last executing test programs: 9.935423834s ago: executing program 1 (id=51): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x2, 0xa}, {0x1}, @const={0x0, {0xfbff, 0x8, 0x4, 0x81}}}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) ioctl(r0, 0x8b22, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000480), 0x0) syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='vegas', 0x5) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) 7.682396659s ago: executing program 1 (id=64): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)='\'', 0x1}], 0x1}}], 0x1, 0x0) 7.09197562s ago: executing program 1 (id=68): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x81, &(0x7f00000003c0)=@string={0x81, 0x3, "a8068cb023c53aceea5a72937f1006dec10d82cd14d64c1108ec91092735e9e24a69e741b8501e278f8a3cb4f80e5b174ffffac24cf2f9b172411bfff234fe6f6449c775a3c0bc5dda0eb4d6814f1cacd5f1738fa3c942e0e8c12b2a1cc490f985e9279ff75db724cf792fe560368febca803081fa57b17d59d0676f815788"}}, {0x87, &(0x7f0000000640)=@string={0x87, 0x3, "9468162d033133eaf0ec459b21aa84a92907fce14c1ace458acc2b598b155de96bfda207f9079d9dec361e14c699f978003c51f6903362d18162f25eaccfce63e0ac0447fe60c092001f4997649fe75c1fc4191d4cadbfa447596d58777cd5e76f0b3d8ac22c57e0ed7111a881c5346c6e14b355e25bae86482b1affdc9802236db123e853"}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 6.209460549s ago: executing program 4 (id=73): r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000600)="b9ed29d8fe490a060b483f2dd090fc6889ae6b84", 0xffeb}], 0x1}, 0x0) 5.984028245s ago: executing program 4 (id=75): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/107, 0x0, 0x4000}) write$vhost_msg_v2(r1, &(0x7f0000000240)={0x2, 0x0, {&(0x7f0000000140)=""/128, 0x80, 0x0, 0x1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) 5.769077877s ago: executing program 4 (id=76): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c1fedaec3144d1ee66a0eb075", 0x9d}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="98", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000700)="82", 0x1}], 0x1}}], 0x3, 0x2090) 5.601575472s ago: executing program 4 (id=77): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000077"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f6ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000300)={0x0, 0x8, 0x2, "b34f"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 4.931943915s ago: executing program 1 (id=83): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 4.228578147s ago: executing program 2 (id=89): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x4e20, @local}, {0x306}, 0x5a, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3f}}, 'bridge_slave_1\x00'}) 4.144924981s ago: executing program 2 (id=90): r0 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x103000) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000140)={0x8, 0x0, 0xf, 0x80000001, 0xfe1c, 0x6, "72aba977db089b60fd94c5bd97abc150", 0x70, 0x3, 0xf5, 0x7, 0x8, 0x0, 0x1}) 3.965209983s ago: executing program 2 (id=93): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000001c0)=0x2000) 3.939115157s ago: executing program 3 (id=94): syz_usb_connect(0x2, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x69b, 0x7c, 0xbd, 0xb4, 0x20, 0xb48, 0x300d, 0x16c8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x8, 0xe8, 0xe, [{{0x9, 0x4, 0x88, 0xb, 0x0, 0xc3, 0x51, 0x2, 0x9}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 3.731248348s ago: executing program 5 (id=95): r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000002900)=[{{&(0x7f00000013c0)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000027c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x8, 0x3, [{0x2, 0x2}]}]}}}], 0x18}}], 0x1, 0x40800) 3.568742122s ago: executing program 5 (id=96): recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000a00)=""/95, 0x5f}], 0x1}, 0x4ce0}], 0x1, 0x20, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4000005) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x82}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/6, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 3.522882112s ago: executing program 5 (id=97): syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000080)=@ctrl_frame=@ba={{}, {0x5}, @broadcast, @device_a, @multi={{}, [], {0x0, 0x7, {0x9, 0x400}, "3f1b34fe0c6f68e4"}}}, 0x1e) 3.364056825s ago: executing program 1 (id=98): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000300)={0x20, 0x6, 0x4, "3b821d3e"}, 0x0, 0x0}) 2.972481424s ago: executing program 2 (id=99): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x0, 0x9, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f00000005c0)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000001800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 2.880600743s ago: executing program 5 (id=100): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100000000004032150e0100000000000109022400010000c00009040000010300020009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f000009e740)={0x2c, &(0x7f000009e440)={0x40, 0xc, 0x5, {0x5, 0x30, '6Zv'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.393896964s ago: executing program 3 (id=104): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000400)=[{0x0, 0xdd12}], 0x1, 0x0, 0x0, 0x8050}, 0x20040051) 2.300340953s ago: executing program 0 (id=105): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001040)="5346f7f875528ef24043c68e", 0xc}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) 2.221972977s ago: executing program 0 (id=106): socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x1, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/uts\x00') pipe(&(0x7f0000000080)) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000002c0)) fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 2.212809699s ago: executing program 3 (id=107): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) r2 = semget$private(0x0, 0x6, 0x40d) semtimedop(r2, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r2, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r2, &(0x7f0000001240)=[{}, {0x2, 0x0, 0x2000}], 0x2) semctl$GETZCNT(r2, 0x1, 0xf, 0x0) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e0001"], 0x1c}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) r3 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000540)={0x11, 0x4, 0xc, 0x6, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) setsockopt$MRT_DONE(r4, 0x0, 0xc9, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000740)={0x30, 0x5, 0x0, {0x0, 0xffffffffffffffff, 0x3, 0xfffffffc}}, 0x30) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) mq_notify(r3, &(0x7f00000001c0)={0x0, 0x9, 0x1, @thr={0x0, 0x0}}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0xb, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44080}, 0x4000002) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0xa, 0x801, 0x84) 1.976638034s ago: executing program 0 (id=108): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x62, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030601010405050724", @ANYRES32=r0], 0x0) 1.291260336s ago: executing program 3 (id=109): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x2) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xfffffffd) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) socket$inet6(0xa, 0x1, 0x8010000000000084) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 1.128958664s ago: executing program 3 (id=110): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0xc26, 0x0) 1.000560512s ago: executing program 3 (id=111): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc814) r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x2, 0xff, 0xfd, 0x1, 0x80, [], [{{0x9, 0x5, 0x2, 0x2, 0x210, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000180)={[{0x3e, 0x4e00, "9a0966daafeaad1ccfcef6b29fbc8d29c65cad01cd8098d1eda0e2408e34fe107e40e407bbc2b2d0f179b32290bd60fca1796985d5bf8ea34605af858253"}]}) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000300)={0x20, 0x14, 0x6, "f99d5133974f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 989.045738ms ago: executing program 5 (id=112): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) ioctl$KDGKBSENT(r0, 0x4b48, 0x0) 798.046139ms ago: executing program 5 (id=113): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC=0x0], 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000a40)="89", 0x1}, {&(0x7f0000000200)="abc4", 0x2}], 0x2) 753.011707ms ago: executing program 1 (id=114): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='nv', 0x2) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 640.704097ms ago: executing program 0 (id=115): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) close_range(r1, 0xffffffffffffffff, 0x0) 559.790059ms ago: executing program 0 (id=116): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x3, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x4008080) 446.410278ms ago: executing program 0 (id=117): r0 = socket$inet(0x2, 0x2, 