last executing test programs: 3.135426359s ago: executing program 3 (id=53): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet_sctp(r0, &(0x7f0000006240)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000380)="814c594d0bd78f542ea6a16cec7785d432e2f8a665a1968faa5d7b0517bec0169c184f9ad000641ab638f707ba01bd87f403d521f2c4ea80d483c6e7709d741f7525d98c7a2d029f8e6f13003417a90a9d4b3b9be5510b7e12246be2714983cb18c82b4bc716ea5f50b26463b53aa2dab41dbd7135c862ac612c19892b810ca51cc005af6bbcbc9430e06f59cf75804d62df7ecbacfa0a6c500b541c8ba3d7958fe338b7c9d9eecc39328a7cf84cf20fa0e26fc9b2a305de84adec380f24ddb80c043333895a", 0xc6}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x20000000) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000"], 0x0) sendto$inet(r0, &(0x7f0000000a80)="005bd59ea6e8b3e0e917b21f7ed0cd7b84ced4929f916ac305000000000000004f6dcfa6e816645a5c9dba071ed15f985b8352928ef8ebdb06be85dfd44b6103316367a66294fd7fca2b79e815bf4cfdc6ff0ff960aed1e1f393bf8be3a69838e572a8be740246b05ad30c0c2f0bd9015a8bc6ac592e0230c5fbd6746996689cd656b1e562b23ab7018c8bc0200fe5ba03a24c594176033170c9084ad5477dd5d3c8fc19d9bb706fe824dba5a0c82ac91c013a0060b74b21214c153173924c7718cbc4995c4b759eb4ee6c86c12d448dab3360b579b1f32b3c638fadfc08b850b8dd5ec65d80", 0xe6, 0x10008095, 0x0, 0x0) 2.960143971s ago: executing program 0 (id=56): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x2000000}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000340)={0x1, 0xb}, 0x8) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x8, 0x20132, 0xffffffffffffffff, 0xb2993000) 2.236849628s ago: executing program 0 (id=59): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.961609738s ago: executing program 1 (id=62): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe0}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc53", 0x35}, {&(0x7f0000000e80)="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", 0x119}, {&(0x7f0000000340)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df0", 0x28}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bc", 0x3e}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000740)="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", 0x1b7}, {&(0x7f0000000d00)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a4879bd736f1caacc2bbf1194598a652677efb930a5b6ee292c57402e0cc07a9a26ee794e46e604a9aec550d12af09f782e1f6a996f0756604847689d37ee3047e61531a8672447cb5", 0xf0}], 0x2}}], 0x2, 0x14042082) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.906563339s ago: executing program 1 (id=63): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14) 1.798842485s ago: executing program 3 (id=65): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) ioctl(r0, 0x8b0f, &(0x7f0000000040)) 1.71115389s ago: executing program 1 (id=67): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) close(0x4) 1.607798816s ago: executing program 3 (id=69): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0x3}, 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write(r0, &(0x7f0000000340)='/', 0x1) sendto$inet6(r0, &(0x7f0000000140)="87", 0x34000, 0x20004000, 0x0, 0x0) 1.568295162s ago: executing program 2 (id=70): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r0, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x11fff}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000380)=0x7, 0x4) 1.525057236s ago: executing program 1 (id=71): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) 1.503286736s ago: executing program 2 (id=72): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000500)={0x1b0, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x192, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_a, @device_a, @initial, {0xc, 0xc45}, @value=@ver_80211n={0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0xf7d6, @default, 0x1040, @val={0x0, 0x10, @random="f8d9c3537204b0b478308bf7aa17d3cb"}, @val={0x1, 0x3, [{0x3}, {0x1, 0x1}, {0x3}]}, @void, @val={0x4, 0x6, {0x8, 0x6, 0xec6, 0x4}}, @val={0x6, 0x2, 0x3}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x0, 0x6, 0x8}}, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x0, 0x2, 0xf3, 0x20}}, @void, [{0xdd, 0x6b, "ccff396922e15cae25aef7da02fcbfdfdcbfdb1ff313dae170d604445f1aa40580eb457c61f5ff5a6a0bc277b68baa4c9420a4621fd39d72837be063f927610c4e1b1bc20271c35aa02cdfcf53398a468e407d653243c60d2b68860d62aed527c8ada6bd87dc42f8543857"}, {0xdd, 0x40, "12afa0c19f87a0279bd0de26be87d147bede4c85aff63beb5f60aa299323961d8db4aace7501eb0330f5201fafc3c35dd56fa22c22d7c0039fb3c421a9f2d41c"}, {0xdd, 0x3e, "6b6f3c17950396eb8c709cd3d676c6300a0c381a951fd45bc3f65f0cc9298dbc972a0de3f29325d320c61fb8db027485430d8dfe931407edbcc4c9eacbe8"}, {0xdd, 0x6, "9f5f0f2c6222"}, {0xdd, 0x3b, "0c8f613c6e46c88b8595b2cc97d1c524601d51fbdabfbbd9ad6862aac5450011800d535c32253756aa149cde7dca16d7991e300171e1ba1755f1c4"}]}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x20000081}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.423937406s ago: executing program 2 (id=73): modify_ldt$write2(0x11, &(0x7f00000002c0)={0x81, 0x20101000, 0x2000, 0x1}, 0x10) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r0, 0x1, &(0x7f00000001c0)={&(0x7f00000003c0)="c94522e546f93f6dedf11f1509683b4ff6ed90bb6d8ca47dc829c0daa3feec0f1f88d7547f05841e", 0x28}) 1.396010822s ago: executing program 3 (id=74): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clock_adjtime(0x300000000000000, &(0x7f0000000000)={0xfbfd, 0x10000044, 0xb0000000000, 0x3, 0x0, 0x0, 0xf, 0x0, 0x2000000000000008, 0x40000000000, 0x4, 0x8000000000000081, 