last executing test programs: 4.054544958s ago: executing program 0 (id=595): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000ec0)={0x28, r0, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040810}, 0x0) 3.849934792s ago: executing program 0 (id=600): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000300)=0x40) 2.658980659s ago: executing program 0 (id=607): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x8005}, 0x0) 2.400138698s ago: executing program 0 (id=610): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000000100)) 2.087732939s ago: executing program 0 (id=615): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000300)=0x40) 1.34269047s ago: executing program 3 (id=621): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffd}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0xffffffff}, 0x1c) shutdown(r2, 0x1) splice(r2, 0x0, r1, 0x0, 0x400000107ffff000, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000080)=0x10, 0x4) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x1fd) 1.182269651s ago: executing program 3 (id=624): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f00000004c0)={0x2020}, 0x2020) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000002c00)=0x81) 950.391697ms ago: executing program 1 (id=626): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a060000) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 853.539457ms ago: executing program 3 (id=627): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x4000000000000014) 839.147364ms ago: executing program 1 (id=628): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf2501"], 0x114}], 0x1}, 0x0) 759.762547ms ago: executing program 2 (id=629): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x8005}, 0x0) 637.980916ms ago: executing program 3 (id=630): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xc8}}, 0x0) 637.115225ms ago: executing program 1 (id=631): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000ec0)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040810}, 0x0) 539.923445ms ago: executing program 2 (id=632): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40) 493.757997ms ago: executing program 3 (id=633): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa001) ioctl$USBDEVFS_BULK(r0, 0xc0185502, 0x0) 474.002753ms ago: executing program 1 (id=634): semtimedop(0x0, &(0x7f00000003c0)=[{0x0, 0x1}, {0x2, 0x4, 0x1800}], 0x2, 0x0) semop(0x0, &(0x7f0000000040)=[{0x2, 0x0, 0x800}], 0x1) 386.499966ms ago: executing program 3 (id=635): r0 = syz_usb_connect$uac1(0x2, 0xad, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029b0003010000000904000000010100000a2401000000020102092408000000004c58062404000052072405000053f10b24050000133b9bda531c092405fc0596efc359090401000001020000090401010101020000090501090000000000072501000600000904020000010200000904020101010200000b2402017f0200018b7e8e07240100000000090582091000000000072501f5"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003040000000003"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x0, 0x1, 0xa, "e81592e4d678e004048c"}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 366.69008ms ago: executing program 2 (id=636): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a060000) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 329.014807ms ago: executing program 1 (id=637): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x62c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0xf5, 0xe, {{{}, {}, @device_a, @device_a, @from_mac=@broadcast}, 0x0, @random=0x8000, 0x1, @void, @void, @val={0x3, 0x1, 0xab}, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x5, 0x1, 0x0, 0xffffffffffffffff, 0x1, 0xf6, 0x21}}, @void, [{0xdd, 0xbf, "dc87ee5f96fb9c6d1b437893e8d0fd10fc4c9a63ace18b233bcc1b0303d808bcd7cdf437bbfdbdaf4da1fac91d85a0680f9feff0f45c9485066c52ce826ad95852e7844ba4f1719120d745160453bf640733f4595550f4ab917d759f6b8bb823abb958ae197c5777cb973b76694fe4afe635f6feaf73c4901d6c613d4bdb3894d941dbdee23130a9e8b5117113ca11a642b94392f69aa9beef331281a0c7e50692a06d6627b4ab3fa4793336f0faef693c176d818f2538d3593f8ac955bafe"}]}}, @NL80211_ATTR_PROBE_RESP={0x4ff, 0x91, "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"}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x81}]}, 0x62c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 311.245874ms ago: executing program 0 (id=638): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000002380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000004c0)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x10810000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff}}, 0x50) read$FUSE(r0, &(0x7f0000006580)={0x2020}, 0x2020) truncate(&(0x7f0000000080)='./file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f000000b1c0)="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", 0x2000, &(0x7f000000d8c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000d540)={0x78, 0x0, 0x0, {0x7, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x8000, 0xfffffffd, 0x0, 0xee00}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) 230.39408ms ago: executing program 1 (id=639): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f0000000309407a730b"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f00000000c0)={0x1, 0x3}) 94.570267ms ago: executing program 2 (id=640): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0) 62.45515ms ago: executing program 2 (id=641): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e80)={'wlan0\x00'}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, 0x0, 0x0) 0s ago: executing program 2 (id=642): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xc8}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.227' (ED25519) to the list of known hosts. [ 73.914970][ T5822] cgroup: Unknown subsys name 'net' [ 74.105516][ T5822] cgroup: Unknown subsys name 'cpuset' [ 74.114646][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.571761][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.143485][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.155539][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.163121][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.170487][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.182487][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.202449][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.212557][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.221220][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.242405][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.247100][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.256662][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.257385][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.272168][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.274940][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.279828][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.293514][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.313132][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.320333][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.328469][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.335785][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.840605][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 