error -71 [ 80.310276][ T788] usb 2-1: USB disconnect, device number 2 [ 80.332941][ T6063] fido_id[6063]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 80.357457][ T6059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.404612][ T6066] netlink: 44 bytes leftover after parsing attributes in process `syz.2.70'. [ 80.498433][ T6059] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 80.525813][ T6059] bond0 (unregistering): Released all slaves [ 80.560148][ T6072] deleting an unspecified loop device is not supported. [ 81.778705][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 81.856298][ T788] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 81.996740][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 82.017378][ T8] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 82.035692][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.056468][ T8] usb 4-1: Product: syz [ 82.066066][ T788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 242, changing to 11 [ 82.086233][ T8] usb 4-1: Manufacturer: syz [ 82.099956][ T788] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 82.114656][ T8] usb 4-1: SerialNumber: syz [ 82.146876][ T8] usb 4-1: config 0 descriptor?? [ 82.152085][ T788] usb 2-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 82.168606][ T8] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 82.185070][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.226884][ T788] usb 2-1: config 0 descriptor?? [ 82.644160][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 82.657192][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 82.664522][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 82.671893][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 82.679411][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 82.686750][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 82.694066][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 82.701834][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 82.709312][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 82.718032][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 82.725362][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 82.732673][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 82.740073][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 82.747413][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 82.754749][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 82.762530][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 82.766335][ T5811] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 82.769879][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 82.786532][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 82.793823][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 82.801234][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 82.808763][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 82.816101][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 82.829894][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 82.838567][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 82.845921][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 82.863366][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 82.873426][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 82.883520][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 82.893589][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 82.905696][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 82.915539][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 82.927431][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 82.934753][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 82.942537][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 82.950167][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 82.957894][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 82.965169][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 82.972990][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 82.979562][ T5811] usb 3-1: unable to get BOS descriptor or descriptor too short [ 82.980765][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 82.996110][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 82.999935][ T5811] usb 3-1: not running at top speed; connect to a high speed hub [ 83.017441][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.029972][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.058036][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.075855][ T5811] usb 3-1: config 88 has an invalid interface number: 235 but max is 0 [ 83.084282][ T5811] usb 3-1: config 88 has no interface number 0 [ 83.094249][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.096567][ T5811] usb 3-1: config 88 interface 235 has no altsetting 0 [ 83.123743][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.129798][ T5811] usb 3-1: string descriptor 0 read error: -22 [ 83.146382][ T5811] usb 3-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=31.e6 [ 83.147732][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.155435][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.194059][ T5811] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704a [ 83.209713][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.225031][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.254759][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.271462][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.295355][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.315035][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.335006][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.342902][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.357760][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.415822][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.435276][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.449755][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.460901][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.472928][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.485113][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.495709][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.505996][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.519640][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.528444][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.542629][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.551501][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.563432][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.583385][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.591953][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.604797][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.612044][ T5811] gspca_sn9c20x: Write register 1001 failed -71 [ 83.612073][ T5811] gspca_sn9c20x: Device initialization failed [ 83.612138][ T5811] gspca_sn9c20x: probe of 3-1:88.235 failed with error -71 [ 83.614967][ T5811] usb 3-1: USB disconnect, device number 4 [ 83.644585][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.644617][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.644641][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.644665][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.644690][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.644715][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.644739][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.644763][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.644787][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.644810][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.644852][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.644883][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.644908][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.644932][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.644957][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.644981][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.645005][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.645030][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.645053][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.645077][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.645100][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.645123][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.645147][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.645171][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.645195][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.645219][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.645242][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.645265][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.645289][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.645313][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.645337][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.645361][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.645384][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.645408][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.645431][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.645455][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 83.926365][ T8] gspca_ov534_9: reg_r err -71 [ 83.986295][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.005049][ T6132] netlink: 16 bytes leftover after parsing attributes in process `syz.1.97'. [ 