0x81, 0xffffffffffffffff, 0x2000000000000000, 0x5a6c101, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x201ff, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x9}) 1.309034226s ago: executing program 1 (id=75): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r0) 1.287597807s ago: executing program 2 (id=76): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xd, 0xd, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000006e40)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000900)="341c6970826c8d4b5c11b970df9ba99356da67926a9ec3ade529abcdb90bd856d940b30d62502e8bd2da2273e46adca15152c3ada09720c93730f8a240b97dc3ddaf3933416584aeea0849e24c15887cf481a02d1fac21c4741da961105b326e43fc2389a5dac54db82491d54d0fe46230d76297c86effdba339d1eeea410793dc09c0117a422e04d047174251dec07a31cb58e4773ab8715a2a4189fa87ab20b6c6153fc96fe645fa33a965ed60bcc4fc93319cb4397ad0e0e5671cf342697e8f01c11fed", 0xc5}], 0x1}}], 0x1, 0x4008041) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[], 0x320) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1) write(r1, &(0x7f0000000100)="46172a086e2a", 0x6) 1.226293858s ago: executing program 0 (id=77): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x8b, 0x0, 0x5}]}) 1.152587919s ago: executing program 3 (id=78): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0x448, 0x0, 0xffffffc0, 0x80000e, 0x3, "03e7ffffffffffffff04ddd0ff936d7fcb180e", 0x400, 0x1}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xd) 1.125953623s ago: executing program 2 (id=79): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24004044}, 0x40008010) 1.055715484s ago: executing program 0 (id=80): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 1.033231941s ago: executing program 3 (id=81): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000003c0)={0x20, 0x17, 0x5, "3f19b12212"}, 0x0, 0x0, 0x0, 0x0}) 985.760018ms ago: executing program 2 (id=82): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) write$dsp(r1, &(0x7f0000002000)='`', 0x88020) landlock_restrict_self(r0, 0x8) 385.498512ms ago: executing program 1 (id=83): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f00000006c0)={0x7fe51287edc2689d, 0xc}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000c40)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 102.158646ms ago: executing program 0 (id=84): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r0, &(0x7f0000000ec0)=[{0x0}, {&(0x7f00000000c0)='\x00\x00', 0x2}], 0x2, 0x2, 0x81) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000540)='1', 0x1) 0s ago: executing program 0 (id=85): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x5) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.9' (ED25519) to the list of known hosts. [ 67.387051][ T5598] cgroup: Unknown subsys name 'net' [ 67.467909][ T5598] cgroup: Unknown subsys name 'cpuset' [ 67.476256][ T5598] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.818756][ T5598] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.347097][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.347173][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.910608][ T5609] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.918571][ T5609] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.938148][ T5616] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.938903][ T5616] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.960345][ T5611] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.962894][ T5611] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.964865][ T5611] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.966231][ T5611] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.967238][ T5611] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.968123][ T5611] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.968892][ T5621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.978754][ T5616] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.988705][ T5611] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.990792][ T5611] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.991221][ T5611] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.994530][ T5611] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.999503][ T5611] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.000820][ T5611] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.014095][ T4930] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.027482][ T5611] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.287065][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.287716][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.287869][ T5613] bridge_slave_0: entered allmulticast mode [ 73.291349][ T5613] bridge_slave_0: entered promiscuous mode [ 73.342951][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.343112][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.343234][ T5613] bridge_slave_1: entered allmulticast mode [ 73.345820][ T5613] bridge_slave_1: entered promiscuous mode [ 73.450127][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.450355][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.451304][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.451422][ T5607] bridge_slave_0: entered allmulticast mode [ 73.453093][ T5607] bridge_slave_0: entered promiscuous mode [ 73.476372][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.476554][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.476645][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.476748][ T5607] bridge_slave_1: entered