last executing test programs: 25.899444559s ago: executing program 2 (id=724): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x6}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 24.390172043s ago: executing program 2 (id=728): lgetxattr(0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0) 24.124804962s ago: executing program 2 (id=731): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[], 0x240}}, 0x4000880) 23.564117902s ago: executing program 2 (id=732): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f00000048c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpgid(0x0) sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="000301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSFLAG(r5, 0x4004480f, &(0x7f0000000000)=0x3) ioctl$HIDIOCGUSAGE(r5, 0xc018480b, 0x0) readv(r5, &(0x7f0000000180)=[{&(0x7f0000000140)=""/49, 0x31}], 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r7, 0x4020aed2, 0x0) 21.892942004s ago: executing program 3 (id=735): socket$inet6_mptcp(0xa, 0x1, 0x106) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x4c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "57b8"}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 16.687248661s ago: executing program 3 (id=747): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x6}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 15.328170645s ago: executing program 3 (id=751): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x37, 0x5, 0x7b, 0x8, 0x82d, 0x300, 0xc34b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x6, 0x0, 0x0, 0x8, 0x1, 0xb8, 0x8}}]}}]}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x30, r4, 0x11, 0x72bd2b, 0x25dfdbbd, {{}, {@val={0x8, 0x1, 0x87a}, @val={0x8}, @val={0xc, 0x99, {0xfffffffb, 0xfffffffc}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x10) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0xe8902, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x19) ioctl$TIOCSSOFTCAR(r5, 0x40085500, &(0x7f0000000080)=0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffff60fc0000000000000000000000000000000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000000000000000300"/180], 0xfc}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xe0}, 0x2}, [@migrate={0x9c, 0x11, [{@in=@private=0xa010100, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2, @in6=@local, 0x33, 0x0, 0x0, 0x2, 0x2, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x11, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r8}}, 0x58) syz_usb_connect(0x5, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x8d, 0x32, 0xd5, 0x8, 0x5ef, 0x8884, 0xd3dd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x35, 0xe8, 0x9, [{{0x9, 0x4, 0x3, 0x0, 0x0, 0xc0, 0x6, 0xd7, 0x52}}]}}]}}, 0x0) 10.74347966s ago: executing program 2 (id=757): socket$inet6_mptcp(0xa, 0x1, 0x106) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x4c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "57b8"}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 9.320603957s ago: executing program 0 (id=760): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000000514010026bd700000"], 0x20}, 0x1, 0x0, 0x0, 0x8050}, 0x0) 9.195964322s ago: executing program 0 (id=761): set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0xe) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000001000)={0x321a08000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 9.003017256s ago: executing program 3 (id=762): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 8.769258469s ago: executing program 0 (id=763): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x8, 0xa, [{0xd, 0x2}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x200006, 0x1}], 0x7, 0xff, 0x6, 0x1, 0x5}}}) 8.53287452s ago: executing program 0 (id=764): fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b784fceefd131b8e6238c25f5998e5bf421e48f4b0a501922de974a3300", 0xffffffffffffffff}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000180)={"2486970284ed923431d400001f000000a9201be943f06f2f4000", r3, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f00000002c0)=0x7) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000240)={"8c5d2ddcdba01c2b0e062db91ec2209d789c4dcce0ab20c5fa0b8a204e3b856a", r4}) r5 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8.340407877s ago: executing program 4 (id=765): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x1, 0xf0, 0x4}, 0x1}, 0x18) connect$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x2, {0x0, 0xf0, 0x4}, 0x1}, 0x18) 8.20167529s ago: executing program 0 (id=766): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0xa, &(0x7f0000ffb000/0x3000)=nil) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000000)={0x6, 'veth0_to_team\x00', {0x9}, 0xff}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000080)="441f08100000009837a0324d7df546bcb8e8c94efe76cef3e200000000", 0x1d) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x87da4854b9abaabb, &(0x7f00000000c0)={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={0x0}, 0x1, 0x0, 0x0, 0x20}, 0x20000880) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0xc005, 0x0, 0x5) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000010140)=ANY=[@ANYBLOB="2000000076000700000000000000000003000000000000000800010004"], 0x20}}, 0x0) r6 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae\x01\x91&6n \xf2<\xd6\xcf\x15\xd3\xd7\x1d\xa7=\xef\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa0\xbbL}\xcc\'(;\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1b\b>Z\x8e\xb1\xc3j$v\xef,\x06/\x00\x00\x00\x00\x00\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81\x00\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x92) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 7.991642332s ago: executing program 4 (id=767): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0xe400000e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x125441, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000005c0)="79c320", 0x3}], 0x1) 7.601220394s ago: executing program 3 (id=768): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x22}, 0x94) r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r1 = dup(r0) write$binfmt_elf32(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c464a030103ff0700000000000002000300040000003e03000038000000d600000097700000fe03200001000700080007000000000003"], 0x58) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x40001004, r1, 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 7.229968308s ago: executing program 4 (id=769): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=@newqdisc={0x148, 0x24, 0x20, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x8, 0x4, 0x9, 0x7, 0x0, 0x15, 0x6}}, @TCA_RED_STAB={0x104, 0x2, "00002000002002ed88a27e0018f98b7839cd07000690fef6de4af82765208b02c459e0eda4f7f156b0fbab5f2136cf007c57c8c6328e2b3a3c775bcfcc83eec9d5117732ee94044d7fb5ed414036f14151f2feda1116a2599801a213148d513e08fbf879c19e2f3e66804f5123c2403c49bd2be98bafd622d130f8b06ebf7fe936e8566fbc9e3a570a9c0e514456e6506fd25dc99f2e1e28de67fba3aa586338b5861bbb1d914b05f902c31f06ee32350d9fec6d41b4917eca1ff55e5763298ed102ed73a19a1f456a1e27164ee57a19c578bb66ff569149aff95d6b5b963a819ca8e79f10372fe22f0439026c469d99febd3fedd63000"}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20004941}, 0x400081c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x5, 0x2, 0x3, 0x4, 0x0, 0xfffffff6, 0x8, 0x5}}}}]}, 0x58}}, 0x20040084) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054) 7.045876919s ago: executing program 3 (id=770): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8003, 0x0, 0xe1, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="09000000000000000000000000000000000000000900010073"], 0x34}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, 0x7}, 0x1c) ioctl$FITHAW(r3, 0xc0045878) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$kcm(0x29, 0x5, 0x0) accept4(r4, 0x0, 0x0, 0x80000) syz_usb_connect(0x1, 0x24, 0x0, 0x0) syz_io_uring_setup(0x4cbf, &(0x7f0000000380)={0x0, 0x64bb, 0x1000, 0x2, 0x2ce}, &(0x7f0000000400), &(0x7f0000000440)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000040)) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800d1}, 0x0) 7.0165351s ago: executing program 4 (id=771): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000000514010026bd700000"], 0x20}, 0x1, 0x0, 0x0, 0x8050}, 0x0) 6.647300652s ago: executing program 4 (id=772): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x37, 0x5, 0x7b, 0x8, 0x82d, 0x300, 0xc34b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x6, 0x0, 0x0, 0x8, 0x1, 0xb8, 0x8}}]}}]}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x30, r4, 0x11, 0x72bd2b, 0x25dfdbbd, {{}, {@val={0x8, 0x1, 0x87a}, @val={0x8}, @val={0xc, 0x99, {0xfffffffb, 0xfffffffc}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x10) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0xe8902, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x19) ioctl$TIOCSSOFTCAR(r5, 0x40085500, &(0x7f0000000080)=0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffff60fc0000000000000000000000000000000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000000000000000300"/180], 0xfc}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xe0}, 0x2}, [@migrate={0x9c, 0x11, [{@in=@private=0xa010100, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2, @in6=@local, 0x33, 0x0, 0x0, 0x2, 0x2, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x11, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r8}}, 0x58) syz_usb_connect(0x5, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x8d, 0x32, 0xd5, 0x8, 0x5ef, 0x8884, 0xd3dd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x35, 0xe8, 0x9, [{{0x9, 0x4, 0x3, 0x0, 0x0, 0xc0, 0x6, 0xd7, 0x52}}]}}]}}, 0x0) 6.41587822s ago: executing program 2 (id=773): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) r1 = creat(0x0, 0x80) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, 0x0, 0x4000084) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r8, 0x0, 0x0) 6.298851178s ago: executing program 1 (id=774): set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0xe) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000001000)={0x321a08000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 6.033069687s ago: executing program 1 (id=775): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000100)={'team_slave_1\x00', @ifru_ivalue=0x2}) 5.701011164s ago: executing program 1 (id=776): fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b784fceefd131b8e6238c25f5998e5bf421e48f4b0a501922de974a3300", 0xffffffffffffffff}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000180)={"2486970284ed923431d400001f000000a9201be943f06f2f4000", r3, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f00000002c0)=0x7) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000240)={"8c5d2ddcdba01c2b0e062db91ec2209d789c4dcce0ab20c5fa0b8a204e3b856a", r4}) r5 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.015945043s ago: executing program 0 (id=777): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f0000001480)=[{0x50, 0x8001, 0x0, 0x0}, {0x8, 0x11, 0x0, 0x0}], 0x2}) 4.98610184s ago: executing program 1 (id=778): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 3.340974136s ago: executing program 1 (id=779): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_audit(0x10, 0x3, 0x9) landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x40000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060018000100000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x54}}, 0x0) 2.681432622s ago: executing program 1 (id=780): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r1 = dup(r0) write$binfmt_elf32(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c464a030103ff0700000000000002000300040000003e03000038000000d600000097700000fe03200001000700080007000000000003"], 0x58) fanotify_init(0x200, 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.90' (ED25519) to the list of known hosts. [ 80.822971][ T5791] cgroup: Unknown subsys name 'net' [ 81.063253][ T5791] cgroup: Unknown subsys name 'cpuset' [ 81.118697][ T5791] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.944335][ T5791] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.691383][ T5122] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.701666][ T5808] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.704818][ T5808] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.709296][ T5808] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.710881][ T5808] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.716352][ T5808] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.721030][ T5812] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.773896][ T5812] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.787722][ T5812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.797629][ T5808] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.806077][ T5812] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.815159][ T5812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.817041][ T5122] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.836129][ T5812] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.843773][ T5808] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.852289][ T5812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.859173][ T5814] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.871533][ T5814] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.877818][ T5814] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.883535][ T5814] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.922333][ T5814] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.924088][ T5814] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.924924][ T5814] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.951806][ T5814] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.978262][ T5814] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.835506][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 86.876680][ T921] cfg80211: failed to load regulatory.db [ 86.908496][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 86.917249][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 87.159176][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 87.249396][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 87.749962][ T5122] Bluetooth: hci0: command tx timeout [ 87.908333][ T5122] Bluetooth: hci3: command tx timeout [ 87.909729][ T5122] Bluetooth: hci2: command tx timeout [ 87.909737][ T5814] Bluetooth: hci1: command tx timeout [ 87.955418][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.956687][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.957266][ T5802] bridge_slave_0: entered allmulticast mode [ 87.959836][ T5802] bridge_slave_0: entered promiscuous mode [ 88.048997][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.049069][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.049175][ T5804] bridge_slave_0: entered allmulticast mode [ 88.050704][ T5804] bridge_slave_0: entered promiscuous mode [ 88.068190][ T5814] Bluetooth: hci4: command tx timeout [ 88.074863][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.074987][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.075197][ T5802] bridge_slave_1: entered allmulticast mode [ 88.077847][ T5802] bridge_slave_1: entered promiscuous mode [ 88.103200][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.103319][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.103647][ T5809] bridge_slave_0: entered allmulticast mode [ 88.105314][ T5809] bridge_slave_0: entered promiscuous mode [ 88.144713][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.144841][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.145007][ T5804] bridge_slave_1: entered allmulticast mode [ 88.146803][ T5804] bridge_slave_1: entered promiscuous mode [ 88.439086][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.439191][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.439310][ T5809] bridge_slave_1: entered allmulticast mode [ 88.440811][ T5809] bridge_slave_1: entered promiscuous mode [ 88.829154][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.829421][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.829608][ T5818] bridge_slave_0: entered allmulticast mode [ 88.831908][ T5818] bridge_slave_0: entered promiscuous mode [ 88.837276][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.837506][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.837625][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.837787][ T5805] bridge_slave_0: entered allmulticast mode [ 88.870681][ T5805] bridge_slave_0: entered promiscuous mode [ 88.953057][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.953282][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.953427][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.953592][ T5818] bridge_slave_1: entered allmulticast mode [ 88.955407][ T5818] bridge_slave_1: entered promiscuous mode [ 88.962013][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.962219][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.962340][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.962497][ T5805] bridge_slave_1: entered allmulticast mode [ 88.964992][ T5805] bridge_slave_1: entered promiscuous mode [ 89.102910][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.106250][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.311228][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.782161][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.785312][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.787494][ T5802] team0: Port device team_slave_0 added [ 89.828365][ T5814] Bluetooth: hci0: command tx timeout [ 89.881105][ T5804] team0: Port device team_slave_0 added [ 89.883624][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.885844][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.887556][ T5802] team0: Port device team_slave_1 added [ 89.892488][ T5809] team0: Port device team_slave_0 added [ 89.894968][ T5804] team0: Port device team_slave_1 added [ 89.988871][ T5814] Bluetooth: hci2: command tx timeout [ 89.988903][ T5814] Bluetooth: hci1: command tx timeout [ 89.989114][ T5122] Bluetooth: hci3: command tx timeout [ 90.148636][ T5122] Bluetooth: hci4: command tx timeout [ 90.162757][ T5809] team0: Port device team_slave_1 added [ 90.870935][ T5818] team0: Port device team_slave_0 added [ 90.876626][ T5805] team0: Port device team_slave_0 added [ 90.879043][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.879058][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.879079][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.999698][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.999714][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.999736][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.002198][ T5818] team0: Port device team_slave_1 added [ 91.003948][ T5805] team0: Port device team_slave_1 added [ 91.004611][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.004618][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.004632][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.005771][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.005778][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.005790][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.007115][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.007135][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.007157][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.308238][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.308254][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.308288][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.530705][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.530716][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.530729][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.531901][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.531915][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.531936][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.536356][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.536366][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.536380][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.628646][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.628663][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.628686][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.908694][ T5122] Bluetooth: hci0: command tx timeout [ 91.927730][ T5802] hsr_slave_0: entered promiscuous mode [ 91.934859][ T5802] hsr_slave_1: entered promiscuous mode [ 92.012859][ T5804] hsr_slave_0: entered promiscuous mode [ 92.013708][ T5804] hsr_slave_1: entered promiscuous mode [ 92.014399][ T5804] debugfs: 'hsr0' already exists in 'hsr' [ 92.014479][ T5804] Cannot create hsr debugfs directory [ 92.042409][ T5809] hsr_slave_0: entered promiscuous mode [ 92.043240][ T5809] hsr_slave_1: entered promiscuous mode [ 92.043784][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 92.043804][ T5809] Cannot create hsr debugfs directory [ 92.068374][ T5814] Bluetooth: hci2: command tx timeout [ 92.068499][ T5122] Bluetooth: hci3: command tx timeout [ 92.068561][ T61] Bluetooth: hci1: command tx timeout [ 92.228201][ T61] Bluetooth: hci4: command tx timeout [ 92.424948][ T5818] hsr_slave_0: entered promiscuous mode [ 92.425778][ T5818] hsr_slave_1: entered promiscuous mode [ 92.426322][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 92.426342][ T5818] Cannot create hsr debugfs directory [ 92.531699][ T5805] hsr_slave_0: entered promiscuous mode [ 92.532535][ T5805] hsr_slave_1: entered promiscuous mode [ 92.533068][ T5805] debugfs: 'hsr0' already exists in 'hsr' [ 92.533089][ T5805] Cannot create hsr debugfs directory [ 93.988705][ T61] Bluetooth: hci0: command tx timeout [ 94.040949][ T5802] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.079322][ T5802] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.117128][ T5802] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.149714][ T5814] Bluetooth: hci2: command tx timeout [ 94.149757][ T5122] Bluetooth: hci3: command tx timeout [ 94.149785][ T61] Bluetooth: hci1: command tx timeout [ 94.176426][ T5802] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.273681][ T5804] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.308243][ T61] Bluetooth: hci4: command tx timeout [ 94.309349][ T5804] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.375814][ T5804] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.413030][ T5804] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.530777][ T5809] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.565071][ T5809] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.585156][ T5809] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.647905][ T5809] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.770044][ T5805] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.806736][ T5805] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.827140][ T5805] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.884622][ T5805] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.031809][ T5818] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.075967][ T5818] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.116353][ T5818] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.157842][ T5818] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.181035][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.251327][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.290300][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.325127][ T3520] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.326049][ T3520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.369481][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.369560][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.374591][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.429742][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.429954][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.435427][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.476569][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.476734][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.552777][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.577335][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.589255][ T3520] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.589369][ T3520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.641720][ T3520] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.641846][ T3520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.701396][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.763485][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.783000][ T3443] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.783144][ T3443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.817591][ T3520] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.817832][ T3520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.937077][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.995187][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.995396][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.054581][ T3557] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.054660][ T3557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.197192][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.393820][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.464746][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.489220][ T5802] veth0_vlan: entered promiscuous mode [ 96.569454][ T5802] veth1_vlan: entered promiscuous mode [ 96.724332][ T5804] veth0_vlan: entered promiscuous mode [ 96.770839][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.786312][ T5804] veth1_vlan: entered promiscuous mode [ 96.813326][ T5802] veth0_macvtap: entered promiscuous mode [ 96.847528][ T5802] veth1_macvtap: entered promiscuous mode [ 96.874601][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.958818][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.983465][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.984630][ T5804] veth0_macvtap: entered promiscuous mode [ 97.022885][ T5804] veth1_macvtap: entered promiscuous mode [ 97.041352][ T1591] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.061146][ T1591] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.063939][ T5805] veth0_vlan: entered promiscuous mode [ 97.064357][ T1591] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.078428][ T1591] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.156238][ T5805] veth1_vlan: entered promiscuous mode [ 97.171598][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.236782][ T5818] veth0_vlan: entered promiscuous mode [ 97.251218][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.333850][ T5809] veth0_vlan: entered promiscuous mode [ 97.345466][ T3443] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.360896][ T3443] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.371914][ T5818] veth1_vlan: entered promiscuous mode [ 97.385276][ T3443] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.396939][ T3443] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.415483][ T5809] veth1_vlan: entered promiscuous mode [ 97.505827][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.505855][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.580905][ T5805] veth0_macvtap: entered promiscuous mode [ 97.655719][ T5805] veth1_macvtap: entered promiscuous mode [ 97.714822][ T1591] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.714841][ T1591] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.716885][ T5818] veth0_macvtap: entered promiscuous mode [ 97.784254][ T5818] veth1_macvtap: entered promiscuous mode [ 97.786340][ T5809] veth0_macvtap: entered promiscuous mode [ 97.824812][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.825177][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.825192][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.866519][ T5809] veth1_macvtap: entered promiscuous mode [ 97.893931][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.925603][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.962770][ T1175] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.981068][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.981751][ T1175] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.983185][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.983198][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.003233][ T1175] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.023556][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.031466][ T1175] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.126458][ T1175] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.130224][ T1175] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.132449][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.160455][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.161905][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.213791][ T3557] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.243525][ T3557] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.305070][ T3557] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.319152][ T58] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.613957][ T5891] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 98.687346][ T5924] input: syz0 as /devices/virtual/input/input5 [ 99.428552][ T5891] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 99.428579][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.428596][ T5891] usb 3-1: Product: syz [ 99.428609][ T5891] usb 3-1: Manufacturer: syz [ 99.428621][ T5891] usb 3-1: SerialNumber: syz [ 99.513713][ T5891] usb 3-1: config 0 descriptor?? [ 99.580389][ T5891] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 99.668205][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.668225][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.841033][ T1591] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.841054][ T1591] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.843869][ T49] usb 3-1: USB disconnect, device number 2 [ 99.878870][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.878890][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.925323][ T5935] random: crng reseeded on system resumption [ 100.116832][ T3557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.116852][ T3557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.178531][ T1591] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.178549][ T1591] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.338614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 100.363838][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 100.378310][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 100.380842][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 100.380965][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 100.593717][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.593732][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.071259][ T5934] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 101.293799][ T5934] usb 3-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 101.293824][ T5934] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 101.293860][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.293872][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.293883][ T5934] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.293912][ T5934] usb 3-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 101.293923][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.333881][ T5934] usb 3-1: config 0 descriptor?? [ 101.859504][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.859854][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.860026][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.860208][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.860376][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.113329][ T5934] input: HID 28bd:0909 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28BD:0909.0001/input/input6 [ 102.205131][ T5951] tipc: Started in network mode [ 102.205169][ T5951] tipc: Node identity de1dcc97972d, cluster identity 4711 [ 102.205653][ T5951] tipc: Enabled bearer , priority 0 [ 102.225040][ T5951] syzkaller0: entered promiscuous mode [ 102.225065][ T5951] syzkaller0: entered allmulticast mode [ 102.358606][ T5934] uclogic 0003:28BD:0909.0001: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.2-1/input0 [ 102.490690][ T5934] usb 3-1: USB disconnect, device number 3 [ 102.632019][ T5956] tipc: Resetting bearer [ 102.834748][ T5964] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.867795][ T5956] tipc: Disabling bearer [ 103.288921][ T5891] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.448271][ T5891] usb 4-1: Using ep0 maxpacket: 8 [ 103.552064][ T5975] input: syz0 as /devices/virtual/input/input7 [ 104.304288][ T5891] usb 4-1: config 1 has an invalid interface number: 6 but max is 0 [ 104.304314][ T5891] usb 4-1: config 1 has no interface number 0 [ 104.322938][ T5891] usb 4-1: New USB device found, idVendor=082d, idProduct=0300, bcdDevice=c3.4b [ 104.322967][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.322985][ T5891] usb 4-1: Product: syz [ 104.322997][ T5891] usb 4-1: Manufacturer: syz [ 104.323010][ T5891] usb 4-1: SerialNumber: syz [ 104.423257][ T5934] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 104.589972][ T5934] usb 3-1: too many configurations: 78, using maximum allowed: 8 [ 104.745719][ T5934] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 104.745748][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.745767][ T5934] usb 3-1: Product: syz [ 104.745780][ T5934] usb 3-1: Manufacturer: syz [ 104.745794][ T5934] usb 3-1: SerialNumber: syz [ 104.850317][ T5934] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 105.082135][ T921] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 105.678510][ T5947] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 106.021903][ T5947] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 106.022168][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.022186][ T5947] usb 5-1: Product: syz [ 106.022200][ T5947] usb 5-1: Manufacturer: syz [ 106.022214][ T5947] usb 5-1: SerialNumber: syz [ 106.327066][ T5995] netlink: 68 bytes leftover after parsing attributes in process `syz.3.15'. [ 106.395521][ T921] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 106.396840][ T921] ath9k_htc: Failed to initialize the device [ 106.475951][ T5974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.551521][ T5974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.591161][ T5974] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 106.596835][ T5996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.627280][ T5996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.677639][ T5947] usb 5-1: config 0 descriptor?? [ 106.728931][ T921] usb 3-1: ath9k_htc: USB layer deinitialized [ 106.867836][ T5947] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 107.001038][ T5947] usb 5-1: USB disconnect, device number 2 [ 107.337155][ T5934] usb 3-1: USB disconnect, device number 4 [ 108.471077][ T6006] netlink: 20 bytes leftover after parsing attributes in process `syz.2.23'. [ 109.023053][ T6014] netlink: 80 bytes leftover after parsing attributes in process `syz.4.26'. [ 109.023142][ T6014] netlink: 80 bytes leftover after parsing attributes in process `syz.4.26'. [ 109.714750][ T5891] usb 4-1: palm_os_4_probe - error -32 getting connection info [ 109.714825][ T5891] visor 4-1:1.6: Handspring Visor / Palm OS converter detected [ 109.938976][ T5891] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 110.647288][ T5891] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 111.467548][ T6030] input: syz0 as /devices/virtual/input/input8 [ 112.138141][ T6027] netlink: 80 bytes leftover after parsing attributes in process `syz.2.31'. [ 112.138167][ T6027] netlink: 80 bytes leftover after parsing attributes in process `syz.2.31'. [ 112.449497][ T5891] usb 4-1: USB disconnect, device number 2 [ 112.480487][ T5891] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 112.544109][ T5891] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 112.557798][ T5891] visor 4-1:1.6: device disconnected [ 114.053517][ T6050] netlink: 80 bytes leftover after parsing attributes in process `syz.2.37'. [ 114.053542][ T6050] netlink: 80 bytes leftover after parsing attributes in process `syz.2.37'. [ 114.743557][ T6066] input: syz0 as /devices/virtual/input/input9 [ 114.756675][ T6066] blktrace: Concurrent blktraces are not allowed on loop8 [ 115.233209][ T6072] netlink: 80 bytes leftover after parsing attributes in process `syz.0.45'. [ 115.233226][ T6072] netlink: 80 bytes leftover after parsing attributes in process `syz.0.45'. [ 118.061114][ T6098] netlink: 80 bytes leftover after parsing attributes in process `syz.0.51'. [ 118.061138][ T6098] netlink: 80 bytes leftover after parsing attributes in process `syz.0.51'. [ 118.584874][ T6104] dummy0: entered promiscuous mode [ 118.777773][ T6104] dummy0: left promiscuous mode [ 119.663063][ T5890] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 119.841441][ T5890] usb 1-1: too many configurations: 78, using maximum allowed: 8 [ 119.887837][ T5890] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 119.887854][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.887864][ T5890] usb 1-1: Product: syz [ 119.887871][ T5890] usb 1-1: Manufacturer: syz [ 119.887878][ T5890] usb 1-1: SerialNumber: syz [ 119.975538][ T5890] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 120.049643][ T5972] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 120.430187][ T6119] input: syz0 as /devices/virtual/input/input10 [ 120.473271][ T6119] blktrace: Concurrent blktraces are not allowed on loop2 [ 120.536241][ T6121] netlink: 80 bytes leftover after parsing attributes in process `syz.4.58'. [ 120.536268][ T6121] netlink: 80 bytes leftover after parsing attributes in process `syz.4.58'. [ 120.600536][ T6106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.604774][ T6106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.889532][ T5972] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 121.889721][ T5972] ath9k_htc: Failed to initialize the device [ 122.011428][ T805] usb 1-1: USB disconnect, device number 2 [ 122.044857][ T805] usb 1-1: ath9k_htc: USB layer deinitialized [ 122.049670][ C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 122.547235][ T6138] netlink: 12 bytes leftover after parsing attributes in process `syz.4.61'. [ 122.640555][ T6142] netlink: 80 bytes leftover after parsing attributes in process `syz.3.64'. [ 122.640580][ T6142] netlink: 80 bytes leftover after parsing attributes in process `syz.3.64'. [ 124.961124][ T6150] tap0: tun_chr_ioctl cmd 1074025677 [ 124.961369][ T6150] tap0: linktype set to 0 [ 127.053672][ T6179] input: syz0 as /devices/virtual/input/input11 [ 128.551061][ T6191] netlink: 80 bytes leftover after parsing attributes in process `syz.0.77'. [ 128.551086][ T6191] netlink: 80 bytes leftover after parsing attributes in process `syz.0.77'. [ 130.876623][ T6229] netlink: 80 bytes leftover after parsing attributes in process `syz.4.91'. [ 130.877551][ T6229] netlink: 80 bytes leftover after parsing attributes in process `syz.4.91'. [ 132.962661][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.962763][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.786443][ T6260] mmap: syz.1.100 (6260) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 134.744771][ T6272] netlink: 80 bytes leftover after parsing attributes in process `syz.2.106'. [ 134.744794][ T6272] netlink: 80 bytes leftover after parsing attributes in process `syz.2.106'. [ 136.248152][ T5863] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 136.398150][ T5863] usb 5-1: Using ep0 maxpacket: 32 [ 136.400802][ T5863] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 136.400843][ T5863] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 136.400863][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.406944][ T5863] usb 5-1: config 0 descriptor?? [ 140.812119][ T5918] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 140.983711][ T5918] usb 2-1: device descriptor read/all, error -71 [ 141.235478][ T6300] usb 5-1: USB disconnect, device number 3 [ 142.060116][ T6312] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!l1*$pOcɔr$G [ 143.325247][ T6321] netlink: 80 bytes leftover after parsing attributes in process `syz.1.119'. [ 143.325267][ T6321] netlink: 80 bytes leftover after parsing attributes in process `syz.1.119'. [ 145.138224][ T6158] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 146.154868][ T6158] usb 4-1: too many configurations: 78, using maximum allowed: 8 [ 146.247854][ T6158] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 146.247873][ T6158] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.247889][ T6158] usb 4-1: Product: syz [ 146.247896][ T6158] usb 4-1: Manufacturer: syz [ 146.247903][ T6158] usb 4-1: SerialNumber: syz [ 146.320455][ T6158] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 146.357813][ T5890] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 146.573274][ T6349] netlink: 80 bytes leftover after parsing attributes in process `syz.4.127'. [ 146.573300][ T6349] netlink: 80 bytes leftover after parsing attributes in process `syz.4.127'. [ 146.855350][ T6340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.855870][ T6340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.833628][ T5890] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 147.833759][ T5890] ath9k_htc: Failed to initialize the device [ 147.884195][ T6158] usb 4-1: USB disconnect, device number 3 [ 147.929896][ T6158] usb 4-1: ath9k_htc: USB layer deinitialized [ 147.948160][ T5945] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 148.108120][ T5945] usb 2-1: Using ep0 maxpacket: 32 [ 148.134377][ T5945] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 148.134418][ T5945] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 148.134436][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.178377][ T5945] usb 2-1: config 0 descriptor?? [ 152.967194][ T6300] usb 2-1: USB disconnect, device number 4 [ 153.363488][ T6371] netlink: 80 bytes leftover after parsing attributes in process `syz.2.133'. [ 153.363514][ T6371] netlink: 80 bytes leftover after parsing attributes in process `syz.2.133'. [ 154.812030][ T6389] netlink: 80 bytes leftover after parsing attributes in process `syz.3.139'. [ 154.812055][ T6389] netlink: 80 bytes leftover after parsing attributes in process `syz.3.139'. [ 155.237221][ T6401] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 156.066812][ T6414] netlink: 80 bytes leftover after parsing attributes in process `syz.4.147'. [ 156.066846][ T6414] netlink: 80 bytes leftover after parsing attributes in process `syz.4.147'. [ 156.308121][ T6323] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 156.460335][ T6323] usb 4-1: Using ep0 maxpacket: 32 [ 156.478491][ T6323] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 156.478531][ T6323] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 156.478550][ T6323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.539462][ T6323] usb 4-1: config 0 descriptor?? [ 160.138536][ T5871] usb 4-1: USB disconnect, device number 4 [ 161.588187][ T37] audit: type=1326 audit(1764953828.853:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6444 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40d92f749 code=0x7ffc0000 [ 161.588239][ T37] audit: type=1326 audit(1764953828.853:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6444 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40d92f749 code=0x7ffc0000 [ 161.588286][ T37] audit: type=1326 audit(1764953828.853:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6444 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb40d92f749 code=0x7ffc0000 [ 161.588324][ T37] audit: type=1326 audit(1764953828.853:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6444 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40d92f749 code=0x7ffc0000 [ 161.588362][ T37] audit: type=1326 audit(1764953828.853:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6444 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40d92f749 code=0x7ffc0000 [ 161.588398][ T37] audit: type=1326 audit(1764953828.853:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6444 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb40d92f749 code=0x7ffc0000 [ 161.588437][ T37] audit: type=1326 audit(1764953828.863:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6444 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40d92f749 code=0x7ffc0000 [ 161.588474][ T37] audit: type=1326 audit(1764953828.863:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6444 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb40d92f749 code=0x7ffc0000 [ 161.588510][ T37] audit: type=1326 audit(1764953828.863:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6444 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40d92f749 code=0x7ffc0000 [ 161.588547][ T37] audit: type=1326 audit(1764953828.863:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6444 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb40d92f749 code=0x7ffc0000 [ 161.910079][ T6450] netlink: 80 bytes leftover after parsing attributes in process `syz.0.155'. [ 161.910104][ T6450] netlink: 80 bytes leftover after parsing attributes in process `syz.0.155'. [ 163.614389][ T6468] netlink: 80 bytes leftover after parsing attributes in process `syz.4.159'. [ 163.614413][ T6468] netlink: 80 bytes leftover after parsing attributes in process `syz.4.159'. [ 163.645133][ T6465] netlink: 28 bytes leftover after parsing attributes in process `syz.0.161'. [ 163.645360][ T6465] netlink: 'syz.0.161': attribute type 7 has an invalid length. [ 163.645375][ T6465] netlink: 'syz.0.161': attribute type 8 has an invalid length. [ 163.645386][ T6465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.161'. [ 163.655900][ T6465] ip6gretap0: entered promiscuous mode [ 163.657756][ T6465] syz_tun: entered promiscuous mode [ 164.745886][ T6465] ip6gretap0: left promiscuous mode [ 164.799430][ T6475] netlink: 'syz.1.162': attribute type 2 has an invalid length. [ 164.839483][ T6465] syz_tun: left promiscuous mode [ 166.889807][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.166'. [ 174.475179][ T6537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.179'. [ 175.036260][ T6542] netlink: 80 bytes leftover after parsing attributes in process `syz.3.183'. [ 175.036284][ T6542] netlink: 80 bytes leftover after parsing attributes in process `syz.3.183'. [ 178.428424][ T6563] debugfs: '1^!l1*$pOcɔr$Gt:u' already exists in 'ieee80211' [ 179.358169][ T5890] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 179.515996][ T5890] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 179.516025][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.516043][ T5890] usb 3-1: Product: syz [ 179.516055][ T5890] usb 3-1: Manufacturer: syz [ 179.516068][ T5890] usb 3-1: SerialNumber: syz [ 179.574193][ T5890] usb 3-1: config 0 descriptor?? [ 179.589110][ T5890] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 181.248346][ T805] usb 3-1: USB disconnect, device number 5 [ 181.419207][ T6585] netlink: 80 bytes leftover after parsing attributes in process `syz.3.195'. [ 181.419232][ T6585] netlink: 80 bytes leftover after parsing attributes in process `syz.3.195'. [ 182.507907][ T6614] Zero length message leads to an empty skb [ 183.527875][ T6601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.199'. [ 186.029117][ T5993] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 186.180471][ T5993] usb 1-1: too many configurations: 78, using maximum allowed: 8 [ 186.202697][ T5993] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 186.202716][ T5993] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.202725][ T5993] usb 1-1: Product: syz [ 186.202732][ T5993] usb 1-1: Manufacturer: syz [ 186.202739][ T5993] usb 1-1: SerialNumber: syz [ 186.370385][ T5993] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 186.401989][ T5796] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 187.898123][ T5796] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 187.898297][ T5796] ath9k_htc: Failed to initialize the device [ 187.910708][ T5993] usb 1-1: USB disconnect, device number 3 [ 187.934226][ T5993] usb 1-1: ath9k_htc: USB layer deinitialized [ 187.958155][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 188.649014][ T6635] netlink: 80 bytes leftover after parsing attributes in process `syz.1.209'. [ 188.649040][ T6635] netlink: 80 bytes leftover after parsing attributes in process `syz.1.209'. [ 188.960725][ T6640] debugfs: '1^!l1*$pOcɔr$Gt:u' already exists in 'ieee80211' [ 190.667261][ T5796] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 190.798173][ T5796] usb 2-1: device descriptor read/64, error -71 [ 191.082660][ T5796] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 192.217476][ T5796] usb 2-1: device descriptor read/64, error -71 [ 192.304696][ T6663] tap0: tun_chr_ioctl cmd 1074025677 [ 192.304928][ T6663] tap0: linktype set to 0 [ 192.322746][ T5796] usb usb2-port1: attempt power cycle [ 193.501296][ T6673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.219'. [ 194.602951][ T6687] input: syz0 as /devices/virtual/input/input14 [ 194.634503][ T6687] blktrace: Concurrent blktraces are not allowed on loop6 [ 195.125004][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.125069][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.798161][ T6696] netlink: 28 bytes leftover after parsing attributes in process `syz.4.224'. [ 195.798196][ T6696] netlink: 'syz.4.224': attribute type 7 has an invalid length. [ 195.798207][ T6696] netlink: 'syz.4.224': attribute type 8 has an invalid length. [ 195.798218][ T6696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.224'. [ 197.029185][ T6706] netlink: 80 bytes leftover after parsing attributes in process `syz.3.228'. [ 197.029210][ T6706] netlink: 80 bytes leftover after parsing attributes in process `syz.3.228'. [ 198.450353][ T6484] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 200.154690][ T6484] usb 3-1: string descriptor 0 read error: -71 [ 200.154845][ T6484] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 200.154866][ T6484] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.184814][ T6484] usb 3-1: config 0 descriptor?? [ 200.188518][ T6484] usb 3-1: can't set config #0, error -71 [ 200.408314][ T6484] usb 3-1: USB disconnect, device number 6 [ 200.458223][ T5979] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 200.652350][ T5979] usb 4-1: device descriptor read/64, error -71 [ 200.990448][ T6727] input: syz0 as /devices/virtual/input/input15 [ 200.997138][ T6727] blktrace: Concurrent blktraces are not allowed on loop2 [ 201.017707][ T5979] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 202.047725][ T5979] usb 4-1: device descriptor read/64, error -71 [ 202.149261][ T5979] usb usb4-port1: attempt power cycle [ 202.576223][ T6744] netlink: 80 bytes leftover after parsing attributes in process `syz.1.241'. [ 202.576247][ T6744] netlink: 80 bytes leftover after parsing attributes in process `syz.1.241'. [ 204.738116][ T6158] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 204.898924][ T6158] usb 2-1: too many configurations: 78, using maximum allowed: 8 [ 204.932351][ T6158] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 204.932379][ T6158] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.932396][ T6158] usb 2-1: Product: syz [ 204.932465][ T6158] usb 2-1: Manufacturer: syz [ 204.932479][ T6158] usb 2-1: SerialNumber: syz [ 204.974212][ T6158] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 205.019554][ T5980] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 205.268655][ T6300] usb 2-1: USB disconnect, device number 8 [ 206.231282][ T5980] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 206.231477][ T5980] ath9k_htc: Failed to initialize the device [ 206.242142][ T6300] usb 2-1: ath9k_htc: USB layer deinitialized [ 206.279233][ T6158] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 207.171109][ T6158] usb 5-1: device descriptor read/64, error -71 [ 207.558218][ T6158] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 207.591663][ T6783] input: syz0 as /devices/virtual/input/input16 [ 207.682560][ T6783] blktrace: Concurrent blktraces are not allowed on loop2 [ 207.695408][ T6158] usb 5-1: device descriptor read/64, error -71 [ 207.802742][ T6158] usb usb5-port1: attempt power cycle [ 208.858200][ T6158] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 208.883905][ T6158] usb 5-1: device descriptor read/8, error -71 [ 211.229328][ T6808] sysfs: cannot create duplicate filename '/class/ieee80211/1^!l1*$pOcɔr$Gt:u' [ 211.229358][ T6808] CPU: 1 UID: 0 PID: 6808 Comm: syz.2.258 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 211.229382][ T6808] Tainted: [L]=SOFTLOCKUP [ 211.229388][ T6808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 211.229406][ T6808] Call Trace: [ 211.229414][ T6808] [ 211.229423][ T6808] dump_stack_lvl+0x189/0x250 [ 211.229466][ T6808] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.229487][ T6808] ? __pfx__printk+0x10/0x10 [ 211.229504][ T6808] ? kernfs_path_from_node+0x2c/0x280 [ 211.229528][ T6808] ? kernfs_path_from_node+0x2c/0x280 [ 211.229548][ T6808] ? kernfs_path_from_node+0x243/0x280 [ 211.229566][ T6808] ? kernfs_path_from_node+0x2c/0x280 [ 211.229590][ T6808] sysfs_warn_dup+0x8e/0xa0 [ 211.229610][ T6808] sysfs_do_create_link_sd+0xc0/0x110 [ 211.229634][ T6808] device_add_class_symlinks+0x1d2/0x240 [ 211.229665][ T6808] device_add+0x475/0xb50 [ 211.229702][ T6808] wiphy_register+0x1d2e/0x2d20 [ 211.229745][ T6808] ? __pfx_wiphy_register+0x10/0x10 [ 211.229767][ T6808] ? __pfx_netdev_run_todo+0x10/0x10 [ 211.229792][ T6808] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 211.229820][ T6808] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 211.229851][ T6808] ieee80211_register_hw+0x3473/0x40d0 [ 211.229887][ T6808] ? ieee80211_register_hw+0x14a1/0x40d0 [ 211.229916][ T6808] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 211.229933][ T6808] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 211.229962][ T6808] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 211.229987][ T6808] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 211.230021][ T6808] ? __hrtimer_setup+0x184/0x200 [ 211.230038][ T6808] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 211.230061][ T6808] mac80211_hwsim_new_radio+0x2efe/0x5170 [ 211.230099][ T6808] ? mac80211_hwsim_new_radio+0x10f/0x5170 [ 211.230144][ T6808] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 211.230166][ T6808] ? trace_kmalloc+0x1f/0xb0 [ 211.230184][ T6808] ? __kmalloc_node_track_caller_noprof+0x3b5/0x800 [ 211.230206][ T6808] ? kstrndup+0xbf/0x160 [ 211.230237][ T6808] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 211.230269][ T6808] ? __pfx___nla_validate_parse+0x10/0x10 [ 211.230309][ T6808] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 211.230340][ T6808] ? rcu_is_watching+0x15/0xb0 [ 211.230363][ T6808] ? __nla_parse+0x40/0x60 [ 211.230390][ T6808] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 211.230419][ T6808] genl_family_rcv_msg_doit+0x215/0x300 [ 211.230446][ T6808] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 211.230479][ T6808] ? bpf_lsm_capable+0x9/0x20 [ 211.230495][ T6808] ? security_capable+0x7e/0x2e0 [ 211.230527][ T6808] genl_rcv_msg+0x60e/0x790 [ 211.230553][ T6808] ? __pfx_genl_rcv_msg+0x10/0x10 [ 211.230570][ T6808] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 211.230626][ T6808] netlink_rcv_skb+0x208/0x470 [ 211.230652][ T6808] ? __pfx_genl_rcv_msg+0x10/0x10 [ 211.230672][ T6808] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 211.230717][ T6808] ? netlink_deliver_tap+0x2e/0x1b0 [ 211.230739][ T6808] ? netlink_deliver_tap+0x2e/0x1b0 [ 211.230766][ T6808] genl_rcv+0x28/0x40 [ 211.230781][ T6808] netlink_unicast+0x846/0xa10 [ 211.230813][ T6808] ? __pfx_netlink_unicast+0x10/0x10 [ 211.230836][ T6808] ? netlink_sendmsg+0x642/0xb30 [ 211.230856][ T6808] ? skb_put+0x11b/0x210 [ 211.230881][ T6808] netlink_sendmsg+0x805/0xb30 [ 211.230914][ T6808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.230946][ T6808] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 211.230967][ T6808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.230990][ T6808] __sock_sendmsg+0x21c/0x270 [ 211.231019][ T6808] ____sys_sendmsg+0x508/0x810 [ 211.231047][ T6808] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.231080][ T6808] ? import_iovec+0x74/0xa0 [ 211.231108][ T6808] ___sys_sendmsg+0x21f/0x2a0 [ 211.231133][ T6808] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.231163][ T6808] ? futex_wait+0x285/0x360 [ 211.231214][ T6808] ? __fget_files+0x2a/0x420 [ 211.231236][ T6808] ? __fget_files+0x3a6/0x420 [ 211.231279][ T6808] __x64_sys_sendmsg+0x1a1/0x260 [ 211.231305][ T6808] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 211.231348][ T6808] ? do_syscall_64+0xbe/0xf80 [ 211.231370][ T6808] do_syscall_64+0xfa/0xf80 [ 211.231388][ T6808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.231406][ T6808] ? clear_bhb_loop+0x60/0xb0 [ 211.231428][ T6808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.231446][ T6808] RIP: 0033:0x7fb40d92f749 [ 211.231476][ T6808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.231492][ T6808] RSP: 002b:00007fb40bb6d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.231516][ T6808] RAX: ffffffffffffffda RBX: 00007fb40db86090 RCX: 00007fb40d92f749 [ 211.231530][ T6808] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007 [ 211.231542][ T6808] RBP: 00007fb40d9b3f91 R08: 0000000000000000 R09: 0000000000000000 [ 211.231554][ T6808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.231565][ T6808] R13: 00007fb40db86128 R14: 00007fb40db86090 R15: 00007ffdc7ccc4b8 [ 211.231601][ T6808] [ 212.422456][ T5808] Bluetooth: hci4: command 0x0406 tx timeout [ 212.422497][ T5808] Bluetooth: hci1: command 0x0406 tx timeout [ 212.422520][ T5808] Bluetooth: hci3: command 0x0406 tx timeout [ 212.422541][ T5808] Bluetooth: hci0: command 0x0406 tx timeout [ 212.744946][ T6797] Bluetooth: hci2: command 0x0406 tx timeout [ 213.322179][ T6300] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 214.354077][ T6300] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 214.354101][ T6300] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.354111][ T6300] usb 3-1: Product: syz [ 214.354117][ T6300] usb 3-1: Manufacturer: syz [ 214.354124][ T6300] usb 3-1: SerialNumber: syz [ 214.443408][ T6300] usb 3-1: config 0 descriptor?? [ 214.483897][ T6300] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 215.583887][ T6829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.263'. [ 215.664974][ T6158] usb 3-1: USB disconnect, device number 7 [ 217.228277][ T6822] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 217.710483][ T6822] usb 2-1: Using ep0 maxpacket: 8 [ 217.853897][ T6822] usb 2-1: config 1 has an invalid interface number: 6 but max is 0 [ 217.870837][ T6822] usb 2-1: config 1 has no interface number 0 [ 218.174618][ T6822] usb 2-1: New USB device found, idVendor=082d, idProduct=0300, bcdDevice=c3.4b [ 218.174646][ T6822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.174663][ T6822] usb 2-1: Product: syz [ 218.174674][ T6822] usb 2-1: Manufacturer: syz [ 218.174686][ T6822] usb 2-1: SerialNumber: syz [ 218.278180][ T5947] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 218.438127][ T5947] usb 3-1: Using ep0 maxpacket: 8 [ 218.613609][ T5947] usb 3-1: config 1 has an invalid interface number: 6 but max is 0 [ 218.613626][ T5947] usb 3-1: config 1 has no interface number 0 [ 218.635463][ T5947] usb 3-1: New USB device found, idVendor=082d, idProduct=0300, bcdDevice=c3.4b [ 218.635489][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.635539][ T5947] usb 3-1: Product: syz [ 218.635547][ T5947] usb 3-1: Manufacturer: syz [ 218.635554][ T5947] usb 3-1: SerialNumber: syz [ 220.939571][ T6856] sysfs: cannot create duplicate filename '/class/ieee80211/1^!l1*$pOcɔr$Gt:u' [ 220.939602][ T6856] CPU: 1 UID: 0 PID: 6856 Comm: syz.0.271 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 220.939630][ T6856] Tainted: [L]=SOFTLOCKUP [ 220.939637][ T6856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 220.939648][ T6856] Call Trace: [ 220.939655][ T6856] [ 220.939664][ T6856] dump_stack_lvl+0x189/0x250 [ 220.939696][ T6856] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.939719][ T6856] ? __pfx__printk+0x10/0x10 [ 220.939732][ T6856] ? kernfs_path_from_node+0x2c/0x280 [ 220.939745][ T6856] ? kernfs_path_from_node+0x2c/0x280 [ 220.939756][ T6856] ? kernfs_path_from_node+0x243/0x280 [ 220.939771][ T6856] ? kernfs_path_from_node+0x2c/0x280 [ 220.939795][ T6856] sysfs_warn_dup+0x8e/0xa0 [ 220.939816][ T6856] sysfs_do_create_link_sd+0xc0/0x110 [ 220.939839][ T6856] device_add_class_symlinks+0x1d2/0x240 [ 220.939869][ T6856] device_add+0x475/0xb50 [ 220.939897][ T6856] wiphy_register+0x1d2e/0x2d20 [ 220.939918][ T6856] ? __pfx_wiphy_register+0x10/0x10 [ 220.939931][ T6856] ? __pfx_netdev_run_todo+0x10/0x10 [ 220.939954][ T6856] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 220.939981][ T6856] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 220.940014][ T6856] ieee80211_register_hw+0x3473/0x40d0 [ 220.940049][ T6856] ? ieee80211_register_hw+0x14a1/0x40d0 [ 220.940069][ T6856] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 220.940077][ T6856] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 220.940094][ T6856] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 220.940117][ T6856] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 220.940150][ T6856] ? __hrtimer_setup+0x184/0x200 [ 220.940167][ T6856] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 220.940189][ T6856] mac80211_hwsim_new_radio+0x2efe/0x5170 [ 220.940226][ T6856] ? mac80211_hwsim_new_radio+0x10f/0x5170 [ 220.940273][ T6856] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 220.940296][ T6856] ? trace_kmalloc+0x1f/0xb0 [ 220.940315][ T6856] ? __kmalloc_node_track_caller_noprof+0x3b5/0x800 [ 220.940339][ T6856] ? kstrndup+0xbf/0x160 [ 220.940369][ T6856] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 220.940388][ T6856] ? __pfx___nla_validate_parse+0x10/0x10 [ 220.940411][ T6856] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 220.940443][ T6856] ? rcu_is_watching+0x15/0xb0 [ 220.940466][ T6856] ? __nla_parse+0x40/0x60 [ 220.940492][ T6856] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 220.940519][ T6856] genl_family_rcv_msg_doit+0x215/0x300 [ 220.940542][ T6856] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 220.940559][ T6856] ? bpf_lsm_capable+0x9/0x20 [ 220.940568][ T6856] ? security_capable+0x7e/0x2e0 [ 220.940605][ T6856] genl_rcv_msg+0x60e/0x790 [ 220.940631][ T6856] ? __pfx_genl_rcv_msg+0x10/0x10 [ 220.940649][ T6856] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 220.940690][ T6856] netlink_rcv_skb+0x208/0x470 [ 220.940710][ T6856] ? __pfx_genl_rcv_msg+0x10/0x10 [ 220.940721][ T6856] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 220.940731][ T6856] ? rcu_read_unlock_special+0x39b/0x4e0 [ 220.940763][ T6856] ? netlink_deliver_tap+0x2e/0x1b0 [ 220.940792][ T6856] genl_rcv+0x28/0x40 [ 220.940807][ T6856] netlink_unicast+0x846/0xa10 [ 220.940838][ T6856] ? __pfx_netlink_unicast+0x10/0x10 [ 220.940860][ T6856] ? netlink_sendmsg+0x642/0xb30 [ 220.940876][ T6856] ? skb_put+0x11b/0x210 [ 220.940891][ T6856] netlink_sendmsg+0x805/0xb30 [ 220.940911][ T6856] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.940942][ T6856] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 220.940963][ T6856] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.940984][ T6856] __sock_sendmsg+0x21c/0x270 [ 220.941010][ T6856] ____sys_sendmsg+0x508/0x810 [ 220.941037][ T6856] ? __pfx_____sys_sendmsg+0x10/0x10 [ 220.941070][ T6856] ? import_iovec+0x74/0xa0 [ 220.941097][ T6856] ___sys_sendmsg+0x21f/0x2a0 [ 220.941122][ T6856] ? __pfx____sys_sendmsg+0x10/0x10 [ 220.941152][ T6856] ? futex_wait+0x285/0x360 [ 220.941202][ T6856] ? __fget_files+0x2a/0x420 [ 220.941224][ T6856] ? __fget_files+0x3a6/0x420 [ 220.941258][ T6856] __x64_sys_sendmsg+0x1a1/0x260 [ 220.941283][ T6856] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 220.941324][ T6856] ? do_syscall_64+0xbe/0xf80 [ 220.941346][ T6856] do_syscall_64+0xfa/0xf80 [ 220.941364][ T6856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.941382][ T6856] ? clear_bhb_loop+0x60/0xb0 [ 220.941404][ T6856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.941422][ T6856] RIP: 0033:0x7fda8349f749 [ 220.941439][ T6856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.941454][ T6856] RSP: 002b:00007fda816fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.941474][ T6856] RAX: ffffffffffffffda RBX: 00007fda836f5fa0 RCX: 00007fda8349f749 [ 220.941488][ T6856] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007 [ 220.941500][ T6856] RBP: 00007fda83523f91 R08: 0000000000000000 R09: 0000000000000000 [ 220.941511][ T6856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.941522][ T6856] R13: 00007fda836f6038 R14: 00007fda836f5fa0 R15: 00007ffc0bcac278 [ 220.941556][ T6856] [ 222.432712][ T6875] input: syz0 as /devices/virtual/input/input17 [ 223.329748][ T6822] usb 2-1: palm_os_4_probe - error -32 getting connection info [ 223.330645][ T6822] visor 2-1:1.6: Handspring Visor / Palm OS converter detected [ 223.597739][ T6822] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 224.614976][ T5947] usb 3-1: palm_os_4_probe - error -32 getting connection info [ 224.615057][ T5947] visor 3-1:1.6: Handspring Visor / Palm OS converter detected [ 224.619924][ T6822] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 224.738989][ T5947] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB2 [ 224.778660][ T5947] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB3 [ 225.357007][ T6158] usb 2-1: USB disconnect, device number 9 [ 225.374803][ T5934] usb 3-1: USB disconnect, device number 8 [ 225.410011][ T6158] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 225.419206][ T5934] visor ttyUSB2: Handspring Visor / Palm OS converter now disconnected from ttyUSB2 [ 225.453196][ T6158] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 225.457242][ T6158] visor 2-1:1.6: device disconnected [ 225.486105][ T5934] visor ttyUSB3: Handspring Visor / Palm OS converter now disconnected from ttyUSB3 [ 225.487045][ T5934] visor 3-1:1.6: device disconnected [ 227.988326][ T5947] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 228.154869][ T5947] usb 2-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 228.154896][ T5947] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.154912][ T5947] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 228.154960][ T5947] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 228.154997][ T5947] usb 2-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 228.155017][ T5947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.223793][ T5947] usb 2-1: config 0 descriptor?? [ 228.487316][ T5947] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 229.229862][ T6484] usb 2-1: USB disconnect, device number 10 [ 230.522766][ T6935] netlink: 12 bytes leftover after parsing attributes in process `syz.4.288'. [ 230.758235][ T5979] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 230.908101][ T5979] usb 2-1: Using ep0 maxpacket: 8 [ 230.910020][ T5979] usb 2-1: config 1 has an invalid interface number: 6 but max is 0 [ 230.910034][ T5979] usb 2-1: config 1 has no interface number 0 [ 230.912032][ T5979] usb 2-1: New USB device found, idVendor=082d, idProduct=0300, bcdDevice=c3.4b [ 230.912056][ T5979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.912067][ T5979] usb 2-1: Product: syz [ 230.912074][ T5979] usb 2-1: Manufacturer: syz [ 230.912081][ T5979] usb 2-1: SerialNumber: syz [ 231.531909][ T6931] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.868126][ T5934] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 236.012599][ T5979] usb 2-1: palm_os_4_probe - error -32 getting connection info [ 236.012681][ T5979] visor 2-1:1.6: Handspring Visor / Palm OS converter detected [ 236.049251][ T5934] usb 3-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 236.049276][ T5934] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.049292][ T5934] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 236.049337][ T5934] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 236.049373][ T5934] usb 3-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 236.049393][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.127693][ T5934] usb 3-1: config 0 descriptor?? [ 236.199571][ T5934] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 236.211771][ T5979] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 236.249040][ T5979] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 236.559900][ T6965] binder: 6962:6965 ioctl 4018620d 0 returned -22 [ 236.690743][ T5979] usb 2-1: USB disconnect, device number 11 [ 236.694437][ T5979] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 236.741542][ T5979] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 236.742408][ T5979] visor 2-1:1.6: device disconnected [ 239.190335][ T5934] usb 3-1: USB disconnect, device number 9 [ 242.108196][ T5979] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 242.268161][ T5979] usb 1-1: Using ep0 maxpacket: 8 [ 242.272865][ T5979] usb 1-1: config 1 has an invalid interface number: 6 but max is 0 [ 242.272879][ T5979] usb 1-1: config 1 has no interface number 0 [ 242.301339][ T5979] usb 1-1: New USB device found, idVendor=082d, idProduct=0300, bcdDevice=c3.4b [ 242.301365][ T5979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.301382][ T5979] usb 1-1: Product: syz [ 242.301394][ T5979] usb 1-1: Manufacturer: syz [ 242.301406][ T5979] usb 1-1: SerialNumber: syz [ 242.534478][ T7006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.312'. [ 243.119837][ T7011] netlink: 68 bytes leftover after parsing attributes in process `syz.0.310'. [ 243.127762][ T7011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.129087][ T7011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.839891][ T7022] tty tty2: ldisc open failed (-12), clearing slot 1 [ 247.057627][ T5979] usb 1-1: palm_os_4_probe - error -71 getting connection info [ 247.057672][ T5979] visor 1-1:1.6: Handspring Visor / Palm OS converter detected [ 247.101855][ T5979] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 247.151496][ T5979] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 247.182064][ T5979] usb 1-1: USB disconnect, device number 4 [ 247.253025][ T5979] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 248.217766][ T5979] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 248.240436][ T5979] visor 1-1:1.6: device disconnected [ 249.420011][ T7050] batman_adv: batadv0: adding TT local entry ba:e1:05:00:07:00 to non-existent VLAN 1280 [ 250.557342][ T7059] syz.1.323 (7059) used greatest stack depth: 18552 bytes left [ 251.668145][ T5807] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 251.860649][ T5807] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.860666][ T5807] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 251.860697][ T5807] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 251.860707][ T5807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.980127][ T5807] usb 1-1: config 0 descriptor?? [ 251.985950][ T5807] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 251.986360][ T5807] dvb-usb: bulk message failed: -22 (3/0) [ 252.036200][ T5807] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 252.037581][ T5807] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 252.037672][ T5807] usb 1-1: media controller created [ 252.080732][ T5807] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 252.110319][ T5807] dvb-usb: bulk message failed: -22 (6/0) [ 252.110461][ T5807] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 252.141179][ T5807] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input18 [ 252.196315][ T5807] dvb-usb: schedule remote query interval to 150 msecs. [ 252.196341][ T5807] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 252.245628][ T7071] dvb-usb: bulk message failed: -22 (2/0) [ 252.333023][ T5807] usb 1-1: USB disconnect, device number 5 [ 252.381428][ T5918] dvb-usb: bulk message failed: -22 (1/0) [ 252.381780][ T5918] dvb-usb: error while querying for an remote control event. [ 253.287163][ T7081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.332'. [ 253.320222][ T5807] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 253.368162][ T5918] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 254.471672][ T5918] usb 5-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 254.471697][ T5918] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 254.471748][ T5918] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 254.471786][ T5918] usb 5-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 254.471806][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.459710][ T5918] usb 5-1: config 0 descriptor?? [ 255.725211][ T5918] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 255.888210][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.888280][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.903895][ T7114] netlink: 24 bytes leftover after parsing attributes in process `syz.1.342'. [ 258.022929][ T5863] usb 5-1: USB disconnect, device number 8 [ 258.319142][ T7128] input: syz0 as /devices/virtual/input/input19 [ 262.803384][ T5945] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 262.824248][ T7172] input: syz0 as /devices/virtual/input/input20 [ 262.847131][ T7172] blktrace: Concurrent blktraces are not allowed on loop0 [ 263.001913][ T5945] usb 5-1: Using ep0 maxpacket: 16 [ 263.032555][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 263.064504][ T5945] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 263.064521][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.064531][ T5945] usb 5-1: Product: syz [ 263.064538][ T5945] usb 5-1: Manufacturer: syz [ 263.064545][ T5945] usb 5-1: SerialNumber: syz [ 263.069999][ T5945] usb 5-1: config 0 descriptor?? [ 263.240143][ T5945] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 263.240166][ T5945] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 263.777319][ T5945] em28xx 5-1:0.0: chip ID is em2765 [ 265.273393][ T5945] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 265.273424][ T5945] em28xx 5-1:0.0: board has no eeprom [ 265.608112][ T5945] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 265.608140][ T5945] em28xx 5-1:0.0: dvb set to bulk mode. [ 265.612289][ T6822] em28xx 5-1:0.0: Binding DVB extension [ 267.094833][ T5807] usb 5-1: USB disconnect, device number 9 [ 267.120350][ T5807] em28xx 5-1:0.0: Disconnecting em28xx [ 268.196294][ T6822] em28xx 5-1:0.0: Registering input extension [ 268.198713][ T5807] em28xx 5-1:0.0: Closing input extension [ 268.383944][ T5918] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 269.317761][ T5918] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 269.317779][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.317789][ T5918] usb 2-1: Product: syz [ 269.317796][ T5918] usb 2-1: Manufacturer: syz [ 269.317802][ T5918] usb 2-1: SerialNumber: syz [ 269.398651][ T5918] usb 2-1: config 0 descriptor?? [ 269.429862][ T5807] em28xx 5-1:0.0: Freeing device [ 269.436590][ T5918] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 269.539758][ T7215] netlink: 'syz.0.372': attribute type 1 has an invalid length. [ 269.645229][ T7219] netlink: 'syz.2.374': attribute type 1 has an invalid length. [ 269.645273][ T7219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.484695][ T5807] usb 2-1: USB disconnect, device number 12 [ 271.738824][ T7246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.385'. [ 272.144964][ T7260] input: syz0 as /devices/virtual/input/input22 [ 272.425687][ T7262] blktrace: Concurrent blktraces are not allowed on loop0 [ 276.596435][ T7305] input: syz0 as /devices/virtual/input/input23 [ 276.784522][ T7307] blktrace: Concurrent blktraces are not allowed on loop6 [ 277.301702][ T7302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.398'. [ 278.758151][ T7321] syz_tun: entered allmulticast mode [ 278.773090][ T7323] pimreg: entered allmulticast mode [ 279.847615][ T7312] syz_tun: left allmulticast mode [ 280.204460][ T7348] binder: 7338:7348 ioctl 4018620d 0 returned -22 [ 280.608569][ T7356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.413'. [ 282.888194][ T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 283.038367][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 283.879101][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 283.881733][ T31] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 283.881759][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.881776][ T31] usb 1-1: Product: syz [ 283.881788][ T31] usb 1-1: Manufacturer: syz [ 283.881800][ T31] usb 1-1: SerialNumber: syz [ 283.916585][ T31] usb 1-1: config 0 descriptor?? [ 283.963478][ T31] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 283.963510][ T31] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 285.038973][ T31] em28xx 1-1:0.0: chip ID is em2765 [ 285.649397][ T31] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 285.649416][ T31] em28xx 1-1:0.0: board has no eeprom [ 285.978160][ T31] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 285.978187][ T31] em28xx 1-1:0.0: dvb set to bulk mode. [ 285.978500][ T5980] em28xx 1-1:0.0: Binding DVB extension [ 287.409612][ T5871] usb 1-1: USB disconnect, device number 6 [ 287.417077][ T7400] netlink: 'syz.3.427': attribute type 1 has an invalid length. [ 287.417109][ T7400] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.462349][ T5871] em28xx 1-1:0.0: Disconnecting em28xx [ 287.513408][ T5980] em28xx 1-1:0.0: Registering input extension [ 287.513637][ T5871] em28xx 1-1:0.0: Closing input extension [ 287.570828][ T5871] em28xx 1-1:0.0: Freeing device [ 287.612274][ T7405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.428'. [ 287.695507][ T7408] netlink: 28 bytes leftover after parsing attributes in process `syz.4.430'. [ 287.695530][ T7408] netlink: 'syz.4.430': attribute type 7 has an invalid length. [ 287.695537][ T7408] netlink: 'syz.4.430': attribute type 8 has an invalid length. [ 287.695542][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.430'. [ 291.408539][ T5947] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 291.558203][ T5947] usb 4-1: Using ep0 maxpacket: 16 [ 291.560449][ T5947] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 291.609875][ T5947] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 291.609910][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.609928][ T5947] usb 4-1: Product: syz [ 291.609941][ T5947] usb 4-1: Manufacturer: syz [ 291.609953][ T5947] usb 4-1: SerialNumber: syz [ 291.659649][ T7443] netlink: 'syz.1.441': attribute type 1 has an invalid length. [ 291.659673][ T7443] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.693255][ T5947] usb 4-1: config 0 descriptor?? [ 291.719762][ T5947] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 291.719783][ T5947] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 291.974925][ T7445] syz.4.440 (7445): drop_caches: 0 [ 292.137220][ T7450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'. [ 292.331996][ T5947] em28xx 4-1:0.0: chip ID is em2765 [ 293.696568][ T5934] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 293.813852][ T5947] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 293.813881][ T5947] em28xx 4-1:0.0: board has no eeprom [ 294.047411][ T5934] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 294.047448][ T5934] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 294.047461][ T5934] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 294.047473][ T5934] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 294.047521][ T5934] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 294.122538][ T5934] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 294.122617][ T5934] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 294.122641][ T5934] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 294.122663][ T5934] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 294.122685][ T5934] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 294.127532][ T5934] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 294.127576][ T5934] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 294.127590][ T5934] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 294.127605][ T5934] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 294.127626][ T5934] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 294.180795][ T5947] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 294.180819][ T5947] em28xx 4-1:0.0: dvb set to bulk mode. [ 294.211788][ T9] em28xx 4-1:0.0: Binding DVB extension [ 294.262373][ T5934] usb 3-1: string descriptor 0 read error: -22 [ 294.262506][ T5934] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 294.262528][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.422234][ T5934] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 295.769100][ T7451] loop7: detected capacity change from 0 to 7 [ 295.815957][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 295.816082][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 295.857479][ T5934] usb 4-1: USB disconnect, device number 8 [ 295.871463][ T5934] em28xx 4-1:0.0: Disconnecting em28xx [ 296.992378][ T7454] loop7: detected capacity change from 7 to 0 [ 297.051653][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 297.051695][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 297.051897][ T7451] ldm_validate_partition_table(): Disk read failed. [ 297.051927][ T7451] Dev loop7: unable to read RDB block 0 [ 297.051957][ T7451] loop7: unable to read partition table [ 297.052213][ T7451] loop7: partition table beyond EOD, truncated [ 297.231445][ T7451] loop_reread_partitions: partition scan of loop7 (SJ_+]֋ S'(J^Z (633)eeDϫ?