last executing test programs: 6.822217065s ago: executing program 0 (id=21): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x0, 0x8f}}}}}]}}]}}, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0xa5, 0x5c}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f00000013c0)={0x20, 0x4, 0x3d, {0x3d, 0xf, "72d37ae1429280be601e5d9772fd0a1e111ed828b2a2df97a57cfe755b5e3701c011f610296a0791addad13972a414ebe6178a081adc3acc27e3db"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4.975725118s ago: executing program 0 (id=33): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 4.806013161s ago: executing program 2 (id=38): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000140)={&(0x7f00000012c0), 0x0}) 4.733799728s ago: executing program 2 (id=40): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000088000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000400)='\a') 3.0835048s ago: executing program 0 (id=45): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@mcast2, 0x6f, r2}) 3.030650659s ago: executing program 0 (id=46): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x0) close_range(r0, r0, 0x0) 2.925500063s ago: executing program 0 (id=49): r0 = syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000340)={0x34, &(0x7f00000001c0)={0x0, 0x9, 0x1, "f2"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x48}, 0x0, &(0x7f0000000280)={0xc0, 0xa1, 0x4, 0x800}, 0x0, 0x0}) 2.749106246s ago: executing program 2 (id=53): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{0x0}, {0x0}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd844", 0x4d}], 0x3}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 2.642544238s ago: executing program 1 (id=55): pselect6(0x0, 0x0, &(0x7f0000000380)={0x7, 0x100000000, 0x7fff, 0x22c, 0x400005, 0x1000000, 0x6, 0x7}, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d"], 0x2c}, 0x1, 0x0, 0x0, 0x20004084}, 0x0) 2.603153183s ago: executing program 2 (id=57): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x729) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x7fffffff}, 0x8) 2.494162683s ago: executing program 2 (id=58): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0}, &(0x7f0000000480)={0x34, &(0x7f0000000200)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.322878908s ago: executing program 3 (id=61): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) 2.226363064s ago: executing program 3 (id=62): r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000008c0)=[{0x0, 0x34}, {&(0x7f0000005040)={0x5bc, 0x1, 0x0, 0x0, 0x0, "", [@typed={0x8, 0x3c, 0x0, 0x0, @pid}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x599, 0x0, 0x0, 0x1, [@generic="b308062bb3eb6db2103d7bf69e1beb05d20799da539b86148b5def4185def2d0a01898891f1075909ee6c358c334dfeabd884e418717d87eecb0d1be7a32c9244e3bf79aa06cd0ce01379fd72dc80d5b7f418ad25388910c6b6bf7fe4944eceb7ce1b59b0f86f326f986f0c0357874065cf46d27480a05db057d0d749582abb54e22b7892ce7bf0d51dc46b76689bd006dc7ffb54d822531fba616376233b8b758bd4cca5c350af2eb4599be90", @generic="5fb76fab50b69913057c69d844512502fee8754d75b1993dce090c32365d9f8f7ba7dd1a18877654e0e0cd3e", @nested={0x4bc, 0x9c, 0x0, 0x1, [@nested={0xc, 0xa8, 0x0, 0x1, [@typed={0x5, 0xb4, 0x0, 0x0, @str='\x00'}]}, @nested={0x4a9, 0xea, 0x0, 0x1, [@typed={0x4, 0x128}, @generic="8f327cc34a58e4434228a5ecda293b5274b332044c8b7c3ca606e88b071ec38c23ef270747a5ace23add01bef9cda5c7b3ec590afb80efd56ab28fcb5fe23251bd61b3ec5c2e98aae3bf8b883f07f4ae002e4ad470c66081b18236e48c7778c3412bf812d8ccc7265ca94bb4a847ae99f4ec52c1b2fe866eaea9872766f58bd6c637eae3295c7815ed72900464256fb6d11b0d4a2de1e82bcb55c617effcf12e738139904154e4b825c50700215f3cc57f", @nested={0x4, 0x111}, @generic="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"]}]}]}]}, 0x5bc}], 0x2, 0x0, 0x0, 0x4040000}, 0x0) 2.201556478s ago: executing program 3 (id=63): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x4980, 0x3e9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) close(0x3) 1.886790338s ago: executing program 3 (id=64): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'sit0\x00', 0x4}, 0x18) 1.70284048s ago: executing program 1 (id=65): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)=0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f00000000c0)={0x27, r1, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) close(r0) 1.605887788s ago: executing program 1 (id=66): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1380, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, 0x0) 1.372354779s ago: executing program 3 (id=67): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002f80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x101, 0x0, 0x0, {0xa}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}}], {0x14}}, 0x50}}, 0x8000) 1.23829062s ago: executing program 3 (id=68): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="40130100000022"], 0x0, 0x0, 0x0, 0x0}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 1.012282008s ago: executing program 0 (id=69): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_usb_disconnect(r0) 864.710682ms ago: executing program 2 (id=70): ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@host, 0x4}, {@my=0x1, 0x800000}, 0x400, "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"}, 0x418, 0x9}) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "f50a5159"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 74.514259ms ago: executing program 1 (id=71): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) 49.394774ms ago: executing program 1 (id=72): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="240000002c008188040f80ec59acbc0413a1f8480e0000005e14", 0x1a}], 0x1}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 0s ago: executing program 1 (id=73): syz_usb_connect$sierra_net(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xd, 0x2, 0x10, 0x10, 0x0, 0x7}, {0x9, 0x5, 0x6, 0x2, 0x8, 0x7, 0x5, 0x1}, {0x9, 0x5, 0xd, 0x3, 0x200, 0x65, 0x4, 0x2}}}}}}]}}, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920001000109021b1901000000f30904150001da40df000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.32' (ED25519) to the list of known hosts. [ 65.439845][ T5825] cgroup: Unknown subsys name 'net' [ 65.568393][ T5825] cgroup: Unknown subsys name 'cpuset' [ 65.576806][ T5825] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.959584][ T5825] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.984406][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.992909][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.000770][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.024678][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.034305][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.042397][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.051132][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.053195][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.059175][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.066681][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.074003][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.088780][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.096749][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.098174][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.114615][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.124035][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.131253][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.139424][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.148304][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.155989][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.660982][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 69.679891][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 69.791366][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 69.848053][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 69.956835][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.964110][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.971343][ T5841] bridge_slave_0: entered allmulticast mode [ 69.978632][ T5841] bridge_slave_0: entered promiscuous mode [ 69.992523][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.999764][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.007100][ T5836] bridge_slave_0: entered allmulticast mode [ 70.014478][ T5836] bridge_slave_0: entered promiscuous mode [ 70.033269][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.040393][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.047625][ T5841] bridge_slave_1: entered allmulticast mode [ 70.054933][ T5841] bridge_slave_1: entered promiscuous mode [ 70.072483][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.079741][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.087043][ T5836] bridge_slave_1: entered allmulticast mode [ 70.094156][ T5836] bridge_slave_1: entered promiscuous mode [ 70.170252][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.182375][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.191964][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.199797][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.207587][ T5846] bridge_slave_0: entered allmulticast mode [ 70.214876][ T5846] bridge_slave_0: entered promiscuous mode [ 70.225578][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.268703][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.276267][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.283685][ T5846] bridge_slave_1: entered allmulticast mode [ 70.290649][ T5846] bridge_slave_1: entered promiscuous mode [ 70.299644][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.317975][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.325285][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.332527][ T5840] bridge_slave_0: entered allmulticast mode [ 70.339879][ T5840] bridge_slave_0: entered promiscuous mode [ 70.350130][ T5841] team0: Port device team_slave_0 added [ 70.377223][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.385126][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.392280][ T5840] bridge_slave_1: entered allmulticast mode [ 70.399716][ T5840] bridge_slave_1: entered promiscuous mode [ 70.408508][ T5841] team0: Port device team_slave_1 added [ 70.427958][ T5836] team0: Port device team_slave_0 added [ 70.457424][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.468448][ T5836] team0: Port device team_slave_1 added [ 70.497083][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.519663][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.530743][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.537734][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.563747][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.597942][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.616943][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.624229][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.650500][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.671579][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.678586][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.704498][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.741599][ T5846] team0: Port device team_slave_0 added [ 70.748111][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.755229][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.782099][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.794958][ T5840] team0: Port device team_slave_0 added [ 70.804131][ T5846] team0: Port device team_slave_1 added [ 70.818262][ T5840] team0: Port device team_slave_1 added [ 70.880462][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.887693][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.913824][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.951218][ T5841] hsr_slave_0: entered promiscuous mode [ 70.957672][ T5841] hsr_slave_1: entered promiscuous mode [ 70.965305][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.972258][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.998728][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.010625][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.017625][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.043657][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.072126][ T5836] hsr_slave_0: entered promiscuous mode [ 71.078724][ T5836] hsr_slave_1: entered promiscuous mode [ 71.085138][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 71.090921][ T5836] Cannot create hsr debugfs directory [ 71.106031][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.112972][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.138898][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.164530][ T5852] Bluetooth: hci0: command tx timeout [ 71.164534][ T5843] Bluetooth: hci1: command tx timeout [ 71.243370][ T5852] Bluetooth: hci2: command tx timeout [ 71.249986][ T5852] Bluetooth: hci3: command tx timeout [ 71.257727][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.264791][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.291324][ T5846] hsr_slave_0: entered promiscuous mode [ 71.298208][ T5846] hsr_slave_1: entered promiscuous mode [ 71.304714][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 71.310448][ T5846] Cannot create hsr debugfs directory [ 71.332624][ T5840] hsr_slave_0: entered promiscuous mode [ 71.339070][ T5840] hsr_slave_1: entered promiscuous mode [ 71.345495][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 71.351230][ T5840] Cannot create hsr debugfs directory [ 71.794208][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.809061][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.834048][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.859987][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.929462][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.941026][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.956132][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.988784][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.092085][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.105917][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.117460][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.136235][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.258539][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.269406][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.279691][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.290451][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.319961][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.387319][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.406446][ T3616] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.413690][ T3616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.448177][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.472289][ T3616] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.479499][ T3616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.512283][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.537130][ T3616] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.544320][ T3616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.572211][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.586435][ T3616] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.593637][ T3616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.644846][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.691996][ T3616] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.699195][ T3616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.717690][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.726807][ T3603] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.733989][ T3603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.790014][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.829909][ T3609] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.837146][ T3609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.850061][ T3609] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.857289][ T3609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.220398][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.237609][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.243816][ T5852] Bluetooth: hci0: command tx timeout [ 73.246377][ T5843] Bluetooth: hci1: command tx timeout [ 73.327306][ T5843] Bluetooth: hci3: command tx timeout [ 73.327351][ T5852] Bluetooth: hci2: command tx timeout [ 73.362238][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.415951][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.423100][ T5836] veth0_vlan: entered promiscuous mode [ 