84.013989][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.026354][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.033608][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.073990][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.082929][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.106274][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.113546][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.127840][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.135101][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.145432][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.176303][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.190630][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.206416][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.213668][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.240239][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.248139][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.275936][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.292247][ T8] gspca_ov534_9: Unknown sensor 0000 [ 84.292327][ T8] ov534_9: probe of 4-1:0.0 failed with error -22 [ 84.311146][ T8] usb 4-1: USB disconnect, device number 2 [ 84.318794][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.331450][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.339617][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.415719][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.443875][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.456698][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.475884][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.508917][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.516285][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.523533][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.547112][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.556614][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.565246][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.603991][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.623804][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.636873][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.654429][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.678282][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.698510][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.718787][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.726082][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.766148][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.782051][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.791289][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.811516][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.830030][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.846415][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.853684][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.879740][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.909443][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.934404][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.964482][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 84.986344][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 85.016463][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 85.023770][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 85.096931][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 85.126373][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 85.133650][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 85.162268][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 85.192739][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 85.216357][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 85.223671][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 85.253700][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 85.268512][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 85.277475][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 85.284955][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 85.314334][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 85.330332][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 85.337695][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 85.344961][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 85.356293][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 85.363549][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 85.405352][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 85.416507][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 85.426529][ T5811] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 85.444787][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 85.469728][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 85.492113][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 85.500541][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 85.508558][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 85.515868][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 85.523916][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 85.552713][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 85.585533][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 85.602542][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 85.626261][ T5811] usb 3-1: Using ep0 maxpacket: 8 [ 85.636768][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 85.644060][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 85.667343][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 85.672363][ T5811] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 85.686818][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 85.702855][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.718625][ T5811] usb 3-1: Product: syz [ 85.725132][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 85.736571][ T5811] usb 3-1: Manufacturer: syz [ 85.741196][ T5811] usb 3-1: SerialNumber: syz [ 85.743678][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 85.759361][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 85.768496][ T5811] usb 3-1: config 0 descriptor?? [ 85.796476][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 85.803748][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 85.854371][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 85.882212][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 85.903715][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 85.931722][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 85.946354][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 85.958659][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 85.973411][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 86.004325][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 86.010620][ T5811] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 86.028559][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 86.037192][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 86.044463][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 86.076303][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 86.083632][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 86.126930][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 86.134210][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 86.160769][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 86.176294][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 86.192631][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 86.229784][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 86.238654][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 86.248059][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 86.276343][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 86.296377][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 86.324821][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 86.346308][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 86.353639][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 86.376275][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 86.383545][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 86.427228][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 86.446292][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 86.468335][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 86.485917][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 86.511281][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 86.550972][ T788] megaworld 0003:07B5:0312.0004: unknown main item tag 0x0 [ 86.569254][ T788] megaworld 0003:07B5:0312.0004: hidraw0: USB HID v0.01 Device [HID 07b5:0312] on usb-dummy_hcd.1-1/input0 [ 86.604423][ T788] megaworld 0003:07B5:0312.0004: no inputs found [ 86.672368][ T788] usb 2-1: USB disconnect, device number 3 [ 86.788326][ T6214] fido_id[6214]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 86.880362][ T9] cfg80211: failed to load regulatory.db [ 87.006621][ T6229] netlink: 11254 bytes leftover after parsing attributes in process `syz.3.140'. [ 87.423173][ T5811] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 87.436333][ T5811] usb 3-1: USB disconnect, device number 5 [ 87.487125][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 87.679542][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 87.687684][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 87.710390][ T8] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBB, skipping [ 87.722760][ T8] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 87.735594][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.756831][ T8] usb 4-1: config 0 descriptor?? [ 87.772772][ T8] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 87.896402][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 87.903778][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.915013][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.924869][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 