last executing test programs: 7.682555272s ago: executing program 1 (id=121): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/85}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000ac0)={0x2, 0x0, [{0x1, 0xffb, &(0x7f0000001d80)=""/4091}, {0x0, 0x83, &(0x7f0000000a00)=""/131}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r4 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) 4.112215943s ago: executing program 2 (id=131): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000000)=""/188, 0xbc) read$char_usb(r2, &(0x7f0000000100)=""/67, 0x43) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) 3.774177137s ago: executing program 1 (id=134): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, 0x0, 0x1d) 2.788930349s ago: executing program 0 (id=136): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) close(r1) 2.392775616s ago: executing program 0 (id=138): openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r1], 0x3c}}, 0x10) 2.174796251s ago: executing program 0 (id=140): r0 = syz_open_dev$sndpcmp(&(0x7f0000003b40), 0xa8c, 0x2080) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000080)={{0x3, 0x1, 0x0, 0x0, 0x6}}) close_range(r0, 0xffffffffffffffff, 0x0) 1.976983504s ago: executing program 0 (id=141): mkdir(&(0x7f0000000000)='./file0\x00', 0x80) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x128) mount(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x2008, 0x0) getdents64(r0, 0x0, 0x0) 1.832513196s ago: executing program 0 (id=143): syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES16], 0x0) 1.707676161s ago: executing program 1 (id=145): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115001d000200142603600e12080005007a010401a8001600200003400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x20000040) 1.625512461s ago: executing program 1 (id=146): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000240)={0xf0f028, 0x4}) 1.54177491s ago: executing program 3 (id=147): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f00000001c0)=0x1) write$tun(r0, &(0x7f00000004c0)=ANY=[], 0xfdef) 1.540597041s ago: executing program 1 (id=148): openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r1], 0x3c}}, 0x10) 1.368489435s ago: executing program 1 (id=149): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c02"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0) syz_usb_control_io(r2, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000040)={0x0, 0x7, 0x9, "c41d21447228b20bbf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.33336801s ago: executing program 3 (id=150): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0xa41) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"1b0100", 0x10, 0x6, 0x3, 0x800, 0x0, "f759e100edc710000000dafc638000", "00000004", '\x00', "e8cc1304", ["8bada11e03411000", "c2fed6e2ffffff6806528640", "000000ff0000000000000020", "0000000000000000009700"]}) 1.098945122s ago: executing program 3 (id=151): mkdir(&(0x7f0000000000)='./file0\x00', 0x80) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x128) mount(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x2008, 0x0) getdents64(r0, 0x0, 0x0) 916.114744ms ago: executing program 2 (id=152): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 915.858573ms ago: executing program 3 (id=153): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000280)=0x7, 0x4) 735.240473ms ago: executing program 3 (id=154): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115001d000200142603600e12080005007a010401a8001600200003400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x20000040) 684.044029ms ago: executing program 3 (id=155): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x3d, &(0x7f0000000bc0)=@string={0x3d, 0x3, "b9aa5bf0bb14508e61bc234dfa096b1b8638648c575ce1dc5c6adc512d99bb44a71c9981c70b5131f88ade1a16c3b4ecd32be727937bc0ba825c07"}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "f50a5159"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 608.505866ms ago: executing program 2 (id=156): r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0xe, @vbi={0x0, 0x0, 0x1, 0x0, [0x0, 0x20000000], [0x20000000], 0x108}}) 537.799896ms ago: executing program 2 (id=157): openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r1], 0x3c}}, 0x10) 443.025816ms ago: executing program 2 (id=158): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x3, 0x80, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r0, &(0x7f00000067c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="7f33d9a648c9d78dc643f26063966bd0ba55ad1a1c1e5868dd8a8377c6665333232f6ec490218597320147d11511e8f1b69f277d56ef449066452cb7dab19de1b32aca554e0179370af8bda92f24a284c3d8aac54a4505864360b9e24d2ce14a4480373415affb06347c321047f1a5b19cd663ea585f34909c9ac8bd", 0x7c}, {&(0x7f0000001740)="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", 0x225}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8000) 344.305093ms ago: executing program 2 (id=159): r0 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000700)="9ffd72", 0x3}], 0x1) 0s ago: executing program 0 (id=160): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x0) read$char_usb(r2, &(0x7f0000000100)=""/67, 0x43) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.52' (ED25519) to the list of known hosts. [ 83.645957][ T5823] cgroup: Unknown subsys name 'net' [ 83.763307][ T5823] cgroup: Unknown subsys name 'cpuset' [ 