78.906473][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 78.917234][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 78.985554][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 79.066453][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.074537][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.081772][ T5836] bridge_slave_0: entered allmulticast mode [ 79.090054][ T5836] bridge_slave_0: entered promiscuous mode [ 79.126518][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.133807][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.140946][ T5836] bridge_slave_1: entered allmulticast mode [ 79.148344][ T5836] bridge_slave_1: entered promiscuous mode [ 79.227784][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.274515][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.284190][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.291651][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.299035][ T5833] bridge_slave_0: entered allmulticast mode [ 79.306395][ T5833] bridge_slave_0: entered promiscuous mode [ 79.314999][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.322176][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.329269][ T5833] bridge_slave_1: entered allmulticast mode [ 79.336549][ T5833] bridge_slave_1: entered promiscuous mode [ 79.343453][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.350600][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.358194][ T5831] bridge_slave_0: entered allmulticast mode [ 79.365485][ T5831] bridge_slave_0: entered promiscuous mode [ 79.374143][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.381245][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.389090][ T5831] bridge_slave_1: entered allmulticast mode [ 79.396331][ T5831] bridge_slave_1: entered promiscuous mode [ 79.461144][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.468678][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.478063][ T5837] bridge_slave_0: entered allmulticast mode [ 79.485608][ T5837] bridge_slave_0: entered promiscuous mode [ 79.495706][ T5836] team0: Port device team_slave_0 added [ 79.515978][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.536901][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.544238][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.551422][ T5837] bridge_slave_1: entered allmulticast mode [ 79.559126][ T5837] bridge_slave_1: entered promiscuous mode [ 79.567092][ T5836] team0: Port device team_slave_1 added [ 79.587747][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.611860][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.669434][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.681330][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.691781][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.699371][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.725395][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.738357][ T5833] team0: Port device team_slave_0 added [ 79.747103][ T5833] team0: Port device team_slave_1 added [ 79.772332][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.782341][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.789283][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.817129][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.880452][ T5831] team0: Port device team_slave_0 added [ 79.900795][ T5837] team0: Port device team_slave_0 added [ 79.909298][ T5837] team0: Port device team_slave_1 added [ 79.915927][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.924007][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.950515][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.963361][ T5831] team0: Port device team_slave_1 added [ 79.969692][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.976772][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.003086][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.079955][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.087536][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.113772][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.142383][ T5836] hsr_slave_0: entered promiscuous mode [ 80.148891][ T5836] hsr_slave_1: entered promiscuous mode [ 80.156404][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.163710][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.189991][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.201743][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.208775][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.234981][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.271585][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.278570][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.305026][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.322881][ T5840] Bluetooth: hci2: command tx timeout [ 80.328569][ T5840] Bluetooth: hci0: command tx timeout [ 80.342804][ T5833] hsr_slave_0: entered promiscuous mode [ 80.349060][ T5833] hsr_slave_1: entered promiscuous mode [ 80.355258][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 80.361041][ T5833] Cannot create hsr debugfs directory [ 80.405380][ T5846] Bluetooth: hci3: command tx timeout [ 80.409111][ T5840] Bluetooth: hci1: command tx timeout [ 80.501701][ T5837] hsr_slave_0: entered promiscuous mode [ 80.508090][ T5837] hsr_slave_1: entered promiscuous mode [ 80.516098][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 80.521830][ T5837] Cannot create hsr debugfs directory [ 80.542726][ T5831] hsr_slave_0: entered promiscuous mode [ 80.548951][ T5831] hsr_slave_1: entered promiscuous mode [ 80.555599][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 80.561329][ T5831] Cannot create hsr debugfs directory [ 80.904818][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.917670][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.928547][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.940718][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.005931][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.046787][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.065525][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.081504][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.137552][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.155024][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.178771][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.189099][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.220111][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.291084][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.315522][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.323460][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.335674][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.346747][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.370340][ T2919] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.377637][ T2919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.413789][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.420913][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.451074][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.505316][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.559981][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.567139][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.579510][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.586621][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.664981][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.696900][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.749878][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.791427][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.816251][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.823490][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.890618][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.897869][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.919937][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.927105][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.948744][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.955921][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.037861][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.168209][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.184185][ T5833] veth0_vlan: entered promiscuous mode [ 82.213493][ T5833] veth1_vlan: entered promiscuous mode [ 82.299328][ T5836] veth0_vlan: entered promiscuous mode [ 82.310734][ T5833] veth0_macvtap: entered promiscuous mode [ 82.326536][ T5833] veth1_macvtap: entered promiscuous mode [ 82.335368][ T5836] veth1_vlan: entered promiscuous mode [ 82.368808][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.403121][ T5840] Bluetooth: hci0: command tx timeout [ 82.404350][ T5846] Bluetooth: hci2: command tx timeout [ 82.424428][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.439146][ T5836] veth0_macvtap: entered promiscuous mode [ 82.463330][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.487350][ T5836] veth1_macvtap: entered promiscuous mode [ 82.494417][ T5846] Bluetooth: hci3: command tx timeout [ 82.499625][ T5840] Bluetooth: hci1: command tx timeout [ 82.522812][ T1144] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.544660][ T1144] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.566261][ T1144] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.589190][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.620325][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.656021][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.670091][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.679951][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.690140][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.712742][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.734972][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.775449][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.794061][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.825665][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.835207][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.898441][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.920660][ T5837] veth0_vlan: entered promiscuous mode [ 82.934055][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.974843][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.984839][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.998928][ T5837] veth1_vlan: entered promiscuous mode [ 83.000189][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.014615][ T5831] veth0_vlan: entered promiscuous mode [ 83.035702][ T5831] veth1_vlan: entered promiscuous mode [ 83.108333][ T5837] veth0_macvtap: entered promiscuous mode [ 83.149802][ T5831] veth0_macvtap: entered promiscuous mode [ 83.171540][ T5837] veth1_macvtap: entered promiscuous mode [ 83.198953][ T5831] veth1_macvtap: entered promiscuous mode [ 83.270265][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.306033][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.346661][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.380382][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.406799][ T1144] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.452901][ T1144] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.480372][ T1144] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.507197][ T1144] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.520432][ T1144] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.537809][ T1144] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.548823][ T1144] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.596609][ T1144] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.603222][ T5936] syz.0.8 uses obsolete (PF_INET,SOCK_PACKET) [ 83.725467][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.741325][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.915548][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.939159][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.959694][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.976301][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.052311][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.070631][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.374415][ T5961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15'. [ 84.482523][ T5840] Bluetooth: hci2: command tx timeout [ 84.482537][ T5846] Bluetooth: hci0: command tx timeout [ 84.562543][ T5846] Bluetooth: hci3: command tx timeout [ 84.562578][ T5840] Bluetooth: hci1: command tx timeout [ 84.692478][ T5970] netlink: 'syz.0.18': attribute type 9 has an invalid length. [ 84.756499][ T5974] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.016838][ T5986] netlink: 20 bytes leftover after parsing attributes in process `syz.3.25'. [ 85.137541][ T5992] netlink: 24 bytes leftover after parsing attributes in process `syz.2.29'. [ 85.813911][ T48] IPVS: starting estimator thread 0... [ 85.932153][ T6018] IPVS: using max 28 ests per chain, 67200 per kthread [ 85.981013][ T6026] netlink: 'syz.3.42': attribute type 4 has an invalid length. [ 86.034098][ T6026] netlink: 'syz.3.42': attribute type 4 has an invalid length. [ 86.155340][ T6031] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.192239][ T10] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 86.368091][ T6040] warning: `syz.0.49' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.396804][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.420901][ T10] usb 2-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 86.461676][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 86.485228][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 86.506857][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.527178][ T10] usb 2-1: Product: syz [ 86.531376][ T10] usb 2-1: Manufacturer: syz [ 86.547580][ T10] usb 2-1: SerialNumber: syz [ 86.559074][ T10] usb 2-1: config 0 descriptor?? [ 86.567001][ T5840] Bluetooth: hci2: command tx timeout [ 86.572803][ T5840] Bluetooth: hci0: command tx timeout [ 86.588819][ T24] cfg80211: failed to load regulatory.db [ 86.642465][ T5846] Bluetooth: hci3: command tx timeout [ 86.642473][ T5840] Bluetooth: hci1: command tx timeout [ 86.649745][ T10] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 86.796998][ T10] usb 2-1: USB disconnect, device number 2 [ 86.841107][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 86.932064][ T48] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 87.102197][ T48] usb 3-1: Using ep0 maxpacket: 8 [ 87.118656][ T48] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 87.132126][ T48] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 87.152054][ T48] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 87.182361][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.300698][ T6068] netlink: 24 bytes leftover after parsing attributes in process `syz.3.62'. [ 87.699725][ T6086] netlink: 'syz.1.71': attribute type 10 has an invalid length. [ 87.709953][ T6086] netlink: 40 bytes leftover after parsing attributes in process `syz.1.71'. [ 87.723298][ T6086] team0: entered promiscuous mode [ 87.728359][ T6086] team_slave_0: entered promiscuous mode [ 87.736711][ T6086] team_slave_1: entered promiscuous mode [ 87.746689][ T6086] team0: entered allmulticast mode [ 87.762548][ T6086] team_slave_0: entered allmulticast mode [ 87.777497][ T6086] team_slave_1: entered allmulticast mode [ 87.793127][ T6086] bridge0: port 3(team0) entered blocking state [ 87.799641][ T6086] bridge0: port 3(team0) entered disabled state [ 87.814474][ T6086] bridge0: port 3(team0) entered blocking state [ 87.820949][ T6086] bridge0: port 3(team0) entered forwarding state [ 88.025395][ T5883] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 88.188271][ T5883] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.202438][ T5883] usb 4-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 88.230403][ T5883] usb 4-1: config 0 interface 0 has no altsetting 0 [ 88.246249][ T5883] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 88.282004][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.290045][ T5883] usb 4-1: Product: syz [ 88.301958][ T5883] usb 4-1: Manufacturer: syz [ 88.306600][ T5883] usb 4-1: SerialNumber: syz [ 88.331533][ T5883] usb 4-1: config 0 descriptor?? [ 88.372934][ T5883] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 88.414468][ T6112] syzkaller1: entered promiscuous mode [ 88.433438][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 88.433822][ T6112] syzkaller1: entered allmulticast mode [ 88.568011][ T10] usb 4-1: USB disconnect, device number 2 [ 89.182685][ T6138] netlink: 'syz.3.93': attribute type 29 has an invalid length. [ 89.193472][ T6138] netlink: 'syz.3.93': attribute type 29 has an invalid length. [ 89.201447][ T6138] netlink: 'syz.3.93': attribute type 29 has an invalid length. [ 89.210873][ T6138] netlink: 'syz.3.93': attribute type 29 has an invalid length. [ 89.220253][ T6138] netlink: 'syz.3.93': attribute type 29 has an invalid length. [ 89.244222][ T6138] netlink: 'syz.3.93': attribute type 29 has an invalid length. [ 89.662419][ T48] usb 3-1: USB disconnect, device number 2 [ 89.804565][ T24] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 89.970764][ T6172] validate_nla: 3 callbacks suppressed [ 89.970780][ T6172] netlink: 'syz.1.110': attribute type 7 has an invalid length. [ 89.990863][ T6172] netlink: 176 bytes leftover after parsing attributes in process `syz.1.110'. [ 90.002464][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.031882][ T24] usb 4-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 90.059658][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 90.077531][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 90.101959][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.120961][ T24] usb 4-1: Product: syz [ 90.140067][ T24] usb 4-1: Manufacturer: syz [ 90.151996][ T24] usb 4-1: SerialNumber: syz [ 90.167705][ T24] usb 4-1: config 0 descriptor?? [ 90.230962][ T24] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 90.272728][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 90.362136][ T5939] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 90.437211][ T24] usb 4-1: USB disconnect, device number 3 [ 90.522371][ T5939] usb 3-1: Using ep0 maxpacket: 8 [ 90.538907][ T5939] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 90.549780][ T5939] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 90.567119][ T5939] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 90.578096][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.712285][ T5883] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 91.873837][ T5883] usb 4-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 91.902295][ T5883] usb 4-1: config 0 interface 0 has no altsetting 0 [ 91.925077][ T5883] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 91.951849][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.961966][ T5883] usb 4-1: Product: syz [ 91.966149][ T5883] usb 4-1: Manufacturer: syz [ 91.970750][ T5883] usb 4-1: SerialNumber: syz [ 92.005801][ T5883] usb 4-1: config 0 descriptor?? [ 92.064483][ T5883] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 92.159331][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 92.220542][ T5883] usb 4-1: USB disconnect, device number 4 [ 93.095695][ T24] usb 3-1: USB disconnect, device number 3 [ 93.392346][ T5883] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 93.581417][ T5883] usb 2-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 93.607491][ T5883] usb 2-1: config 0 interface 0 has no altsetting 0 [ 93.634677][ T5883] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 93.654167][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.675027][ T5883] usb 2-1: Product: syz [ 93.680236][ T5883] usb 2-1: Manufacturer: syz [ 93.698948][ T5883] usb 2-1: SerialNumber: syz [ 93.718843][ T5883] usb 2-1: config 0 descriptor?? [ 93.801632][ T5883] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 93.872241][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 93.959783][ T5883] usb 2-1: USB disconnect, device number 3 [ 94.032336][ T5876] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.202271][ T5876] usb 1-1: Using ep0 maxpacket: 8 [ 94.223673][ T5876] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 94.231892][ T5876] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 94.259167][ T5876] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 94.268612][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.613554][ T6367] Zero length message leads to an empty skb [ 94.796550][ T6367] netlink: 'syz.1.195': attribute type 10 has an invalid length. [ 94.822550][ T6367] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.837213][ T6367] bridge_slave_1: left allmulticast mode [ 94.846481][ T6367] bridge_slave_1: left promiscuous mode [ 94.859806][ T6367] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.901732][ T6367] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 95.342917][ T10] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 95.504979][ T10] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 95.535258][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 95.558517][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 95.569599][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.579417][ T10] usb 3-1: Product: syz [ 95.584776][ T10] usb 3-1: Manufacturer: syz [ 95.592483][ T10] usb 3-1: SerialNumber: syz [ 95.602874][ T10] usb 3-1: config 0 descriptor?? [ 95.650748][ T10] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 95.725246][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.817690][ T10] usb 3-1: USB disconnect, device number 4 [ 96.871469][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.234'. [ 96.963699][ T5939] usb 1-1: USB disconnect, device number 2 [ 97.111994][ T24] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 97.266372][ T24] usb 4-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 97.299192][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 97.316394][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 97.332023][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.350336][ T24] usb 4-1: Product: syz [ 97.358856][ T24] usb 4-1: Manufacturer: syz [ 97.372664][ T24] usb 4-1: SerialNumber: syz [ 97.385413][ T24] usb 4-1: config 0 descriptor?? [ 97.481298][ T24] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 97.544014][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.635252][ T24] usb 4-1: USB disconnect, device number 5 [ 97.909831][ T6489] netlink: 32 bytes leftover after parsing attributes in process `syz.2.248'. [ 98.088317][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.121837][ T6499] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 98.131142][ T6499] netlink: 'syz.2.252': attribute type 12 has an invalid length. [ 98.139367][ T6499] netlink: 132 bytes leftover after parsing attributes in process `syz.2.252'. [ 98.242414][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 98.257228][ T24] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 98.268010][ T24] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 98.288539][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.307760][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 98.317101][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.363541][ T24] usbtmc 1-1:16.0: bulk endpoints not found [ 98.672481][ T6516] tipc: Started in network mode [ 98.677403][ T6516] tipc: Node identity 7, cluster identity 4711 [ 98.699727][ T6516] tipc: Node number set to 7 [ 98.922294][ T10] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 99.093789][ T10] usb 2-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 99.115619][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 99.131273][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 99.152189][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.160212][ T10] usb 2-1: Product: syz [ 99.178930][ T10] usb 2-1: Manufacturer: syz [ 99.188442][ T10] usb 2-1: SerialNumber: syz [ 99.197722][ T6543] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 99.201025][ T10] usb 2-1: config 0 descriptor?? [ 99.211997][ T6542] netlink: 180 bytes leftover after parsing attributes in process `syz.2.270'. [ 99.221729][ T6542] netlink: 24 bytes leftover after parsing attributes in process `syz.2.270'. [ 99.231844][ T6542] netlink: 16 bytes leftover after parsing attributes in process `syz.2.270'. [ 99.279808][ T6542] netlink: 16 bytes leftover after parsing attributes in process `syz.2.270'. [ 99.291728][ T10] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 99.341558][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 99.451436][ T10] usb 2-1: USB disconnect, device number 4 [ 100.622019][ T10] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 100.775294][ T10] usb 3-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 100.797776][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 100.815199][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 100.831215][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.848665][ T10] usb 3-1: Product: syz [ 100.858673][ T10] usb 3-1: Manufacturer: syz [ 100.867893][ T10] usb 3-1: SerialNumber: syz [ 100.886474][ T48] usb 1-1: USB disconnect, device number 3 [ 100.901028][ T10] usb 3-1: config 0 descriptor?? [ 100.956338][ T10] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 101.051052][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.123182][ T48] usb 3-1: USB disconnect, device number 5 [ 102.183563][ T6663] netlink: 64 bytes leftover after parsing attributes in process `syz.1.323'. [ 102.362035][ T980] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 102.564342][ T980] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 102.585592][ T980] usb 1-1: config 0 interface 0 has no altsetting 0 [ 102.607236][ T980] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 102.617391][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.625936][ T980] usb 1-1: Product: syz [ 102.630247][ T980] usb 1-1: Manufacturer: syz [ 102.637361][ T980] usb 1-1: SerialNumber: syz [ 102.655890][ T980] usb 1-1: config 0 descriptor?? [ 102.667564][ T980] usb 1-1: selecting invalid altsetting 0 [ 102.786949][ T6684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.333'. [ 102.882438][ T980] usb 1-1: USB disconnect, device number 4 [ 103.454862][ T6715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.344'. [ 104.106826][ T6745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.357'. [ 104.215874][ T10] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 104.402798][ T10] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 104.435200][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 104.484920][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 104.532128][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.540979][ T10] usb 3-1: Product: syz [ 104.572019][ T10] usb 3-1: Manufacturer: syz [ 104.593619][ T10] usb 3-1: SerialNumber: syz [ 104.608994][ T10] usb 3-1: config 0 descriptor?? [ 104.625277][ T10] usb 3-1: selecting invalid altsetting 0 [ 104.701505][ T6769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.367'. [ 104.831733][ T24] usb 3-1: USB disconnect, device number 6 [ 105.457561][ T6794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.376'. [ 105.619794][ T6802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.380'. [ 105.652055][ T24] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 105.838653][ T24] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 105.879001][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 105.907531][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 105.932340][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.972281][ T24] usb 2-1: Product: syz [ 105.981603][ T24] usb 2-1: Manufacturer: syz [ 106.007057][ T24] usb 2-1: SerialNumber: syz [ 106.024766][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.387'. [ 106.038762][ T24] usb 2-1: config 0 descriptor?? [ 106.068112][ T24] usb 2-1: selecting invalid altsetting 0 [ 106.263244][ T24] usb 2-1: USB disconnect, device number 5 [ 106.914762][ T6855] netlink: 'syz.3.407': attribute type 1 has an invalid length. [ 106.937392][ T6855] netlink: 208 bytes leftover after parsing attributes in process `syz.3.407'. [ 106.948405][ T6855] netlink: 'syz.3.407': attribute type 1 has an invalid length. [ 106.959224][ T6855] netlink: 'syz.3.407': attribute type 2 has an invalid length. [ 107.941073][ T6909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.432'. [ 107.955867][ T6910] netlink: 'syz.2.431': attribute type 1 has an invalid length. [ 107.971626][ T6910] netlink: 208 bytes leftover after parsing attributes in process `syz.2.431'. [ 107.983306][ T6909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.432'. [ 107.995361][ T6910] netlink: 'syz.2.431': attribute type 1 has an invalid length. [ 