Ƣ4+) failed (rc=-5) [ 297.906011][ T9] em28xx 4-1:0.0: Registering input extension [ 297.908147][ T5934] em28xx 4-1:0.0: Closing input extension [ 298.155060][ T5934] em28xx 4-1:0.0: Freeing device [ 298.178585][ T7486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.454'. [ 298.234750][ T5978] usb 3-1: USB disconnect, device number 10 [ 298.310943][ T7488] netlink: 'syz.1.453': attribute type 1 has an invalid length. [ 298.310984][ T7488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.877517][ T7516] netlink: 'syz.2.462': attribute type 4 has an invalid length. [ 301.047678][ T7522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.465'. [ 301.167957][ T7527] netlink: 'syz.1.466': attribute type 1 has an invalid length. [ 301.177653][ T7527] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.379159][ T7533] netlink: 20 bytes leftover after parsing attributes in process `syz.2.468'. [ 302.643721][ T7554] input: syz0 as /devices/virtual/input/input26 [ 302.912533][ T7556] blktrace: Concurrent blktraces are not allowed on loop0 [ 303.558167][ T7561] netlink: 24 bytes leftover after parsing attributes in process `syz.0.478'. [ 304.208328][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.479'. [ 305.084427][ T7571] netlink: 20 bytes leftover after parsing attributes in process `syz.4.481'. [ 305.347682][ T7563] syz.3.477 (7563) used greatest stack depth: 17592 bytes left [ 305.748116][ T5863] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 305.907098][ T7588] netlink: 24 bytes leftover after parsing attributes in process `syz.0.489'. [ 305.980342][ T5863] usb 2-1: too many configurations: 78, using maximum allowed: 8 [ 306.071276][ T7593] input: syz0 as /devices/virtual/input/input27 [ 306.385397][ T7595] blktrace: Concurrent blktraces are not allowed on loop6 [ 306.726669][ T5863] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 306.726695][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.726712][ T5863] usb 2-1: Product: syz [ 306.726724][ T5863] usb 2-1: Manufacturer: syz [ 306.726737][ T5863] usb 2-1: SerialNumber: syz [ 306.778470][ T5863] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 307.072105][ T6158] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 308.079866][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.492'. [ 309.058360][ T6158] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 309.058547][ T6158] ath9k_htc: Failed to initialize the device [ 309.101785][ T5934] usb 2-1: USB disconnect, device number 13 [ 309.134147][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 309.146319][ T5934] usb 2-1: ath9k_htc: USB layer deinitialized [ 310.419249][ T7614] netlink: 20 bytes leftover after parsing attributes in process `syz.3.496'. [ 310.702736][ T7626] netlink: 24 bytes leftover after parsing attributes in process `syz.3.501'. [ 310.918863][ T7632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.506'. [ 310.978144][ T5934] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 312.245089][ T5934] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 312.245117][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.245135][ T5934] usb 2-1: Product: syz [ 312.245147][ T5934] usb 2-1: Manufacturer: syz [ 312.245159][ T5934] usb 2-1: SerialNumber: syz [ 312.265279][ T5934] usb 2-1: config 0 descriptor?? [ 312.624280][ T6158] usb 2-1: USB disconnect, device number 14 [ 313.264100][ T7650] netlink: 28 bytes leftover after parsing attributes in process `syz.0.509'. [ 313.264137][ T7650] netlink: 'syz.0.509': attribute type 7 has an invalid length. [ 313.264150][ T7650] netlink: 'syz.0.509': attribute type 8 has an invalid length. [ 313.264162][ T7650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.509'. [ 313.407946][ T7650] syz_tun: entered promiscuous mode [ 313.604470][ T5934] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 313.623554][ T6366] udevd[6366]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 313.689193][ T7650] syz_tun: left promiscuous mode [ 313.768930][ T5934] usb 5-1: too many configurations: 78, using maximum allowed: 8 [ 313.799763][ T5934] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 313.799791][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.799808][ T5934] usb 5-1: Product: syz [ 313.799821][ T5934] usb 5-1: Manufacturer: syz [ 313.799833][ T5934] usb 5-1: SerialNumber: syz [ 313.817721][ T7658] netlink: 20 bytes leftover after parsing attributes in process `syz.3.511'. [ 313.873104][ T5934] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 313.940519][ T9] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 314.357194][ T6158] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 315.307773][ T9] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 315.308036][ T9] ath9k_htc: Failed to initialize the device [ 316.301065][ T6300] usb 5-1: USB disconnect, device number 10 [ 316.366768][ T6300] usb 5-1: ath9k_htc: USB layer deinitialized [ 316.424701][ T6158] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 316.424724][ T6158] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.424734][ T6158] usb 3-1: Product: syz [ 316.424741][ T6158] usb 3-1: Manufacturer: syz [ 316.424747][ T6158] usb 3-1: SerialNumber: syz [ 316.472120][ T6158] usb 3-1: config 0 descriptor?? [ 316.505432][ T6158] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 316.650408][ T7674] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 316.930300][ T7680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.517'. [ 317.114874][ T6158] usb 3-1: USB disconnect, device number 11 [ 317.274050][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.274120][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.753711][ T7691] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 317.755413][ T7691] team0: Port device batadv1 added [ 317.793208][ T7695] netlink: 20 bytes leftover after parsing attributes in process `syz.3.522'. [ 318.244584][ T7702] netlink: 28 bytes leftover after parsing attributes in process `syz.3.524'. [ 318.244620][ T7702] netlink: 'syz.3.524': attribute type 7 has an invalid length. [ 318.244632][ T7702] netlink: 'syz.3.524': attribute type 8 has an invalid length. [ 318.244643][ T7702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.524'. [ 318.318456][ T7702] syz_tun: entered promiscuous mode [ 318.389443][ T7703] netlink: 24 bytes leftover after parsing attributes in process `syz.2.525'. [ 318.463928][ T7702] syz_tun: left promiscuous mode [ 319.165763][ T7710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.528'. [ 320.095151][ T7726] pim6reg: entered allmulticast mode [ 320.096405][ T7732] netlink: 20 bytes leftover after parsing attributes in process `syz.2.534'. [ 320.675689][ T7749] netlink: 24 bytes leftover after parsing attributes in process `syz.2.539'. [ 320.803734][ T7748] netlink: 28 bytes leftover after parsing attributes in process `syz.0.540'. [ 320.803770][ T7748] netlink: 'syz.0.540': attribute type 7 has an invalid length. [ 320.803783][ T7748] netlink: 'syz.0.540': attribute type 8 has an invalid length. [ 320.803794][ T7748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.540'. [ 322.028176][ T31] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 322.217385][ T31] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 322.217403][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.217413][ T31] usb 4-1: Product: syz [ 322.217420][ T31] usb 4-1: Manufacturer: syz [ 322.217427][ T31] usb 4-1: SerialNumber: syz [ 322.281460][ T31] usb 4-1: config 0 descriptor?? [ 322.330564][ T31] hub 4-1:0.0: bad descriptor, ignoring hub [ 322.330587][ T31] hub 4-1:0.0: probe with driver hub failed with error -5 [ 322.593550][ T31] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 322.627510][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 322.630551][ T31] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 322.630609][ T31] usb 4-1: media controller created [ 322.749695][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 323.922950][ T5122] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 323.963369][ T31] DVB: Unable to find symbol dib7000p_attach() [ 323.963380][ T31] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 324.085782][ T7787] __nla_validate_parse: 2 callbacks suppressed [ 324.085801][ T7787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.553'. [ 324.108080][ T31] rc_core: IR keymap rc-dib0700-rc5 not found [ 324.108101][ T31] Registered IR keymap rc-empty [ 324.108420][ T31] dvb-usb: could not initialize remote control. [ 324.108429][ T31] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 324.229775][ T31] usb 4-1: USB disconnect, device number 9 [ 324.290566][ T7789] netlink: 28 bytes leftover after parsing attributes in process `syz.1.555'. [ 324.290599][ T7789] netlink: 'syz.1.555': attribute type 7 has an invalid length. [ 324.290611][ T7789] netlink: 'syz.1.555': attribute type 8 has an invalid length. [ 324.290622][ T7789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.555'. [ 324.439303][ T7789] syz_tun: entered promiscuous mode [ 324.498227][ T7789] syz_tun: left promiscuous mode [ 324.535629][ T31] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 324.806124][ T7795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.558'. [ 326.328133][ T31] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 326.568124][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 326.569945][ T31] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 326.569962][ T31] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 326.569975][ T31] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 326.569986][ T31] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 326.570008][ T31] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 326.570019][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.628699][ T7814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.565'. [ 326.843743][ T31] usb 3-1: GET_CAPABILITIES returned 0 [ 326.843771][ T31] usbtmc 3-1:16.0: can't read capabilities [ 326.948168][ T7817] netlink: 80 bytes leftover after parsing attributes in process `syz.3.567'. [ 326.948193][ T7817] netlink: 80 bytes leftover after parsing attributes in process `syz.3.567'. [ 327.062086][ T31] usb 3-1: USB disconnect, device number 12 [ 327.469217][ T6822] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 327.535090][ T7826] netlink: 28 bytes leftover after parsing attributes in process `syz.3.570'. [ 327.535128][ T7826] netlink: 'syz.3.570': attribute type 7 has an invalid length. [ 327.535140][ T7826] netlink: 'syz.3.570': attribute type 8 has an invalid length. [ 327.535151][ T7826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.570'. [ 327.561251][ T7826] syz_tun: entered promiscuous mode [ 327.608410][ T7826] syz_tun: left promiscuous mode [ 327.619391][ T6822] usb 5-1: too many configurations: 78, using maximum allowed: 8 [ 327.654110][ T6822] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 327.654134][ T6822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.654144][ T6822] usb 5-1: Product: syz [ 327.654151][ T6822] usb 5-1: Manufacturer: syz [ 327.654158][ T6822] usb 5-1: SerialNumber: syz [ 327.698813][ T6822] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 327.801067][ T6300] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 327.986521][ T7834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.574'. [ 329.188110][ T6300] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 329.188301][ T6300] ath9k_htc: Failed to initialize the device [ 330.211351][ T9] usb 5-1: USB disconnect, device number 11 [ 330.256888][ T9] usb 5-1: ath9k_htc: USB layer deinitialized [ 330.978745][ T7845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.577'. [ 331.074768][ T7850] netlink: 80 bytes leftover after parsing attributes in process `syz.4.579'. [ 331.074792][ T7850] netlink: 80 bytes leftover after parsing attributes in process `syz.4.579'. [ 331.550338][ T7867] netlink: 80 bytes leftover after parsing attributes in process `syz.4.585'. [ 331.550355][ T7867] netlink: 80 bytes leftover after parsing attributes in process `syz.4.585'. [ 332.489986][ T7873] netlink: 28 bytes leftover after parsing attributes in process `syz.1.586'. [ 332.490021][ T7873] netlink: 'syz.1.586': attribute type 7 has an invalid length. [ 332.490033][ T7873] netlink: 'syz.1.586': attribute type 8 has an invalid length. [ 332.490044][ T7873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.586'. [ 332.780627][ T7882] netlink: 24 bytes leftover after parsing attributes in process `syz.4.590'. [ 332.796800][ T7884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.591'. [ 333.748075][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 333.748547][ T37] audit: type=1326 audit(1764954001.033:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7887 comm="syz.1.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1922f749 code=0x7ffc0000 [ 333.749537][ T37] audit: type=1326 audit(1764954001.033:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7887 comm="syz.1.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faf1922df90 code=0x7ffc0000 [ 333.749582][ T37] audit: type=1326 audit(1764954001.033:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7887 comm="syz.1.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faf1922df90 code=0x7ffc0000 [ 333.749622][ T37] audit: type=1326 audit(1764954001.043:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7887 comm="syz.1.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1922f749 code=0x7ffc0000 [ 333.749660][ T37] audit: type=1326 audit(1764954001.043:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7887 comm="syz.1.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1922f749 code=0x7ffc0000 [ 333.749697][ T37] audit: type=1326 audit(1764954001.043:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7887 comm="syz.1.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7faf1922f749 code=0x7ffc0000 [ 333.749735][ T37] audit: type=1326 audit(1764954001.043:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7887 comm="syz.1.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1922f749 code=0x7ffc0000 [ 333.749773][ T37] audit: type=1326 audit(1764954001.043:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7887 comm="syz.1.