last executing test programs: 3.978032621s ago: executing program 2 (id=19): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.519610547s ago: executing program 0 (id=23): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="1a46339a22bd8c9a91334d31ca21b471252882101882f98cf04a3e59cba597b61aa2ab6320a39920bd4c", 0x2a}], 0x1, 0x0, 0x0, 0x10004814}}], 0x1, 0x480d0) recvmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x60) 3.452758908s ago: executing program 3 (id=24): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x2918e883b01d34d4}, 0x4804) 3.405350623s ago: executing program 0 (id=25): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r2, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x37c}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x39a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x40}}, 0x0) 3.31933262s ago: executing program 0 (id=26): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setreuid(0xee01, 0xee01) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x2, 0x0, 0x0) 3.216332952s ago: executing program 0 (id=27): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9f, 0x18, 0x76, 0x20, 0x17ef, 0x7203, 0x2e36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbc, 0x0, 0x0, 0x9e, 0x88, 0x33}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000880)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1b1c, 0xa52, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x1, 0xf9, {0x9, 0x21, 0xfeff, 0x6, 0x1, {0x22, 0x58a}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0xe9, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.917084013s ago: executing program 1 (id=30): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x2c}}, 0x0) 2.820610779s ago: executing program 1 (id=31): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4) 2.726293751s ago: executing program 1 (id=32): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xac, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @redirect={0x5, 0x1, 0x0, @multicast2, {0x24, 0x4, 0x2, 0x10, 0x2, 0x68, 0xff, 0x7, 0x88, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@timestamp_prespec={0x44, 0x14, 0xd8, 0x3, 0xa, [{@rand_addr=0x64010100, 0x7}, {@empty, 0x1}]}, @generic={0x7, 0xf, "1025c07c16c61c92654dbef6c9"}, @rr={0x7, 0x13, 0xcd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @remote, @broadcast]}, @end, @cipso={0x86, 0x3b, 0xffffffffffffffff, [{0x7, 0xa, "4028b15bc512b56f"}, {0x5, 0x11, "efcacc941696c2dbf6141e9f4b8481"}, {0x7, 0x4, 'Y='}, {0x7, 0x5, "963c17"}, {0x7, 0xb, "1a44df30cca281c4b5"}, {0x4, 0x6, "fff01156"}]}, @ssrr={0x89, 0x7, 0xdb, [@local]}]}}}}}, 0xba) 2.497202058s ago: executing program 3 (id=33): syz_usb_connect$sierra_net(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xd, 0x2, 0x10, 0x10, 0x0, 0x7}, {0x9, 0x5, 0x6, 0x2, 0x8, 0x7, 0x5, 0x1}, {0x9, 0x5, 0xd, 0x3, 0x200, 0x65, 0x4, 0x2}}}}}}]}}, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920001000109021b1901000000f30904150001da40df000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.461483511s ago: executing program 1 (id=34): syz_usb_connect(0x4, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003f9aab106d04f0080d500102"], 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB='@!\f\x00\x00\x00\f!'], 0x0}, 0x0) 1.849271073s ago: executing program 2 (id=35): mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r0 = memfd_create(0x0, 0x0) fremovexattr(r0, 0x0) 1.782158664s ago: executing program 2 (id=36): syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x7, 0x81, &(0x7f00000002c0), 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYRES16=r1], 0x0) 505.945181ms ago: executing program 2 (id=37): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "fc0300", 0x48, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65}], @pkt_toobig={0x2, 0x0, 0x0, 0xd93f, {0x4, 0x6, '\x00', 0xf08, 0x11, 0xb9e02c7ea3376920, @ipv4={'\x00', '\xff\xff', @multicast2}, @dev={0xfe, 0x80, '\x00', 0x12}, [@hopopts={0x84, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}, @padn]}]}}}}}}, 0x7e) 460.67846ms ago: executing program 3 (id=38): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) 426.561294ms ago: executing program 1 (id=39): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5446323ff663197d"}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x24008004) 323.98106ms ago: executing program 3 (id=40): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x70, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3a, 0xe, {{{}, {}, @broadcast}, 0x0, @random=0x4, 0x1, @void, @val, @void, @val={0x4, 0x6, {0xd1, 0xae, 0x5, 0x4}}, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x0, 0x1, 0x1f, 0x6}}}}], @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x7}]}, 0x70}, 0x1, 0x0, 0x0, 0x84}, 0x0) 280.78659ms ago: executing program 1 (id=41): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x48) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000002, 0x11, r0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r1, &(0x7f0000001300)='7', 0x1) 254.621858ms ago: executing program 3 (id=42): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001c40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000080)={0x30, r2, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 222.336372ms ago: executing program 2 (id=43): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000000)={0x48, r2, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "fa32a328bb46f9b4ad66621684"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40044}, 0x20000000) 112.343816ms ago: executing program 0 (id=44): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x3, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) 111.956712ms ago: executing program 2 (id=45): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x3d, &(0x7f0000000bc0)=@string={0x3d, 0x3, "b9aa5bf0bb14508e61bc234dfa096b1b8638648c575ce1dc5c6adc512d99bb44a71c9981c70b5131f88ade1a16c3b4ecd32be727937bc0ba825c07"}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "f50a5159"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 44.318927ms ago: executing program 3 (id=46): r0 = syz_usb_connect(0x5, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 0s ago: executing program 0 (id=47): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000002c0)={0x20, 0x11, 0x5, "0317f2616b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.207' (ED25519) to the list of known hosts. [ 74.149830][ T5822] cgroup: Unknown subsys name 'net' [ 74.215513][ T5822] cgroup: Unknown subsys name 'cpuset' [ 74.224536][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.627528][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.856432][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.865397][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.872585][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.873532][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.881316][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.889155][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.895094][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.908878][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.910248][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.917129][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.924465][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.931177][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.949418][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.950213][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.961029][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.967845][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.976218][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.998110][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.007566][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.032077][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.541768][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 79.600954][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 79.735910][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 79.787121][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 79.834629][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.842530][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.850248][ T5833] bridge_slave_0: entered allmulticast mode [ 79.857834][ T5833] bridge_slave_0: entered promiscuous mode [ 79.897104][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.904404][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.911666][ T5833] bridge_slave_1: entered allmulticast mode [ 79.919025][ T5833] bridge_slave_1: entered promiscuous mode [ 79.926997][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.934186][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.941416][ T5838] bridge_slave_0: entered allmulticast mode [ 79.948792][ T5838] bridge_slave_0: entered promiscuous mode [ 79.987732][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.995254][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.003848][ T5838] bridge_slave_1: entered allmulticast mode [ 80.010881][ T5838] bridge_slave_1: entered promiscuous mode [ 80.075362][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.087637][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.116668][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.128863][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.138706][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.146690][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.154634][ T5837] bridge_slave_0: entered allmulticast mode [ 80.161747][ T5837] bridge_slave_0: entered promiscuous mode [ 80.199168][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.206679][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.214316][ T5837] bridge_slave_1: entered allmulticast mode [ 80.221386][ T5837] bridge_slave_1: entered promiscuous mode [ 80.268747][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.276519][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.284169][ T5834] bridge_slave_0: entered allmulticast mode [ 80.291142][ T5834] bridge_slave_0: entered promiscuous mode [ 80.301634][ T5833] team0: Port device team_slave_0 added [ 80.310231][ T5833] team0: Port device team_slave_1 added [ 80.317903][ T5838] team0: Port device team_slave_0 added [ 80.326114][ T5838] team0: Port device team_slave_1 added [ 80.340292][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.347956][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.355511][ T5834] bridge_slave_1: entered allmulticast mode [ 80.363663][ T5834] bridge_slave_1: entered promiscuous mode [ 80.391831][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.438648][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.459770][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.466961][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.493350][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.506092][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.513464][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.539839][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.567331][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.578413][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.585657][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.614250][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.627170][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.634787][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.662230][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.687246][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.715924][ T5837] team0: Port device team_slave_0 added [ 80.751629][ T5837] team0: Port device team_slave_1 added [ 80.787002][ T5834] team0: Port device team_slave_0 added [ 80.820071][ T5833] hsr_slave_0: entered promiscuous mode [ 80.826840][ T5833] hsr_slave_1: entered promiscuous mode [ 80.836406][ T5834] team0: Port device team_slave_1 added [ 80.872260][ T5838] hsr_slave_0: entered promiscuous mode [ 80.878808][ T5838] hsr_slave_1: entered promiscuous mode [ 80.885792][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 80.891805][ T5838] Cannot create hsr debugfs directory [ 80.907356][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.914607][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.941253][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.954183][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.961236][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.987800][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.002963][ T5156] Bluetooth: hci2: command tx timeout [ 81.057517][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.065198][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.093516][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.105543][ T5156] Bluetooth: hci0: command tx timeout [ 81.105843][ T5156] Bluetooth: hci3: command tx timeout [ 81.117986][ T5845] Bluetooth: hci1: command tx timeout [ 81.150137][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.157261][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.185021][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.281122][ T5837] hsr_slave_0: entered promiscuous mode [ 81.288747][ T5837] hsr_slave_1: entered promiscuous mode [ 81.296662][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 81.303673][ T5837] Cannot create hsr debugfs directory [ 81.373295][ T5834] hsr_slave_0: entered promiscuous mode [ 81.379772][ T5834] hsr_slave_1: entered promiscuous mode [ 81.386307][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 81.392405][ T5834] Cannot create hsr debugfs directory [ 81.769168][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.782784][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.813662][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.824461][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.898419][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.911822][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.924464][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.958018][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.046964][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.064945][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.077229][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.089519][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.255822][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.270978][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.281099][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.304531][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.370753][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.394437][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.437841][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.453554][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.474590][ T3545] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.481950][ T3545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.517085][ T3545] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.524855][ T3545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.535071][ T3545] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.542309][ T3545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.560619][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.567995][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.586082][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.674642][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.715052][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.734863][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.742108][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.770257][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.777572][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.801472][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.847887][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.855239][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.897285][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.904552][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.001775][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.083728][ T5845] Bluetooth: hci2: command tx timeout [ 83.162227][ T5845] Bluetooth: hci1: command tx timeout [ 83.167875][ T5845] Bluetooth: hci3: command tx timeout [ 83.172104][ T5156] Bluetooth: hci0: command tx timeout [ 83.219429][ T5838] veth0_vlan: entered promiscuous mode [ 83.241336][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.287662][ T5838] veth1_vlan: entered promiscuous mode [ 83.406452][ T5837] veth0_vlan: entered promiscuous mode [ 83.427014][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.464305][ T5837] veth1_vlan: entered promiscuous mode [ 83.485396][ T5838] veth0_macvtap: entered promiscuous mode [ 83.499162][ T5838] veth1_macvtap: entered promiscuous mode [ 83.527799][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.541363][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.556740][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.591836][ T3545] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.603628][ T1004] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.624929][ T1004] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.656073][ T1004] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.700082][ T5833] veth0_vlan: entered promiscuous mode [ 83.711399][ T5837] veth0_macvtap: entered promiscuous mode [ 83.737644][ T5837] veth1_macvtap: entered promiscuous mode [ 83.795440][ T5833] veth1_vlan: entered promiscuous mode [ 83.849265][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.858950][ T5834] veth0_vlan: entered promiscuous mode [ 83.886831][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.908356][ T3545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.918334][ T1004] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.922950][ T3545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.959693][ T5834] veth1_vlan: entered promiscuous mode [ 83.968360][ T1004] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.979070][ T1004] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.012088][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.013456][ T1004] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.020095][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.090832][ T5833] veth0_macvtap: entered promiscuous mode [ 84.136949][ T5833] veth1_macvtap: entered promiscuous mode [ 84.157060][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.208194][ T5834] veth0_macvtap: entered promiscuous mode [ 84.225429][ T5834] veth1_macvtap: entered promiscuous mode [ 84.258627][ T1004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.269637][ T1004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.297874][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.324093][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.337422][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.361009][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.380735][ T1004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.398084][ T3517] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.402562][ T1004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.408960][ T3517] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.437651][ T3545] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.446925][ T3545] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.467852][ T3545] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.510377][ T3545] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.535611][ T3545] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.571331][ T5930] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 84.595977][ T3545] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.740960][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.762908][ T5924] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 84.770630][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.829869][ T5934] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.854285][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.870041][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.880798][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.891542][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.933183][ T5924] usb 2-1: config 0 has no interfaces? [ 84.983201][ T5924] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=fd.eb [ 84.996156][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.003416][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.016215][ T5924] usb 2-1: Product: syz [ 85.020428][ T5924] usb 2-1: Manufacturer: syz [ 85.025624][ T5924] usb 2-1: SerialNumber: syz [ 85.027926][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.057411][ T5924] usb 2-1: config 0 descriptor?? [ 85.164342][ T5849] Bluetooth: hci2: command tx timeout [ 85.192787][ T5938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.242934][ T5849] Bluetooth: hci1: command tx timeout [ 85.248460][ T5156] Bluetooth: hci0: command tx timeout [ 85.282844][ T5938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.331813][ T5903] usb 2-1: USB disconnect, device number 2 [ 85.346233][ T5937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.552233][ T5924] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 85.582045][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.714712][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 85.726983][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 116, setting to 64 [ 85.740143][ T5924] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 85.750762][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.759701][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.772686][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 85.781651][ T5924] usb 3-1: config 0 descriptor?? [ 85.788795][ T10] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 85.791119][ T5941] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 85.798747][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.816740][ T5924] hub 3-1:0.0: USB hub found [ 85.823192][ T10] usb 1-1: Product: syz [ 85.827543][ T10] usb 1-1: Manufacturer: syz [ 85.832259][ T10] usb 1-1: SerialNumber: syz [ 85.839621][ T10] usb 1-1: config 0 descriptor?? [ 85.848280][ T10] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 85.874906][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 85.908143][ T10] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 85.951216][ T10] usb 1-1: media controller created [ 86.009737][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 86.060719][ T5924] hub 3-1:0.0: 1 port detected [ 86.162406][ T10] DVB: Unable to find symbol tda10046_attach() [ 86.170530][ T10] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 86.192541][ T10] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 86.250153][ T5953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.271473][ T5924] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 86.287674][ T5924] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 86.301364][ T5924] usbhid 3-1:0.0: can't add hid device: -71 [ 86.307930][ T5924] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 86.344229][ T5924] usb 3-1: USB disconnect, device number 2 [ 86.632091][ T5888] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 86.782145][ T5888] usb 2-1: Using ep0 maxpacket: 8 [ 86.794241][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 86.817514][ T5888] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 86.822546][ T10] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 86.837069][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.871248][ T5888] usb 2-1: config 0 descriptor?? [ 86.892805][ T10] usb 1-1: USB disconnect, device number 2 [ 87.116923][ T5888] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 87.242266][ T5849] Bluetooth: hci2: command tx timeout [ 87.322006][ T5849] Bluetooth: hci1: command tx timeout [ 87.322228][ T5888] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 87.327474][ T5849] Bluetooth: hci0: command tx timeout [ 87.362172][ T9] usb 2-1: USB disconnect, device number 3 [ 87.501972][ T5888] usb 3-1: Using ep0 maxpacket: 32 [ 87.522283][ T5888] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 87.540065][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.567145][ T5888] usb 3-1: config 0 descriptor?? [ 87.579884][ T5888] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 88.101998][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 88.252005][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 88.259004][ T9] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 88.271987][ T9] usb 1-1: config 0 has no interface number 0 [ 88.287259][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 88.302818][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.312334][ T9] usb 1-1: Product: syz [ 88.316552][ T9] usb 1-1: Manufacturer: syz [ 88.321337][ T9] usb 1-1: SerialNumber: syz [ 88.348694][ T9] usb 1-1: config 0 descriptor?? [ 88.361314][ T9] asix 1-1:0.188: probe with driver asix failed with error -22 [ 88.393462][ T6000] syz.1.32 uses obsolete (PF_INET,SOCK_PACKET) [ 88.401589][ T6000] syzkaller1: entered promiscuous mode [ 88.407247][ T6000] syzkaller1: entered allmulticast mode [ 