0x1) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) gettid() openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb654, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001a80)={0x24, 0x0, &(0x7f00000019c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2009}}, &(0x7f0000001a00)={0x0, 0x22, 0xb, {[@local=@item_4={0x3, 0x2, 0x5, "1a823a6d"}, @main=@item_012={0x0, 0x0, 0xa}, @global=@item_4={0x3, 0x1, 0x0, "5ed3ef3d"}]}}, 0x0}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000"], 0x0) syz_usb_ep_write(r3, 0x81, 0x0, &(0x7f00000000c0)) 405.162467ms ago: executing program 4 (id=118): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x24, 0x2a, 0x229, 0x70bd24, 0x0, {0x2}, [@typed={0x8, 0x1800, 0x0, 0x0, @u32}, @nested={0x8, 0x9, 0x0, 0x1, [@typed={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x811}, 0x84054) 290.704075ms ago: executing program 2 (id=119): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000440)=0x11) ioctl$TIOCVHANGUP(r0, 0x5437, 0x400000000000000) 172.077167ms ago: executing program 4 (id=120): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100000000004032150e0100000000000109022400010000c00009040000010300020009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f000009e740)={0x2c, &(0x7f000009e440)={0x40, 0xc, 0x5, {0x5, 0x30, '6Zv'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 0s ago: executing program 2 (id=121): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000280)={'c6xdigio\x00', [0xffffffff, 0xc, 0xcd, 0x3fe, 0x1, 0xcc7, 0x5, 0x5c95239b, 0x5, 0x3ff, 0x8f, 0x1600, 0x0, 0x9, 0x7, 0xe1cb, 0x4, 0x2, 0x3, 0x2, 0x89, 0xffff, 0xfffffffd, 0xfffffff5, 0x4, 0x200003, 0x2000003c, 0x6, 0x9, 0x7fffffd, 0xdffffffa]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.124' (ED25519) to the list of known hosts. [ 87.075005][ T5818] cgroup: Unknown subsys name 'net' [ 87.184542][ T5818] cgroup: Unknown subsys name 'cpuset' [ 87.193807][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.672626][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.181099][ T24] cfg80211: failed to load regulatory.db [ 91.783044][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.801651][ T5852] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 91.820323][ T5852] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 91.826570][ T5860] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.827543][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.834947][ T5860] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.850016][ T5860] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 91.854496][ T5858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.857494][ T5860] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.864725][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.879637][ T5858] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 91.887253][ T5860] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.887481][ T5858] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 91.900280][ T5860] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.902438][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.918835][ T5860] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.919434][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.938985][ T5860] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.951870][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.951934][ T5860] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.959504][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.968306][ T5861] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.974164][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.988849][ T5861] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.993945][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.997134][ T5861] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.006442][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.010171][ T5861] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.024284][ T5861] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.032751][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.931657][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 92.982714][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 93.015059][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 93.027881][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 93.130622][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 93.166729][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 93.353697][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.361359][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.368895][ T5837] bridge_slave_0: entered allmulticast mode [ 93.376625][ T5837] bridge_slave_0: entered promiscuous mode [ 93.439366][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.446530][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.454210][ T5837] bridge_slave_1: entered allmulticast mode [ 93.461738][ T5837] bridge_slave_1: entered promiscuous mode [ 93.568171][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.575422][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.582852][ T5842] bridge_slave_0: entered allmulticast mode [ 93.590681][ T5842] bridge_slave_0: entered promiscuous mode [ 93.625153][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.632295][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.639449][ T5838] bridge_slave_0: entered allmulticast mode [ 93.647058][ T5838] bridge_slave_0: entered promiscuous mode [ 93.668541][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.675670][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.682856][ T5839] bridge_slave_0: entered allmulticast mode [ 93.690356][ T5839] bridge_slave_0: entered promiscuous mode [ 93.698121][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.705334][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.713018][ T5842] bridge_slave_1: entered allmulticast mode [ 93.721120][ T5842] bridge_slave_1: entered promiscuous mode [ 93.745511][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.756278][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.763456][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.770686][ T5838] bridge_slave_1: entered allmulticast mode [ 93.778029][ T5838] bridge_slave_1: entered promiscuous mode [ 93.799079][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.806224][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.813598][ T5839] bridge_slave_1: entered allmulticast mode [ 93.821152][ T5839] bridge_slave_1: entered promiscuous mode [ 93.841744][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.848896][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.856114][ T5840] bridge_slave_0: entered allmulticast mode [ 93.863661][ T5840] bridge_slave_0: entered promiscuous mode [ 93.873891][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.897071][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.904214][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.911455][ T5841] bridge_slave_0: entered allmulticast mode [ 93.918825][ T5841] bridge_slave_0: entered promiscuous mode [ 93.951924][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.959034][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.966842][ T5852] Bluetooth: hci5: command tx timeout [ 93.970584][ T5840] bridge_slave_1: entered allmulticast mode [ 93.979584][ T5840] bridge_slave_1: entered promiscuous mode [ 94.013313][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.020450][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.027630][ T5841] bridge_slave_1: entered allmulticast mode [ 94.035230][ T5841] bridge_slave_1: entered promiscuous mode [ 94.040089][ T5852] Bluetooth: hci2: command tx timeout [ 94.041176][ T5854] Bluetooth: hci3: command tx timeout [ 94.052561][ T5151] Bluetooth: hci1: command tx timeout [ 94.074451][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.113730][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.123065][ T5151] Bluetooth: hci0: command tx timeout [ 94.123411][ T5151] Bluetooth: hci4: command tx timeout [ 94.152364][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.164290][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.188854][ T5837] team0: Port device team_slave_0 added [ 94.197112][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.222872][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.248653][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.261402][ T5837] team0: Port device team_slave_1 added [ 94.284790][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.324208][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.362509][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.387930][ T5842] team0: Port device team_slave_0 added [ 94.426152][ T5838] team0: Port device team_slave_0 added [ 94.448197][ T5839] team0: Port device team_slave_0 added [ 94.455737][ T5842] team0: Port device team_slave_1 added [ 94.476159][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.483171][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.509574][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.523631][ T5838] team0: Port device team_slave_1 added [ 94.544357][ T5839] team0: Port device team_slave_1 added [ 94.565305][ T5840] team0: Port device team_slave_0 added [ 94.571856][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.578789][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.605564][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.632720][ T5841] team0: Port device team_slave_0 added [ 94.666908][ T5840] team0: Port device team_slave_1 added [ 94.697459][ T5841] team0: Port device team_slave_1 added [ 94.717762][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.725795][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.752281][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.778954][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.786179][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.812605][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.838702][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.845672][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.872223][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.897945][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.904965][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.931110][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.957640][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.964600][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.990822][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.016579][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.023541][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.049994][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.068332][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.075450][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.101399][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.133578][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.140622][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.169958][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.190650][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.197572][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.223512][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.245239][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.252647][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.278705][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.312773][ T5837] hsr_slave_0: entered promiscuous mode [ 95.319321][ T5837] hsr_slave_1: entered promiscuous mode [ 95.467507][ T5838] hsr_slave_0: entered promiscuous mode [ 95.474115][ T5838] hsr_slave_1: entered promiscuous mode [ 95.480709][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 95.486465][ T5838] Cannot create hsr debugfs directory [ 95.524335][ T5840] hsr_slave_0: entered promiscuous mode [ 95.531499][ T5840] hsr_slave_1: entered promiscuous mode [ 95.537727][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 95.543606][ T5840] Cannot create hsr debugfs directory [ 95.554420][ T5841] hsr_slave_0: entered promiscuous mode [ 95.562016][ T5841] hsr_slave_1: entered promiscuous mode [ 95.568146][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 95.574339][ T5841] Cannot create hsr debugfs directory [ 95.585989][ T5842] hsr_slave_0: entered promiscuous mode [ 95.592469][ T5842] hsr_slave_1: entered promiscuous mode [ 95.598783][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 95.604621][ T5842] Cannot create hsr debugfs directory [ 95.617502][ T5839] hsr_slave_0: entered promiscuous mode [ 95.624397][ T5839] hsr_slave_1: entered promiscuous mode [ 95.630803][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 95.636517][ T5839] Cannot create hsr debugfs directory [ 96.039925][ T5151] Bluetooth: hci5: command tx timeout [ 96.120655][ T5151] Bluetooth: hci1: command tx timeout [ 96.120698][ T5854] Bluetooth: hci3: command tx timeout [ 96.126389][ T5852] Bluetooth: hci2: command tx timeout [ 96.200700][ T5151] Bluetooth: hci4: command tx timeout [ 96.206196][ T5852] Bluetooth: hci0: command tx timeout [ 96.398019][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.412981][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.432450][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.444816][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.494487][ T5842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.511467][ T5842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.523777][ T5842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.552450][ T5842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.634873][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.651623][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.677215][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.704351][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.786170][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.809063][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.821152][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.847456][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.932525][ T5838] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 96.948214][ T5838] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 96.967849][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.976250][ T5838] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 96.999094][ T5838] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 97.093622][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.137256][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.158611][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.165934][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.181011][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.192954][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.207277][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.230532][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.260870][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.267991][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.351511][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.414821][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.421982][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.444618][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.451809][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.467124][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.479488][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.545340][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.605887][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.613096][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.629597][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.654730][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.688561][ T3419] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.695747][ T3419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.734827][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.745294][ T3419] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.752483][ T3419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.772272][ T3419] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.779383][ T3419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.803715][ T3419] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.810900][ T3419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.830047][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.837181][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.948640][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.032940][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.102387][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.124754][ T5852] Bluetooth: hci5: command tx timeout [ 98.186888][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.194092][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.201853][ T5852] Bluetooth: hci3: command tx timeout [ 98.213554][ T5151] Bluetooth: hci1: command tx timeout [ 98.219010][ T5852] Bluetooth: hci2: command tx timeout [ 98.242313][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.249453][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.280314][ T5151] Bluetooth: hci4: command tx timeout [ 98.285783][ T5852] Bluetooth: hci0: command tx timeout [ 98.369586][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.510905][ T5837] veth0_vlan: entered promiscuous mode [ 98.596236][ T5837] veth1_vlan: entered promiscuous mode [ 98.663818][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.706895][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.824016][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.833363][ T5837] veth0_macvtap: entered promiscuous mode [ 98.881049][ T5837] veth1_macvtap: entered promiscuous mode [ 98.961666][ T5841] veth0_vlan: entered promiscuous mode [ 98.988184][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.027159][ T5839] veth0_vlan: entered promiscuous mode [ 99.039382][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.048805][ T5841] veth1_vlan: entered promiscuous