73.448041][ T5841] veth0_vlan: entered promiscuous mode [ 73.476945][ T5836] veth1_vlan: entered promiscuous mode [ 73.491633][ T5841] veth1_vlan: entered promiscuous mode [ 73.547948][ T5840] veth0_vlan: entered promiscuous mode [ 73.558356][ T5846] veth0_vlan: entered promiscuous mode [ 73.584701][ T5846] veth1_vlan: entered promiscuous mode [ 73.594882][ T5841] veth0_macvtap: entered promiscuous mode [ 73.610779][ T5840] veth1_vlan: entered promiscuous mode [ 73.622229][ T5836] veth0_macvtap: entered promiscuous mode [ 73.637669][ T5841] veth1_macvtap: entered promiscuous mode [ 73.662666][ T5836] veth1_macvtap: entered promiscuous mode [ 73.699135][ T5846] veth0_macvtap: entered promiscuous mode [ 73.721849][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.734617][ T5846] veth1_macvtap: entered promiscuous mode [ 73.749251][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.758698][ T5840] veth0_macvtap: entered promiscuous mode [ 73.771559][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.791364][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.817408][ T5840] veth1_macvtap: entered promiscuous mode [ 73.827579][ T3603] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.837986][ T3603] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.864241][ T3603] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.878347][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.887943][ T3603] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.897075][ T3603] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.922454][ T3603] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.931757][ T3603] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.956010][ T3603] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.978126][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.001833][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.059933][ T1162] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.069624][ T1162] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.083058][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.097263][ T3603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.109963][ T3603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.125908][ T1162] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.135199][ T1162] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.185667][ T3603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.197395][ T1162] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.206416][ T3603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.219165][ T3554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.227527][ T3554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.235780][ T1162] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.245100][ T1162] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.255889][ T1162] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.339498][ T3554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.360187][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.361758][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.379944][ T3554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.410518][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.549939][ T3616] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.561765][ T3616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.635320][ T3616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.656123][ T3616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.745200][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.753045][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.330385][ T5852] Bluetooth: hci0: command tx timeout [ 75.335475][ T5843] Bluetooth: hci1: command tx timeout [ 75.394889][ T5954] warning: `syz.3.13' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 75.406578][ T5843] Bluetooth: hci2: command tx timeout [ 75.414162][ T5843] Bluetooth: hci3: command tx timeout [ 75.657143][ T5967] netlink: 830 bytes leftover after parsing attributes in process `syz.2.19'. [ 75.686833][ T5967] netlink: 830 bytes leftover after parsing attributes in process `syz.2.19'. [ 75.717392][ T5967] Zero length message leads to an empty skb [ 75.993749][ T5921] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 76.133363][ T5971] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 76.185126][ T5921] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 76.200380][ T5921] usb 1-1: New USB device found, idVendor=056a, idProduct=00d4, bcdDevice= 0.00 [ 76.210697][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.229511][ T5921] usb 1-1: config 0 descriptor?? [ 76.298845][ T5971] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 76.309806][ T5971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.321102][ T5971] usb 2-1: config 0 descriptor?? [ 76.337589][ T5971] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 76.353344][ T5903] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 76.523449][ T5903] usb 3-1: Using ep0 maxpacket: 8 [ 76.540851][ T5903] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 76.566994][ T5971] gp8psk: usb in 128 operation failed. [ 76.570927][ T5903] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 76.576745][ T5971] gp8psk: usb in 137 operation failed. [ 76.588675][ T5971] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 76.598068][ T5903] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 76.598098][ T5903] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 76.598162][ T5903] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 