83.772948][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.422443][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.761128][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.770427][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.780463][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.788060][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.789869][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.800398][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.805862][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.813155][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.818165][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.825792][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.838072][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.846855][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.852498][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.857351][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.863637][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.875421][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.891814][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.899139][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.914428][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.915782][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.414073][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 88.562345][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 88.606817][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 88.700805][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.708597][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.715850][ T5836] bridge_slave_0: entered allmulticast mode [ 88.723526][ T5836] bridge_slave_0: entered promiscuous mode [ 88.789778][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.796973][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.805019][ T5836] bridge_slave_1: entered allmulticast mode [ 88.812485][ T5836] bridge_slave_1: entered promiscuous mode [ 88.850345][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 88.927274][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.948587][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.955966][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.963321][ T5834] bridge_slave_0: entered allmulticast mode [ 88.971217][ T5834] bridge_slave_0: entered promiscuous mode [ 88.993826][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.027004][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.034354][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.041924][ T5834] bridge_slave_1: entered allmulticast mode [ 89.049622][ T5834] bridge_slave_1: entered promiscuous mode [ 89.057364][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.065683][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.072926][ T5837] bridge_slave_0: entered allmulticast mode [ 89.080534][ T5837] bridge_slave_0: entered promiscuous mode [ 89.127084][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.134367][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.141772][ T5837] bridge_slave_1: entered allmulticast mode [ 89.149304][ T5837] bridge_slave_1: entered promiscuous mode [ 89.160257][ T5836] team0: Port device team_slave_0 added [ 89.169151][ T5836] team0: Port device team_slave_1 added [ 89.244614][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.277267][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.285323][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.292589][ T5835] bridge_slave_0: entered allmulticast mode [ 89.300260][ T5835] bridge_slave_0: entered promiscuous mode [ 89.311768][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.324182][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.334649][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.341991][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.368110][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.380185][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.387434][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.395190][ T5835] bridge_slave_1: entered allmulticast mode [ 89.402943][ T5835] bridge_slave_1: entered promiscuous mode [ 89.424359][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.440202][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.447191][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.473199][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.543969][ T5834] team0: Port device team_slave_0 added [ 89.565775][ T5837] team0: Port device team_slave_0 added [ 89.574643][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.589479][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.600767][ T5834] team0: Port device team_slave_1 added [ 89.621263][ T5837] team0: Port device team_slave_1 added [ 89.674904][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.682171][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.708508][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.757141][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.764465][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.790869][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.805005][ T5835] team0: Port device team_slave_0 added [ 89.814116][ T5835] team0: Port device team_slave_1 added [ 89.826729][ T5836] hsr_slave_0: entered promiscuous mode [ 89.833672][ T5836] hsr_slave_1: entered promiscuous mode [ 89.841469][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.848793][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.874838][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.919105][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.926128][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.952313][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.973782][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.981002][ T5849] Bluetooth: hci0: command tx timeout [ 89.981218][ T5852] Bluetooth: hci3: command tx timeout [ 89.986918][ T5849] Bluetooth: hci2: command tx timeout [ 89.992986][ T51] Bluetooth: hci1: command tx timeout [ 90.001599][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.029913][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.063941][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.071427][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.097885][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.200684][ T5834] hsr_slave_0: entered promiscuous mode [ 90.207475][ T5834] hsr_slave_1: entered promiscuous mode [ 90.214187][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 90.220217][ T5834] Cannot create hsr debugfs directory [ 90.241128][ T5837] hsr_slave_0: entered promiscuous mode [ 90.247714][ T5837] hsr_slave_1: entered promiscuous mode [ 90.254257][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 90.260056][ T5837] Cannot create hsr debugfs directory [ 90.325268][ T5835] hsr_slave_0: entered promiscuous mode [ 90.332097][ T5835] hsr_slave_1: entered promiscuous mode [ 90.338621][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 90.344391][ T5835] Cannot create hsr debugfs directory [ 90.834161][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.848019][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.861318][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.893441][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.004170][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.016024][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.030165][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.077399][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.170369][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.202080][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.216512][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.228198][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.373372][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.388049][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.400925][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.415179][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.510808][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.547847][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.592077][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.610643][ T3447] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.617928][ T3447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.637097][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.679553][ T3447] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.686766][ T3447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.721809][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.729042][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.748605][ T3447] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.755812][ T3447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.773659][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.841912][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.858040][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.900547][ T3532] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.907768][ T3532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.948252][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.963352][ T3532] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.970661][ T3532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.035069][ T3532] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.042474][ T3532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.060007][ T3532] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.065204][ T51] Bluetooth: hci1: command tx timeout [ 92.067488][ T3532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.074231][ T5852] Bluetooth: hci3: command tx timeout [ 92.084602][ T5849] Bluetooth: hci0: command tx timeout [ 92.087489][ T5852] Bluetooth: hci2: command tx timeout [ 92.475089][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.686670][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.720386][ T5836] veth0_vlan: entered promiscuous mode [ 92.778156][ T5836] veth1_vlan: entered promiscuous mode [ 92.917949][ T5836] veth0_macvtap: entered promiscuous mode [ 92.943599][ T5836] veth1_macvtap: entered promiscuous mode [ 92.965976][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.983198][ T5834] veth0_vlan: entered promiscuous mode [ 93.001864][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.017213][ T5834] veth1_vlan: entered promiscuous mode [ 93.037756][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.053890][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.106965][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.117752][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.154907][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.165755][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.237766][ T5835] veth0_vlan: entered promiscuous mode [ 93.248013][ T5834] veth0_macvtap: entered promiscuous mode [ 93.287671][ T5837] veth0_vlan: entered promiscuous mode [ 93.310379][ T5835] veth1_vlan: entered promiscuous mode [ 93.320785][ T3447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.320860][ T5834] veth1_macvtap: entered promiscuous mode [ 93.334897][ T3447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.380907][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.389481][ T5837] veth1_vlan: entered promiscuous mode [ 