87.934095][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.944982][ T9] usb 2-1: config 0 descriptor?? [ 87.959007][ T9] hub 2-1:0.0: USB hub found [ 87.975899][ T8] usb 4-1: USB disconnect, device number 3 [ 88.066375][ T5811] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 88.164471][ T9] hub 2-1:0.0: 1 port detected [ 88.268695][ T5811] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.281467][ T5811] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 88.291469][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.303380][ T5811] usb 1-1: Product: syz [ 88.308720][ T5811] usb 1-1: Manufacturer: syz [ 88.313422][ T5811] usb 1-1: SerialNumber: syz [ 88.325818][ T5811] usb 1-1: config 0 descriptor?? [ 88.335326][ T5811] port100 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 88.428738][ T6261] tipc: Enabling of bearer rejected, failed to enable media [ 88.562692][ T8] usb 1-1: USB disconnect, device number 4 [ 88.708717][ T6270] netlink: 'syz.3.157': attribute type 10 has an invalid length. [ 88.741235][ T6270] netlink: 14 bytes leftover after parsing attributes in process `syz.3.157'. [ 88.775810][ T9] hub 2-1:0.0: activate --> -90 [ 89.106418][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 89.186686][ T5811] usb 2-1: USB disconnect, device number 4 [ 89.327913][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.347667][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 89.362394][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 89.380072][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 89.388612][ T9] usb 3-1: SerialNumber: syz [ 89.426447][ T8] usb 2-1-port1: config error [ 89.525428][ T6295] netlink: 'syz.0.168': attribute type 10 has an invalid length. [ 89.539030][ T6295] netlink: 14 bytes leftover after parsing attributes in process `syz.0.168'. [ 89.627418][ T9] usb 3-1: 0:2 : does not exist [ 89.632543][ T9] usb 3-1: unit 5: unexpected type 0x09 [ 89.685153][ T9] usb 3-1: USB disconnect, device number 6 [ 89.807433][ T6302] netlink: 48 bytes leftover after parsing attributes in process `syz.3.171'. [ 89.819448][ T6249] udevd[6249]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 89.840965][ T6302] netlink: 12 bytes leftover after parsing attributes in process `syz.3.171'. [ 89.848672][ T6306] netlink: 24 bytes leftover after parsing attributes in process `syz.0.173'. [ 90.186572][ T6317] netlink: 'syz.3.178': attribute type 10 has an invalid length. [ 90.235067][ T6317] netlink: 14 bytes leftover after parsing attributes in process `syz.3.178'. [ 91.060369][ T6350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.192'. [ 92.276358][ T23] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 92.308189][ T6388] syz.1.207 uses obsolete (PF_INET,SOCK_PACKET) [ 92.471114][ T23] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 92.493426][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.507987][ T23] usb 3-1: Product: syz [ 92.522465][ T23] usb 3-1: Manufacturer: syz [ 92.532598][ T23] usb 3-1: SerialNumber: syz [ 92.553633][ T23] usb 3-1: config 0 descriptor?? [ 92.571763][ T23] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 92.976472][ T23] gspca_stk1135: reg_w 0x0 err -71 [ 92.987317][ T23] gspca_stk1135: serial bus timeout: status=0x00 [ 93.003926][ T23] gspca_stk1135: Sensor write failed [ 93.024176][ T23] gspca_stk1135: serial bus timeout: status=0x00 [ 93.054051][ T23] gspca_stk1135: Sensor write failed [ 93.061653][ T23] gspca_stk1135: serial bus timeout: status=0x00 [ 93.073138][ T23] gspca_stk1135: Sensor read failed [ 93.079455][ T23] gspca_stk1135: serial bus timeout: status=0x00 [ 93.085942][ T23] gspca_stk1135: Sensor read failed [ 93.092095][ T23] gspca_stk1135: Detected sensor type unknown (0x0) [ 93.099275][ T23] gspca_stk1135: serial bus timeout: status=0x00 [ 93.105803][ T23] gspca_stk1135: Sensor read failed [ 93.111501][ T23] gspca_stk1135: serial bus timeout: status=0x00 [ 93.118581][ T23] gspca_stk1135: Sensor read failed [ 93.123957][ T23] gspca_stk1135: serial bus timeout: status=0x00 [ 93.131432][ T23] gspca_stk1135: Sensor write failed [ 93.137135][ T23] gspca_stk1135: serial bus timeout: status=0x00 [ 93.143550][ T23] gspca_stk1135: Sensor write failed [ 93.149398][ T23] stk1135: probe of 3-1:0.0 failed with error -71 [ 93.164075][ T23] usb 3-1: USB disconnect, device number 7 [ 93.206798][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 93.398432][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.416641][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 93.430811][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 93.439960][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 93.456351][ T9] usb 4-1: SerialNumber: syz [ 93.680909][ T9] usb 4-1: 0:2 : does not exist [ 93.734426][ T9] usb 4-1: USB disconnect, device number 4 [ 93.777164][ T6249] udevd[6249]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 93.916444][ T23] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 94.026490][ T5811] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 94.106353][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 94.118989][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 94.134788][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 94.147099][ T23] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=bf.99 [ 94.163063][ T23] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 94.172370][ T23] usb 3-1: Product: syz [ 94.181192][ T23] usb 3-1: SerialNumber: syz [ 94.189885][ T23] usb 3-1: config 0 descriptor?? [ 94.226313][ T5811] usb 2-1: Using ep0 maxpacket: 8 [ 94.233843][ T5811] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.251362][ T5811] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 94.260910][ T5811] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 94.276459][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.307110][ T5811] usb 2-1: config 0 descriptor?? [ 94.412707][ T6416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.427265][ T6416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.448349][ T6416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.476667][ T6416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.503796][ T6416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.521334][ T6418] warning: `syz.1.221' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 94.533205][ T6416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.546160][ T5811] usb 2-1: USB disconnect, device number 5 [ 94.747491][ T23] usb 3-1: USB disconnect, device number 8 [ 95.256356][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 95.471351][ T9] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 95.498733][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.518942][ T9] usb 1-1: Product: syz [ 95.523156][ T9] usb 1-1: Manufacturer: syz [ 95.536298][ T9] usb 1-1: SerialNumber: syz [ 95.553511][ T9] usb 1-1: config 0 descriptor?? [ 95.570049][ T9] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 005 [ 95.984325][ T9] (null): failure reading functionality [ 96.013680][ T9] i2c i2c-1: connected i2c-tiny-usb device [ 96.196499][ T23] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 96.227155][ T9] usb 1-1: USB disconnect, device number 5 [ 96.386367][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 96.403729][ T23] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 96.419349][ T23] usb 4-1: config 0 has no interface number 0 [ 96.436896][ T23] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 96.474357][ T23] usb 4-1: config 0 interface 85 has no altsetting 0 [ 96.489592][ T23] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 96.506229][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.516313][ T23] usb 4-1: Product: syz [ 96.520508][ T23] usb 4-1: Manufacturer: syz [ 96.535415][ T23] usb 4-1: SerialNumber: syz [ 96.548610][ T23] usb 4-1: config 0 descriptor?? [ 97.163227][ T23] appletouch 4-1:0.85: Geyser mode initialized. [ 97.188631][ T23] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input6 [ 97.381297][ T1200] usb 4-1: USB disconnect, device number 5 [ 97.428143][ T1200] appletouch 4-1:0.85: input: appletouch disconnected [ 97.886295][ T5811] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 98.111496][ T5811] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 98.157518][ T5811] usb 3-1: config 0 interface 0 has no altsetting 0 [ 98.164199][ T5811] usb 3-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 98.175954][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.191807][ T5811] usb 3-1: config 0 descriptor?? [ 98.486537][ T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 98.627438][ T5811] playstation 0003:054C:0BA0.0005: ignoring exceeding usage max [ 98.655522][ T5811] playstation 0003:054C:0BA0.0005: hidraw0: USB HID v0.7f Device [HID 054c:0ba0] on usb-dummy_hcd.2-1/input0 [ 98.716431][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 98.732132][ T23] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 98.763799][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.796274][ T23] usb 4-1: Product: syz [ 98.800516][ T23] usb 4-1: Manufacturer: syz [ 98.816242][ T23] usb 4-1: SerialNumber: syz [ 98.825132][ T5811] playstation 0003:054C:0BA0.0005: Invalid reportID received, expected 18 got 83 [ 98.842517][ T23] usb 4-1: config 0 descriptor?? [ 98.852376][ T5811] playstation 0003:054C:0BA0.0005: Failed to retrieve DualShock4 pairing info: -22 [ 98.872614][ T5811] playstation 0003:054C:0BA0.0005: Failed to get MAC address from DualShock4 [ 98.882241][ T5811] playstation 0003:054C:0BA0.0005: Failed to create dualshock4. [ 98.898627][ T5811] playstation: probe of 0003:054C:0BA0.0005 failed with error -22 [ 99.074560][ T5812] usb 3-1: USB disconnect, device number 