108.004260][ T6910] netlink: 'syz.2.431': attribute type 2 has an invalid length. [ 109.521439][ T6981] af_packet: tpacket_rcv: packet too big, clamped from 59478 to 4294967272. macoff=96 [ 109.745117][ T6990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.468'. [ 110.355694][ T7010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.478'. [ 110.880132][ T7034] netlink: 'syz.1.488': attribute type 15 has an invalid length. [ 111.410429][ T7059] veth0: entered promiscuous mode [ 111.592026][ T7055] veth0: left promiscuous mode [ 112.105820][ T7097] netlink: 256 bytes leftover after parsing attributes in process `syz.3.516'. [ 112.568545][ T7119] netlink: 14 bytes leftover after parsing attributes in process `syz.3.526'. [ 112.637877][ T7122] netlink: 256 bytes leftover after parsing attributes in process `syz.1.527'. [ 112.790835][ T7119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.808168][ T7119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.828793][ T7119] bond0 (unregistering): Released all slaves [ 113.243273][ T7149] netlink: 256 bytes leftover after parsing attributes in process `syz.1.538'. [ 113.376677][ T7155] netlink: 60 bytes leftover after parsing attributes in process `syz.0.542'. [ 113.463645][ T980] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 113.622358][ T980] usb 4-1: Using ep0 maxpacket: 16 [ 113.630053][ T980] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.651550][ T980] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.693122][ T980] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 113.715378][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.733315][ T980] usb 4-1: Product: syz [ 113.737513][ T980] usb 4-1: Manufacturer: syz [ 113.746036][ T7172] netlink: 256 bytes leftover after parsing attributes in process `syz.2.551'. [ 113.756623][ T980] usb 4-1: SerialNumber: syz [ 113.771176][ T980] usb 4-1: selecting invalid altsetting 1 [ 114.075015][ T5846] Bluetooth: hci2: unexpected event 0x2f length: 763 > 260 [ 114.132439][ T7187] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 114.332484][ T7194] netlink: 256 bytes leftover after parsing attributes in process `syz.2.560'. [ 114.382571][ T980] cdc_ncm 4-1:1.0: SET_CRC_MODE failed [ 114.403562][ T980] usb 4-1: selecting invalid altsetting 1 [ 114.409426][ T980] cdc_ncm 4-1:1.0: bind() failure [ 114.470655][ T980] usb 4-1: USB disconnect, device number 6 [ 114.848223][ T7220] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 114.870503][ T7218] netlink: 256 bytes leftover after parsing attributes in process `syz.0.571'. [ 115.132003][ T980] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 115.311818][ T980] usb 3-1: Using ep0 maxpacket: 8 [ 115.334000][ T980] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 115.372155][ T980] usb 3-1: config 179 has no interface number 0 [ 115.413985][ T980] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 115.480993][ T980] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 115.535595][ T980] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 115.560745][ T980] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 115.584869][ T7245] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 115.593887][ T980] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 115.656126][ T980] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 115.682567][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.719080][ T7222] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 115.773258][ T7249] netlink: 256 bytes leftover after parsing attributes in process `syz.1.584'. [ 115.946880][ T7222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.962916][ T7222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.191019][ T10] usb 3-1: USB disconnect, device number 7 [ 116.191078][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 116.205285][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 116.345190][ T7265] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 116.842453][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 116.983803][ T980] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 117.013930][ T10] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.032021][ T10] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.047849][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 117.074965][ T10] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 117.105079][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.143922][ T10] usb 2-1: config 0 descriptor?? [ 117.218285][ T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.241565][ T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.273376][ T980] usb 4-1: New USB device found, idVendor=056a, idProduct=0302, bcdDevice= 0.00 [ 117.302152][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.332273][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 117.342431][ T980] usb 4-1: config 0 descriptor?? [ 117.512386][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 117.597232][ T10] input: HID 054c:03d5 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:03D5.0001/input/input6 [ 117.732061][ T7299] netlink: 256 bytes leftover after parsing attributes in process `syz.2.606'. [ 117.760263][ T10] sony 0003:054C:03D5.0001: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.1-1/input0 [ 117.810582][ T10] usb 2-1: USB disconnect, device number 6 [ 117.868035][ T6687] udevd[6687]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 117.960426][ T24] usb 4-1: USB disconnect, device number 7 [ 118.032940][ T7300] fido_id[7300]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 118.052223][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 118.062180][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 118.634459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 118.646878][ T7325] netlink: 256 bytes leftover after parsing attributes in process `syz.1.616'. [ 118.983040][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 118.991613][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 119.000188][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 119.008746][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 119.017308][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 119.727017][ T7350] netlink: 256 bytes leftover after parsing attributes in process `syz.1.628'. [ 120.381996][ T10] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 120.551571][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 120.562423][ C0] ================================================================== [ 120.562439][ C0] BUG: KASAN: slab-use-after-free in flush_tlb_func+0x23d/0x6c0 [ 120.562475][ C0] Write of size 8 at addr ffff888011646000 by task kworker/0:1/10 [ 120.562489][ C0] [ 120.562510][ C0] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 120.562531][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 120.562542][ C0] Workqueue: usb_hub_wq hub_event [ 120.562576][ C0] Call Trace: [ 120.562582][ C0] [ 120.562589][ C0] dump_stack_lvl+0x189/0x250 [ 120.562609][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 120.562628][ C0] ? rcu_is_watching+0x15/0xb0 [ 120.562644][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.562663][ C0] ? rcu_is_watching+0x15/0xb0 [ 120.562679][ C0] ? lock_release+0x4b/0x3e0 [ 120.562706][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 120.562724][ C0] ? __virt_addr_valid+0x4a5/0x5c0 [ 120.562743][ C0] print_report+0xd2/0x2b0 [ 120.562766][ C0] ? flush_tlb_func+0x23d/0x6c0 [ 120.562785][ C0] kasan_report+0x118/0x150 [ 120.562806][ C0] ? flush_tlb_func+0x23d/0x6c0 [ 120.562828][ C0] kasan_check_range+0x2b0/0x2c0 [ 120.562848][ C0] flush_tlb_func+0x23d/0x6c0 [ 120.562873][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 120.562892][ C0] ? sched_clock_cpu+0x74/0x430 [ 120.562907][ C0] ? rcu_is_watching+0x15/0xb0 [ 120.562923][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 120.562944][ C0] __flush_smp_call_function_queue+0x370/0xaa0 [ 120.562980][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 120.563006][ C0] __sysvec_call_function_single+0xa8/0x3d0 [ 120.563033][ C0] sysvec_call_function_single+0x9e/0xc0 [ 120.563056][ C0] [ 120.563063][ C0] [ 120.563070][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 120.563092][ C0] RIP: 0010:console_flush_all+0x7f7/0xc40 [ 120.563117][ C0] Code: 48 21 c3 0f 85 e9 01 00 00 e8 b5 36 1f 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 a6 36 1f 00 eb 06 e8 9f 36 1f 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 0a 4a 83 00 48 8b 1b 48 8b 44 24 [ 120.563134][ C0] RSP: 0018:ffffc900000f6ce0 EFLAGS: 00000283 [ 120.563151][ C0] RAX: 1ffffffff1d78ef3 RBX: ffffffff8ebc7798 RCX: 0000000000100000 [ 120.563166][ C0] RDX: ffffc90017b5f000 RSI: 0000000000005a3c RDI: 0000000000005a3d [ 120.563179][ C0] RBP: ffffc900000f6e30 R08: ffffffff8fc29e37 R09: 1ffffffff1f853c6 [ 120.563193][ C0] R10: dffffc0000000000 R11: fffffbfff1f853c7 R12: dffffc0000000000 [ 120.563216][ C0] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8ebc7740 [ 120.563241][ C0] ? console_flush_all+0x13a/0xc40 [ 120.563268][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 120.563297][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 120.563325][ C0] console_unlock+0xc4/0x270 [ 120.563346][ C0] ? __pfx_console_unlock+0x10/0x10 [ 120.563368][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 120.563396][ C0] vprintk_emit+0x5b7/0x7a0 [ 120.563418][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 120.563439][ C0] ? __pfx_snprintf+0x10/0x10 [ 120.563467][ C0] dev_vprintk_emit+0x337/0x3f0 [ 120.563492][ C0] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 120.563518][ C0] ? kasan_save_track+0x4f/0x80 [ 120.563541][ C0] dev_printk_emit+0xe0/0x130 [ 120.563568][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 120.563596][ C0] ? __dev_printk+0x131/0x190 [ 120.563620][ C0] _dev_notice+0x10a/0x160 [ 120.563645][ C0] ? __pfx__dev_notice+0x10/0x10 [ 120.563672][ C0] ? rcu_is_watching+0x15/0xb0 [ 120.563690][ C0] ? trace_kmalloc+0x1f/0xd0 [ 120.563709][ C0] ? usb_get_configuration+0x1c4f/0x52c0 [ 120.563741][ C0] usb_get_configuration+0x296e/0x52c0 [ 120.563797][ C0] ? __pfx_usb_get_configuration+0x10/0x10 [ 120.563833][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 120.563855][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.563881][ C0] usb_new_device+0x146/0x16f0 [ 120.563903][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 120.563931][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 120.563951][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 120.563972][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.563997][ C0] hub_event+0x2941/0x4a00 [ 120.564044][ C0] ? __pfx_hub_event+0x10/0x10 [ 120.564066][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 120.564098][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 120.564120][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 120.564149][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 120.564187][ C0] process_scheduled_works+0xae1/0x17b0 [ 120.564232][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 120.564265][ C0] worker_thread+0x8a0/0xda0 [ 120.564292][ C0] kthread+0x70e/0x8a0 [ 120.564313][ C0] ? __pfx_worker_thread+0x10/0x10 [ 120.564328][ C0] ? __pfx_kthread+0x10/0x10 [ 120.564348][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 120.564367][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.564386][ C0] ? __pfx_kthread+0x10/0x10 [ 120.564405][ C0] ret_from_fork+0x3fc/0x770 [ 120.564421][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 120.564438][ C0] ? __switch_to_asm+0x39/0x70 [ 120.564458][ C0] ? __switch_to_asm+0x33/0x70 [ 120.564478][ C0] ? __pfx_kthread+0x10/0x10 [ 120.564497][ C0] ret_from_fork_asm+0x1a/0x30 [ 120.564524][ C0] [ 120.564530][ C0] [ 120.564544][ C0] Allocated by task 5831: [ 120.564553][ C0] kasan_save_track+0x3e/0x80 [ 120.564569][ C0] __kasan_slab_alloc+0x6c/0x80 [ 120.564585][ C0] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 120.564602][ C0] copy_mm+0xdb/0x4b0 [ 120.564617][ C0] copy_process+0x1706/0x3c00 [ 120.564632][ C0] kernel_clone+0x21e/0x870 [ 120.564649][ C0] __x64_sys_clone+0x18b/0x1e0 [ 120.564666][ C0] do_syscall_64+0xfa/0x3b0 [ 120.564687][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.564702][ C0] [ 120.564707][ C0] Freed by task 7385: [ 120.564715][ C0] kasan_save_track+0x3e/0x80 [ 120.564730][ C0] kasan_save_free_info+0x46/0x50 [ 120.564752][ C0] __kasan_slab_free+0x62/0x70 [ 120.564768][ C0] kmem_cache_free+0x18f/0x400 [ 120.564785][ C0] exit_mm+0x1da/0x2c0 [ 120.564803][ C0] do_exit+0x648/0x2300 [ 120.564821][ C0] do_group_exit+0x21c/0x2d0 [ 120.564840][ C0] get_signal+0x1286/0x1340 [ 120.564863][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 120.564887][ C0] exit_to_user_mode_loop+0x75/0x110 [ 120.564909][ C0] do_syscall_64+0x2bd/0x3b0 [ 120.564930][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.564945][ C0] [ 120.564950][ C0] The buggy address belongs to the object at ffff888011645600 [ 120.564950][ C0] which belongs to the cache mm_struct of size 2584 [ 120.564964][ C0] The buggy address is located 2560 bytes inside of [ 120.564964][ C0] freed 2584-byte region [ffff888011645600, ffff888011646018) [ 120.564982][ C0] [ 120.564987][ C0] The buggy address belongs to the physical page: [ 120.565000][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11640 [ 120.565024][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 120.565037][ C0] memcg:ffff88803286e581 [ 120.565045][ C0] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 120.565067][ C0] page_type: f5(slab) [ 120.565083][ C0] raw: 00fff00000000040 ffff88801a84bb40 ffffea0001ed5e00 dead000000000003 [ 120.565099][ C0] raw: 0000000000000000 00000000800b000b 00000000f5000000 ffff88803286e581 [ 120.565115][ C0] head: 00fff00000000040 ffff88801a84bb40 ffffea0001ed5e00 dead000000000003 [ 120.565130][ C0] head: 0000000000000000 00000000800b000b 00000000f5000000 ffff88803286e581 [ 120.565146][ C0] head: 00fff00000000003 ffffea0000459001 00000000ffffffff 00000000ffffffff [ 120.565160][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 120.565170][ C0] page dumped because: kasan: bad access detected [ 120.565182][ C0] page_owner tracks the page as allocated [ 120.565189][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5499, tgid 5499 (dhcpcd), ts 54063650645, free_ts 53056043200 [ 120.565224][ C0] post_alloc_hook+0x240/0x2a0 [ 120.565243][ C0] get_page_from_freelist+0x21e4/0x22c0 [ 