mode [ 99.059508][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.100940][ T1106] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.109719][ T1106] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.128142][ T1106] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.141483][ T5839] veth1_vlan: entered promiscuous mode [ 99.153587][ T1106] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.279509][ T5841] veth0_macvtap: entered promiscuous mode [ 99.343791][ T5841] veth1_macvtap: entered promiscuous mode [ 99.370353][ T5840] veth0_vlan: entered promiscuous mode [ 99.379662][ T5842] veth0_vlan: entered promiscuous mode [ 99.427955][ T3470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.441763][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.453368][ T3470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.454989][ T5842] veth1_vlan: entered promiscuous mode [ 99.500963][ T5839] veth0_macvtap: entered promiscuous mode [ 99.518046][ T5840] veth1_vlan: entered promiscuous mode [ 99.525899][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.527825][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.540173][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.559373][ T5839] veth1_macvtap: entered promiscuous mode [ 99.577807][ T3814] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.588144][ T3814] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.606445][ T3814] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.616789][ T3814] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.651749][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.683511][ T5838] veth0_vlan: entered promiscuous mode [ 99.700905][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.771640][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.785211][ T5842] veth0_macvtap: entered promiscuous mode [ 99.829967][ T5838] veth1_vlan: entered promiscuous mode [ 99.838154][ T5842] veth1_macvtap: entered promiscuous mode [ 99.856682][ T3470] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.867451][ T3470] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.879039][ T5840] veth0_macvtap: entered promiscuous mode [ 99.896969][ T3470] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.905932][ T3470] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.933818][ T1329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.943370][ T1329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.965354][ T5840] veth1_macvtap: entered promiscuous mode [ 99.984799][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.030122][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.042532][ T3470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.051299][ T3470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.060708][ T793] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.095253][ T1329] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.121680][ T1329] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.135742][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.146692][ T5838] veth0_macvtap: entered promiscuous mode [ 100.163873][ T3814] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.200167][ T5852] Bluetooth: hci5: command tx timeout [ 100.220869][ T3814] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.233319][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.244502][ T793] usb 4-1: config index 0 descriptor too short (expected 65139, got 45) [ 100.256806][ T793] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 100.265325][ T5838] veth1_macvtap: entered promiscuous mode [ 100.271990][ T793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.283867][ T5852] Bluetooth: hci2: command tx timeout [ 100.284084][ T5151] Bluetooth: hci1: command tx timeout [ 100.289258][ T5854] Bluetooth: hci3: command tx timeout [ 100.299692][ T793] usb 4-1: Product: syz [ 100.305162][ T793] usb 4-1: Manufacturer: syz [ 100.311923][ T793] usb 4-1: SerialNumber: syz [ 100.312770][ T3814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.329100][ T3470] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.337974][ T3814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.348823][ T3470] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.360128][ T5852] Bluetooth: hci4: command tx timeout [ 100.367171][ T5854] Bluetooth: hci0: command tx timeout [ 100.390281][ T3470] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.410192][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.419103][ T5982] binder: BINDER_SET_CONTEXT_MGR already set [ 100.425583][ T5982] binder: 5979:5982 ioctl 4018620d 200000000040 returned -16 [ 100.433350][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 100.451670][ T3470] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.571964][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.615685][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.641057][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.650343][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 100.774486][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.828311][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.852261][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.884191][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.985028][ T3493] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.009235][ T3493] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.201437][ T3493] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.241554][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.245795][ T5984] fuse: Bad value for 'fd' [ 101.280000][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 101.293137][ T3493] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.479856][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 101.609978][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 101.810760][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 101.867767][ T3419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.895971][ T3419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.939801][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 101.969892][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.009200][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.103236][ T793] rtl8150 4-1:1.0: couldn't reset the device [ 102.133803][ T793] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 102.191042][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.225751][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.430192][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.444490][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.557800][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.623206][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.984247][ T5836] usb 4-1: USB disconnect, device number 2 [ 103.453221][ T30] audit: type=1326 audit(1764919589.825:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5994 comm="syz.1.2" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fabb9f8f749 code=0x0 [ 104.537913][ T6012] loop5: detected capacity change from 0 to 128 [ 104.549894][ T5938] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 104.648799][ T6012] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 104.769568][ T5938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.800139][ T6012] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 104.819963][ T5938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.889804][ T5938] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 105.137151][ T5938] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 105.217801][ T6025] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size. [ 105.797221][ T5938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.936268][ T5938] usb 2-1: config 0 descriptor?? [ 105.989846][ T5843] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 106.112353][ T5838] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.170386][ T5843] usb 4-1: Using ep0 maxpacket: 32 [ 106.195005][ T5843] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 106.210212][ T5843] usb 4-1: config 0 has no interface number 0 [ 106.216843][ T5843] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 107.121246][ T5843] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 107.182835][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.235767][ T5843] usb 4-1: Product: syz [ 107.269473][ T5843] usb 4-1: Manufacturer: syz [ 107.477261][ T5843] usb 4-1: SerialNumber: syz [ 107.517898][ T5843] usb 4-1: config 0 descriptor?? [ 108.574917][ T5938] usbhid 2-1:0.0: can't add hid device: -71 [ 108.615301][ T5938] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 108.687742][ T5938] usb 2-1: USB disconnect, device number 2 [ 108.905111][ T5843] usb 4-1: can't set config #0, error -71 [ 108.960782][ T5843] usb 4-1: USB disconnect, device number 3 [ 109.921423][ T6055] warning: `syz.2.20' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 110.946148][ T6062] loop4: detected capacity change from 0 to 512 [ 111.085041][ T6062] EXT4-fs: Ignoring removed orlov option [ 111.144806][ T6062] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 111.154308][ T6072] loop0: detected capacity change from 0 to 64 [ 111.188756][ T6062] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 111.216197][ T6062] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.23: corrupted in-inode xattr: e_value size too large [ 111.269033][ T6072] BFS-fs: bfs_fill_super(): Impossible last inode number 144386 > 513 on loop0 [ 111.314624][ T6062] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.23: couldn't read orphan inode 15 (err -117) [ 111.357719][ T6064] Illegal XDP return value 4294967274 on prog (id 3) dev N/A, expect packet loss! [ 111.383530][ T6062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.506030][ T6072] syz.0.24 uses obsolete (PF_INET,SOCK_PACKET) [ 112.512443][ T30] audit: type=1326 audit(1764919598.895:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.5.26" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3dcb8f749 code=0x0 [ 112.728699][ T6072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24'. [ 113.377145][ T6072] hsr_slave_0: left promiscuous mode [ 113.624561][ T6072] hsr_slave_1: left promiscuous mode [ 114.383129][ T6096] random: crng reseeded on system resumption [ 114.796053][ T5842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.979967][ T6101] loop2: detected capacity change from 0 to 8 [ 115.011769][ T6101] ======================================================= [ 115.011769][ T6101] WARNING: The mand mount option has been deprecated and [ 115.011769][ T6101] and is ignored by this kernel. Remove the mand [ 115.011769][ T6101] option from the mount to silence this warning. [ 115.011769][ T6101] ======================================================= [ 115.120382][ T5911] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 115.123119][ T6101] SQUASHFS error: xz decompression failed, data probably corrupt [ 115.183683][ T6101] SQUASHFS error: Failed to read block 0x108: -5 [ 115.244274][ T6101] SQUASHFS error: Unable to read metadata cache entry [106] [ 115.299895][ T5911] usb 2-1: Using ep0 maxpacket: 32 [ 115.300289][ T6101] SQUASHFS error: Unable to read inode 0x11f [ 115.313570][ T5911] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 115.349967][ T5911] usb 2-1: config 0 has no interface number 0 [ 115.356079][ T5911] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 115.436021][ T5911] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 115.486241][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.515844][ T5911] usb 2-1: Product: syz [ 115.525852][ T5911] usb 2-1: Manufacturer: syz [ 115.550771][ T5911] usb 2-1: SerialNumber: syz [ 115.566964][ T5911] usb 2-1: config 0 descriptor?? [ 115.605624][ T6098] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 115.831479][ T5986] IPVS: starting estimator thread 0... [ 115.876255][ T6098] loop1: detected capacity change from 0 to 128 [ 115.921111][ T6116] IPVS: using max 29 ests per chain, 69600 per kthread [ 115.970175][ T6098] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 116.062418][ T6098] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 116.307520][ T6098] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 118.558720][ T5911] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 118.590391][ T5911] asix 2-1:0.188: probe with driver asix failed with error -71 [ 118.642717][ T3814] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 118.788699][ T5911] usb 2-1: USB disconnect, device number 3 [ 120.047284][ T6149] Zero length message leads to an empty skb [ 121.061397][ T5986] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 121.296669][ T6155] loop2: detected capacity change from 0 to 32768 [ 121.320428][ T5986] usb 1-1: Using ep0 maxpacket: 8 [ 121.355946][ T6154] ERROR: (device loop2): diAllocBit: iag inconsistent [ 121.355946][ T6154] [ 121.369668][ T6154] ERROR: (device loop2): remounting filesystem as read-only [ 121.377103][ T6154] ialloc: diAlloc returned -5! [ 121.437946][ T5986] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 121.461119][ T5986] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.497808][ T5986] usb 1-1: Product: syz [ 121.520174][ T5986] usb 1-1: Manufacturer: syz [ 121.538709][ T5986] usb 1-1: SerialNumber: syz [ 121.597059][ T5986] usb 1-1: config 0 descriptor?? [ 121.885994][ T5986] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 122.089998][ T5986] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 122.155176][ T6175] genirq: Flags mismatch irq 32. 00200000 (comedi_parport) vs. 00200000 (virtio1-output.0) [ 122.155858][ T5986] usb 1-1: USB disconnect, device number 2 [ 122.389865][ T6004] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 122.409941][ T6158] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 122.459979][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 122.579954][ T6158] usb 4-1: Using ep0 maxpacket: 16 [ 122.580466][ T6004] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 122.589678][ T6158] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 122.606836][ T6158] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.620137][ T6158] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.621072][ T6004] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.631723][ T6158] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 122.650572][ T6158] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.658629][ T6158] usb 4-1: Product: syz [ 122.663521][ T6158] usb 4-1: Manufacturer: syz [ 122.668364][ T6158] usb 4-1: SerialNumber: syz [ 122.674818][ T6004] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.689953][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 122.698983][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.721727][ T6004] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 122.732304][ T9] usb 2-1: Product: syz [ 122.737245][ T9] usb 2-1: Manufacturer: syz [ 122.745108][ T6004] usb 6-1: config 0 interface 0 has no altsetting 0 [ 122.751799][ T9] usb 2-1: SerialNumber: syz [ 122.758608][ T6004] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.797927][ T6004] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.809880][ T6004] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 122.820182][ T6004] usb 6-1: config 0 interface 0 has no altsetting 0 [ 122.830565][ T6004] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.839472][ T6004] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.853023][ T183] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 122.884327][ T6004] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 122.896724][ T6004] usb 6-1: config 0 interface 0 has no altsetting 0 [ 122.913514][ T6004] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.923440][ T6004] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.935185][ T6004] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 122.945777][ T6004] usb 6-1: config 0 interface 0 has no altsetting 0 [ 122.957628][ T6004] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.967482][ T6004] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.979142][ T6004] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 123.029877][ T183] usb 3-1: Using ep0 maxpacket: 32 [ 123.052698][ T183] usb 3-1: config 4 has an invalid interface number: 114 but max is 0 [ 123.144302][ T6158] usb 4-1: 0:2 : does not exist [ 123.185286][ T183] usb 3-1: config 4 has no interface number 0 [ 123.210433][ T183] usb 3-1: config 4 interface 114 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 123.227231][ T6004] usb 6-1: config 0 interface 0 has no altsetting 0 [ 123.233944][ T183] usb 3-1: New USB device found, idVendor=05ac, idProduct=821f, bcdDevice=86.8d [ 123.243490][ T183] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.253085][ T6004] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.264111][ T6004] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.275062][ T6004] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 123.289068][ T6004] usb 6-1: config 0 interface 0 has no altsetting 0 [ 123.297752][ T6004] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.307376][ T6004] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.319067][ T6188] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 123.326473][ T6004] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 123.344723][ T6004] usb 6-1: config 0 interface 0 has no altsetting 0 [ 123.353632][ T6004] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.365081][ T6004] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.376002][ T6004] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 123.385877][ T6004] usb 6-1: config 0 interface 0 has no altsetting 0 [ 123.395245][ T6004] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 123.404526][ T6004] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 123.413154][ T6004] usb 6-1: Product: syz [ 123.417388][ T6004] usb 6-1: Manufacturer: syz [ 123.424024][ T6004] usb 6-1: SerialNumber: syz [ 123.433517][ T6004] usb 6-1: config 0 descriptor?? [ 123.444257][ T6004] yurex 