9 [ 99.095217][ T23] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 99.992140][ T6538] syz.2.274[6538]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 100.207338][ T6545] syzkaller1: entered promiscuous mode [ 100.219442][ T6545] syzkaller1: entered allmulticast mode [ 100.495200][ T23] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 100.507742][ T23] usb 4-1: USB disconnect, device number 6 [ 101.415740][ T6578] netlink: 36 bytes leftover after parsing attributes in process `syz.3.291'. [ 101.606320][ T788] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 101.804829][ T788] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 101.824763][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.846251][ T788] usb 2-1: Product: syz [ 101.850551][ T788] usb 2-1: Manufacturer: syz [ 101.855173][ T788] usb 2-1: SerialNumber: syz [ 101.884167][ T788] usb 2-1: config 0 descriptor?? [ 102.334428][ T788] usb 2-1: Firmware: major: 71, minor: 81, hardware type: UNKNOWN (45) [ 102.476279][ T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 102.547423][ T788] usb 2-1: Read permanent extended address 16:b3:3b:e1:7e:1c:9a:09 from device [ 102.583561][ T788] usb 2-1: atusb_probe: initialization failed, error = -524 [ 102.605940][ T788] atusb: probe of 2-1:0.0 failed with error -524 [ 102.666314][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 102.675654][ T23] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 102.695070][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 18, changing to 8 [ 102.707144][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 102.734374][ T23] usb 1-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 102.755113][ T5812] usb 2-1: USB disconnect, device number 6 [ 102.763023][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.801686][ T23] usb 1-1: config 0 descriptor?? [ 103.243819][ T23] logitech 0003:046D:C293.0006: unexpected long global item [ 103.258933][ T23] logitech 0003:046D:C293.0006: parse failed [ 103.285758][ T23] logitech: probe of 0003:046D:C293.0006 failed with error -22 [ 103.452719][ T23] usb 1-1: USB disconnect, device number 6 [ 104.115118][ T6643] netlink: 'syz.0.319': attribute type 10 has an invalid length. [ 104.167080][ T6643] netlink: 14 bytes leftover after parsing attributes in process `syz.0.319'. [ 104.356471][ T5811] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 104.568389][ T5811] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.586265][ T5811] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 104.605607][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.634869][ T5811] usb 4-1: config 0 descriptor?? [ 104.651565][ T5811] pwc: Askey VC010 type 2 USB webcam detected. [ 105.055082][ T5811] pwc: recv_control_msg error -32 req 02 val 2b00 [ 105.070398][ T5811] pwc: recv_control_msg error -32 req 02 val 2700 [ 105.097302][ T5811] pwc: recv_control_msg error -32 req 02 val 2c00 [ 105.116283][ T5811] pwc: recv_control_msg error -32 req 04 val 1000 [ 105.123573][ T5811] pwc: recv_control_msg error -32 req 04 val 1300 [ 105.137481][ T5811] pwc: recv_control_msg error -32 req 04 val 1400 [ 105.360978][ T5811] pwc: recv_control_msg error -71 req 02 val 2100 [ 105.376422][ T5811] pwc: recv_control_msg error -71 req 04 val 1500 [ 105.393593][ T5811] pwc: recv_control_msg error -71 req 02 val 2500 [ 105.428886][ T5811] pwc: recv_control_msg error -71 req 02 val 2400 [ 105.444477][ T5811] pwc: recv_control_msg error -71 req 02 val 2600 [ 105.476673][ T5811] pwc: recv_control_msg error -71 req 02 val 2900 [ 105.493449][ T5811] pwc: recv_control_msg error -71 req 02 val 2800 [ 105.511263][ T5811] pwc: recv_control_msg error -71 req 04 val 1100 [ 105.526649][ T5811] pwc: recv_control_msg error -71 req 04 val 1200 [ 105.540420][ T5811] pwc: Registered as video103. [ 105.552658][ T5811] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 105.604243][ T5811] usb 4-1: USB disconnect, device number 7 [ 105.866911][ T6677] netlink: 'syz.0.330': attribute type 10 has an invalid length. [ 105.875879][ T6677] netlink: 14 bytes leftover after parsing attributes in process `syz.0.330'. [ 106.116807][ T5812] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 106.316767][ T5812] usb 2-1: Using ep0 maxpacket: 8 [ 106.339894][ T5812] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 106.363421][ T5812] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 106.379829][ T5812] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 106.390359][ T5812] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 106.410054][ T5812] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.445257][ T5812] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 106.458661][ T5812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.696439][ T5812] usb 2-1: usb_control_msg returned -71 [ 106.707289][ T5812] usbtmc 2-1:16.0: can't read capabilities [ 106.736500][ T5812] usb 2-1: USB disconnect, device number 7 [ 107.485386][ T6731] netlink: 'syz.1.348': attribute type 10 has an invalid length. [ 107.545691][ T6731] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 107.581660][ T6735] netlink: 14 bytes leftover after parsing attributes in process `syz.1.348'. [ 107.787250][ T6735] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.878193][ T51] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 107.887503][ T51] Bluetooth: hci2: Injecting HCI hardware error event [ 107.895549][ T5088] Bluetooth: hci2: hardware error 0x00 [ 107.907731][ T6735] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.978055][ T6735] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 108.051057][ T6735] bond0 (unregistering): Released all slaves [ 108.936429][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 109.136398][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 109.153043][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.173616][ T23] usb 1-1: config 0 has no interfaces? [ 109.191030][ T23] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 109.201744][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.213595][ T23] usb 1-1: Product: syz [ 109.219382][ T23] usb 1-1: Manufacturer: syz [ 109.233848][ T23] usb 1-1: SerialNumber: syz [ 109.243125][ T23] usb 1-1: config 0 descriptor?? [ 109.369564][ T6788] netlink: 'syz.1.367': attribute type 10 has an invalid length. [ 109.391636][ T6788] netlink: 14 bytes leftover after parsing attributes in process `syz.1.367'. [ 109.467319][ T23] usb 1-1: USB disconnect, device number 7 [ 110.046321][ T5088] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 110.738356][ T6826] netlink: 'syz.1.383': attribute type 10 has an invalid length. [ 110.763443][ T6826] netlink: 14 bytes leftover after parsing attributes in process `syz.1.383'. [ 112.331160][ T6876] netlink: 'syz.3.402': attribute type 10 has an invalid length. [ 112.350159][ T6876] netlink: 14 bytes leftover after parsing attributes in process `syz.3.402'. [ 112.676951][ T8] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 112.886588][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 112.898141][ T8] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 112.916274][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.961871][ T8] pvrusb2: Hardware description: Terratec Grabster AV400 [ 112.989370][ T8] pvrusb2: ********** [ 112.993410][ T8] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 113.018053][ T8] pvrusb2: Important functionality might not be entirely working. [ 113.025901][ T8] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 113.066256][ T8] pvrusb2: ********** [ 113.170752][ T2321] pvrusb2: Invalid write control endpoint [ 113.333643][ T2321] pvrusb2: Invalid write control endpoint [ 113.350683][ T2321] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 113.361224][ T2321] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 113.369555][ T2321] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 113.375592][ T8] usb 3-1: USB disconnect, device number 10 [ 113.390506][ T2321] pvrusb2: Device being rendered inoperable [ 113.399195][ T2321] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 113.416714][ T2321] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 113.460169][ T2321] pvrusb2: Attached sub-driver cx25840 [ 113.465853][ T2321] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 113.500921][ T2321] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 113.900859][ T6916] netlink: 'syz.0.418': attribute type 10 has an invalid length. [ 113.921592][ T6916] netlink: 14 bytes leftover after parsing attributes in process `syz.0.418'. [ 115.472313][ T6961] netlink: 'syz.2.436': attribute type 10 has an invalid length. [ 115.514539][ T6961] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 115.552708][ T6961] netlink: 14 bytes leftover after parsing attributes in process `syz.2.436'. [ 115.900835][ T6961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.936996][ T6961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.040047][ T6961] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 116.132118][ T6961] bond0 (unregistering): Released all slaves [ 117.205877][ T7009] netlink: 28 bytes leftover after parsing attributes in process `syz.3.456'. [ 117.304513][ T7011] netlink: 'syz.3.457': attribute type 10 has an invalid length. [ 117.314095][ T7011] netlink: 14 bytes leftover after parsing attributes in process `syz.3.457'. [ 118.730330][ T7059] netlink: 'syz.3.474': attribute type 10 has an invalid length. [ 118.768806][ T7059] netlink: 14 bytes leftover after parsing attributes in process `syz.3.474'. [ 120.081819][ T7102] overlayfs: upper fs does not support file handles, falling back to index=off. [ 120.184900][ T7106] netlink: 'syz.2.493': attribute type 10 has an invalid