88.596560][ T5888] gspca_vc032x: reg_w err -71 [ 88.604052][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 88.611139][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 88.623663][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 88.629010][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 88.636188][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 88.641770][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 88.647649][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 88.653092][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 88.658388][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 88.665559][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 88.670926][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 88.676588][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 88.684220][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 88.689532][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 88.695018][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 88.700348][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 88.705732][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 88.711216][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 88.716541][ T5888] gspca_vc032x: Unknown sensor... [ 88.721627][ T5888] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 88.735145][ T5888] usb 3-1: USB disconnect, device number 3 [ 88.764842][ T5156] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 88.774529][ T5156] Bluetooth: hci3: Injecting HCI hardware error event [ 88.783453][ T5156] Bluetooth: hci3: hardware error 0x00 [ 88.802072][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 88.842295][ T5902] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 88.962166][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 88.968683][ T9] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 88.977226][ T9] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 88.985936][ T9] usb 4-1: config 0 has no interface number 0 [ 88.992155][ T9] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 89.004624][ T5902] usb 2-1: Using ep0 maxpacket: 32 [ 89.011036][ T9] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 89.020870][ T9] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 89.029360][ T9] usb 4-1: Product: syz [ 89.035350][ T5902] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 89.045457][ T5902] usb 2-1: config 0 has no interface number 0 [ 89.052006][ T5902] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 89.062993][ T9] usb 4-1: config 0 descriptor?? [ 89.068755][ T5902] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 89.078999][ T5902] usb 2-1: config 0 interface 126 has no altsetting 0 [ 89.090385][ T5902] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 89.099548][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.107670][ T5902] usb 2-1: Product: syz [ 89.111960][ T5902] usb 2-1: Manufacturer: syz [ 89.116774][ T5902] usb 2-1: SerialNumber: syz [ 89.125099][ T5902] usb 2-1: config 0 descriptor?? [ 89.131195][ T6004] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 89.138929][ T6004] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 89.492037][ T5888] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 89.558561][ T5902] ir_usb 2-1:0.126: IR Dongle converter detected [ 89.652018][ T5888] usb 3-1: Using ep0 maxpacket: 16 [ 89.660040][ T5888] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.670350][ T5888] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 89.682442][ T5888] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 89.692117][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.697153][ T9] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.21/input/input5 [ 89.700688][ T5888] usb 3-1: Product: syz [ 89.714173][ T5888] usb 3-1: Manufacturer: syz [ 89.719395][ T5888] usb 3-1: SerialNumber: syz [ 89.774422][ T5902] usb 2-1: IR Dongle converter now attached to ttyUSB0 [ 89.934077][ T987] usb 4-1: USB disconnect, device number 2 [ 89.934170][ C0] keyspan_remote 4-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 89.985993][ T5888] usb 3-1: 0:2 : does not exist [ 90.006139][ T9] usb 2-1: USB disconnect, device number 4 [ 90.014475][ T5888] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 90.028361][ T9] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 90.047587][ T9] ir_usb 2-1:0.126: device disconnected [ 90.085132][ T5888] usb 3-1: USB disconnect, device number 4 [ 90.116671][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 90.843941][ T5156] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 90.851857][ T5902] usb 1-1: USB disconnect, device number 3 [ 91.032024][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 91.192002][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 91.199256][ T9] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 91.207582][ T5928] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 91.215178][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 91.221989][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 91.226494][ T9] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 91.245390][ T9] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 91.258752][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 91.268058][ T9] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 91.277215][ T9] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 91.285715][ T9] usb 2-1: Product: syz [ 91.289895][ T9] usb 2-1: Manufacturer: syz [ 91.295059][ T9] usb 2-1: SerialNumber: syz [ 91.301571][ T9] usb 2-1: config 0 descriptor?? [ 91.308876][ T9] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 91.319585][ T9] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 91.327710][ T5902] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 91.383434][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.394001][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.395245][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 91.406272][ T5928] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 91.420785][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.430972][ T24] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 91.431966][ T5928] usb 3-1: config 0 descriptor?? [ 91.441208][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.455915][ T24] usb 4-1: Product: syz [ 91.460119][ T24] usb 4-1: Manufacturer: syz [ 91.464834][ T24] usb 4-1: SerialNumber: syz [ 91.473071][ T24] usb 4-1: config 0 descriptor?? [ 91.481238][ T24] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 91.482239][ T5902] usb 1-1: Using ep0 maxpacket: 32 [ 91.495940][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 91.507035][ T5902] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 91.507074][ T24] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 91.515926][ T5902] usb 1-1: config 0 has no interface number 0 [ 91.524742][ T24] usb 4-1: media controller created [ 91.540048][ T5902] usb 1-1: config 0 interface 184 has no altsetting 0 [ 91.549639][ T9] usb 2-1: USB disconnect, device number 5 [ 91.552170][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 91.559270][ T9] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 91.579497][ T5902] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 91.589818][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.616972][ T5902] usb 1-1: Product: syz [ 91.624627][ T24] DVB: Unable to find symbol tda10046_attach() [ 91.625057][ T5902] usb 1-1: Manufacturer: syz [ 91.631017][ T24] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 91.636914][ T5902] usb 1-1: SerialNumber: syz [ 91.648015][ T24] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 91.672806][ T5902] usb 1-1: config 0 descriptor?? [ 91.685942][ T5902] smsc75xx v1.0.0 [ 91.870909][ T5928] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 91.886761][ T5928] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0001/input/input6 [ 92.004694][ T5928] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 92.077469][ C0] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000038: 0000 [#1] SMP KASAN PTI [ 92.089486][ C0] KASAN: null-ptr-deref in range [0x00000000000001c0-0x00000000000001c7] [ 92.097925][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 92.106872][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 92.116935][ C0] RIP: 0010:__queue_work+0xa2/0xf90 [ 92.122190][ C0] Code: 11 31 ff 89 ee e8 4e f4 37 00 85 ed 0f 85 ef 0c 00 00 e8 01 f0 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 22 0d 00 00 4c 89 34 24 41 8b 2e 89 ee [ 92.141987][ C0] RSP: 0018:ffffc90000006eb8 EFLAGS: 00010002 [ 92.148061][ C0] RAX: 0000000000000038 RBX: 0000000000000008 RCX: 0000000000040000 [ 92.156114][ C0] RDX: ffffc90002161000 RSI: 00000000000006ad RDI: 00000000000006ae [ 92.164104][ C0] RBP: 0000000000000000 R08: ffff88813fe32017 R09: 1ffff11027fc6402 [ 92.172074][ C0] R10: dffffc0000000000 R11: ffffed1027fc6403 R12: dffffc0000000000 [ 92.180041][ C0] R13: ffff88813fe32010 R14: 00000000000001c0 R15: 0000000000000000 [ 92.188095][ C0] FS: 0000000000000000(0000) GS:ffff888125063000(0000) knlGS:0000000000000000 [ 92.197024][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.204214][ C0] CR2: 00002000000012b8 CR3: 000000007663a000 CR4: 00000000003526f0 [ 92.212464][ C0] Call Trace: [ 92.215825][ C0] [ 92.218685][ C0] ? __asan_memcpy+0x40/0x70 [ 92.223718][ C0] ? __tty_insert_flip_string_flags+0x3e9/0x430 [ 92.229960][ C0] queue_work_on+0x106/0x1d0 [ 92.234559][ C0] puts_queue+0xa3/0xe0 [ 92.238719][ C0] ? __pfx_puts_queue+0x10/0x10 [ 92.243562][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 92.248671][ C0] ? rcu_is_watching+0x15/0xb0 [ 92.253431][ C0] k_fn+0x7c/0xd0 [ 92.257062][ C0] k_pad+0x79a/0xa90 [ 92.260949][ C0] ? lock_acquire+0x106/0x330 [ 92.265620][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 92.271426][ C0] ? __pfx_k_pad+0x10/0x10 [ 92.276022][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 92.281838][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 92.287645][ C0] kbd_event+0x2ec1/0x40d0 [ 92.292144][ C0] ? kernel_fpu_end+0x4f/0x80 [ 92.296823][ C0] ? blake2s_compress+0x1e17/0x1eb0 [ 92.302100][ C0] ? __pfx_kernel_fpu_begin_mask+0x10/0x10 [ 92.308023][ C0] ? __pfx_kbd_event+0x10/0x10 [ 92.312787][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 92.317746][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 92.322678][ C0] ? __pfx_blake2s_compress+0x10/0x10 [ 92.328327][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 92.333265][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 92.338564][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 92.343607][ C0] ? input_pass_values+0x8d/0x890 [ 92.348623][ C0] ? lock_acquire+0x106/0x330 [ 92.353317][ C0] ? input_pass_values+0x8d/0x890 [ 92.358371][ C0] input_handle_events_default+0xd4/0x1a0 [ 92.364099][ C0] ? input_pass_values+0x8d/0x890 [ 92.369262][ C0] input_pass_values+0x288/0x890 [ 92.374202][ C0] ? input_handle_event+0xc35/0xf30 [ 92.379488][ C0] input_event_dispose+0x3e5/0x6b0 [ 92.384608][ C0] input_event+0x89/0xe0 [ 92.388853][ C0] hidinput_hid_event+0x1487/0x1e60 [ 92.394050][ C0] ? __pfx_hidinput_hid_event+0x10/0x10 [ 92.399585][ C0] ? hidinput_hid_event+0x14b6/0x1e60 [ 92.404954][ C0] hid_process_event+0x4be/0x620 [ 92.409890][ C0] hid_input_array_field+0x41c/0x5f0 [ 92.415273][ C0] hid_report_raw_event+0xdd7/0x1720 [ 92.420582][ C0] hid_input_report+0x44b/0x580 [ 92.425439][ C0] hid_irq_in+0x47e/0x6d0 [ 92.429784][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 92.435152][ C0] dummy_timer+0xbbd/0x45d0 [ 92.439681][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 92.444614][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 92.450412][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 92.455410][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 92.460346][ C0] __hrtimer_run_queues+0x529/0xc30 [ 92.465553][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 92.471351][ C0] ? read_tsc+0x9/0x20 [ 92.475414][ C0] hrtimer_run_softirq+0x182/0x5a0 [ 92.480539][ C0] handle_softirqs+0x22a/0x7c0 [ 92.485301][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 92.490147][ C0] __irq_exit_rcu+0x5f/0x150 [ 92.494731][ C0] irq_exit_rcu+0x9/0x30 [ 92.498975][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 92.504607][ C0] [ 92.507527][ C0] [ 92.510453][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 92.516545][ C0] RIP: 0010:finish_task_switch+0x245/0x920 [ 92.522435][ C0] Code: 00 00 48 85 db 0f 85 e8 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 49 83 c4 48 4c 89 e7 e8 55 79 17 0a e8 a0 35 38 00 fb 4c 8b 65 c0 <49> 8d bc 24 30 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 92.542037][ C0] RSP: 0018:ffffffff8e607b58 EFLAGS: 00000202 [ 92.548100][ C0] RAX: 00000000000e66e5 RBX: 0000000000000000 RCX: 0000000080000001 [ 92.556148][ C0] RDX: 0000000000000000 RSI: ffffffff8dff8547 RDI: ffffffff8c294900 [ 92.564116][ C0] RBP: ffffffff8e607bb0 R08: ffffffff903219b7 R09: 1ffffffff2064336 [ 92.572178][ C0] R10: dffffc0000000000 R11: fffffbfff2064337 R12: ffffffff8e694ec0 [ 92.580315][ C0] R13: dffffc0000000000 R14: ffff88802c4e8000 R15: ffff8880b843b718 [ 92.588550][ C0] ? finish_task_switch+0x240/0x920 [ 92.593751][ C0] __schedule+0x1541/0x5080 [ 92.598264][ C0] ? wakeup_preempt+0x24d/0x300 [ 92.603119][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 92.608250][ C0] ? _raw_spin_unlock+0x28/0x50 [ 92.613132][ C0] ? __pfx___schedule+0x10/0x10 [ 92.618009][ C0] ? flush_smp_call_function_queue+0x126/0x190 [ 92.624286][ C0] schedule_idle+0x51/0x90 [ 92.628764][ C0] do_idle+0x499/0x500 [ 92.632928][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 92.639271][ C0] ? __pfx_do_idle+0x10/0x10 [ 92.643925][ C0] cpu_startup_entry+0x43/0x60 [ 92.648801][ C0] rest_init+0x2de/0x300 [ 92.653608][ C0] start_kernel+0x385/0x3d0 [ 92.658409][ C0] x86_64_start_reservations+0x24/0x30 [ 92.663996][ C0] x86_64_start_kernel+0x143/0x1c0 [ 92.669137][ C0] common_startup_64+0x13e/0x147 [ 92.674222][ C0] [ 92.677252][ C0] Modules linked in: [ 92.681153][ C0] ---[ end trace 0000000000000000 ]--- [ 92.686754][ C0] RIP: 0010:__queue_work+0xa2/0xf90 [ 92.691991][ C0] Code: 11 31 ff 89 ee e8 4e f4 37 00 85 ed 0f 85 ef 0c 00 00 e8 01 f0 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 22 0d 00 00 4c 89 34 24 41 8b 2e 89 ee [ 92.711693][ C0] RSP: 0018:ffffc90000006eb8 EFLAGS: 00010002 [ 92.717760][ C0] RAX: 0000000000000038 RBX: 0000000000000008 RCX: 0000000000040000 [ 92.725736][ C0] RDX: ffffc90002161000 RSI: 00000000000006ad RDI: 00000000000006ae [ 92.733913][ C0] RBP: 0000000000000000 R08: ffff88813fe32017 R09: 1ffff11027fc6402 [ 92.741916][ C0] R10: dffffc0000000000 R11: ffffed1027fc6403 R12: dffffc0000000000 [ 92.750329][ C0] R13: ffff88813fe32010 R14: 00000000000001c0 R15: 0000000000000000 [ 92.758376][ C0] FS: 0000000000000000(0000) GS:ffff888125063000(0000) knlGS:0000000000000000 [ 92.767474][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.774243][ C0] CR2: 00002000000012b8 CR3: 000000007663a000 CR4: 00000000003526f0 [ 92.782218][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 92.789771][ C0] Kernel Offset: disabled [ 92.794087][ C0] Rebooting in 86400 seconds..