6-1:0.0: Could not submitting URB [ 123.460849][ T6004] yurex 6-1:0.0: probe with driver yurex failed with error -5 [ 123.546710][ T6042] usb 3-1: USB disconnect, device number 2 [ 123.655178][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 123.706629][ T6004] usb 6-1: USB disconnect, device number 2 [ 123.726302][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 123.763694][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 123.812357][ T6158] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 123.825003][ T9] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 123.857947][ T6158] usb 4-1: USB disconnect, device number 4 [ 123.911008][ T9] usb 2-1: USB disconnect, device number 4 [ 123.916237][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.020537][ T183] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 124.190056][ T183] usb 5-1: Using ep0 maxpacket: 16 [ 124.207682][ T183] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 124.260197][ T183] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 124.302886][ T183] usb 5-1: config 0 interface 0 has no altsetting 0 [ 124.325072][ T183] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 124.338989][ T183] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.381834][ T183] usb 5-1: Product: syz [ 124.386093][ T183] usb 5-1: Manufacturer: syz [ 124.403498][ T183] usb 5-1: SerialNumber: syz [ 124.419849][ T793] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 124.430990][ T183] usb 5-1: config 0 descriptor?? [ 124.600360][ T793] usb 3-1: Using ep0 maxpacket: 32 [ 124.625729][ T793] usb 3-1: config 0 has an invalid interface number: 219 but max is 0 [ 124.644094][ T793] usb 3-1: config 0 has no interface number 0 [ 124.659891][ T793] usb 3-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 124.663506][ T183] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input5 [ 124.679904][ T793] usb 3-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 124.755486][ T793] usb 3-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 124.775997][ T793] usb 3-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 124.803130][ T793] usb 3-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 124.832040][ T793] usb 3-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 124.862662][ T793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.870879][ T793] usb 3-1: Product: syz [ 124.876528][ T793] usb 3-1: Manufacturer: syz [ 124.882118][ T43] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 124.901713][ T793] usb 3-1: SerialNumber: syz [ 124.952760][ T793] usb 3-1: config 0 descriptor?? [ 124.991445][ T6203] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 125.022864][ T183] usb 5-1: USB disconnect, device number 2 [ 125.045352][ T6063] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 125.069921][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 125.130149][ T43] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.145417][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 125.156815][ T43] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 125.166507][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.218506][ T43] usb 4-1: config 0 descriptor?? [ 125.227614][ T793] etas_es58x 3-1:0.219: Starting syz syz (Serial Number syz) [ 125.235263][ T6218] tipc: Started in network mode [ 125.237733][ T793] etas_es58x 3-1:0.219: could not retrieve the product info string [ 125.261026][ T6218] tipc: Node identity ac14142f, cluster identity 4711 [ 125.269854][ T6158] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 125.278726][ T6218] tipc: New replicast peer: 0.0.0.0 [ 125.289320][ T6218] tipc: Enabled bearer , priority 10 [ 125.315372][ T6218] tipc: New replicast peer: 172.30.1.6 [ 125.332890][ T793] usb 3-1: USB disconnect, device number 3 [ 125.350039][ T6004] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 125.357645][ T793] etas_es58x 3-1:0.219: Disconnecting syz syz [ 125.433720][ T6158] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.448195][ T6158] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 125.472101][ T6158] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.495799][ T6158] usb 2-1: config 0 descriptor?? [ 125.516011][ T6004] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 125.527143][ T6004] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.542607][ T6004] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 125.552643][ T6004] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 125.560844][ T6004] usb 1-1: Manufacturer: syz [ 125.568560][ T6004] usb 1-1: config 0 descriptor?? [ 125.684817][ T43] nzxt-smart2 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 125.722975][ T6004] rc_core: IR keymap rc-hauppauge not found [ 125.728903][ T6004] Registered IR keymap rc-empty [ 125.761593][ T6004] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 125.790307][ T183] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 125.806643][ T6004] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 125.864494][ T6004] usb 1-1: USB disconnect, device number 3 [ 125.882538][ T5854] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 125.891276][ T5854] Bluetooth: hci2: Injecting HCI hardware error event [ 125.898962][ T5852] Bluetooth: hci2: hardware error 0x00 [ 125.921318][ T6158] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 125.972951][ T6158] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0002/input/input7 [ 125.989840][ T183] usb 6-1: Using ep0 maxpacket: 8 [ 126.002453][ T183] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 126.027290][ T183] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 126.054592][ T183] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 126.066767][ T6133] usb 4-1: USB disconnect, device number 5 [ 126.091292][ T183] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.114089][ T183] usb 6-1: Product: syz [ 126.124294][ T183] usb 6-1: Manufacturer: syz [ 126.129237][ T183] usb 6-1: SerialNumber: syz [ 126.217765][ T6158] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 126.281467][ T6004] tipc: Node number set to 2886997039 [ 126.369847][ T43] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 126.408314][ T183] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 126.460437][ T6158] usb 2-1: USB disconnect, device number 5 [ 126.540076][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 126.566788][ T43] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 126.576049][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.584118][ T43] usb 3-1: Product: syz [ 126.588276][ T43] usb 3-1: Manufacturer: syz [ 126.597097][ T43] usb 3-1: SerialNumber: syz [ 126.613972][ T6133] usb 6-1: USB disconnect, device number 3 [ 126.631539][ T43] r8152-cfgselector 3-1: Unknown version 0x0000 [ 126.642544][ T6133] usblp0: removed [ 126.675354][ T43] r8152-cfgselector 3-1: config 0 descriptor?? [ 126.710081][ T183] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 126.891073][ T183] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 126.900476][ T183] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.914063][ T183] usb 5-1: config 0 descriptor?? [ 127.101843][ T43] r8152-cfgselector 3-1: USB disconnect, device number 4 [ 127.244276][ T6253] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 127.259846][ T5986] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 127.412920][ T5986] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 127.422853][ T5986] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 127.432740][ T5986] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.450301][ T5986] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 127.467640][ T5986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 127.486690][ T5986] usb 2-1: Product: syz [ 127.500289][ T5986] usb 2-1: Manufacturer: syz [ 127.505014][ T5986] usb 2-1: SerialNumber: syz [ 127.739323][ T5986] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 127.829839][ T6158] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 127.929067][ T6270] netlink: 12 bytes leftover after parsing attributes in process `syz.5.92'. [ 127.948934][ T5986] usb 2-1: USB disconnect, device number 6 [ 127.960324][ T5852] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 128.003463][ T6158] usb 1-1: config 0 has an invalid interface number: 38 but max is 0 [ 128.018532][ T5986] usblp0: removed [ 128.026174][ T6270] netlink: 112 bytes leftover after parsing attributes in process `syz.5.92'. [ 128.035901][ T6158] usb 1-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 128.064457][ T6158] usb 1-1: config 0 has no interface number 0 [ 128.074822][ T6158] usb 1-1: config 0 interface 38 altsetting 251 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 128.093653][ T6158] usb 1-1: config 0 interface 38 altsetting 251 endpoint 0xF has an invalid bInterval 64, changing to 7 [ 128.106970][ T6158] usb 1-1: config 0 interface 38 altsetting 251 bulk endpoint 0xB has invalid maxpacket 16 [ 128.117692][ T6158] usb 1-1: config 0 interface 38 altsetting 251 bulk endpoint 0xA has