length. [ 120.230521][ T7106] netlink: 14 bytes leftover after parsing attributes in process `syz.2.493'. [ 121.646299][ T23] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 121.808329][ T7158] netlink: 'syz.1.513': attribute type 10 has an invalid length. [ 121.823132][ T7158] netlink: 14 bytes leftover after parsing attributes in process `syz.1.513'. [ 121.852220][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 121.876707][ T23] usb 4-1: not running at top speed; connect to a high speed hub [ 121.900995][ T23] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 121.928623][ T23] usb 4-1: New USB device found, idVendor=0499, idProduct=1016, bcdDevice= 0.40 [ 121.946326][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.954422][ T23] usb 4-1: Product: syz [ 121.967238][ T23] usb 4-1: Manufacturer: syz [ 121.971908][ T23] usb 4-1: SerialNumber: syz [ 122.207000][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 122.214654][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 122.222441][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 122.230103][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 122.247248][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 122.259022][ T23] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 122.267935][ T23] snd-usb-audio: probe of 4-1:1.0 failed with error -2 [ 122.282965][ T23] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 122.292378][ T23] snd-usb-audio: probe of 4-1:1.1 failed with error -2 [ 122.302561][ T23] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 122.336757][ T23] snd-usb-audio: probe of 4-1:1.2 failed with error -2 [ 122.363588][ T23] usb 4-1: USB disconnect, device number 8 [ 122.402292][ T5764] udevd[5764]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.120679][ T7187] netlink: 'syz.2.525': attribute type 10 has an invalid length. [ 123.142854][ T7187] netlink: 14 bytes leftover after parsing attributes in process `syz.2.525'. [ 123.309113][ T23] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 123.527822][ T23] usb 1-1: config 3 has an invalid interface number: 15 but max is 0 [ 123.539371][ T23] usb 1-1: config 3 has an invalid interface association descriptor of length 2, skipping [ 123.565372][ T23] usb 1-1: config 3 has no interface number 0 [ 123.579591][ T23] usb 1-1: config 3 interface 15 altsetting 32 has an invalid endpoint with address 0x0, skipping [ 123.591091][ T23] usb 1-1: config 3 interface 15 has no altsetting 0 [ 123.602981][ T23] usb 1-1: New USB device found, idVendor=0582, idProduct=5a3a, bcdDevice=33.25 [ 123.619057][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.629441][ T23] usb 1-1: Product: syz [ 123.633785][ T23] usb 1-1: Manufacturer: syz [ 123.638631][ T23] usb 1-1: SerialNumber: syz [ 123.945460][ T23] usb 1-1: USB disconnect, device number 8 [ 123.987445][ T6249] udevd[6249]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:3.15/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.534068][ T7224] netlink: 'syz.3.539': attribute type 10 has an invalid length. [ 124.566515][ T7224] netlink: 14 bytes leftover after parsing attributes in process `syz.3.539'. [ 125.166621][ T1200] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 125.287643][ T7248] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 125.376478][ T1200] usb 1-1: Using ep0 maxpacket: 32 [ 125.383682][ T1200] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 125.396447][ T1200] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.428408][ T1200] usb 1-1: config 0 descriptor?? [ 125.639490][ T1200] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 125.657739][ T1200] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 125.682339][ T1200] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 125.699341][ T1200] usb 1-1: media controller created [ 125.760249][ T1200] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 126.093347][ T7272] netlink: 'syz.2.558': attribute type 10 has an invalid length. [ 126.107554][ T7272] netlink: 14 bytes leftover after parsing attributes in process `syz.2.558'. [ 126.716513][ T1200] stb0899_attach: Driver disabled by Kconfig [ 126.726633][ T1200] az6027: no front-end attached [ 126.726633][ T1200] [ 126.756466][ T1200] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 126.765311][ T1200] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 126.795077][ T1200] dvb-usb: schedule remote query interval to 400 msecs. [ 126.826252][ T1200] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 126.968052][ T1200] usb 1-1: USB disconnect, device number 9 [ 127.067712][ T1200] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 127.209556][ T7300] netlink: 'syz.3.570': attribute type 10 has an invalid length. [ 127.766362][ T1200] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 127.966461][ T1200] usb 3-1: Using ep0 maxpacket: 32 [ 127.983112][ T1200] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.009398][ T1200] usb 3-1: config 0 has no interfaces? [ 128.014939][ T1200] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 128.049624][ T1200] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.087015][ T1200] usb 3-1: config 0 descriptor?? [ 128.416938][ T7338] netlink: 'syz.1.584': attribute type 10 has an invalid length. [ 129.745412][ T7363] netlink: 68 bytes leftover after parsing attributes in process `syz.1.593'. [ 130.321572][ T7397] netlink: 'syz.1.596': attribute type 10 has an invalid length. [ 130.543169][ T23] usb 3-1: USB disconnect, device number 11 [ 131.634500][ T7437] netlink: 14 bytes leftover after parsing attributes in process `syz.1.612'. [ 132.920806][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.930479][ T7480] netlink: 14 bytes leftover after parsing attributes in process `syz.0.629'. [ 132.946548][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.656503][ T8] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 133.847920][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.863965][ T8] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 133.882980][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.913712][ T8] usb 3-1: config 0 descriptor?? [ 133.946154][ T8] pwc: Askey VC010 type 2 USB webcam detected. [ 134.289378][ T7527] netlink: 14 bytes leftover after parsing attributes in process `syz.0.647'. [ 134.360648][ T8] pwc: recv_control_msg error -32 req 02 val 2b00 [ 134.377974][ T8] pwc: recv_control_msg error -32 req 02 val 2700 [ 134.385378][ T8] pwc: recv_control_msg error -32 req 02 val 2c00 [ 134.395446][ T8] pwc: recv_control_msg error -32 req 04 val 1000 [ 134.403256][ T8] pwc: recv_control_msg error -32 req 04 val 1300 [ 134.420247][ T8] pwc: recv_control_msg error -32 req 04 val 1400 [ 134.429922][ T8] pwc: recv_control_msg error -32 req 02 val 2000 [ 134.447177][ T8] pwc: recv_control_msg error -32 req 02 val 2100 [ 134.460123][ T8] pwc: recv_control_msg error -32 req 04 val 1500 [ 134.474165][ T8] pwc: recv_control_msg error -32 req 02 val 2500 [ 134.491905][ T8] pwc: recv_control_msg error -32 req 02 val 2400 [ 134.517999][ T8] pwc: recv_control_msg error -32 req 02 val 2600 [ 134.728150][ T8] pwc: recv_control_msg error -71 req 02 val 2800 [ 134.756565][ T8] pwc: recv_control_msg error -71 req 04 val 1100 [ 134.763681][ T8] pwc: recv_control_msg error -71 req 04 val 1200 [ 134.779086][ T8] pwc: Registered as video103. [ 134.785644][ T8] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9 [ 134.838719][ T8] usb 3-1: USB disconnect, device number 12 [ 135.792280][ T7561] netlink: 14 bytes leftover after parsing attributes in process `syz.0.658'. [ 136.778825][ T7589] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 137.281851][ T7610] netlink: 14 bytes leftover after parsing attributes in process `syz.0.677'. [ 137.636330][ T5811] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 137.838278][ T5811] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.856419][ T5811] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 137.904033][ T5811] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 137.913904][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.933913][ T5811] usb 2-1: Product: syz [ 137.942721][ T5811] usb 2-1: Manufacturer: syz [ 137.962308][ T5811] usb 2-1: SerialNumber: syz [ 138.198166][ T5811] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 138.210017][ T5811] usb 2-1: MIDIStreaming interface descriptor not found [ 138.267735][ T5811] usb 2-1: USB disconnect, device number 8 [ 138.396979][ T5762] udevd[5762]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.700823][ T7652] netlink: 14 bytes leftover after parsing attributes in process `syz.0.695'. [ 138.757506][ T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 138.986498][ T8] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 138.995599][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.006548][ T5088] Bluetooth: hci3: command tx timeout [ 139.023136][ T8] usb 4-1: Product: syz [ 139.040387][ T8] usb 4-1: Manufacturer: syz [ 139.051238][ T8] usb 4-1: SerialNumber: syz [ 139.306361][ T8] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 139.344794][ T8] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 139.384925][ T8] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 139.422356][ T8] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 139.443243][ T8] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 139.457644][ T8] lan78xx: probe of 4-1:1.0 failed with error -32 [ 139.479810][ T8] usb 4-1: USB disconnect, device number 9 [ 139.504279][ T7676] devpts: called with bogus options [ 139.759929][ T7684] netlink: 14 bytes leftover after parsing attributes in process `syz.1.709'. [ 140.378149][ T8] IPVS: starting estimator thread 0... [ 140.496433][ T7703] IPVS: using max 20 ests per chain, 48000 per kthread [ 140.685141][ T7715] trusted_key: syz.0.722 sent an empty control message without MSG_MORE. [ 140.776624][ T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 140.994150][ T8] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 141.011252][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.031226][ T8] usb 4-1: config 0 has no interface number 0 [ 141.039476][ T8] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 141.060037][ T8] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 141.079711][ T7732] netlink: 14 bytes leftover after parsing attributes in process `syz.2.730'. [ 141.086428][ T8] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 141.119963][ T8] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 141.140076][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.157825][ T8] usb 4-1: Product: syz [ 141.166781][ T8] usb 4-1: Manufacturer: syz [ 141.171427][ T8] usb 4-1: SerialNumber: syz [ 141.188795][ T8] usb 4-1: config 0 descriptor?? [ 141.296433][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 141.509230][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 141.536687][ T9] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 141.544908][ T9] usb 1-1: config 0 has no interface number 0 [ 141.570685][ T9] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 141.599673][ T9] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 141.616351][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.624462][ T9] usb 1-1: Product: syz [ 141.646636][ T9] usb 1-1: Manufacturer: syz [ 141.651354][ T9] usb 1-1: SerialNumber: syz [ 141.659587][ T9] usb 1-1: config 0 descriptor?? [ 141.680553][ T9] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 141.700555][ T9] em28xx 1-1:0.132: Video interface 132 found: [ 141.849906][ T8] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.117/input/input10 [ 142.075509][ T8] usb 4-1: USB disconnect, device number 10 [ 142.088253][ T9] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 142.707182][ T9] em28xx 1-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 142.733532][ T9] em28xx 1-1:0.132: failed to read eeprom (err=-5) [ 142.750945][ T9] em28xx 1-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 142.809346][ T7792] netlink: 14 bytes leftover after parsing attributes in process `syz.2.744'. [ 142.849738][ T9] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 142.861770][ T9] em28xx 1-1:0.132: analog set to bulk mode. [ 142.885463][ T9] usb 1-1: USB disconnect, device number 10 [ 142.900662][ T788] em28xx 1-1:0.132: Registering V4L2 extension [ 142.909244][ T9] em28xx 1-1:0.132: Disconnecting em28xx [ 143.142016][ T788] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 143.171199][ T788] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 143.197191][ T788] em28xx 1-1:0.132: No AC97 audio processor [ 143.232186][ T788] usb 1-1: Decoder not found [ 143.247131][ T788] em28xx 1-1:0.132: failed to create media graph [ 143.271379][ T788] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 143.351968][ T788] em28xx 1-1:0.132: Remote control support is not available for this card. [ 143.381172][ T9] em28xx 1-1:0.132: Closing input extension [ 143.419556][ T9] em28xx 1-1:0.132: Freeing device [ 143.676283][ T5811] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 143.871177][ T5811] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 143.884999][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 143.893677][ T5811] usb 4-1: Product: syz [ 143.902396][ T5811] usb 4-1: SerialNumber: syz [ 143.927281][ T5811] usb 4-1: config 0 descriptor?? [ 144.139077][ T5811] hso 4-1:0.0: Failed to find BULK IN ep [ 144.345658][ T5776] usb 4-1: USB disconnect, device number 11 [ 144.534139][ T7839] capability: warning: `syz.2.761' uses deprecated v2 capabilities in a way that may be insecure [ 144.570284][ T7841] netlink: 14 bytes leftover after parsing attributes in process `syz.0.762'. [ 144.824820][ T7850] sg_write: data in/out 261984/136 bytes for SCSI command 0x0-- guessing data in; [ 144.824820][ T7850] program syz.2.765 not setting count and/or reply_len properly [ 145.339676][ T5088] Bluetooth: Wrong link type (-71) [ 145.384653][ T7871] netlink: 20 bytes leftover after parsing attributes in process `syz.2.773'. [ 145.562323][ T7884] netlink: 14 bytes leftover after parsing attributes in process `syz.2.777'. [ 146.066583][ T7902] comedi comedi1: 8255: I/O port conflict (0x4,4) [ 146.100658][ T7902] comedi comedi1: 8255: I/O port conflict (0x4,4) [ 146.113114][ T7902] comedi comedi1: 8255: I/O port conflict (0x800afa3,4) [ 146.139568][ T7902] comedi comedi1: 8255: I/O port conflict (0x4,4) [ 146.159238][ T7902] comedi comedi1: 8255: I/O port conflict (0x8,4) [ 146.636811][ T5811] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 146.822003][ T5811] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 146.837678][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.845722][ T5811] usb 1-1: Product: syz [ 146.855952][ T5811] usb 1-1: Manufacturer: syz [ 146.878318][ T7936] tipc: Started in network mode [ 146.886576][ T5811] usb 1-1: SerialNumber: syz [ 146.886675][ T7936] tipc: Node identity f2c4e268eee4, cluster identity 4711 [ 146.907107][ T5811] usb 1-1: config 0 descriptor?? [ 146.932232][ T7936] tipc: Enabled bearer , priority 0 [ 146.956707][ T7939] syzkaller0: entered promiscuous mode [ 146.962233][ T7939] syzkaller0: entered allmulticast mode [ 146.979885][ T7936] tipc: Resetting bearer [ 146.993446][ T7935] tipc: Resetting bearer [ 147.032842][ T7935] tipc: Disabling bearer [ 147.045234][ T7941] netlink: 14 bytes leftover after parsing attributes in process `syz.2.801'. [ 147.759459][ T5811] usb 1-1: Firmware version (0.0) predates our first public release. [ 147.768981][ T5811] usb 1-1: Please update to version 0.2 or newer [ 148.149142][ T5811] usb 1-1: USB disconnect, device number 11 [ 148.714704][ T27] audit: type=1804 audit(1781388686.583:2): pid=7961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.808" name="bus" dev="ramfs" ino=24075 res=1 errno=0 [ 148.796266][ T27] audit: type=1804 audit(1781388686.613:3): pid=7961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.808" name="bus" dev="ramfs" ino=24075 res=1 errno=0 [ 149.156196][ C0] sched: RT throttling activated [ 149.656308][ T5776] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 149.684167][ T7973] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 149.723088][ T7977] netlink: 14 bytes leftover after parsing attributes in process `syz.3.814'. [ 149.856610][ T5776] usb 2-1: Using ep0 maxpacket: 32 [ 149.881823][ T5776] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 149.890059][ T5776] usb 2-1: config 0 has no interface number 0 [ 149.916829][ T5776] usb 2-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 149.940602][ T5776] usb 2-1: config 0 interface 1 has no altsetting 0 [ 149.964349][ T5776] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 149.974422][ T5776] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.993840][ T5776] usb 2-1: Product: syz [ 150.006330][ T5776] usb 2-1: Manufacturer: syz [ 150.010973][ T5776] usb 2-1: SerialNumber: syz [ 150.027511][ T5776] usb 2-1: config 0 descriptor?? [ 150.269159][ T5776] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 150.282979][ T5776] cx231xx 2-1:0.1: Failed to read PCB config [ 150.294672][ T5776] cx231xx: probe of 2-1:0.1 failed with error -71 [ 150.316469][ T5776] usb 2-1: USB disconnect, device number 9 [ 150.846279][ T5776] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 151.036568][ T5776] usb 2-1: Using ep0 maxpacket: 32 [ 151.043887][ T5776] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 151.066272][ T5776] usb 2-1: config 0 has no interface number 0 [ 151.072417][ T5776] usb 2-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 151.098695][ T5776] usb 2-1: config 0 interface 1 has no altsetting 0 [ 151.113656][ T5776] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 151.136444][ T5776] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.146734][ T5776] usb 2-1: Product: syz [ 151.153607][ T5776] usb 2-1: Manufacturer: syz [ 151.158988][ T5776] usb 2-1: SerialNumber: syz [ 151.165436][ T5776] usb 2-1: config 0 descriptor?? [ 151.234498][ T8017] netlink: 14 bytes leftover after parsing attributes in process `syz.3.831'. [ 151.376411][ T8021] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 151.405860][ T5776] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 151.427619][ T5776] cx231xx 2-1:0.1: bad scenario!!!!! [ 151.427619][ T5776] config_info=0 [ 151.446444][ T5776] cx231xx 2-1:0.1: Failed to read PCB config [ 151.638955][ T23] usb 2-1: USB disconnect, device number 10 [ 152.176276][ T5776] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 152.234115][ T8047] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 152.382447][ T5776] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 152.395496][ T5776] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 152.415565][ T5776] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 152.428054][ T8052] netlink: 14 bytes leftover after parsing attributes in process `syz.3.844'. [ 152.439851][ T5776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.457100][ T5776] usb 3-1: config 0 descriptor?? [ 152.481653][ T8033] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 152.536414][ T788] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 152.716255][ T788] usb 2-1: Using ep0 maxpacket: 32 [ 152.739175][ T788] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 152.756274][ T788] usb 2-1: config 0 has no interface number 0 [ 152.770141][ T788] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 