76.598185][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.648033][ T5971] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 76.663495][ T5971] usb 2-1: media controller created [ 76.686973][ T5921] wacom 0003:056A:00D4.0001: unknown main item tag 0x7 [ 76.693679][ T5971] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 76.743515][ T5971] gp8psk_fe: Frontend attached [ 76.748599][ T5971] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 76.759678][ T5971] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 76.859337][ T5903] usb 3-1: usb_control_msg returned -32 [ 76.863729][ T5890] usb 1-1: USB disconnect, device number 2 [ 76.868925][ T5903] usbtmc 3-1:16.0: can't read capabilities [ 76.909337][ T5903] usb 3-1: USB disconnect, device number 2 [ 77.096389][ T5971] gp8psk: usb in 137 operation failed. [ 77.101905][ T5971] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 77.112219][ T5971] gp8psk: found Genpix USB device pID = 203 (hex) [ 77.123936][ T5971] usb 2-1: USB disconnect, device number 2 [ 77.180613][ T5971] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 77.403416][ T5843] Bluetooth: hci0: command tx timeout [ 77.403836][ T5852] Bluetooth: hci1: command tx timeout [ 77.483929][ T5852] Bluetooth: hci3: command tx timeout [ 77.483944][ T5843] Bluetooth: hci2: command tx timeout [ 77.606318][ T6009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36'. [ 77.714447][ T5921] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 77.868713][ T5852] Bluetooth: hci1: unexpected cc 0x2002 length: 65 > 4 [ 77.875815][ T5921] usb 1-1: Using ep0 maxpacket: 16 [ 77.894370][ T5921] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 77.923763][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 77.944291][ T5921] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 77.955857][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.965591][ T5921] usb 1-1: Product: syz [ 77.969769][ T5921] usb 1-1: Manufacturer: syz [ 77.974439][ T5921] usb 1-1: SerialNumber: syz [ 77.984379][ T5921] usb 1-1: config 0 descriptor?? [ 77.993372][ T5903] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 78.008003][ T5921] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 78.017415][ T5904] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 78.031536][ T5921] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 78.155096][ T5903] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.167414][ T5903] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 78.179132][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 78.190279][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 252, setting to 64 [ 78.201120][ T5903] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 78.215910][ T5904] usb 3-1: Using ep0 maxpacket: 16 [ 78.223351][ T5903] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 78.232614][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.243744][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 78.251848][ T5903] usb 4-1: Product: syz [ 78.256117][ T5904] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 78.265540][ T5903] usb 4-1: Manufacturer: syz [ 78.271247][ T5903] usb 4-1: SerialNumber: syz [ 78.275931][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.287998][ T5903] usb 4-1: config 0 descriptor?? [ 78.293886][ T6013] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 78.294547][ T5904] usb 3-1: config 0 descriptor?? [ 78.302751][ T5971] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 78.464762][ T5971] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 78.475478][ T5971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.487773][ T5971] usb 2-1: config 0 descriptor?? [ 78.502538][ T5971] gspca_main: spca508-2.14.0 probing 8086:0110 [ 78.518635][ T5903] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 78.527466][ T5903] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 78.634529][ T5921] em28xx 1-1:0.0: chip ID is em2874 [ 78.697654][ T5971] gspca_spca508: reg_read err -32 [ 78.705472][ T5971] gspca_spca508: reg_read err -32 [ 78.720319][ T5903] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 78.730645][ T5904] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 78.741296][ T5903] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 78.755930][ T5903] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 78.849807][ T5904] usb 1-1: USB disconnect, device number 3 [ 78.860212][ T5904] em28xx 1-1:0.0: Disconnecting em28xx [ 78.869957][ T5904] em28xx 1-1:0.0: Freeing device [ 78.911795][ T5971] gspca_spca508: reg_read err -71 [ 78.928033][ T5903] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 78.931082][ T5971] gspca_spca508: reg_read err -71 [ 78.940506][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 78.947241][ T5971] gspca_spca508: reg write: error -71 [ 78.948727][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 78.954117][ T5971] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 78.960823][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 78.975161][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 78.981775][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 78.989665][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 78.996295][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 78.996978][ T5971] usb 2-1: USB disconnect, device number 3 [ 79.002912][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 79.017434][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 79.031345][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 