invalid maxpacket 1023 [ 128.128176][ T6158] usb 1-1: config 0 interface 38 altsetting 251 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 128.139364][ T6158] usb 1-1: config 0 interface 38 altsetting 251 has a duplicate endpoint with address 0xF, skipping [ 128.144596][ T6270] syz.5.92 (6270) used greatest stack depth: 17656 bytes left [ 128.177271][ T6158] usb 1-1: config 0 interface 38 altsetting 251 has a duplicate endpoint with address 0xB, skipping [ 128.188114][ T6158] usb 1-1: config 0 interface 38 has no altsetting 0 [ 128.198553][ T6158] usb 1-1: New USB device found, idVendor=0b48, idProduct=3009, bcdDevice=ce.ce [ 128.214198][ T6158] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.222819][ T6158] usb 1-1: Product: syz [ 128.227036][ T6158] usb 1-1: Manufacturer: syz [ 128.235321][ T6158] usb 1-1: SerialNumber: syz [ 128.248771][ T6158] usb 1-1: config 0 descriptor?? [ 128.254286][ T6278] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 128.283301][ T6133] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 128.439616][ T6282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.456536][ T6133] usb 4-1: unable to get BOS descriptor or descriptor too short [ 128.465398][ T6133] usb 4-1: not running at top speed; connect to a high speed hub [ 128.474551][ T6158] dvb-usb: found a 'Technotrend TT-connect S-2400 (8kB EEPROM)' in warm state. [ 128.475191][ T6133] usb 4-1: config 4 has an invalid interface number: 136 but max is 0 [ 128.497682][ T6133] usb 4-1: config 4 has no interface number 0 [ 128.505139][ T6133] usb 4-1: config 4 interface 136 has no altsetting 0 [ 128.505294][ T6158] dvb-usb: bulk message failed: -71 (4/0) [ 128.515479][ T6133] usb 4-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=16.c8 [ 128.528498][ T6158] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 128.542311][ T6133] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.551999][ T6133] usb 4-1: Product: syz [ 128.556832][ T6133] usb 4-1: Manufacturer: syz [ 128.561786][ T6133] usb 4-1: SerialNumber: syz [ 128.575474][ T6158] dvb-usb: bulk message failed: -71 (5/0) [ 128.593684][ T6158] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 128.617357][ T6158] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 128.633301][ T6158] dvbdev: DVB: registering new adapter (Technotrend TT-connect S-2400 (8kB EEPROM)) [ 128.643193][ T6158] usb 1-1: media controller created [ 128.668974][ T6158] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 128.695480][ T6158] ttusb2: set interface to alts=3 failed [ 128.736642][ T6158] DVB: Unable to find symbol tda10086_attach() [ 128.744821][ T6158] dvb-usb: no frontend was attached by 'Technotrend TT-connect S-2400 (8kB EEPROM)' [ 128.755250][ T6158] dvb-usb: bulk message failed: -71 (4/0) [ 128.761113][ T6158] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 128.775048][ T6158] dvb-usb: bulk message failed: -71 (5/0) [ 128.781075][ T6158] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 128.796149][ T6158] dvb-usb: Technotrend TT-connect S-2400 (8kB EEPROM) successfully initialized and connected. [ 128.804606][ T6133] dvb-usb: found a 'Technotrend TT-connect CT-3650' in warm state. [ 128.816082][ T6158] usb 1-1: USB disconnect, device number 4 [ 128.825639][ T6133] dvb-usb: bulk message failed: -22 (4/0) [ 128.854898][ T6133] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 128.860131][ T5986] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 128.871653][ T6133] dvb-usb: bulk message failed: -22 (5/0) [ 128.878319][ T6133] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 128.945301][ T6133] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 128.966171][ T6133] dvb-usb: Technotrend TT-connect CT-3650 error while loading driver (-19) [ 128.968354][ T6158] dvb-usb: Technotrend TT-connect S-2400 (8kB EEPR successfully deinitialized and disconnected. [ 128.985945][ T6133] usb 4-1: USB disconnect, device number 6 [ 129.039825][ T5986] usb 2-1: Using ep0 maxpacket: 16 [ 129.086182][ T5986] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 129.131420][ T5986] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 129.159242][ T183] pegasus 5-1:0.0: setup Pegasus II specific registers [ 129.169853][ T5986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.198542][ T5986] usb 2-1: Product: syz [ 129.203046][ T5986] usb 2-1: Manufacturer: syz [ 129.207639][ T5986] usb 2-1: SerialNumber: syz [ 129.214646][ T6291] comedi comedi3: Minor 32769 is invalid! [ 129.222395][ T5986] usb 2-1: config 0 descriptor?? [ 129.232414][ T5986] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 129.245941][ T5986] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 129.259874][ T6004] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 129.359851][ T43] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 129.443399][ T6004] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 129.456448][ T6004] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.477047][ T6004] usb 3-1: Product: syz [ 129.490609][ T6004] usb 3-1: Manufacturer: syz [ 129.498004][ T6004] usb 3-1: SerialNumber: syz [ 129.516158][ T6004] usb 3-1: config 0 descriptor?? [ 129.529406][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.538900][ T6004] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 129.580378][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.619065][ T43] usb 6-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 129.647485][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.680192][ T43] usb 6-1: config 0 descriptor?? [ 129.856359][ T5986] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 129.866287][ T6309] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 129.866287][ T6309] The task syz.3.107 (6309) triggered the difference, watch for misbehavior. [ 129.925209][ T6309] pimreg: entered allmulticast mode [ 130.202172][ T6158] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 130.305792][ T43] razer 0003:1532:010E.0003: failed to enable macro keys: -71 [ 130.323258][ T43] razer 0003:1532:010E.0003: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.5-1/input0 [ 130.342729][ T43] usb 6-1: USB disconnect, device number 4 [ 130.370178][ T6158] usb 1-1: Using ep0 maxpacket: 8 [ 130.378351][ T6158] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 130.387019][ T6158] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.399687][ T6158] usb 1-1: config 0 has no interface number 0 [ 130.411920][ T6158] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 130.426028][ T6158] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.434102][ T6158] usb 1-1: Product: syz [ 130.438392][ T6158] usb 1-1: Manufacturer: syz [ 130.444434][ T6312] fido_id[6312]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 130.445306][ T6158] usb 1-1: SerialNumber: syz [ 130.471731][ T6158] usb 1-1: config 0 descriptor?? [ 130.485993][ T6158] uvcvideo 1-1:0.31: probe with driver uvcvideo failed with error -22 [ 130.500533][ T5986] em28xx 2-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 130.516298][ T5986] em28xx 2-1:0.0: board has no eeprom [ 130.589841][ T5986] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 130.609817][ T5986] em28xx 2-1:0.0: dvb set to bulk mode. [ 130.615626][ T43] em28xx 2-1:0.0: Binding DVB extension [ 130.641491][ T5986] usb 2-1: USB disconnect, device number 7 [ 130.648713][ T5986] em28xx 2-1:0.0: Disconnecting em28xx [ 130.697295][ T6158] usb 1-1: USB disconnect, device number 5 [ 130.766042][ T43] em28xx 2-1:0.0: Registering input extension [ 130.775526][ T5986] em28xx 2-1:0.0: Closing input extension [ 130.803582][ T5986] em28xx 2-1:0.0: Freeing device [ 130.948743][ T6004] gspca_sunplus: reg_r err -71 [ 130.962205][ T6004] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 130.990225][ T6004] usb 3-1: USB disconnect, device number 5 [ 131.001062][ T6321] mkiss: ax0: crc mode is auto. [ 131.016515][ T183] pegasus 5-1:0.0: can't locate MII phy, using default [ 131.073142][ T183] pegasus 5-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, a6:40:ac:38:64:a8 [ 131.104618][ T183] usb 5-1: USB disconnect, device number 3 [ 131.222623][ T5911] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 131.379826][ T5911] usb 4-1: Using ep0 maxpacket: 32 [ 131.391808][ T5911] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 131.423687][ T5911] usb 4-1: config 0 has no interface number 0 [ 131.430087][ T6004] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 131.455648][ T5911] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 131.489165][ T5911] usb 4-1: config 0 interface 196 has no altsetting 0 [ 131.569105][ T5911] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 131.609825][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.617901][ T5911] usb 4-1: Product: syz [ 131.669383][ T5911] usb 4-1: Manufacturer: syz [ 131.674547][ T5911] usb 4-1: SerialNumber: syz [ 131.684410][ T6004] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 131.702943][ T5911] usb 4-1: config 0 descriptor?? [ 131.709807][ T6004] usb 