120.565266][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 120.565288][ C0] alloc_pages_mpol+0x232/0x4a0 [ 120.565306][ C0] allocate_slab+0x8a/0x370 [ 120.565327][ C0] ___slab_alloc+0xbeb/0x1410 [ 120.565346][ C0] kmem_cache_alloc_noprof+0x283/0x3c0 [ 120.565362][ C0] copy_mm+0xdb/0x4b0 [ 120.565377][ C0] copy_process+0x1706/0x3c00 [ 120.565392][ C0] kernel_clone+0x21e/0x870 [ 120.565409][ C0] __x64_sys_clone+0x18b/0x1e0 [ 120.565426][ C0] do_syscall_64+0xfa/0x3b0 [ 120.565447][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.565462][ C0] page last free pid 5636 tgid 5636 stack trace: [ 120.565472][ C0] __free_frozen_pages+0xb80/0xd80 [ 120.565491][ C0] __put_partials+0x156/0x1a0 [ 120.565510][ C0] put_cpu_partial+0x17c/0x250 [ 120.565532][ C0] __slab_free+0x2d5/0x3c0 [ 120.565553][ C0] qlist_free_all+0x97/0x140 [ 120.565567][ C0] kasan_quarantine_reduce+0x148/0x160 [ 120.565582][ C0] __kasan_slab_alloc+0x22/0x80 [ 120.565599][ C0] __kmalloc_noprof+0x224/0x4f0 [ 120.565615][ C0] tomoyo_encode+0x28b/0x550 [ 120.565632][ C0] tomoyo_realpath_from_path+0x58d/0x5d0 [ 120.565651][ C0] tomoyo_path_perm+0x213/0x4b0 [ 120.565674][ C0] security_inode_getattr+0x12f/0x330 [ 120.565695][ C0] __x64_sys_newfstat+0xfc/0x200 [ 120.565709][ C0] do_syscall_64+0xfa/0x3b0 [ 120.565730][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.565745][ C0] [ 120.565750][ C0] Memory state around the buggy address: [ 120.565759][ C0] ffff888011645f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 120.565772][ C0] ffff888011645f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 120.565784][ C0] >ffff888011646000: fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc [ 120.565793][ C0] ^ [ 120.565801][ C0] ffff888011646080: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 120.565813][ C0] ffff888011646100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 120.565822][ C0] ================================================================== [ 120.565837][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 120.565850][ C0] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 120.565870][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 120.565882][ C0] Workqueue: usb_hub_wq hub_event [ 120.565902][ C0] Call Trace: [ 120.565910][ C0] [ 120.565917][ C0] dump_stack_lvl+0x99/0x250 [ 120.565937][ C0] ? __asan_memcpy+0x40/0x70 [ 120.565952][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.565969][ C0] ? __pfx__printk+0x10/0x10 [ 120.565993][ C0] panic+0x2db/0x790 [ 120.566011][ C0] ? __pfx_panic+0x10/0x10 [ 120.566029][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 120.566049][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 120.566068][ C0] ? print_memory_metadata+0x314/0x400 [ 120.566093][ C0] ? flush_tlb_func+0x23d/0x6c0 [ 120.566113][ C0] check_panic_on_warn+0x89/0xb0 [ 120.566136][ C0] ? flush_tlb_func+0x23d/0x6c0 [ 120.566156][ C0] end_report+0x78/0x160 [ 120.566175][ C0] kasan_report+0x129/0x150 [ 120.566195][ C0] ? flush_tlb_func+0x23d/0x6c0 [ 120.566227][ C0] kasan_check_range+0x2b0/0x2c0 [ 120.566248][ C0] flush_tlb_func+0x23d/0x6c0 [ 120.566274][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 120.566293][ C0] ? sched_clock_cpu+0x74/0x430 [ 120.566311][ C0] ? rcu_is_watching+0x15/0xb0 [ 120.566327][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 120.566349][ C0] __flush_smp_call_function_queue+0x370/0xaa0 [ 120.566367][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 120.566390][ C0] __sysvec_call_function_single+0xa8/0x3d0 [ 120.566413][ C0] sysvec_call_function_single+0x9e/0xc0 [ 120.566433][ C0] [ 120.566439][ C0] [ 120.566446][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 120.566464][ C0] RIP: 0010:console_flush_all+0x7f7/0xc40 [ 120.566485][ C0] Code: 48 21 c3 0f 85 e9 01 00 00 e8 b5 36 1f 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 a6 36 1f 00 eb 06 e8 9f 36 1f 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 0a 4a 83 00 48 8b 1b 48 8b 44 24 [ 120.566500][ C0] RSP: 0018:ffffc900000f6ce0 EFLAGS: 00000283 [ 120.566515][ C0] RAX: 1ffffffff1d78ef3 RBX: ffffffff8ebc7798 RCX: 0000000000100000 [ 120.566534][ C0] RDX: ffffc90017b5f000 RSI: 0000000000005a3c RDI: 0000000000005a3d [ 120.566546][ C0] RBP: ffffc900000f6e30 R08: ffffffff8fc29e37 R09: 1ffffffff1f853c6 [ 120.566559][ C0] R10: dffffc0000000000 R11: fffffbfff1f853c7 R12: dffffc0000000000 [ 120.566572][ C0] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8ebc7740 [ 120.566593][ C0] ? console_flush_all+0x13a/0xc40 [ 120.566617][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 120.566641][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 120.566666][ C0] console_unlock+0xc4/0x270 [ 120.566684][ C0] ? __pfx_console_unlock+0x10/0x10 [ 120.566703][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 120.566728][ C0] vprintk_emit+0x5b7/0x7a0 [ 120.566747][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 120.566766][ C0] ? __pfx_snprintf+0x10/0x10 [ 120.566789][ C0] dev_vprintk_emit+0x337/0x3f0 [ 120.566811][ C0] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 120.566834][ C0] ? kasan_save_track+0x4f/0x80 [ 120.566853][ C0] dev_printk_emit+0xe0/0x130 [ 120.566877][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 120.566900][ C0] ? __dev_printk+0x131/0x190 [ 120.566921][ C0] _dev_notice+0x10a/0x160 [ 120.566944][ C0] ? __pfx__dev_notice+0x10/0x10 [ 120.566967][ C0] ? rcu_is_watching+0x15/0xb0 [ 120.566982][ C0] ? trace_kmalloc+0x1f/0xd0 [ 120.566999][ C0] ? usb_get_configuration+0x1c4f/0x52c0 [ 120.567026][ C0] usb_get_configuration+0x296e/0x52c0 [ 120.567074][ C0] ? __pfx_usb_get_configuration+0x10/0x10 [ 120.567104][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 120.567123][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.567145][ C0] usb_new_device+0x146/0x16f0 [ 120.567163][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 120.567188][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 120.567213][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 120.567232][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.567254][ C0] hub_event+0x2941/0x4a00 [ 120.567294][ C0] ? __pfx_hub_event+0x10/0x10 [ 120.567312][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 120.567341][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 120.567360][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 120.567386][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 120.567413][ C0] process_scheduled_works+0xae1/0x17b0 [ 120.567450][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 120.567484][ C0] worker_thread+0x8a0/0xda0 [ 120.567511][ C0] kthread+0x70e/0x8a0 [ 120.567532][ C0] ? __pfx_worker_thread+0x10/0x10 [ 120.567548][ C0] ? __pfx_kthread+0x10/0x10 [ 120.567568][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 120.567587][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.567607][ C0] ? __pfx_kthread+0x10/0x10 [ 120.567627][ C0] ret_from_fork+0x3fc/0x770 [ 120.567644][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 120.567662][ C0] ? __switch_to_asm+0x39/0x70 [ 120.567683][ C0] ? __switch_to_asm+0x33/0x70 [ 120.567702][ C0] ? __pfx_kthread+0x10/0x10 [ 120.567723][ C0] ret_from_fork_asm+0x1a/0x30 [ 120.567751][ C0] [ 120.568122][ C0] Kernel Offset: disabled