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1922f749 code=0x7ffc0000 [ 333.749810][ T37] audit: type=1326 audit(1764954001.043:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7887 comm="syz.1.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf1922f749 code=0x7ffc0000 [ 333.749848][ T37] audit: type=1326 audit(1764954001.043:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7887 comm="syz.1.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1922f749 code=0x7ffc0000 [ 334.305167][ T7896] netlink: 80 bytes leftover after parsing attributes in process `syz.2.595'. [ 336.716286][ T7921] __nla_validate_parse: 1 callbacks suppressed [ 336.716300][ T7921] netlink: 24 bytes leftover after parsing attributes in process `syz.1.604'. [ 337.021528][ T7932] netlink: 80 bytes leftover after parsing attributes in process `syz.2.608'. [ 337.021544][ T7932] netlink: 80 bytes leftover after parsing attributes in process `syz.2.608'. [ 338.305588][ T7928] syz.0.606 (7928) used greatest stack depth: 16888 bytes left [ 338.547160][ T7945] netlink: 228 bytes leftover after parsing attributes in process `syz.2.612'. [ 338.559541][ T7947] netlink: 'syz.1.613': attribute type 1 has an invalid length. [ 338.559580][ T7947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.580002][ T5807] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 338.770071][ T5807] usb 4-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 338.770097][ T5807] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 338.770144][ T5807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.770166][ T5807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.770183][ T5807] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 338.770218][ T5807] usb 4-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 338.770236][ T5807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.884979][ T5807] usb 4-1: config 0 descriptor?? [ 339.514042][ T5807] usbhid 4-1:0.0: can't add hid device: -71 [ 339.514126][ T5807] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 339.553616][ T5807] usb 4-1: USB disconnect, device number 10 [ 339.619791][ T7961] netlink: 20 bytes leftover after parsing attributes in process `syz.2.619'. [ 340.653921][ T7968] netlink: 24 bytes leftover after parsing attributes in process `syz.4.621'. [ 340.840527][ T7971] netlink: 80 bytes leftover after parsing attributes in process `syz.2.622'. [ 340.840552][ T7971] netlink: 80 bytes leftover after parsing attributes in process `syz.2.622'. [ 341.672226][ T7993] netlink: 20 bytes leftover after parsing attributes in process `syz.4.629'. [ 341.958189][ T5890] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 342.123175][ T5890] usb 5-1: Using ep0 maxpacket: 8 [ 342.226743][ T5890] usb 5-1: unable to get BOS descriptor or descriptor too short [ 342.232043][ T5890] usb 5-1: config 8 has an invalid interface number: 24 but max is 0 [ 342.232068][ T5890] usb 5-1: config 8 has no interface number 0 [ 342.232114][ T5890] usb 5-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 342.232138][ T5890] usb 5-1: config 8 interface 24 has no altsetting 0 [ 342.239448][ T5890] usb 5-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 342.239466][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.239476][ T5890] usb 5-1: Product: syz [ 342.239483][ T5890] usb 5-1: Manufacturer: syz [ 342.239490][ T5890] usb 5-1: SerialNumber: syz [ 344.064280][ T8015] netlink: 80 bytes leftover after parsing attributes in process `syz.0.637'. [ 344.064304][ T8015] netlink: 80 bytes leftover after parsing attributes in process `syz.0.637'. [ 345.722880][ T37] kauditd_printk_skb: 24 callbacks suppressed [ 345.722892][ T37] audit: type=1326 audit(1764954013.033:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8027 comm="syz.1.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1922f749 code=0x7ffc0000 [ 345.722920][ T37] audit: type=1326 audit(1764954013.033:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8027 comm="syz.1.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1922f749 code=0x7ffc0000 [ 345.722941][ T37] audit: type=1326 audit(1764954013.033:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8027 comm="syz.1.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faf1922df90 code=0x7ffc0000 [ 345.722962][ T37] audit: type=1326 audit(1764954013.033:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8027 comm="syz.1.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faf1922df90 code=0x7ffc0000 [ 345.723017][ T37] audit: type=1326 audit(1764954013.043:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8027 comm="syz.1.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1922f749 code=0x7ffc0000 [ 345.723039][ T37] audit: type=1326 audit(1764954013.043:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8027 comm="syz.1.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1922f749 code=0x7ffc0000 [ 345.723060][ T37] audit: type=1326 audit(1764954013.043:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8027 comm="syz.1.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7faf1922f749 code=0x7ffc0000 [ 345.723080][ T37] audit: type=1326 audit(1764954013.043:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8027 comm="syz.1.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1922f749 code=0x7ffc0000 [ 345.723101][ T37] audit: type=1326 audit(1764954013.043:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8027 comm="syz.1.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf1922f749 code=0x7ffc0000 [ 345.723154][ T37] audit: type=1326 audit(1764954013.043:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8027 comm="syz.1.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1922f749 code=0x7ffc0000 [ 347.513519][ T5890] vmk80xx 5-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 347.586071][ T8046] netlink: 80 bytes leftover after parsing attributes in process `syz.2.648'. [ 347.586096][ T8046] netlink: 80 bytes leftover after parsing attributes in process `syz.2.648'. [ 348.242594][ T5807] usb 5-1: USB disconnect, device number 12 [ 348.314894][ T8056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.650'. [ 350.876056][ T8083] netlink: 80 bytes leftover after parsing attributes in process `syz.2.660'. [ 350.876082][ T8083] netlink: 80 bytes leftover after parsing attributes in process `syz.2.660'. [ 350.898527][ T5796] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 351.118125][ T5796] usb 4-1: Using ep0 maxpacket: 16 [ 351.183623][ T5796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 351.199655][ T5796] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 351.199681][ T5796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.199699][ T5796] usb 4-1: Product: syz [ 351.199711][ T5796] usb 4-1: Manufacturer: syz [ 351.199724][ T5796] usb 4-1: SerialNumber: syz [ 351.204677][ T5796] usb 4-1: config 0 descriptor?? [ 351.213443][ T5796] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 351.213473][ T5796] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 351.866939][ T5796] em28xx 4-1:0.0: chip ID is em2765 [ 353.940208][ T5796] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 353.940238][ T5796] em28xx 4-1:0.0: board has no eeprom [ 354.086717][ T5796] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 354.086743][ T5796] em28xx 4-1:0.0: dvb set to bulk mode. [ 354.087088][ T5945] em28xx 4-1:0.0: Binding DVB extension [ 354.154698][ T5796] usb 4-1: USB disconnect, device number 11 [ 354.165353][ T5796] em28xx 4-1:0.0: Disconnecting em28xx [ 354.331406][ T5945] em28xx 4-1:0.0: Registering input extension [ 354.331648][ T5796] em28xx 4-1:0.0: Closing input extension [ 354.373224][ T5796] em28xx 4-1:0.0: Freeing device [ 354.384435][ T8117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.671'. [ 354.462033][ T8118] netlink: 20 bytes leftover after parsing attributes in process `syz.1.673'. [ 354.560995][ T8120] netlink: 80 bytes leftover after parsing attributes in process `syz.0.674'. [ 354.561020][ T8120] netlink: 80 bytes leftover after parsing attributes in process `syz.0.674'. [ 355.263870][ T8133] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.528873][ T8144] netlink: 'syz.0.681': attribute type 4 has an invalid length. [ 355.598581][ T5796] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 355.768132][ T5796] usb 5-1: Using ep0 maxpacket: 16 [ 355.771040][ T5796] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 355.774669][ T5796] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 355.774709][ T5796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.774727][ T5796] usb 5-1: Product: syz [ 355.774740][ T5796] usb 5-1: Manufacturer: syz [ 355.774752][ T5796] usb 5-1: SerialNumber: syz [ 355.831400][ T5796] usb 5-1: config 0 descriptor?? [ 355.853328][ T5796] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 355.853360][ T5796] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 356.748237][ T8150] tipc: Started in network mode [ 356.748266][ T8150] tipc: Node identity c249a8804e0c, cluster identity 4711 [ 356.760278][ T8150] tipc: Enabled bearer , priority 0 [ 356.794972][ T8152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.685'. [ 356.836753][ T8150] syz.1.684 uses obsolete (PF_INET,SOCK_PACKET) [ 356.872084][ T8150] syzkaller0: entered promiscuous mode [ 356.872110][ T8150] syzkaller0: entered allmulticast mode [ 356.908130][ T5796] em28xx 5-1:0.0: chip ID is em2765 [ 357.375730][ T8156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.687'. [ 357.529628][ T5796] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 357.529656][ T5796] em28xx 5-1:0.0: board has no eeprom [ 357.873501][ T5978] tipc: Node number set to 2353375360 [ 357.890038][ T5796] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 357.890063][ T5796] em28xx 5-1:0.0: dvb set to bulk mode. [ 357.890399][ T5807] em28xx 5-1:0.0: Binding DVB extension [ 358.026614][ T8161] netlink: 80 bytes leftover after parsing attributes in process `syz.1.688'. [ 358.026639][ T8161] netlink: 80 bytes leftover after parsing attributes in process `syz.1.688'. [ 359.998220][ T5796] usb 5-1: USB disconnect, device number 13 [ 360.001820][ T5796] em28xx 5-1:0.0: Disconnecting em28xx [ 360.265082][ T5807] em28xx 5-1:0.0: Registering input extension [ 360.265322][ T5796] em28xx 5-1:0.0: Closing input extension [ 360.377466][ T5796] em28xx 5-1:0.0: Freeing device [ 360.399785][ T8186] netlink: 'syz.4.698': attribute type 1 has an invalid length. [ 360.399825][ T8186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.714779][ T8195] netlink: 80 bytes leftover after parsing attributes in process `syz.4.702'. [ 360.714796][ T8195] netlink: 80 bytes leftover after parsing attributes in process `syz.4.702'. [ 361.108232][ T8198] tipc: Cannot configure node identity twice [ 361.108247][ T8198] tipc: Cannot configure node identity twice [ 363.135234][ T8211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.696'. [ 363.243626][ T8219] netlink: 'syz.2.712': attribute type 1 has an invalid length. [ 363.243665][ T8219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.295517][ T8222] netlink: 80 bytes leftover after parsing attributes in process `syz.3.713'. [ 363.295541][ T8222] netlink: 80 bytes leftover after parsing attributes in process `syz.3.713'. [ 365.293259][ T8246] netlink: 28 bytes leftover after parsing attributes in process `syz.2.724'. [ 365.293295][ T8246] netlink: 'syz.2.724': attribute type 7 has an invalid length. [ 365.293308][ T8246] netlink: 'syz.2.724': attribute type 8 has an invalid length. [ 365.293318][ T8246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.724'. [ 366.383083][ T5871] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 366.688166][ T5871] usb 5-1: Using ep0 maxpacket: 8 [ 366.690276][ T5871] usb 5-1: config 1 has an invalid interface number: 6 but max is 0 [ 366.690305][ T5871] usb 5-1: config 1 has no interface number 0 [ 366.692797][ T5871] usb 5-1: New USB device found, idVendor=082d, idProduct=0300, bcdDevice=c3.4b [ 366.692821][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.692838][ T5871] usb 5-1: Product: syz [ 366.692851][ T5871] usb 5-1: Manufacturer: syz [ 366.692864][ T5871] usb 5-1: SerialNumber: syz [ 367.300598][ T8273] netlink: 68 bytes leftover after parsing attributes in process `syz.4.723'. [ 367.532091][ T8275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.554405][ T8275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.118243][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 368.271483][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 368.271514][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 368.271536][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 368.271556][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 368.271596][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 368.271616][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.282050][ T9] usb 3-1: config 0 descriptor?? [ 369.010093][ T9] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 370.318114][ T6484] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 370.348119][ T805] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 370.498090][ T805] usb 2-1: Using ep0 maxpacket: 16 [ 370.505036][ T6484] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.505092][ T6484] usb 1-1: config 0 has no interfaces? [ 370.505110][ T6484] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 370.505121][ T6484] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.515494][ T6484] usb 1-1: config 0 descriptor?? [ 370.540554][ T805] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 370.540581][ T805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.540646][ T805] usb 2-1: Product: syz [ 370.540658][ T805] usb 2-1: Manufacturer: syz [ 370.540671][ T805] usb 2-1: SerialNumber: syz [ 370.656780][ T805] usb 2-1: config 0 descriptor?? [ 370.803763][ T6484] usb 1-1: USB disconnect, device number 7 [ 371.182384][ T5807] usb 3-1: reset high-speed USB device number 13 using dummy_hcd [ 371.301916][ T805] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 371.485936][ T805] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 371.487551][ T805] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 371.507023][ T805] usb 2-1: media controller created [ 371.537365][ T8300] dtv5100: wlen = 0, aborting. [ 371.772527][ T5871] usb 5-1: palm_os_4_probe - error -32 getting connection info [ 371.772614][ T5871] visor 5-1:1.6: Handspring Visor / Palm OS converter detected [ 371.816993][ T5871] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 371.885074][ T5871] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 371.917792][ T805] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 372.092565][ T805] zl10353_read_register: readreg error (reg=127, ret==0) [ 372.092638][ T805] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 372.092650][ T805] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 372.129459][ T805] usb 2-1: USB disconnect, device number 15 [ 372.232512][ T6484] usb 5-1: USB disconnect, device number 14 [ 372.315749][ T6484] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 372.350440][ T6484] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 372.351273][ T6484] visor 5-1:1.6: device disconnected [ 372.465622][ T805] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 374.438170][ T5871] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 374.588176][ T5871] usb 5-1: Using ep0 maxpacket: 8 [ 374.620580][ T5871] usb 5-1: unable to get BOS descriptor or descriptor too short [ 374.641002][ T5871] usb 5-1: config 5 has an invalid interface number: 212 but max is 0 [ 374.641026][ T5871] usb 5-1: config 5 has an invalid descriptor of length 119, skipping remainder of the config [ 374.641042][ T5871] usb 5-1: config 5 has no interface number 0 [ 374.641088][ T5871] usb 5-1: config 5 interface 212 altsetting 41 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 374.641111][ T5871] usb 5-1: config 5 interface 212 has no altsetting 0 [ 374.664787][ T5871] usb 5-1: New USB device found, idVendor=0763, idProduct=2019, bcdDevice=3a.5e [ 