93.417358][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.432449][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.454217][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.464654][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.489428][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.504443][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.515017][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.596827][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.622524][ T5835] veth0_macvtap: entered promiscuous mode [ 93.667150][ T5835] veth1_macvtap: entered promiscuous mode [ 93.680846][ T5837] veth0_macvtap: entered promiscuous mode [ 93.733598][ T5837] veth1_macvtap: entered promiscuous mode [ 93.775555][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.784983][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.800775][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.849167][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.874708][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.920783][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.924553][ T5932] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.951753][ T3532] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.962470][ T3532] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.997127][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.999431][ T3532] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.014833][ T3532] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.032581][ T3532] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.041538][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.049673][ T3532] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.078667][ T3532] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.093493][ T3532] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.139048][ T5157] Bluetooth: hci3: command tx timeout [ 94.144546][ T5157] Bluetooth: hci2: command tx timeout [ 94.150636][ T5849] Bluetooth: hci1: command tx timeout [ 94.150659][ T5852] Bluetooth: hci0: command tx timeout [ 94.338818][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 94.347575][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.356373][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.644707][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 94.653659][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.570831][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.581686][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.668762][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 95.678916][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.078726][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.184778][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.192748][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.226371][ T5852] Bluetooth: hci2: command tx timeout [ 96.231939][ T51] Bluetooth: hci0: command tx timeout [ 96.231967][ T5157] Bluetooth: hci1: command tx timeout [ 96.237390][ T51] Bluetooth: hci3: command tx timeout [ 96.280013][ T5946] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8'. [ 96.325057][ T3532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.348573][ T3532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.425995][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.450463][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.526692][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.537808][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.188808][ T5900] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.277932][ T10] cfg80211: failed to load regulatory.db [ 97.353695][ T5900] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 97.416874][ T5900] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 97.447934][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 97.456355][ T5900] usb 2-1: SerialNumber: syz [ 97.689883][ T5900] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 97.759080][ T5900] usb 2-1: USB disconnect, device number 2 [ 97.790450][ T5976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17'. [ 97.969643][ T5979] warning: `syz.2.19' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 98.208506][ T5892] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 99.391453][ T5892] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 99.419315][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.469721][ T5892] usb 4-1: config 0 descriptor?? [ 99.492415][ T5892] cp210x 4-1:0.0: cp210x converter detected [ 99.922677][ T5892] usb 4-1: cp210x converter now attached to ttyUSB0 [ 100.041852][ T5892] kernel write not supported for file /cpu/0/msr (pid: 5892 comm: kworker/0:4) [ 100.231756][ T51] Bluetooth: hci2: unexpected event 0x2f length: 1017 > 260 [ 100.455471][ T5892] usb 4-1: USB disconnect, device number 2 [ 100.497334][ T5892] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 100.549944][ T5892] cp210x 4-1:0.0: device disconnected [ 100.632644][ T24] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 100.800648][ T24] usb 3-1: not running at top speed; connect to a high speed hub [ 100.820481][ T24] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 100.833089][ T24] usb 3-1: config 1 has no interface number 1 [ 100.839788][ T24] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 100.869939][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 100.880271][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.889286][ T24] usb 3-1: Product: syz [ 100.896084][ T24] usb 3-1: Manufacturer: syz [ 100.901299][ T24] usb 3-1: SerialNumber: syz [ 101.072267][ T6013] netlink: 188 bytes leftover after parsing attributes in process `syz.3.32'. [ 101.153074][ T24] usb 3-1: failed to enable PITCH for EP 0x82 [ 101.285335][ T24] usb 3-1: USB disconnect, device number 2 [ 101.483354][ T6022] udevd[6022]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.750532][ T6028] Zero length message leads to an empty skb [ 101.774866][ T6028] netlink: 'syz.3.37': attribute type 10 has an invalid length. [ 101.814092][ T6028] netlink: 2 bytes leftover after parsing attributes in process `syz.3.37'. [ 101.848431][ T6028] bond0: entered promiscuous mode [ 101.880111][ T6028] bond_slave_0: entered promiscuous mode [ 101.900199][ T6028] bond_slave_1: entered promiscuous mode [ 101.906742][ T6028] bridge0: port 3(bond0) entered blocking state [ 101.913928][ T6028] bridge0: port 3(bond0) entered disabled state [ 101.923003][ T6028] bond0: entered allmulticast mode [ 101.928557][ T6028] bond_slave_0: entered allmulticast mode [ 101.934586][ T6028] bond_slave_1: entered allmulticast mode [ 101.946925][ T6035] fuse: Bad value for 'fd' [ 101.986332][ T6028] bridge0: port 3(bond0) entered blocking state [ 101.993191][ T6028] bridge0: port 3(bond0) entered forwarding state [ 102.508377][ T5900] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 102.658450][ T5900] usb 3-1: Using ep0 maxpacket: 32 [ 102.672466][ T5900] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 102.697830][ T6059] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 102.700775][ T5900] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 102.728433][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 102.728599][ T6059] overlayfs: missing 'lowerdir' [ 102.744919][ T5900] usb 3-1: Product: syz [ 102.749198][ T5900] usb 3-1: Manufacturer: syz [ 102.753920][ T5900] usb 3-1: SerialNumber: syz [ 102.802460][ T5900] usb 3-1: config 0 descriptor?? [ 102.819224][ T6042] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 102.874340][ T6061] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 102.972997][ T6065] fuse: Bad value for 'fd' [ 104.022038][ T6085] proc: Bad value for 'gid' [ 104.103210][ T6087] binfmt_misc: register: failed to install interpreter file éq‰Y’3aK [ 104.297838][ T6089] fuse: Bad value for 'fd' [ 105.250127][ T5838] usb 3-1: USB disconnect, device number 3 [ 105.988399][ T800] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 106.140165][ T800] usb 1-1: Using ep0 maxpacket: 32 [ 106.151045][ T6144] kernel read not supported for file /cpuacct.usage_percpu (pid: 6144 comm: syz.2.88) [ 106.171223][ T800] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 106.185203][ T29] audit: type=1800 audit(1769517331.006:2): pid=6144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.88" name="cpuacct.usage_percpu" dev="mqueue" ino=8933 res=0 errno=0 [ 106.227144][ T800] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 106.236660][ T800] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 106.253094][ T800] usb 1-1: Product: syz [ 106.261897][ T800] usb 1-1: Manufacturer: syz [ 106.266568][ T800] usb 1-1: SerialNumber: syz [ 106.344459][ T800] usb 1-1: config 0 descriptor?? [ 106.369208][ T6126] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 106.963638][ T6170] netlink: 164 bytes leftover after parsing attributes in process `syz.1.100'. [ 107.221328][ T6180] syzkaller0: entered promiscuous mode [ 107.227089][ T6180] syzkaller0: entered allmulticast mode [ 107.247808][ T6179] netlink: 'syz.2.105': attribute type 29 has an invalid length. [ 107.256498][ T6179] netlink: 'syz.2.105': attribute type 3 has an invalid length. [ 107.266092][ T6179] netlink: 132 bytes leftover after parsing attributes in process `syz.2.105'. [ 107.634207][ T6191] netlink: 'syz.3.109': attribute type 2 has an invalid length. [ 107.642193][ T6191] netlink: 'syz.3.109': attribute type 8 has an invalid length. [ 107.651660][ T6191] netlink: 132 bytes leftover after parsing attributes in process `syz.3.109'. [ 107.894510][ T6198] pim6reg: tun_chr_ioctl cmd 2147767519 [ 108.645871][ T6223] process 'syz.3.120' launched './file0' with NULL argv: empty string added [ 108.828427][ T5892] usb 1-1: USB disconnect, device number 2 [ 109.968554][ T5892] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 110.209883][ T5892] usb 2-1: config 0 has no interfaces? [ 110.280703][ T5892] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 110.308763][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.317826][ T5892] usb 2-1: Product: syz [ 110.322166][ T5892] usb 2-1: Manufacturer: syz [ 110.326766][ T5892] usb 2-1: SerialNumber: syz [ 110.335270][ T5892] usb 2-1: config 0 descriptor?? [ 110.338622][ T5843] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 110.918708][ T5843] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 110.940950][ T5843] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 110.950716][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.959134][ T5843] usb 4-1: Product: syz [ 110.963358][ T5843] usb 4-1: Manufacturer: syz [ 110.968017][ T5843] usb 4-1: SerialNumber: syz [ 111.038120][ T5843] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 111.413628][ T6244] support for cryptoloop has been removed. Use dm-crypt instead. [ 111.458853][ T5843] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 111.497471][ T5843] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 111.520734][ T5843] usb 4-1: media controller created [ 111.633562][ T5843] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 111.888567][ T800] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 111.924549][ T5843] usb 4-1: USB disconnect, device number 3 [ 112.060579][ T800] usb 1-1: Using ep0 maxpacket: 8 [ 112.083030][ T800] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 112.098561][ T800] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 112.109486][ T800] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 112.122130][ T800] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.141983][ T800] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 112.158101][ T800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.386269][ T800] usb 1-1: GET_CAPABILITIES returned 0 [ 112.393100][ T800] usbtmc 1-1:16.0: can't read capabilities [ 112.470619][ T5843] usb 2-1: USB disconnect, device number 3 [ 112.566135][ T800] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 112.610945][ T5928] usb 1-1: USB disconnect, device number 3 [ 112.728702][ T800] usb 3-1: Using ep0 maxpacket: 32 [ 112.736305][ T800] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 112.750981][ T800] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 112.760500][ T800] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 112.769989][ T800] usb 3-1: Product: syz [ 112.774335][ T800] usb 3-1: Manufacturer: syz [ 112.779086][ T800] usb 3-1: SerialNumber: syz [ 112.786197][ T800] usb 3-1: config 0 descriptor?? [ 112.792441][ T6254] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 112.879515][ T984] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 112.998430][ T5843] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 113.040299][ T984] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 113.048949][ T984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.060652][ T984] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 113.070060][ T984] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 113.079285][ T984] usb 4-1: Manufacturer: syz [ 113.087244][ T984] usb 4-1: config 0 descriptor?? [ 113.168358][ T984] rc_core: IR keymap rc-hauppauge not found [ 113.168530][ T5843] usb 2-1: Using ep0 maxpacket: 32 [ 113.174320][ T984] Registered IR keymap rc-empty [ 113.189781][ T5843] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 113.200481][ T5843] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 113.213456][ T5843] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 113.225006][ T984] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 113.226940][ T5843] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 113.254300][ T5843] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 113.266892][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.275245][ T5843] usb 2-1: Product: syz [ 113.279727][ T5843] usb 2-1: Manufacturer: syz [ 113.286461][ T5843] usb 2-1: SerialNumber: syz [ 113.307371][ T984] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input6 [ 113.346519][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 113.371906][ T5843] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input7 [ 113.385997][ T984] usb 4-1: USB disconnect, device number 4 [ 113.594814][ T5843] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 113.603481][ T5843] (id 0x00) [ 113.679429][ T5843] rc_core: IR keymap rc-imon-pad not found [ 113.690387][ T5843] Registered IR keymap rc-empty [ 113.697929][ T5843] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 113.712541][ T5843] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 113.798533][ T5843] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 113.825021][ T5843] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input8 [ 113.844873][ T5843] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:4> initialized [ 114.101641][ T5838] usb 2-1: USB disconnect, device number 4 [ 114.888390][ T5843] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 115.058871][ T5843] usb 1-1: Using ep0 maxpacket: 8 [ 115.070952][ T5843] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 115.085031][ T5843] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 115.096818][ T5843] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 115.115679][ T5843] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 115.133142][ T5843] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 115.145339][ T5843] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid wMaxPacketSize 0 [ 115.156040][ T5843] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 115.170038][ T5843] usb 1-1: config 168 interface 0 has no altsetting 0 [ 115.180915][ T5843] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 115.188819][ T5843] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 115.200625][ T5843] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 115.212857][ T5843] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 115.225415][ T5843] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 115.239458][ T5843] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid wMaxPacketSize 0 [ 115.248693][ T5838] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 115.250965][ T5843] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 115.271315][ T5843] usb 1-1: config 168 interface 0 has no altsetting 0 [ 115.280278][ T5843] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 115.287977][ T5843] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 115.308465][ T5843] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 115.334060][ T5843] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 115.360645][ T5843] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 115.382011][ T5892] usb 3-1: USB disconnect, device number 4 [ 115.384071][ T5843] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid wMaxPacketSize 0 [ 115.425308][ T5838] usb 2-1: config 0 has no interfaces? [ 115.428521][ T5843] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 115.461140][ T5838] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 115.467117][ T5843] usb 1-1: config 168 interface 0 has no altsetting 0 [ 115.477667][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 115.499156][ T5838] usb 2-1: Product: syz [ 115.503397][ T5838] usb 2-1: Manufacturer: syz [ 115.508804][ T6303] binder: 6302:6303 ioctl 4018620d 0 returned -22 [ 115.522818][ T5843] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 115.532261][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.553760][ T5838] usb 2-1: config 0 descriptor?? [ 115.559607][ T5843] usb 1-1: Product: syz [ 115.581846][ T5843] usb 1-1: Manufacturer: syz [ 115.593173][ T5843] usb 1-1: SerialNumber: syz [ 115.599948][ T6305] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.785009][ T6297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.801113][ T6297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.817497][ T5892] usb 2-1: USB disconnect, device number 5 [ 115.854200][ T5843] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 115.887679][ T5843] usb 1-1: USB disconnect, device number 4 [ 116.008503][ T984] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 116.170083][ T984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.181095][ T984] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 116.190250][ T984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.201089][ T984] usb 4-1: config 0 descriptor?? [ 116.268414][ T5892] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 116.278453][ T5900] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 116.430691][ T5892] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 116.441462][ T5900] usb 2-1: config 0 has an invalid interface number: 168 but max is 0 [ 116.450011][ T5900] usb 2-1: config 0 has no interface number 0 [ 116.457119][ T5900] usb 2-1: config 0 interface 168 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 116.470382][ T5900] usb 2-1: config 0 interface 168 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 116.481437][ T5900] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 116.492571][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.502511][ T5892] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 116.519649][ T5900] usb 2-1: config 0 descriptor?? [ 116.526262][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.536469][ T5892] usb 3-1: Product: syz [ 116.541009][ T5892] usb 3-1: Manufacturer: syz [ 116.545634][ T5892] usb 3-1: SerialNumber: syz [ 116.560641][ T5892] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 116.621651][ T984] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 116.635587][ T984] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0001/input/input9 [ 116.649696][ T5838] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 116.739211][ T5900] usb 2-1: string descriptor 0 read error: -71 [ 116.751164][ T984] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 116.773949][ T5900] keyspan 2-1:0.168: Keyspan 2 port adapter converter detected [ 116.783988][ T5900] keyspan 2-1:0.168: found no endpoint descriptor for endpoint 81 [ 116.799251][ T5900] keyspan 2-1:0.168: found no endpoint descriptor for endpoint 84 [ 116.809827][ T5838] usb 1-1: Using ep0 maxpacket: 32 [ 116.818378][ T5838] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 116.835910][ C0] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000038: 0000 [#1] SMP KASAN PTI [ 116.847861][ C0] KASAN: null-ptr-deref in range [0x00000000000001c0-0x00000000000001c7] [ 116.856514][ C0] CPU: 0 UID: 0 PID: 6321 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 116.866977][ C0] Tainted: [L]=SOFTLOCKUP [ 116.871331][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 116.881452][ C0] RIP: 0010:__queue_work+0xa2/0xf90 [ 116.886703][ C0] Code: 11 31 ff 89 ee e8 4e f4 37 00 85 ed 0f 85 ef 0c 00 00 e8 01 f0 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 22 0d 00 00 4c 89 34 24 41 8b 2e 89 ee [ 116.906348][ C0] RSP: 0018:ffffc90000006ed8 EFLAGS: 00010002 [ 116.912464][ C0] RAX: 0000000000000038 RBX: 0000000000000008 RCX: 0000000000040000 [ 116.920461][ C0] RDX: ffffc90002181000 RSI: 00000000000005bb RDI: 00000000000005bc [ 116.928461][ C0] RBP: 0000000000000000 R08: ffff88813fe32017 R09: 1ffff11027fc6402 [ 116.936553][ C0] R10: dffffc0000000000 R11: ffffed1027fc6403 R12: dffffc0000000000 [ 116.944581][ C0] R13: ffff88813fe32010 R14: 00000000000001c0 R15: 0000000000000000 [ 116.952586][ C0] FS: 00007ff96ad6d880(0000) GS:ffff888125063000(0000) knlGS:0000000000000000 [ 116.961555][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 116.968182][ C0] CR2: 00007ff96a7212c0 CR3: 0000000077e76000 CR4: 00000000003526f0 [ 116.976203][ C0] Call Trace: [ 116.979508][ C0] [ 116.982381][ C0] ? __asan_memcpy+0x40/0x70 [ 116.987012][ C0] ? __tty_insert_flip_string_flags+0x3e9/0x430 [ 116.993287][ C0] queue_work_on+0x106/0x1d0 [ 116.997913][ C0] puts_queue+0xa3/0xe0 [ 117.002099][ C0] ? __pfx_puts_queue+0x10/0x10 [ 117.006979][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 117.012130][ C0] ? rcu_is_watching+0x15/0xb0 [ 117.016929][ C0] k_fn+0x7c/0xd0 [ 117.020592][ C0] k_pad+0x79a/0xa90 [ 117.024518][ C0] ? lock_acquire+0x106/0x330 [ 117.029273][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 117.035116][ C0] ? __pfx_k_pad+0x10/0x10 [ 117.039571][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 117.045409][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 117.051245][ C0] kbd_event+0x2ec1/0x40d0 [ 117.055681][ C0] ? kernel_fpu_end+0x4f/0x80 [ 117.060389][ C0] ? blake2s_compress+0x1e17/0x1eb0 [ 117.065620][ C0] ? __pfx_kbd_event+0x10/0x10 [ 117.070411][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 117.075398][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 117.080415][ C0] ? __pfx_blake2s_compress+0x10/0x10 [ 117.085835][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 117.090809][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 