79.038865][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 79.045568][ T5903] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 79.053979][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 79.060857][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 79.067454][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 79.074023][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 79.080530][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 79.088645][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 79.097579][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 79.104167][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 79.110684][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 79.117204][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 79.123759][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 79.130325][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 79.136999][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 79.143559][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 79.147996][ T5923] usb 3-1: USB disconnect, device number 3 [ 79.150109][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 79.164042][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 79.170782][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 79.177400][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 79.184107][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 79.191973][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 79.198606][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 79.205227][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 79.211923][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 79.218577][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 79.225173][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 79.232441][ T5903] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 79.250298][ T5903] usb 4-1: USB disconnect, device number 2 [ 79.805592][ T5904] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 79.997707][ T5904] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 80.006721][ T5904] usb 1-1: config 0 has no interface number 0 [ 80.021419][ T5904] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 80.029727][ T6057] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.031072][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.057401][ T5904] usb 1-1: Product: syz [ 80.061595][ T5904] usb 1-1: Manufacturer: syz [ 80.066920][ T5904] usb 1-1: SerialNumber: syz [ 80.085133][ T5904] usb 1-1: config 0 descriptor?? [ 80.112892][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.60'. [ 80.214210][ T5923] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 80.375159][ T5923] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.393445][ T5923] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 80.402526][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.413553][ T5923] usb 3-1: config 0 descriptor?? [ 80.429232][ T5923] pwc: Askey VC010 type 2 USB webcam detected. [ 80.751074][ T6068] IPVS: You probably need to specify IP address on multicast interface. [ 80.767951][ T6068] IPVS: Error connecting to the multicast addr [ 80.831000][ T5923] pwc: recv_control_msg error -32 req 02 val 2b00 [ 80.844962][ T5923] pwc: recv_control_msg error -32 req 02 val 2700 [ 80.914906][ T5904] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 80.926108][ T5904] asix 1-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 80.954022][ T5904] asix 1-1:0.251: probe with driver asix failed with error -71 [ 80.967888][ T5904] usb 1-1: USB disconnect, device number 4 [ 81.053239][ T5923] pwc: recv_control_msg error -71 req 04 val 1000 [ 81.074626][ T5923] pwc: recv_control_msg error -71 req 04 val 1300 [ 81.095145][ T5923] pwc: recv_control_msg error -71 req 04 val 1400 [ 81.108739][ T5923] pwc: recv_control_msg error -71 req 02 val 2000 [ 81.119265][ T5923] pwc: recv_control_msg error -71 req 02 val 2100 [ 81.128181][ T5923] pwc: recv_control_msg error -71 req 04 val 1500 [ 81.144794][ T5923] pwc: recv_control_msg error -71 req 02 val 2500 [ 81.161978][ T5923] pwc: recv_control_msg error -71 req 02 val 2400 [ 81.169067][ T5890] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 81.185884][ T5923] pwc: recv_control_msg error -71 req 02 val 2600 [ 81.197776][ T5923] pwc: recv_control_msg error -71 req 02 val 2900 [ 81.204895][ T5923] pwc: recv_control_msg error -71 req 02 val 2800 [ 81.212094][ T5923] pwc: recv_control_msg error -71 req 04 val 1100 [ 81.225371][ T5923] pwc: recv_control_msg error -71 req 04 val 1200 [ 81.240807][ T5923] pwc: Registered as video103. [ 81.254876][ T5923] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 81.303598][ T5923] usb 3-1: USB disconnect, device number 4 [ 81.333394][ T5890] usb 2-1: Using ep0 maxpacket: 8 [ 81.348946][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 81.361685][ T5890] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 81.376002][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.399578][ T5890] usb 2-1: config 0 descriptor?? [ 81.503380][ T5971] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 81.621375][ T5890] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 81.673537][ T5971] usb 4-1: Using ep0 maxpacket: 16 [ 81.684712][ T5971] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 81.713270][ T5971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 81.734614][ T5904] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 81.754170][ T5971] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 