6-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 131.731041][ T6319] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 131.735549][ T6336] can0: slcan on ttyS3. [ 131.760098][ T6004] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 131.769106][ T6004] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 131.805962][ T6004] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 131.824745][ T6004] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 131.829885][ T6158] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 131.834463][ T6004] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 131.849555][ T6004] usb 6-1: Product: syz [ 131.861914][ T6004] usb 6-1: Manufacturer: syz [ 131.870727][ T6336] can0 (unregistered): slcan off ttyS3. [ 131.885127][ T6004] cdc_wdm 6-1:1.0: skipping garbage [ 131.909838][ T6004] cdc_wdm 6-1:1.0: skipping garbage [ 131.924866][ T6004] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 131.932331][ T6004] cdc_wdm 6-1:1.0: Unknown control protocol [ 131.988770][ T6340] comedi comedi3: c6xdigio: I/O port conflict (0xffffffffffffffff,3) [ 131.997548][ T6340] ------------[ cut here ]------------ [ 132.003299][ T6340] Unexpected driver unregister! [ 132.008187][ T6340] WARNING: drivers/base/driver.c:273 at 0x0, CPU#0: syz.2.121/6340 [ 132.016603][ T6340] Modules linked in: [ 132.020643][ T6340] CPU: 0 UID: 0 PID: 6340 Comm: syz.2.121 Not tainted syzkaller #0 PREEMPT(full) [ 132.029948][ T6340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 132.040106][ T6340] RIP: 0010:driver_unregister+0x8d/0xa0 [ 132.045889][ T6340] Code: 73 68 4c 89 f7 e8 e3 8c 98 fc 48 89 df 5b 41 5e 41 5f e9 e6 55 ff ff e8 a1 a1 f5 fb eb 05 e8 9a a1 f5 fb 48 8d 3d 13 13 c1 09 <67> 48 0f b9 3a 5b 41 5e 41 5f e9 2f 98 44 fb cc cc cc cc 90 90 90 [ 132.046496][ T6158] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.068284][ T6340] RSP: 0018:ffffc900031f7a20 EFLAGS: 00010287 [ 132.083680][ T6340] RAX: ffffffff85cba8c6 RBX: ffffffff8f1d4bc0 RCX: 0000000000080000 [ 132.092020][ T6340] RDX: ffffc9000c829000 RSI: 0000000000003be7 RDI: ffffffff8f8cbbe0 [ 132.100050][ T6340] RBP: 0000000000000001 R08: ffff88802f1e112f R09: 1ffff11005e3c225 [ 132.108052][ T6340] R10: dffffc0000000000 R11: ffffffff88bbf900 R12: ffff88802f1e1038 [ 132.116090][ T6340] R13: ffffffff8f1d4b10 R14: 0000000000000000 R15: dffffc0000000000 [ 132.126193][ T6340] FS: 00007f2fc4b0c6c0(0000) GS:ffff888126095000(0000) knlGS:0000000000000000 [ 132.135674][ T6340] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 132.142304][ T6340] CR2: 0000001b31723ffc CR3: 0000000077b21000 CR4: 0000000000350ef0 [ 132.150397][ T6340] Call Trace: [ 132.153700][ T6340] [ 132.156658][ T6340] comedi_device_detach_locked+0x178/0x750 [ 132.164793][ T6340] comedi_device_attach+0x5d4/0x720 [ 132.170069][ T6340] comedi_unlocked_ioctl+0x5ff/0x1020 [ 132.175490][ T6340] ? kasan_quarantine_put+0xdd/0x220 [ 132.176826][ T6158] usb 1-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 132.180835][ T6340] ? lockdep_hardirqs_on+0x98/0x140 [ 132.180908][ T6340] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 132.201391][ T6340] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.202299][ T6158] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.207143][ T6340] ? do_futex+0x333/0x420 [ 132.219449][ T6340] ? __fget_files+0x2a/0x420 [ 132.224161][ T6340] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.229849][ T6340] ? __fget_files+0x3a0/0x420 [ 132.234568][ T6340] ? __fget_files+0x2a/0x420 [ 132.239199][ T6340] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.244905][ T6340] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.250637][ T6340] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 132.256499][ T6340] __se_sys_ioctl+0xfc/0x170 [ 132.261166][ T6340] do_syscall_64+0xfa/0xf80 [ 132.268071][ T6340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.274198][ T6340] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.279898][ T6340] ? exc_page_fault+0xab/0x100 [ 132.284719][ T6340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.290683][ T6340] RIP: 0033:0x7f2fc3b8f749 [ 132.295126][ T6340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.314812][ T6340] RSP: 002b:00007f2fc4b0c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 132.323295][ T6340] RAX: ffffffffffffffda RBX: 00007f2fc3de5fa0 RCX: 00007f2fc3b8f749 [ 132.331342][ T6340] RDX: 0000200000000280 RSI: 0000000040946400 RDI: 0000000000000003 [ 132.339341][ T6340] RBP: 00007f2fc3c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 132.347462][ T6340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.355520][ T6340] R13: 00007f2fc3de6038 R14: 00007f2fc3de5fa0 R15: 00007fff4a96c2e8 [ 132.363559][ T6340] [ 132.366605][ T6340] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 132.373883][ T6340] CPU: 0 UID: 0 PID: 6340 Comm: syz.2.121 Not tainted syzkaller #0 PREEMPT(full) [ 132.383077][ T6340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 132.393122][ T6340] Call Trace: [ 132.396391][ T6340] [ 132.399309][ T6340] dump_stack_lvl+0x99/0x250 [ 132.403900][ T6340] ? __asan_memcpy+0x40/0x70 [ 132.408490][ T6340] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.413686][ T6340] ? __pfx__printk+0x10/0x10 [ 132.418286][ T6340] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.423917][ T6340] vpanic+0x237/0x6d0 [ 132.427896][ T6340] ? __pfx_vpanic+0x10/0x10 [ 132.432392][ T6340] ? is_bpf_text_address+0x292/0x2b0 [ 132.437678][ T6340] ? is_bpf_text_address+0x26/0x2b0 [ 132.442885][ T6340] panic+0xb9/0xc0 [ 132.446602][ T6340] ? __pfx_panic+0x10/0x10 [ 132.451029][ T6340] __warn+0x317/0x4b0 [ 132.455012][ T6340] __report_bug+0x288/0x500 [ 132.459525][ T6340] ? __pfx___report_bug+0x10/0x10 [ 132.464552][ T6340] ? __pfx_dev_printk_emit+0x10/0x10 [ 132.469846][ T6340] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.475501][ T6340] report_bug_entry+0x16a/0x220 [ 132.480361][ T6340] ? driver_unregister+0x8d/0xa0 [ 132.485291][ T6340] ? driver_unregister+0x92/0xa0 [ 132.490218][ T6340] handle_bug+0xca/0x200 [ 132.494450][ T6340] exc_invalid_op+0x1a/0x50 [ 132.498940][ T6340] asm_exc_invalid_op+0x1a/0x20 [ 132.503779][ T6340] RIP: 0010:driver_unregister+0x8d/0xa0 [ 132.509313][ T6340] Code: 73 68 4c 89 f7 e8 e3 8c 98 fc 48 89 df 5b 41 5e 41 5f e9 e6 55 ff ff e8 a1 a1 f5 fb eb 05 e8 9a a1 f5 fb 48 8d 3d 13 13 c1 09 <67> 48 0f b9 3a 5b 41 5e 41 5f e9 2f 98 44 fb cc cc cc cc 90 90 90 [ 132.528906][ T6340] RSP: 0018:ffffc900031f7a20 EFLAGS: 00010287 [ 132.534967][ T6340] RAX: ffffffff85cba8c6 RBX: ffffffff8f1d4bc0 RCX: 0000000000080000 [ 132.542927][ T6340] RDX: ffffc9000c829000 RSI: 0000000000003be7 RDI: ffffffff8f8cbbe0 [ 132.550890][ T6340] RBP: 0000000000000001 R08: ffff88802f1e112f R09: 1ffff11005e3c225 [ 132.558853][ T6340] R10: dffffc0000000000 R11: ffffffff88bbf900 R12: ffff88802f1e1038 [ 132.566813][ T6340] R13: ffffffff8f1d4b10 R14: 0000000000000000 R15: dffffc0000000000 [ 132.574779][ T6340] ? __pfx_c6xdigio_detach+0x10/0x10 [ 132.580069][ T6340] ? driver_unregister+0x86/0xa0 [ 132.585008][ T6340] comedi_device_detach_locked+0x178/0x750 [ 132.590816][ T6340] comedi_device_attach+0x5d4/0x720 [ 132.596015][ T6340] comedi_unlocked_ioctl+0x5ff/0x1020 [ 132.601398][ T6340] ? kasan_quarantine_put+0xdd/0x220 [ 132.606682][ T6340] ? lockdep_hardirqs_on+0x98/0x140 [ 132.611889][ T6340] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 132.617727][ T6340] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.623353][ T6340] ? do_futex+0x333/0x420 [ 132.627693][ T6340] ? __fget_files+0x2a/0x420 [ 132.632278][ T6340] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.637906][ T6340] ? __fget_files+0x3a0/0x420 [ 132.642577][ T6340] ? __fget_files+0x2a/0x420 [ 132.647160][ T6340] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.652784][ T6340] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.658413][ T6340] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 132.664222][ T6340] __se_sys_ioctl+0xfc/0x170 [ 132.668814][ T6340] do_syscall_64+0xfa/0xf80 [ 132.673316][ T6340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.679371][ T6340] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.684999][ T6340] ? exc_page_fault+0xab/0x100 [ 132.689769][ T6340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.695652][ T6340] RIP: 0033:0x7f2fc3b8f749 [ 132.700057][ T6340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.719650][ T6340] RSP: 002b:00007f2fc4b0c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 132.728057][ T6340] RAX: ffffffffffffffda RBX: 00007f2fc3de5fa0 RCX: 00007f2fc3b8f749 [ 132.736018][ T6340] RDX: 0000200000000280 RSI: 0000000040946400 RDI: 0000000000000003 [ 132.743976][ T6340] RBP: 00007f2fc3c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 132.751933][ T6340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.759891][ T6340] R13: 00007f2fc3de6038 R14: 00007f2fc3de5fa0 R15: 00007fff4a96c2e8 [ 132.767876][ T6340] [ 132.771139][ T6340] Kernel Offset: disabled [ 132.775451][ T6340] Rebooting in 86400 seconds..