374.664820][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.664835][ T5871] usb 5-1: Product: syz [ 374.664848][ T5871] usb 5-1: Manufacturer: syz [ 374.664860][ T5871] usb 5-1: SerialNumber: syz [ 375.061322][ T8336] netlink: 28 bytes leftover after parsing attributes in process `syz.3.747'. [ 375.061355][ T8336] netlink: 'syz.3.747': attribute type 7 has an invalid length. [ 375.061367][ T8336] netlink: 'syz.3.747': attribute type 8 has an invalid length. [ 375.061435][ T8336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.747'. [ 375.080098][ T8339] netlink: 'syz.0.748': attribute type 4 has an invalid length. [ 376.258172][ T5796] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 376.428267][ T5796] usb 4-1: Using ep0 maxpacket: 8 [ 376.430912][ T5796] usb 4-1: config 1 has an invalid interface number: 6 but max is 0 [ 376.430935][ T5796] usb 4-1: config 1 has no interface number 0 [ 376.433982][ T5796] usb 4-1: New USB device found, idVendor=082d, idProduct=0300, bcdDevice=c3.4b [ 376.434008][ T5796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.434026][ T5796] usb 4-1: Product: syz [ 376.434038][ T5796] usb 4-1: Manufacturer: syz [ 376.434050][ T5796] usb 4-1: SerialNumber: syz [ 376.490683][ T5807] usb 3-1: device descriptor read/64, error -110 [ 376.815074][ T5807] usb 3-1: reset high-speed USB device number 13 using dummy_hcd [ 378.858843][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.862840][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.082429][ T5807] usb 3-1: device descriptor read/64, error -32 [ 379.359857][ T5807] usb 3-1: reset high-speed USB device number 13 using dummy_hcd [ 379.393754][ T5807] usb 3-1: device descriptor read/8, error -32 [ 379.648329][ T5807] usb 3-1: reset high-speed USB device number 13 using dummy_hcd [ 379.719860][ T5807] usb 3-1: device descriptor read/8, error -32 [ 379.840509][ T8357] netlink: 68 bytes leftover after parsing attributes in process `syz.3.751'. [ 379.905118][ T8357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.906140][ T8357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.936319][ T5807] raw-gadget.2 gadget.2: failed to queue suspend event [ 379.967720][ T5993] usb 3-1: USB disconnect, device number 13 [ 380.002253][ T5993] raw-gadget.2 gadget.2: failed to queue reset event [ 380.070562][ T5993] raw-gadget.2 gadget.2: failed to queue resume event [ 380.139060][ T5993] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 380.140655][ T8278] raw-gadget.2 gadget.2: failed to queue suspend event [ 380.202086][ T8278] raw-gadget.2 gadget.2: failed to queue disconnect event [ 380.713253][ T8376] netlink: 'syz.0.758': attribute type 1 has an invalid length. [ 380.713706][ T8376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.800181][ T5807] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 380.979093][ T5807] usb 2-1: Using ep0 maxpacket: 16 [ 380.982235][ T5807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 381.044884][ T5807] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 381.044901][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.044910][ T5807] usb 2-1: Product: syz [ 381.044917][ T5807] usb 2-1: Manufacturer: syz [ 381.044925][ T5807] usb 2-1: SerialNumber: syz [ 381.051273][ T5807] usb 2-1: config 0 descriptor?? [ 381.202016][ T5807] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 381.202037][ T5807] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 381.522311][ T5796] usb 4-1: palm_os_4_probe - error -32 getting connection info [ 381.522362][ T5796] visor 4-1:1.6: Handspring Visor / Palm OS converter detected [ 381.595358][ T5796] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 381.726993][ T5807] em28xx 2-1:0.0: chip ID is em2765 [ 381.820347][ T5796] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 381.839028][ T8383] netlink: 16 bytes leftover after parsing attributes in process `syz.0.760'. [ 382.023721][ T5796] usb 4-1: USB disconnect, device number 12 [ 382.137022][ T5796] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 382.170608][ T5796] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 382.171388][ T5796] visor 4-1:1.6: device disconnected [ 382.348481][ T8389] netlink: 'syz.3.762': attribute type 4 has an invalid length. [ 382.378368][ T5807] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 382.378396][ T5807] em28xx 2-1:0.0: board has no eeprom [ 382.667237][ T5796] usb 5-1: USB disconnect, device number 15 [ 382.721221][ T5807] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 382.721247][ T5807] em28xx 2-1:0.0: dvb set to bulk mode. [ 382.738433][ T5934] em28xx 2-1:0.0: Binding DVB extension [ 383.455164][ T8400] pim6reg: entered allmulticast mode [ 383.719255][ T8406] process 'syz.3.768' launched '/dev/fd/4' with NULL argv: empty string added [ 383.931600][ T8408] netlink: 'syz.4.769': attribute type 1 has an invalid length. [ 383.931629][ T8408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.188103][ T5807] usb 2-1: USB disconnect, device number 16 [ 384.193565][ T5807] em28xx 2-1:0.0: Disconnecting em28xx [ 384.285976][ T8415] netlink: 16 bytes leftover after parsing attributes in process `syz.4.771'. [ 384.390053][ T5934] em28xx 2-1:0.0: Registering input extension [ 384.395595][ T5807] em28xx 2-1:0.0: Closing input extension [ 384.499971][ T5807] em28xx 2-1:0.0: Freeing device [ 384.848566][ T5978] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 384.998146][ T5978] usb 5-1: Using ep0 maxpacket: 8 [ 385.000651][ T5978] usb 5-1: config 1 has an invalid interface number: 6 but max is 0 [ 385.000675][ T5978] usb 5-1: config 1 has no interface number 0 [ 385.003216][ T5978] usb 5-1: New USB device found, idVendor=082d, idProduct=0300, bcdDevice=c3.4b [ 385.003241][ T5978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.003259][ T5978] usb 5-1: Product: syz [ 385.003271][ T5978] usb 5-1: Manufacturer: syz [ 385.003283][ T5978] usb 5-1: SerialNumber: syz [ 385.018222][ T5871] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 385.204139][ T5871] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 385.204156][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.204166][ T5871] usb 3-1: Product: syz [ 385.204218][ T5871] usb 3-1: Manufacturer: syz [ 385.204225][ T5871] usb 3-1: SerialNumber: syz [ 385.457937][ T8429] netlink: 68 bytes leftover after parsing attributes in process `syz.4.772'. [ 385.547782][ T5871] usb 3-1: config 0 descriptor?? [ 385.569848][ T8429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.573402][ T8429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.606614][ T5871] hub 3-1:0.0: bad descriptor, ignoring hub [ 385.606636][ T5871] hub 3-1:0.0: probe with driver hub failed with error -5 [ 385.975138][ T5871] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 386.021842][ T5871] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 386.045598][ T5871] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 386.045778][ T5871] usb 3-1: media controller created [ 386.239747][ T5871] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 386.794956][ T6484] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 386.832742][ T8438] netlink: 'syz.1.778': attribute type 4 has an invalid length. [ 386.953900][ T6484] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.953925][ T6484] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 386.953959][ T6484] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 386.954037][ T6484] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.978308][ T6484] usb 1-1: config 0 descriptor?? [ 387.042452][ T5871] DVB: Unable to find symbol dib7000p_attach() [ 387.042467][ T5871] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 387.450765][ T5871] rc_core: IR keymap rc-dib0700-rc5 not found [ 387.451097][ T5871] Registered IR keymap rc-empty [ 390.358439][ T5978] usb 5-1: palm_os_4_probe - error -32 getting connection info [ 390.358521][ T5978] visor 5-1:1.6: Handspring Visor / Palm OS converter detected [ 390.410803][ T5978] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 390.441846][ T5978] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 391.039252][ T5978] usb 5-1: USB disconnect, device number 16 [ 391.082716][ T5978] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 391.113478][ T5978] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 391.128625][ T5978] visor 5-1:1.6: device disconnected [ 391.191469][ T8434] ------------[ cut here ]------------ [ 391.191489][ T8434] usb 3-1: BOGUS control dir, pipe 80000f80 doesn't match bRequestType c0 [ 391.191513][ T8434] WARNING: drivers/usb/core/urb.c:414 at 0x0, CPU#0: syz.0.777/8434 [ 391.191542][ T8434] Modules linked in: [ 391.191572][ T5871] dvb-usb: could not initialize remote control. [ 391.191569][ T8434] CPU: 0 UID: 0 PID: 8434 Comm: syz.0.777 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 391.191581][ T5871] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 391.191594][ T8434] Tainted: [L]=SOFTLOCKUP [ 391.191601][ T8434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 391.191613][ T8434] RIP: 0010:usb_submit_urb+0x112e/0x1890 [ 391.191640][ T8434] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 99 f2 ff ff 89 e9 [ 391.191653][ T8434] RSP: 0018:ffffc9000fc47820 EFLAGS: 00010246 [ 391.191667][ T8434] RAX: 0000000000000000 RBX: ffff888024096300 RCX: 0000000080000f80 [ 391.191679][ T8434] RDX: ffff888027c1ece0 RSI: ffffffff8b831ca0 RDI: ffffffff8ee5ddf0 [ 391.191691][ T8434] RBP: 1ffff11003f52f5c R08: 00000000000000c0 R09: 0000000000000000 [ 391.191702][ T8434] R10: ffffc9000fc47920 R11: fffff52001f88f30 R12: ffff8880104aa100 [ 391.191713][ T8434] R13: ffff88801fa97ae0 R14: 0000000080000f80 R15: ffff888027c1ece0 [ 391.191724][ T8434] FS: 00007fda816fe6c0(0000) GS:ffff888126d5b000(0000) knlGS:0000000000000000 [ 391.191738][ T8434] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 391.191749][ T8434] CR2: 00002000001ac030 CR3: 0000000032c1c000 CR4: 00000000003526f0 [ 391.191763][ T8434] Call Trace: [ 391.191769][ T8434] [ 391.191783][ T8434] ? __init_swait_queue_head+0xa9/0x150 [ 391.191806][ T8434] usb_start_wait_urb+0x114/0x4c0 [ 391.191834][ T8434] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 391.191873][ T8434] usb_control_msg+0x232/0x3e0 [ 391.191900][ T8434] dib0700_i2c_xfer+0xba7/0xf70 [ 391.191941][ T8434] __i2c_transfer+0x871/0x20e0 [ 391.191964][ T8434] ? i2c_transfer+0x120/0x3a0 [ 391.191989][ T8434] ? __pfx___i2c_transfer+0x10/0x10 [ 391.192009][ T8434] ? rt_mutex_lock_nested+0x172/0x1e0 [ 391.192026][ T8434] ? i2c_transfer+0x120/0x3a0 [ 391.192046][ T8434] i2c_transfer+0x25b/0x3a0 [ 391.192066][ T8434] ? __pfx_i2c_transfer+0x10/0x10 [ 391.192089][ T8434] ? _copy_from_user+0x94/0xb0 [ 391.192112][ T8434] i2cdev_ioctl_rdwr+0x460/0x740 [ 391.192141][ T8434] i2cdev_ioctl+0x64e/0x800 [ 391.192158][ T8434] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 391.192180][ T8434] ? __fget_files+0x3a6/0x420 [ 391.192200][ T8434] ? __fget_files+0x2a/0x420 [ 391.192224][ T8434] ? bpf_lsm_file_ioctl+0x9/0x20 [ 391.192244][ T8434] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 391.192263][ T8434] __se_sys_ioctl+0xff/0x170 [ 391.192282][ T8434] do_syscall_64+0xfa/0xf80 [ 391.192298][ T8434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.192313][ T8434] ? clear_bhb_loop+0x60/0xb0 [ 391.192331][ T8434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.192346][ T8434] RIP: 0033:0x7fda8349f749 [ 391.192360][ T8434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.192373][ T8434] RSP: 002b:00007fda816fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 391.192388][ T8434] RAX: ffffffffffffffda RBX: 00007fda836f5fa0 RCX: 00007fda8349f749 [ 391.192400][ T8434] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000005 [ 391.192410][ T8434] RBP: 00007fda83523f91 R08: 0000000000000000 R09: 0000000000000000 [ 391.192420][ T8434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.192430][ T8434] R13: 00007fda836f6038 R14: 00007fda836f5fa0 R15: 00007ffc0bcac278 [ 391.192458][ T8434] [ 391.192474][ T8434] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 391.192493][ T8434] CPU: 0 UID: 0 PID: 8434 Comm: syz.0.777 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 391.192514][ T8434] Tainted: [L]=SOFTLOCKUP [ 391.192520][ T8434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 391.192529][ T8434] Call Trace: [ 391.192535][ T8434] [ 391.192542][ T8434] dump_stack_lvl+0x99/0x250 [ 391.192563][ T8434] ? __asan_memcpy+0x40/0x70 [ 391.192579][ T8434] ? __pfx_dump_stack_lvl+0x10/0x10 [ 391.192598][ T8434] ? __pfx__printk+0x10/0x10 [ 391.192626][ T8434] vpanic+0x237/0x6d0 [ 391.192646][ T8434] ? __pfx_vpanic+0x10/0x10 [ 391.192663][ T8434] ? is_bpf_text_address+0x292/0x2b0 [ 391.192681][ T8434] ? is_bpf_text_address+0x26/0x2b0 [ 391.192705][ T8434] panic+0xb9/0xc0 [ 391.192723][ T8434] ? __pfx_panic+0x10/0x10 [ 391.192758][ T8434] __warn+0x317/0x4b0 [ 391.192782][ T8434] __report_bug+0x288/0x500 [ 391.192812][ T8434] ? __pfx___report_bug+0x10/0x10 [ 391.192839][ T8434] ? stack_depot_save_flags+0x422/0x850 [ 391.192859][ T8434] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 391.192884][ T8434] report_bug_entry+0x16a/0x220 [ 391.192904][ T8434] ? usb_submit_urb+0x112e/0x1890 [ 391.192922][ T8434] ? usb_submit_urb+0x1133/0x1890 [ 391.192940][ T8434] handle_bug+0xca/0x200 [ 391.192957][ T8434] exc_invalid_op+0x1a/0x50 [ 391.192973][ T8434] asm_exc_invalid_op+0x1a/0x20 [ 391.192987][ T8434] RIP: 0010:usb_submit_urb+0x112e/0x1890 [ 391.193006][ T8434] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 99 f2 ff ff 89 e9 [ 391.193018][ T8434] RSP: 0018:ffffc9000fc47820 EFLAGS: 00010246 [ 391.193031][ T8434] RAX: 0000000000000000 RBX: ffff888024096300 RCX: 0000000080000f80 [ 391.193042][ T8434] RDX: ffff888027c1ece0 RSI: ffffffff8b831ca0 RDI: ffffffff8ee5ddf0 [ 391.193054][ T8434] RBP: 1ffff11003f52f5c R08: 00000000000000c0 R09: 0000000000000000 [ 391.193065][ T8434] R10: ffffc9000fc47920 R11: fffff52001f88f30 R12: ffff8880104aa100 [ 391.193076][ T8434] R13: ffff88801fa97ae0 R14: 0000000080000f80 R15: ffff888027c1ece0 [ 391.193109][ T8434] ? __init_swait_queue_head+0xa9/0x150 [ 391.193132][ T8434] usb_start_wait_urb+0x114/0x4c0 [ 391.193158][ T8434] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 391.193196][ T8434] usb_control_msg+0x232/0x3e0 [ 391.193222][ T8434] dib0700_i2c_xfer+0xba7/0xf70 [ 391.193262][ T8434] __i2c_transfer+0x871/0x20e0 [ 391.193284][ T8434] ? i2c_transfer+0x120/0x3a0 [ 391.193310][ T8434] ? __pfx___i2c_transfer+0x10/0x10 [ 391.193330][ T8434] ? rt_mutex_lock_nested+0x172/0x1e0 [ 391.193346][ T8434] ? i2c_transfer+0x120/0x3a0 [ 391.193366][ T8434] i2c_transfer+0x25b/0x3a0 [ 391.193387][ T8434] ? __pfx_i2c_transfer+0x10/0x10 [ 391.193408][ T8434] ? _copy_from_user+0x94/0xb0 [ 391.193431][ T8434] i2cdev_ioctl_rdwr+0x460/0x740 [ 391.193459][ T8434] i2cdev_ioctl+0x64e/0x800 [ 391.193477][ T8434] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 391.193503][ T8434] ? __fget_files+0x3a6/0x420 [ 391.193522][ T8434] ? __fget_files+0x2a/0x420 [ 391.193544][ T8434] ? bpf_lsm_file_ioctl+0x9/0x20 [ 391.193565][ T8434] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 391.193584][ T8434] __se_sys_ioctl+0xff/0x170 [ 391.193604][ T8434] do_syscall_64+0xfa/0xf80 [ 391.193619][ T8434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.193634][ T8434] ? clear_bhb_loop+0x60/0xb0 [ 391.193652][ T8434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.193667][ T8434] RIP: 0033:0x7fda8349f749 [ 391.193679][ T8434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.193691][ T8434] RSP: 002b:00007fda816fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 391.193706][ T8434] RAX: ffffffffffffffda RBX: 00007fda836f5fa0 RCX: 00007fda8349f749 [ 391.193718][ T8434] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000005 [ 391.193728][ T8434] RBP: 00007fda83523f91 R08: 0000000000000000 R09: 0000000000000000 [ 391.193739][ T8434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.193749][ T8434] R13: 00007fda836f6038 R14: 00007fda836f5fa0 R15: 00007ffc0bcac278 [ 391.193777][ T8434] [ 391.194177][ T8434] Kernel Offset: disabled