81.763295][ T5971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.771265][ T5971] usb 4-1: Product: syz [ 81.781987][ T5971] usb 4-1: Manufacturer: syz [ 81.786633][ T5971] usb 4-1: SerialNumber: syz [ 81.793171][ T5971] usb 4-1: config 0 descriptor?? [ 81.801038][ T5971] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 81.810293][ T5971] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 81.821605][ T800] usb 2-1: USB disconnect, device number 4 [ 81.895067][ T5904] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 81.904974][ T5904] usb 1-1: config 0 interface 0 has no altsetting 0 [ 81.913836][ T5904] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 81.923707][ T865] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 81.931785][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 81.940308][ T5904] usb 1-1: Product: syz [ 81.945229][ T5904] usb 1-1: Manufacturer: syz [ 81.949841][ T5904] usb 1-1: SerialNumber: syz [ 81.958148][ T5904] usb 1-1: config 0 descriptor?? [ 81.968899][ T5904] usb 1-1: selecting invalid altsetting 0 [ 82.095642][ T865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.107626][ T865] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 82.117970][ T865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.128332][ T865] usb 3-1: config 0 descriptor?? [ 82.173353][ T5904] usb 1-1: USB disconnect, device number 5 [ 82.409750][ T5971] em28xx 4-1:0.0: chip ID is em2860 [ 82.541409][ T865] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 82.555932][ T865] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0003/input/input6 [ 82.610347][ T5971] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 82.621210][ T5971] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 82.628343][ T5971] em28xx 4-1:0.0: No AC97 audio processor [ 82.648380][ T5971] usb 4-1: USB disconnect, device number 3 [ 82.666590][ T5971] em28xx 4-1:0.0: Disconnecting em28xx [ 82.675739][ T5971] em28xx 4-1:0.0: Freeing device [ 82.707160][ T865] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 82.743319][ T800] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 82.745721][ C1] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000038: 0000 [#1] SMP KASAN PTI [ 82.762958][ C1] KASAN: null-ptr-deref in range [0x00000000000001c0-0x00000000000001c7] [ 82.771390][ C1] CPU: 1 UID: 0 PID: 5198 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 82.780236][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 82.790288][ C1] RIP: 0010:__queue_work+0xa2/0xf90 [ 82.795498][ C1] Code: 11 31 ff 89 ee e8 4e f4 37 00 85 ed 0f 85 ef 0c 00 00 e8 01 f0 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 22 0d 00 00 4c 89 34 24 41 8b 2e 89 ee [ 82.815097][ C1] RSP: 0018:ffffc90000a07eb8 EFLAGS: 00010002 [ 82.821164][ C1] RAX: 0000000000000038 RBX: 0000000000000008 RCX: 0000000000040000 [ 82.829123][ C1] RDX: ffffc900023d1000 RSI: 00000000000005bc RDI: 00000000000005bd [ 82.837082][ C1] RBP: 0000000000000000 R08: ffff88813fe32017 R09: 1ffff11027fc6402 [ 82.845041][ C1] R10: dffffc0000000000 R11: ffffed1027fc6403 R12: dffffc0000000000 [ 82.853001][ C1] R13: ffff88813fe32010 R14: 00000000000001c0 R15: 0000000000000000 [ 82.860956][ C1] FS: 00007ff5faf9fc80(0000) GS:ffff888125163000(0000) knlGS:0000000000000000 [ 82.869878][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 82.876447][ C1] CR2: 00002000000012b8 CR3: 0000000025716000 CR4: 00000000003526f0 [ 82.884416][ C1] Call Trace: [ 82.887681][ C1] [ 82.890515][ C1] ? __asan_memcpy+0x40/0x70 [ 82.895111][ C1] ? __tty_insert_flip_string_flags+0x3e9/0x430 [ 82.901340][ C1] queue_work_on+0x106/0x1d0 [ 82.905925][ C1] puts_queue+0xa3/0xe0 [ 82.910106][ C1] ? __pfx_puts_queue+0x10/0x10 [ 82.914941][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 82.920044][ C1] ? rcu_is_watching+0x15/0xb0 [ 82.924801][ C1] k_fn+0x7c/0xd0 [ 82.928419][ C1] k_pad+0x79a/0xa90 [ 82.932298][ C1] ? lock_acquire+0x106/0x330 [ 82.936960][ C1] ? atomic_notifier_call_chain+0x26/0x180 [ 82.942757][ C1] ? __pfx_k_pad+0x10/0x10 [ 82.947160][ C1] ? atomic_notifier_call_chain+0x26/0x180 [ 82.952956][ C1] ? atomic_notifier_call_chain+0x26/0x180 [ 82.958760][ C1] kbd_event+0x2ec1/0x40d0 [ 82.963159][ C1] ? kernel_fpu_end+0x4f/0x80 [ 82.967832][ C1] ? blake2s_compress+0x1e17/0x1eb0 [ 82.973018][ C1] ? __pfx_kernel_fpu_begin_mask+0x10/0x10 [ 82.978821][ C1] ? __pfx_kbd_event+0x10/0x10 [ 82.983574][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 82.988504][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 82.993429][ C1] ? __pfx_blake2s_compress+0x10/0x10 [ 82.998790][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 83.003716][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 83.008640][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 83.013663][ C1] ? input_pass_values+0x8d/0x890 [ 83.018674][ C1] ? lock_acquire+0x106/0x330 [ 83.023342][ C1] ? input_pass_values+0x8d/0x890 [ 83.028357][ C1] input_handle_events_default+0xd4/0x1a0 [ 83.034069][ C1] ? input_pass_values+0x8d/0x890 [ 83.039082][ C1] input_pass_values+0x288/0x890 [ 83.044012][ C1] ? input_handle_event+0xc35/0xf30 [ 83.049205][ C1] input_event_dispose+0x3e5/0x6b0 [ 83.054313][ C1] input_event+0x89/0xe0 [ 83.058551][ C1] hidinput_hid_event+0x1487/0x1e60 [ 83.063741][ C1] ? __pfx_hidinput_hid_event+0x10/0x10 [ 83.069273][ C1] ? hidinput_hid_event+0x14b6/0x1e60 [ 83.074636][ C1] hid_process_event+0x4be/0x620 [ 83.079564][ C1] hid_input_array_field+0x41c/0x5f0 [ 83.084838][ C1] hid_report_raw_event+0xdd7/0x1720 [ 83.090132][ C1] hid_input_report+0x44b/0x580 [ 83.094983][ C1] hid_irq_in+0x47e/0x6d0 [ 83.099315][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 83.104684][ C1] dummy_timer+0xbbd/0x45d0 [ 83.109193][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 83.114114][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 83.119905][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 83.124835][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 83.129758][ C1] __hrtimer_run_queues+0x529/0xc30 [ 83.134962][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 83.140674][ C1] ? read_tsc+0x9/0x20 [ 83.144730][ C1] hrtimer_run_softirq+0x182/0x5a0 [ 83.149834][ C1] handle_softirqs+0x22a/0x7c0 [ 83.154590][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 83.159345][ C1] __irq_exit_rcu+0x5f/0x150 [ 83.163931][ C1] irq_exit_rcu+0x9/0x30 [ 83.168187][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 83.173823][ C1] [ 83.176746][ C1] [ 83.179663][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 83.185635][ C1] RIP: 0010:__read_once_word_nocheck+0x3/0x10 [ 83.191702][ C1] Code: 00 48 ba 00 00 00 00 00 fc ff df e9 88 fc ff ff 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 8b 07 98 f0 35 0a cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 83.211298][ C1] RSP: 0018:ffffc90003197690 EFLAGS: 00000202 [ 83.217379][ C1] RAX: ffffffff81a3ffcc RBX: ffffc90003197ec0 RCX: 1ffff92000632e01 [ 83.225359][ C1] RDX: ffffffff90ca2b28 RSI: 0000000000000002 RDI: ffffc90003197ec0 [ 83.233338][ C1] RBP: 1ffff92000632eee R08: 0000000000000001 R09: ffffffff8e95dee0 [ 83.241310][ C1] R10: ffffc900031977b8 R11: ffffffff81b05a80 R12: ffffc90003198000 [ 83.249275][ C1] R13: 1ffff92000632eef R14: ffffc90003197768 R15: ffffc90003190000 [ 83.257244][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 83.263403][ C1] ? __x64_sys_syslog+0x7c/0x90 [ 83.268251][ C1] unwind_next_frame+0xe52/0x23c0 [ 83.273276][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 83.278383][ C1] ? do_syslog+0x583/0x7d0 [ 83.282794][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 83.288940][ C1] arch_stack_walk+0x11b/0x150 [ 83.293702][ C1] ? do_syslog+0x583/0x7d0 [ 83.298115][ C1] stack_trace_save+0xa9/0x100 [ 83.302876][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 83.308243][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 83.313170][ C1] kasan_save_track+0x3e/0x80 [ 83.317844][ C1] ? kasan_save_track+0x3e/0x80 [ 83.322686][ C1] ? kasan_save_free_info+0x46/0x50 [ 83.327880][ C1] ? __kasan_slab_free+0x5c/0x80 [ 83.332815][ C1] ? kfree+0x1c1/0x610 [ 83.336873][ C1] ? syslog_print+0x57c/0x610 [ 83.341541][ C1] ? do_syslog+0x583/0x7d0 [ 83.345957][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 83.351935][ C1] kasan_save_free_info+0x46/0x50 [ 83.356951][ C1] __kasan_slab_free+0x5c/0x80 [ 83.361710][ C1] kfree+0x1c1/0x610 [ 83.365595][ C1] ? syslog_print+0x57c/0x610 [ 83.370271][ C1] syslog_print+0x57c/0x610 [ 83.374764][ C1] ? __pfx_syslog_print+0x10/0x10 [ 83.379786][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 83.385848][ C1] ? bpf_lsm_capable+0x9/0x20 [ 83.390513][ C1] ? security_capable+0x7e/0x2c0 [ 83.395454][ C1] do_syslog+0x583/0x7d0 [ 83.399691][ C1] ? __pfx_do_syslog+0x10/0x10 [ 83.404445][ C1] ? read_tsc+0x9/0x20 [ 83.408515][ C1] ? ktime_get+0x1d2/0x200 [ 83.412957][ C1] ? rcu_is_watching+0x15/0xb0 [ 83.417729][ C1] __x64_sys_syslog+0x7c/0x90 [ 83.422406][ C1] do_syscall_64+0xe2/0xf80 [ 83.426913][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.432985][ C1] ? clear_bhb_loop+0x40/0x90 [ 83.437661][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.443548][ C1] RIP: 0033:0x7ff5fb169a37 [ 83.447964][ C1] Code: 73 01 c3 48 8b 0d c1 f3 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 67 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 91 f3 0c 00 f7 d8 64 89 01 48 [ 83.467560][ C1] RSP: 002b:00007ffc23e2be68 EFLAGS: 00000206 ORIG_RAX: 0000000000000067 [ 83.475973][ C1] RAX: ffffffffffffffda RBX: 00007ff5fb309490 RCX: 00007ff5fb169a37 [ 83.483947][ C1] RDX: 00000000000003ff RSI: 00007ff5fb309490 RDI: 0000000000000002 [ 83.491908][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 83.499868][ C1] R10: 0000000000004000 R11: 0000000000000206 R12: 00007ff5fb309490 [ 83.507827][ C1] R13: 00007ff5fb2e6dfe R14: 00007ff5fb309508 R15: 00007ff5fb309508 [ 83.515794][ C1] [ 83.518795][ C1] Modules linked in: [ 83.522685][ C1] ---[ end trace 0000000000000000 ]--- [ 83.528121][ C1] RIP: 0010:__queue_work+0xa2/0xf90 [ 83.533316][ C1] Code: 11 31 ff 89 ee e8 4e f4 37 00 85 ed 0f 85 ef 0c 00 00 e8 01 f0 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 22 0d 00 00 4c 89 34 24 41 8b 2e 89 ee [ 83.552903][ C1] RSP: 0018:ffffc90000a07eb8 EFLAGS: 00010002 [ 83.558954][ C1] RAX: 0000000000000038 RBX: 0000000000000008 RCX: 0000000000040000 [ 83.566910][ C1] RDX: ffffc900023d1000 RSI: 00000000000005bc RDI: 00000000000005bd [ 83.574866][ C1] RBP: 0000000000000000 R08: ffff88813fe32017 R09: 1ffff11027fc6402 [ 83.582829][ C1] R10: dffffc0000000000 R11: ffffed1027fc6403 R12: dffffc0000000000 [ 83.590811][ C1] R13: ffff88813fe32010 R14: 00000000000001c0 R15: 0000000000000000 [ 83.598797][ C1] FS: 00007ff5faf9fc80(0000) GS:ffff888125163000(0000) knlGS:0000000000000000 [ 83.607724][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 83.614303][ C1] CR2: 00002000000012b8 CR3: 0000000025716000 CR4: 00000000003526f0 [ 83.622268][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 83.629781][ C1] Kernel Offset: disabled [ 83.634089][ C1] Rebooting in 86400 seconds..