117.095795][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 117.100863][ C0] ? input_pass_values+0x8d/0x890 [ 117.105920][ C0] ? lock_acquire+0x106/0x330 [ 117.110629][ C0] ? input_pass_values+0x8d/0x890 [ 117.115685][ C0] input_handle_events_default+0xd4/0x1a0 [ 117.121442][ C0] ? input_pass_values+0x8d/0x890 [ 117.126854][ C0] input_pass_values+0x288/0x890 [ 117.131849][ C0] ? input_handle_event+0xc35/0xf30 [ 117.137100][ C0] input_event_dispose+0x3e5/0x6b0 [ 117.142257][ C0] input_event+0x89/0xe0 [ 117.146557][ C0] hidinput_hid_event+0x1487/0x1e60 [ 117.151791][ C0] ? __pfx_hidinput_hid_event+0x10/0x10 [ 117.157366][ C0] ? hidinput_hid_event+0x14b6/0x1e60 [ 117.162856][ C0] hid_process_event+0x4be/0x620 [ 117.167828][ C0] hid_input_array_field+0x41c/0x5f0 [ 117.173141][ C0] hid_report_raw_event+0xdd7/0x1720 [ 117.178479][ C0] hid_input_report+0x44b/0x580 [ 117.183391][ C0] hid_irq_in+0x47e/0x6d0 [ 117.187756][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 117.193242][ C0] dummy_timer+0xbbd/0x45d0 [ 117.197800][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 117.202775][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 117.208604][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 117.213568][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 117.218539][ C0] __hrtimer_run_queues+0x529/0xc30 [ 117.223778][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 117.229532][ C0] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 117.235634][ C0] hrtimer_run_softirq+0x182/0x5a0 [ 117.240799][ C0] handle_softirqs+0x22a/0x7c0 [ 117.245610][ C0] ? do_softirq+0x76/0xd0 [ 117.249990][ C0] ? kernel_fpu_end+0x62/0x80 [ 117.254713][ C0] do_softirq+0x76/0xd0 [ 117.258893][ C0] [ 117.261841][ C0] [ 117.264789][ C0] __local_bh_enable_ip+0xf8/0x130 [ 117.269923][ C0] __sha256_update+0xf7/0x150 [ 117.274651][ C0] crypto_sha256_update+0x27/0x40 [ 117.279744][ C0] ima_calc_file_hash+0x1300/0x17f0 [ 117.285004][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 117.289979][ C0] ? folio_mark_accessed+0x442/0x8c0 [ 117.295295][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 117.300630][ C0] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 117.306217][ C0] ? fill_mg_cmtime+0x26c/0x4c0 [ 117.311119][ C0] ? generic_fillattr+0x66e/0x9a0 [ 117.316172][ C0] ? ext4_getattr+0x6dd/0x880 [ 117.320887][ C0] ? ext4_file_getattr+0x1e2/0x310 [ 117.326028][ C0] ima_collect_measurement+0x48b/0x930 [ 117.331516][ C0] ? __pfx_ima_collect_measurement+0x10/0x10 [ 117.337540][ C0] ? __pfx___up_read+0x10/0x10 [ 117.342362][ C0] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 117.347857][ C0] process_measurement+0x12cd/0x1c80 [ 117.353182][ C0] ? __pfx_process_measurement+0x10/0x10 [ 117.358859][ C0] ? tomoyo_find_next_domain+0x1730/0x1aa0 [ 117.364718][ C0] ima_bprm_check+0x121/0x180 [ 117.369429][ C0] ? __pfx_ima_bprm_check+0x10/0x10 [ 117.374653][ C0] ? tomoyo_bprm_check_security+0xef/0x180 [ 117.380488][ C0] ? tomoyo_bprm_check_security+0xef/0x180 [ 117.386326][ C0] ? tomoyo_bprm_check_security+0xef/0x180 [ 117.392262][ C0] ? tomoyo_bprm_check_security+0x161/0x180 [ 117.398196][ C0] security_bprm_check+0xcd/0x240 [ 117.403265][ C0] bprm_execve+0x896/0x1410 [ 117.407811][ C0] ? __pfx_bprm_execve+0x10/0x10 [ 117.412798][ C0] ? count+0x1e0/0x230 [ 117.416907][ C0] do_execveat_common+0x50d/0x690 [ 117.421979][ C0] __x64_sys_execve+0x97/0xc0 [ 117.426693][ C0] do_syscall_64+0xe2/0xf80 [ 117.431236][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.437331][ C0] ? trace_irq_disable+0x37/0x100 [ 117.442398][ C0] ? clear_bhb_loop+0x40/0x90 [ 117.447113][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.453036][ C0] RIP: 0033:0x7ff96a6f2107 [ 117.457507][ C0] Code: 0f 00 64 c7 00 07 00 00 00 b8 ff ff ff ff c9 c3 0f 1f 00 48 8b 05 a9 ee 0f 00 48 8b 10 e9 01 00 00 00 90 b8 3b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 ec 0f 00 f7 d8 64 89 01 48 [ 117.477142][ C0] RSP: 002b:00007ffdc5b27f48 EFLAGS: 00000206 ORIG_RAX: 000000000000003b [ 117.485588][ C0] RAX: ffffffffffffffda RBX: 0000555bdd373140 RCX: 00007ff96a6f2107 [ 117.493596][ C0] RDX: 0000555bf0f32340 RSI: 00007ffdc5b28060 RDI: 00007ffdc5b28860 [ 117.501596][ C0] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 117.509588][ C0] R10: 0000000000000008 R11: 0000000000000206 R12: 0000555bf0f32340 [ 117.517593][ C0] R13: 00007ffdc5b28060 R14: 000000000000000d R15: 0000000000000009 [ 117.525601][ C0] [ 117.528645][ C0] Modules linked in: [ 117.532615][ C0] ---[ end trace 0000000000000000 ]--- [ 117.538088][ C0] RIP: 0010:__queue_work+0xa2/0xf90 [ 117.543322][ C0] Code: 11 31 ff 89 ee e8 4e f4 37 00 85 ed 0f 85 ef 0c 00 00 e8 01 f0 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 22 0d 00 00 4c 89 34 24 41 8b 2e 89 ee [ 117.562959][ C0] RSP: 0018:ffffc90000006ed8 EFLAGS: 00010002 [ 117.569056][ C0] RAX: 0000000000000038 RBX: 0000000000000008 RCX: 0000000000040000 [ 117.577045][ C0] RDX: ffffc90002181000 RSI: 00000000000005bb RDI: 00000000000005bc [ 117.585039][ C0] RBP: 0000000000000000 R08: ffff88813fe32017 R09: 1ffff11027fc6402 [ 117.593042][ C0] R10: dffffc0000000000 R11: ffffed1027fc6403 R12: dffffc0000000000 [ 117.601049][ C0] R13: ffff88813fe32010 R14: 00000000000001c0 R15: 0000000000000000 [ 117.609052][ C0] FS: 00007ff96ad6d880(0000) GS:ffff888125063000(0000) knlGS:0000000000000000 [ 117.618011][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.624619][ C0] CR2: 00007ff96a7212c0 CR3: 0000000077e76000 CR4: 00000000003526f0 [ 117.632622][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 117.640430][ C0] Kernel Offset: disabled [ 117.644778][ C0] Rebooting in 86400 seconds..