152.787241][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.795661][ T788] usb 2-1: Product: syz [ 152.800108][ T788] usb 2-1: Manufacturer: syz [ 152.804763][ T788] usb 2-1: SerialNumber: syz [ 152.817843][ T788] usb 2-1: config 0 descriptor?? [ 152.832069][ T788] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 153.059698][ T788] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 153.105873][ T788] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 153.209072][ T5776] usbhid 3-1:0.0: can't add hid device: -71 [ 153.215162][ T5776] usbhid: probe of 3-1:0.0 failed with error -71 [ 153.277222][ T5901] ------------[ cut here ]------------ [ 153.283134][ T5901] WARNING: CPU: 1 PID: 5901 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 153.286646][ T5776] usb 3-1: USB disconnect, device number 13 [ 153.294241][ T5901] Modules linked in: [ 153.304051][ T5901] CPU: 1 PID: 5901 Comm: kworker/u4:18 Not tainted syzkaller #0 [ 153.312128][ T5901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 153.322483][ T5901] Workqueue: phy5 ieee80211_csa_finalize_work [ 153.327624][ T7392] ------------[ cut here ]------------ [ 153.329081][ T5901] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 153.334325][ T7392] WARNING: CPU: 0 PID: 7392 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 153.334358][ T7392] Modules linked in: [ 153.334374][ T7392] CPU: 0 PID: 7392 Comm: kworker/u4:46 Not tainted syzkaller #0 [ 153.334391][ T7392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 153.334402][ T7392] Workqueue: phy7 ieee80211_csa_finalize_work [ 153.341690][ T5901] Code: 48 89 df e8 da 6f d4 f7 e9 dc fc ff ff e8 d0 2f 7c f7 eb 24 e8 c9 2f 7c f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 b8 2f 7c f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 aa 2f 7c f7 48 8b 7c 24 08 4c 8b 7c [ 153.341708][ T5901] RSP: 0018:ffffc90004a6f9c0 EFLAGS: 00010293 [ 153.352726][ T7392] [ 153.356708][ T5901] RAX: ffffffff8a0af7de RBX: 0000000000000001 RCX: ffff88802bc20000 [ 153.364234][ T7392] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 153.375069][ C1] ------------[ cut here ]------------ [ 153.375103][ C1] WARNING: CPU: 1 PID: 5901 at net/mac80211/tx.c:5033 __ieee80211_beacon_get+0x1233/0x1600 [ 153.375144][ C1] Modules linked in: [ 153.375158][ C1] CPU: 1 PID: 5901 Comm: kworker/u4:18 Not tainted syzkaller #0 [ 153.375178][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 153.375191][ C1] Workqueue: phy5 ieee80211_csa_finalize_work [ 153.375223][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 153.375260][ C1] Code: 24 4c 89 e7 e8 ae a6 be f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 b9 db 80 f7 0f 0b e9 f6 f7 ff ff e8 ad db 80 f7 <0f> 0b e9 48 fb ff ff e8 a1 db 80 f7 48 c7 c7 a0 d0 64 8e 4c 89 e6 [ 153.375277][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 153.375296][ C1] RAX: ffffffff8a064fe3 RBX: ffffffff8a063de6 RCX: ffff88802bc20000 [ 153.375312][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 153.375325][ C1] RBP: 0000000000000000 R08: ffff88802bc20000 R09: 0000000000000003 [ 153.375339][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805ca02440 [ 153.375353][ C1] R13: dffffc0000000000 R14: ffff88805ca02930 R15: ffff88805d284424 [ 153.375369][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 153.375386][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 153.375401][ C1] CR2: 00005555914a19f8 CR3: 000000002de60000 CR4: 00000000003526e0 [ 153.375419][ C1] DR0: 0000000000000009 DR1: 00000000000000c9 DR2: 00000000000000f3 [ 153.375431][ C1] DR3: 00000000000000c0 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 153.375444][ C1] Call Trace: [ 153.375460][ C1] [ 153.375472][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 153.375509][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 153.375542][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 153.375581][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 153.375615][ C1] __iterate_interfaces+0x243/0x500 [ 153.375637][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 153.375665][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 153.375690][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 153.375718][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 153.375745][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 153.375774][ C1] __hrtimer_run_queues+0x520/0xc40 [ 153.375795][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 153.375824][ C1] ? hw_scan_work+0xf60/0xf60 [ 153.382012][ T7392] Code: 48 89 df e8 da 6f d4 f7 e9 dc fc ff ff e8 d0 2f 7c f7 eb 24 e8 c9 2f 7c f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 b8 2f 7c f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 aa 2f 7c f7 48 8b 7c 24 08 4c 8b 7c [ 153.401733][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 153.401759][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 153.401788][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 153.401812][ C1] handle_softirqs+0x280/0x820 [ 153.401836][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 153.401860][ C1] ? do_softirq+0x1a0/0x1a0 [ 153.401885][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 153.401912][ C1] __irq_exit_rcu+0xd3/0x190 [ 153.401932][ C1] ? irq_exit_rcu+0x20/0x20 [ 153.408030][ T7392] RSP: 0018:ffffc90003c479c0 EFLAGS: 00010293 [ 153.410322][ C1] irq_exit_rcu+0x9/0x20 [ 153.410344][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 153.418467][ T7392] [ 153.425589][ C1] [ 153.425598][ C1] [ 153.425607][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 153.431123][ T7392] RAX: ffffffff8a0af7de RBX: 0000000000000001 RCX: ffff88805dff8000 [ 153.441040][ C1] RIP: 0010:console_flush_all+0x8b1/0xd20 [ 153.441069][ C1] Code: ed 01 00 00 e8 f0 8a 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 e1 8a 1b 00 eb 06 e8 da 8a 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 58 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 153.441085][ C1] RSP: 0018:ffffc90004a6f340 EFLAGS: 00000293 [ 153.444992][ T7392] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 153.452585][ C1] [ 153.452593][ C1] RAX: ffffffff816ba0b6 RBX: ffffc90004a6f4df RCX: ffff88802bc20000 [ 153.452607][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 153.452619][ C1] RBP: ffffc90004a6f4b0 R08: ffffffff911cd5c7 R09: 1ffffffff2239ab8 [ 153.462722][ T7392] RBP: dffffc0000000000 R08: ffff88805c68d62f R09: 1ffff1100b8d1ac5 [ 153.468744][ C1] R10: dffffc0000000000 R11: fffffbfff2239ab9 R12: ffffffff8d8baa40 [ 153.468762][ C1] R13: 1ffffffff19f9724 R14: ffffffff8d8baa98 R15: dffffc0000000000 [ 153.468785][ C1] ? console_flush_all+0x8a6/0xd20 [ 153.475723][ T7392] R10: dffffc0000000000 R11: ffffed100b8d1ac6 R12: 0000000000000001 [ 153.494669][ C0] vkms_vblank_simulate: vblank timer overrun [ 153.494698][ C1] ? __rwlock_init+0x150/0x150 [ 153.494724][ C1] ? console_flush_all+0x10a/0xd20 [ 153.494755][ C1] ? is_console_locked+0x20/0x20 [ 153.494789][ C1] console_unlock+0xad/0x350 [ 153.494815][ C1] ? other_cpu_in_panic+0xf0/0xf0 [ 153.494837][ C1] ? lock_chain_count+0x20/0x20 [ 153.494860][ C1] ? vprintk_emit+0x40d/0x610 [ 153.494877][ C1] ? vprintk_emit+0x30b/0x610 [ 153.494896][ C1] ? vprintk_emit+0x30b/0x610 [ 153.494920][ C1] vprintk_emit+0x497/0x610 [ 153.494941][ C1] ? vprintk_emit+0x30b/0x610 [ 153.501046][ T7392] R13: ffff88805c68e659 R14: ffff8880211a2cd0 R15: ffff8880211a2d48 [ 153.508999][ C1] ? printk_sprint+0x460/0x460 [ 153.509024][ C1] ? _printk+0xde/0x130 [ 153.509042][ C1] ? copy_from_kernel_nofault+0x1d2/0x310 [ 153.517053][ T7392] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 153.524984][ C1] _printk+0xde/0x130 [ 153.525007][ C1] ? ieee80211_vif_use_reserved_switch+0x10be/0x28f0 [ 153.533019][ T7392] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 153.540952][ C1] ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0 [ 153.540983][ C1] ? load_image+0x420/0x420 [ 153.541014][ C1] ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0 [ 153.549980][ T7392] CR2: 000000110c4205d3 CR3: 000000001aac5000 CR4: 00000000003526f0 [ 153.556521][ C1] __show_regs+0xf3/0x600 [ 153.556549][ C1] ? dump_stack_print_info+0xf5/0x150 [ 153.556573][ C1] show_regs+0x44/0x90 [ 153.556598][ C1] __warn+0x160/0x470 [ 153.564600][ T7392] DR0: 0000000000000009 DR1: 00000000000000c9 DR2: 00000000000000f3 [ 153.572540][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 153.572571][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 153.572598][ C1] report_bug+0x2be/0x4f0 [ 153.581327][ T7392] DR3: 00000000000000c0 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 153.583921][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 153.586899][ T7392] Call Trace: [ 153.592298][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 153.592329][ C1] ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0 [ 153.597818][ T7392] [ 153.604521][ C1] handle_bug+0xcf/0x120 [ 153.604550][ C1] exc_invalid_op+0x1a/0x50 [ 153.610188][ T7392] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 153.615271][ C1] asm_exc_invalid_op+0x1a/0x20 [ 153.615301][ C1] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 153.621563][ T7392] ieee80211_csa_finalize+0x5a6/0xf20 [ 153.628727][ C1] Code: 48 89 df e8 da 6f d4 f7 e9 dc fc ff ff e8 d0 2f 7c f7 eb 24 e8 c9 2f 7c f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 b8 2f 7c f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 aa 2f 7c f7 48 8b 7c 24 08 4c 8b 7c [ 153.628744][ C1] RSP: 0018:ffffc90004a6f9c0 EFLAGS: 00010293 [ 153.628765][ C1] RAX: ffffffff8a0af7de RBX: 0000000000000001 RCX: ffff88802bc20000 [ 153.628780][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 153.628791][ C1] RBP: dffffc0000000000 R08: ffff88805ca0162f R09: 1ffff1100b9402c5 [ 153.628803][ C1] R10: dffffc0000000000 R11: ffffed100b9402c6 R12: 0000000000000001 [ 153.628817][ C1] R13: ffff88805ca02659 R14: ffff88805caf2cd0 R15: ffff88805caf2d48 [ 153.635062][ T7392] ? mutex_lock_nested+0x20/0x20 [ 153.642071][ C1] ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0 [ 153.647332][ T7392] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 153.652504][ C1] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 153.658547][ T7392] ? ieee80211_csa_finalize_work+0x140/0x140 [ 153.663159][ C1] ieee80211_csa_finalize+0x5a6/0xf20 [ 153.663190][ C1] ? mutex_lock_nested+0x20/0x20 [ 153.683532][ T7392] ? read_lock_is_recursive+0x20/0x20 [ 153.687922][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 153.687946][ C1] ? ieee80211_csa_finalize_work+0x140/0x140 [ 153.687971][ C1] ? read_lock_is_recursive+0x20/0x20 [ 153.688001][ C1] ieee80211_csa_finalize_work+0xf6/0x140 [ 153.688028][ C1] ? process_scheduled_works+0x96f/0x15d0 [ 153.688054][ C1] process_scheduled_works+0xa5d/0x15d0 [ 153.694140][ T7392] ieee80211_csa_finalize_work+0xf6/0x140 [ 153.699262][ C1] ? worker_attach_to_pool+0x380/0x380 [ 153.704031][ T7392] ? process_scheduled_works+0x96f/0x15d0 [ 153.708775][ C1] ? assign_work+0x3d2/0x5d0 [ 153.713305][ T7392] process_scheduled_works+0xa5d/0x15d0 [ 153.718472][ C1] worker_thread+0xa55/0xfc0 [ 153.718521][ C1] kthread+0x2fa/0x390 [ 153.718540][ C1] ? pr_cont_work+0x560/0x560 [ 153.723156][ T7392] ? worker_attach_to_pool+0x380/0x380 [ 153.727609][ C1] ? kthread_blkcg+0xd0/0xd0 [ 153.727631][ C1] ret_from_fork+0x48/0x80 [ 153.727655][ C1] ? kthread_blkcg+0xd0/0xd0 [ 153.733732][ T7392] ? assign_work+0x3d2/0x5d0 [ 153.737939][ C1] ret_from_fork_asm+0x11/0x20 [ 153.737981][ C1] [ 153.743620][ T7392] worker_thread+0xa55/0xfc0 [ 153.745892][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 153.745912][ C1] CPU: 1 PID: 5901 Comm: kworker/u4:18 Not tainted syzkaller #0 [ 153.745930][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 153.745941][ C1] Workqueue: phy5 ieee80211_csa_finalize_work [ 153.745971][ C1] Call Trace: [ 153.745979][ C1] [ 153.745986][ C1] dump_stack_lvl+0x18c/0x250 [ 153.746011][ C1] ? show_regs_print_info+0x20/0x20 [ 153.746032][ C1] ? load_image+0x420/0x420 [ 153.746060][ C1] panic+0x2dc/0x730 [ 153.746090][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 153.746122][ C1] ? ret_from_fork_asm+0x11/0x20 [ 153.746150][ C1] __warn+0x2e0/0x470 [ 153.746176][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 153.746210][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 153.746235][ C1] report_bug+0x2be/0x4f0 [ 153.746257][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 153.746283][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 153.746308][ C1] ? __ieee80211_beacon_get+0x1235/0x1600 [ 153.746333][ C1] handle_bug+0xcf/0x120 [ 153.746355][ C1] exc_invalid_op+0x1a/0x50 [ 153.746376][ C1] asm_exc_invalid_op+0x1a/0x20 [ 153.746400][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 153.746427][ C1] Code: 24 4c 89 e7 e8 ae a6 be f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 b9 db 80 f7 0f 0b e9 f6 f7 ff ff e8 ad db 80 f7 <0f> 0b e9 48 fb ff ff e8 a1 db 80 f7 48 c7 c7 a0 d0 64 8e 4c 89 e6 [ 153.746441][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 153.746456][ C1] RAX: ffffffff8a064fe3 RBX: ffffffff8a063de6 RCX: ffff88802bc20000 [ 153.746469][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 153.746480][ C1] RBP: 0000000000000000 R08: ffff88802bc20000 R09: 0000000000000003 [ 153.746491][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805ca02440 [ 153.746502][ C1] R13: dffffc0000000000 R14: ffff88805ca02930 R15: ffff88805d284424 [ 153.746517][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 153.746544][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 153.746575][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 153.746602][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 153.746634][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 153.746664][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 153.746700][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 153.746731][ C1] __iterate_interfaces+0x243/0x500 [ 153.746751][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 153.746775][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 153.746798][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 153.746821][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 153.746846][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 153.746871][ C1] __hrtimer_run_queues+0x520/0xc40 [ 153.746890][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 153.746918][ C1] ? hw_scan_work+0xf60/0xf60 [ 153.746946][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 153.746965][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 153.746994][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 153.747017][ C1] handle_softirqs+0x280/0x820 [ 153.747040][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 153.747061][ C1] ? do_softirq+0x1a0/0x1a0 [ 153.747083][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 153.747108][ C1] __irq_exit_rcu+0xd3/0x190 [ 153.747125][ C1] ? irq_exit_rcu+0x20/0x20 [ 153.747150][ C1] irq_exit_rcu+0x9/0x20 [ 153.747166][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 153.747190][ C1] [ 153.747196][ C1] [ 153.747207][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 153.747232][ C1] RIP: 0010:console_flush_all+0x8b1/0xd20 [ 153.747254][ C1] Code: ed 01 00 00 e8 f0 8a 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 e1 8a 1b 00 eb 06 e8 da 8a 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 58 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 153.747267][ C1] RSP: 0018:ffffc90004a6f340 EFLAGS: 00000293 [ 153.747282][ C1] RAX: ffffffff816ba0b6 RBX: ffffc90004a6f4df RCX: ffff88802bc20000 [ 153.747295][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 153.747305][ C1] RBP: ffffc90004a6f4b0 R08: ffffffff911cd5c7 R09: 1ffffffff2239ab8 [ 153.747317][ C1] R10: dffffc0000000000 R11: fffffbfff2239ab9 R12: ffffffff8d8baa40 [ 153.747329][ C1] R13: 1ffffffff19f9724 R14: ffffffff8d8baa98 R15: dffffc0000000000 [ 153.747348][ C1] ? console_flush_all+0x8a6/0xd20 [ 153.747377][ C1] ? __rwlock_init+0x150/0x150 [ 153.747400][ C1] ? console_flush_all+0x10a/0xd20 [ 153.747431][ C1] ? is_console_locked+0x20/0x20 [ 153.747464][ C1] console_unlock+0xad/0x350 [ 153.747487][ C1] ? other_cpu_in_panic+0xf0/0xf0 [ 153.747508][ C1] ? lock_chain_count+0x20/0x20 [ 153.747531][ C1] ? vprintk_emit+0x40d/0x610 [ 153.747550][ C1] ? vprintk_emit+0x30b/0x610 [ 153.747568][ C1] ? vprintk_emit+0x30b/0x610 [ 153.747590][ C1] vprintk_emit+0x497/0x610 [ 153.747609][ C1] ? vprintk_emit+0x30b/0x610 [ 153.747630][ C1] ? printk_sprint+0x460/0x460 [ 153.747652][ C1] ? _printk+0xde/0x130 [ 153.747668][ C1] ? copy_from_kernel_nofault+0x1d2/0x310 [ 153.747701][ C1] _printk+0xde/0x130 [ 153.747717][ C1] ? ieee80211_vif_use_reserved_switch+0x10be/0x28f0 [ 153.747741][ C1] ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0 [ 153.747768][ C1] ? load_image+0x420/0x420 [ 153.747795][ C1] ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0 [ 153.747818][ C1] __show_regs+0xf3/0x600 [ 153.747844][ C1] ? dump_stack_print_info+0xf5/0x150 [ 153.747867][ C1] show_regs+0x44/0x90 [ 153.747889][ C1] __warn+0x160/0x470 [ 153.747911][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 153.747938][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 153.747962][ C1] report_bug+0x2be/0x4f0 [ 153.747983][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 153.748008][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 153.748033][ C1] ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0 [ 153.748057][ C1] handle_bug+0xcf/0x120 [ 153.748078][ C1] exc_invalid_op+0x1a/0x50 [ 153.748099][ C1] asm_exc_invalid_op+0x1a/0x20 [ 153.748121][ C1] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 153.748146][ C1] Code: 48 89 df e8 da 6f d4 f7 e9 dc fc ff ff e8 d0 2f 7c f7 eb 24 e8 c9 2f 7c f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 b8 2f 7c f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 aa 2f 7c f7 48 8b 7c 24 08 4c 8b 7c [ 153.748160][ C1] RSP: 0018:ffffc90004a6f9c0 EFLAGS: 00010293 [ 153.748174][ C1] RAX: ffffffff8a0af7de RBX: 0000000000000001 RCX: ffff88802bc20000 [ 153.748185][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 153.748195][ C1] RBP: dffffc0000000000 R08: ffff88805ca0162f R09: 1ffff1100b9402c5 [ 153.748213][ C1] R10: dffffc0000000000 R11: ffffed100b9402c6 R12: 0000000000000001 [ 153.748224][ C1] R13: ffff88805ca02659 R14: ffff88805caf2cd0 R15: ffff88805caf2d48 [ 153.748244][ C1] ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0 [ 153.748287][ C1] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 153.748317][ C1] ieee80211_csa_finalize+0x5a6/0xf20 [ 153.748342][ C1] ? mutex_lock_nested+0x20/0x20 [ 153.748365][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 153.748386][ C1] ? ieee80211_csa_finalize_work+0x140/0x140 [ 153.748413][ C1] ? read_lock_is_recursive+0x20/0x20 [ 153.748439][ C1] ieee80211_csa_finalize_work+0xf6/0x140 [ 153.748466][ C1] ? process_scheduled_works+0x96f/0x15d0 [ 153.748488][ C1] process_scheduled_works+0xa5d/0x15d0 [ 153.748533][ C1] ? worker_attach_to_pool+0x380/0x380 [ 153.748561][ C1] ? assign_work+0x3d2/0x5d0 [ 153.748588][ C1] worker_thread+0xa55/0xfc0 [ 153.748631][ C1] kthread+0x2fa/0x390 [ 153.748647][ C1] ? pr_cont_work+0x560/0x560 [ 153.748669][ C1] ? kthread_blkcg+0xd0/0xd0 [ 153.748686][ C1] ret_from_fork+0x48/0x80 [ 153.748707][ C1] ? kthread_blkcg+0xd0/0xd0 [ 153.748724][ C1] ret_from_fork_asm+0x11/0x20 [ 153.748759][ C1] [ 153.749101][ C1] Kernel Offset: disabled