allmulticast mode [ 73.478671][ T5607] bridge_slave_1: entered promiscuous mode [ 73.569216][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.569375][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.569491][ T5614] bridge_slave_0: entered allmulticast mode [ 73.571122][ T5614] bridge_slave_0: entered promiscuous mode [ 73.575149][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.575244][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.575356][ T5614] bridge_slave_1: entered allmulticast mode [ 73.577089][ T5614] bridge_slave_1: entered promiscuous mode [ 73.581661][ T5613] team0: Port device team_slave_0 added [ 73.586523][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.618045][ T5613] team0: Port device team_slave_1 added [ 73.620923][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.621118][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.621251][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.621359][ T5610] bridge_slave_0: entered allmulticast mode [ 73.623315][ T5610] bridge_slave_0: entered promiscuous mode [ 73.685936][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.686100][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.686218][ T5610] bridge_slave_1: entered allmulticast mode [ 73.687888][ T5610] bridge_slave_1: entered promiscuous mode [ 73.693026][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.709869][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.709884][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.709908][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.760531][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.761388][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.761400][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.761424][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.765638][ T5607] team0: Port device team_slave_0 added [ 73.768762][ T5607] team0: Port device team_slave_1 added [ 73.771968][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.821476][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.849816][ T5614] team0: Port device team_slave_0 added [ 73.872182][ T5614] team0: Port device team_slave_1 added [ 73.883922][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.884343][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.884368][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.938953][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.939203][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.939229][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.951708][ T5610] team0: Port device team_slave_0 added [ 73.952756][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.952768][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.952792][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.966940][ T5610] team0: Port device team_slave_1 added [ 73.977399][ T5613] hsr_slave_0: entered promiscuous mode [ 73.980056][ T5613] hsr_slave_1: entered promiscuous mode [ 73.986701][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.986715][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.986738][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.988930][ T5609] Bluetooth: hci3: command tx timeout [ 74.083057][ T5609] Bluetooth: hci0: command tx timeout [ 74.124611][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.124638][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.124670][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.158701][ T5611] Bluetooth: hci2: command tx timeout [ 74.158930][ T5609] Bluetooth: hci1: command tx timeout [ 74.167518][ T5607] hsr_slave_0: entered promiscuous mode [ 74.168692][ T5607] hsr_slave_1: entered promiscuous mode [ 74.169408][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 74.169500][ T5607] Cannot create hsr debugfs directory [ 74.176076][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.176091][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.176114][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.269808][ T5614] hsr_slave_0: entered promiscuous mode [ 74.270750][ T5614] hsr_slave_1: entered promiscuous mode [ 74.271363][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 74.271380][ T5614] Cannot create hsr debugfs directory [ 74.342003][ T5610] hsr_slave_0: entered promiscuous mode [ 74.343225][ T5610] hsr_slave_1: entered promiscuous mode [ 74.343840][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 74.343858][ T5610] Cannot create hsr debugfs directory [ 74.693657][ T5613] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.706606][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.707627][ T5613] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.719249][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.722293][ T5613] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.730996][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.732556][ T5613] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.744528][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.818029][ T5607] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.828383][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.836067][ T5607] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.846215][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.854368][ T5607] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.867170][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.883051][ T5607] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.892617][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.960613][ T5614] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.971127][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.982550][ T5614] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.991466][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.992207][ T5614] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.001869][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.002884][ T5614] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.009888][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.105826][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.106178][ T5610] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.117604][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.118420][ T5610] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.122767][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.143843][ T5610] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.152719][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.156842][ T5610] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.167126][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.209274][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.235281][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.235425][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.266792][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.266974][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.317225][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.374664][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.389436][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.414410][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.414523][ T3295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.417873][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.417970][ T3295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.431573][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.488573][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.493484][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.509744][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.509871][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.511813][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.511906][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.553451][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.553578][ T3295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.581708][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.581821][ T3295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.071630][ T5609] Bluetooth: hci3: command tx timeout [ 76.147788][ T5609] Bluetooth: hci0: command tx timeout [ 76.226373][ T5609] Bluetooth: hci1: command tx timeout [ 76.226429][ T5609] Bluetooth: hci2: command tx timeout [ 76.254258][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.392862][ T5613] veth0_vlan: entered promiscuous mode [ 76.427055][ T5613] veth1_vlan: entered promiscuous mode [ 76.517985][ T5613] veth0_macvtap: entered promiscuous mode [ 76.535217][ T5613] veth1_macvtap: entered promiscuous mode [ 76.592512][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.637564][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.669785][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.713136][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.749950][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.761918][ T5607] veth0_vlan: entered promiscuous mode [ 76.771676][ T5607] veth1_vlan: entered promiscuous mode [ 76.786759][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.859581][ T5607] veth0_macvtap: entered promiscuous mode [ 76.864685][ T5607] veth1_macvtap: entered promiscuous mode [ 76.872100][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.872135][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.886862][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.894473][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.964571][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.964612][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.001279][ T5610] veth0_vlan: entered promiscuous mode [ 77.064592][ T5610] veth1_vlan: entered promiscuous mode [ 77.075871][ T5613] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.083972][ T5614] veth0_vlan: entered promiscuous mode [ 77.124902][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.130059][ T154] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.140964][ T5614] veth1_vlan: entered promiscuous mode [ 77.153954][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.153986][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.262923][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.262967][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.269266][ T5610] veth0_macvtap: entered promiscuous mode [ 77.301290][ T5610] veth1_macvtap: entered promiscuous mode [ 77.319880][ T5614] veth0_macvtap: entered promiscuous mode [ 77.340567][ T5614] veth1_macvtap: entered promiscuous mode [ 77.361557][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.372013][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.529478][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.603621][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.636741][ T154] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.671140][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.725909][ T154] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.726874][ T154] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.726910][ T154] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.726940][ T154] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.726970][ T154] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.727000][ T154] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.727030][ T154] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.727061][ T154] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.727092][ T154] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.727122][ T154] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.727151][ T154] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.843912][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.843949][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.929091][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.929129][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.969530][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.971140][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.088875][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.088920][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.145459][ T5611] Bluetooth: hci3: command tx timeout [ 78.227030][ T5611] Bluetooth: hci0: command tx timeout [ 78.305258][ T5611] Bluetooth: hci2: command tx timeout [ 78.305305][ T5611] Bluetooth: hci1: command tx timeout [ 78.540280][ T5790] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 78.636869][ T5795] @0Ù: renamed from bond_slave_1 (while UP) [ 78.875030][ T5707] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.935331][ T5806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'. [ 79.034852][ T5707] usb 3-1: Using ep0 maxpacket: 16 [ 79.043944][ T5707] usb 3-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 79.058277][ T5707] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 227, changing to 11 [ 79.066865][ T5811] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.086928][ T5707] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.111296][ T5707] usb 3-1: config 0 descriptor?? [ 79.550798][ T5707] apple 0003:05AC:027D.0001: unknown main item tag 0x0 [ 79.558486][ T5707] apple 0003:05AC:027D.0001: unknown main item tag 0x0 [ 79.565598][ T5707] apple 0003:05AC:027D.0001: unknown main item tag 0x0 [ 79.572575][ T5707] apple 0003:05AC:027D.0001: unknown main item tag 0x0 [ 79.580659][ T5707] apple 0003:05AC:027D.0001: unknown main item tag 0x0 [ 79.587772][ T5707] apple 0003:05AC:027D.0001: unknown main item tag 0x0 [ 79.594903][ T5707] apple 0003:05AC:027D.0001: unknown main item tag 0x0 [ 79.602327][ T5707] apple 0003:05AC:027D.0001: unknown main item tag 0x0 [ 79.610188][ T5707] apple 0003:05AC:027D.0001: unknown main item tag 0x0 [ 79.617183][ T5707] apple 0003:05AC:027D.0001: unknown main item tag 0x0 [ 79.624785][ T5707] apple 0003:05AC:027D.0001: ignoring exceeding usage max [ 79.633871][ T5707] apple 0003:05AC:027D.0001: ignoring exceeding usage max [ 79.641204][ T5707] apple 0003:05AC:027D.0001: no more usage index available [ 79.648616][ T5707] apple 0003:05AC:027D.0001: item 0 2 2 2 parsing failed [ 79.657420][ T5707] apple 0003:05AC:027D.0001: parse failed [ 79.663399][ T5707] apple 0003:05AC:027D.0001: probe with driver apple failed with error -22 [ 79.774633][ T5684] usb 3-1: USB disconnect, device number 2 [ 80.132196][ T5838] capability: warning: `syz.3.32' uses 32-bit capabilities (legacy support in use) [ 80.230048][ T5609] Bluetooth: hci3: command tx timeout [ 80.254936][ T5840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.34'. [ 80.291507][ T5843] jffs2: notice: (5843) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 80.317935][ T5609] Bluetooth: hci0: command tx timeout [ 80.340466][ T154] IPVS: starting estimator thread 0... [ 80.347386][ T5846] IPVS: rr: FWM 3 0x00000003 - no destination available [ 80.385309][ T5609] Bluetooth: hci1: command tx timeout [ 80.385364][ T5609] Bluetooth: hci2: command tx timeout [ 80.435490][ T5847] IPVS: using max 30 ests per chain, 72000 per kthread [ 80.924816][ T30] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.076534][ T987] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 81.096625][ T30] usb 2-1: Using ep0 maxpacket: 8 [ 81.097675][ T30] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 81.098752][ T30] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.098772][ T30] usb 2-1: config 0 has no interfaces? [ 81.098799][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.103043][ T30] usb 2-1: config 0 descriptor?? [ 81.238690][ T987] usb 3-1: Using ep0 maxpacket: 8 [ 81.246739][ T987] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 81.257673][ T987] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 81.257735][ T987] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 81.257769][ T987] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 81.257796][ T987] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 81.257822][ T987] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.257862][ T987] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.577271][ T987] usb 3-1: usb_control_msg returned -32 [ 81.577329][ T987] usbtmc 3-1:16.0: can't read capabilities [ 81.677079][ T5859] Set syz1 is full, maxelem 6117 reached [ 81.709553][ T30] usb 2-1: USB disconnect, device number 2 [ 81.931497][ T5877] usbtmc 3-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 82.034377][ T5883] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 82.044191][ T5883] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 82.056243][ T5883] overlayfs: fs on './cgroup' does not support file handles, falling back to xino=off. [ 82.130095][ T5707] usb 3-1: USB disconnect, device number 3 [ 82.494940][ T30] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.657079][ T30] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 82.659022][ T30] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.659044][ T30] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 82.660837][ T30] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 82.660859][ T30] usb 4-1: Product: syz [ 82.660872][ T30] usb 4-1: SerialNumber: syz [ 82.709327][ T30] usb 4-1: config 0 descriptor?? [ 82.942454][ T5346] usb 4-1: USB disconnect, device number 2 [ 83.607441][ T5927] warning: `syz.3.65' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 84.071585][ T31] audit: type=1326 audit(1786989162.750:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5948 comm="syz.1.75" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efcc959e0d9 code=0x0 [ 84.524820][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 84.684863][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 84.685624][ T10] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 84.687394][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.687423][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.687458][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.691693][ T10] usb 4-1: config 0 descriptor?? [ 85.109674][ T10] hid_parser_main: 49 callbacks suppressed [ 85.110430][ T10] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0 [ 85.110466][ T10] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0 [ 85.110492][ T10] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0 [ 85.110517][ T10] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0 [ 85.110540][ T10] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0 [ 85.118621][ T10] corsair 0003:1B1C:1B02.0002: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 85.175609][ T5967] udevd[5967]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 85.235453][ T5346] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 85.307107][ T10] corsair 0003:1B1C:1B02.0002: Read invalid backlight brightness: 12. [ 85.394858][ T5346] usb 2-1: Using ep0 maxpacket: 16 [ 85.400875][ T5346] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 85.411425][ T5346] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 85.423114][ T5346] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 85.437890][ T5346] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.437929][ T5346] usb 2-1: Product: syz [ 85.437958][ T5346] usb 2-1: Manufacturer: syz [ 85.437975][ T5346] usb 2-1: SerialNumber: syz [ 85.463388][ T5346] usb 2-1: config 0 descriptor?? [ 85.473198][ T5346] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 85.483283][ T5346] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 85.515453][ T5691] usb 4-1: USB disconnect, device number 3 [ 85.548289][ T5691] ------------[ cut here ]------------ [ 85.548325][ T5691] ODEBUG: free active (active state 0) object: ffff888058c752c8 object type: work_struct hint: k90_record_led_work+0x0/0x1e0 [ 85.548427][ T5691] WARNING: lib/debugobjects.c:632 at debug_print_object+0xec/0x230, CPU#1: kworker/1:6/5691 [ 85.577449][ T5691] Modules linked in: [ 85.581729][ T5691] CPU: 1 UID: 0 PID: 5691 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT(full) [ 85.591623][ T5691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.602115][ T5691] Workqueue: usb_hub_wq hub_event [ 85.607547][ T5691] RIP: 0010:debug_print_object+0x18a/0x230 [ 85.613386][ T5691] Code: f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 2d 77 46 fd 4d 8b 0f 4c 89 ef 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f0 ff 34 24 <67> 48 0f b9 3a 48 83 c4 08 ff 05 13 14 ab 0b 48 83 c4 10 5b 41 5c [ 85.633532][ T5691] RSP: 0018:ffffc900045a6fd0 EFLAGS: 00010246 [ 85.641125][ T5691] RAX: 1ffffffff1816f34 RBX: dffffc0000000000 RCX: 0000000000000000 [ 85.650507][ T5691] RDX: ffffffff8c6e0e40 RSI: ffffffff8c6e08c0 RDI: ffffffff90a5e380 [ 85.659582][ T5691] RBP: ffffffff8c6e0e40 R08: ffff888058c752c8 R09: ffffffff8c0b8bc0 [ 85.667632][ T5691] R10: dffffc0000000000 R11: ffffffff818f75b0 R12: 0000000000000000 [ 85.675818][ T5691] R13: ffffffff90a5e380 R14: ffff888058c752c8 R15: ffffffff8c0b79a0 [ 85.683851][ T5691] FS: 0000000000000000(0000) GS:ffff8881249ab000(0000) knlGS:0000000000000000 [ 85.693281][ T5691] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.699947][ T5691] CR2: 0000001b33814ff8 CR3: 000000007edc8000 CR4: 00000000003526f0 [ 85.707991][ T5691] Call Trace: [ 85.711333][ T5691] [ 85.714301][ T5691] ? __pfx_k90_record_led_work+0x10/0x10 [ 85.719994][ T5691] ? __pfx_k90_record_led_work+0x10/0x10 [ 85.725688][ T5691] debug_check_no_obj_freed+0x2e3/0x450 [ 85.731313][ T5691] kfree+0x13e/0x650 [ 85.735419][ T5691] ? corsair_remove+0xfd/0x260 [ 85.740233][ T5691] corsair_remove+0xfd/0x260 [ 85.746074][ T5691] ? __pfx_corsair_remove+0x10/0x10 [ 85.751323][ T5691] hid_device_remove+0xc5/0x1c0 [ 85.757054][ T5691] ? __pfx_hid_device_remove+0x10/0x10 [ 85.762584][ T5691] device_release_driver_internal+0x48b/0x880 [ 85.768743][ T5691] bus_remove_device+0x444/0x560 [ 85.773731][ T5691] ? __pfx_bus_remove_device+0x10/0x10 [ 85.779285][ T5691] ? kernfs_remove_by_name_ns+0x101/0x140 [ 85.785080][ T5691] device_del+0x524/0x8f0 [ 85.789471][ T5691] ? __pfx_device_del+0x10/0x10 [ 85.794381][ T5691] hid_destroy_device+0x6b/0x1b0 [ 85.799425][ T5691] usbhid_disconnect+0x9f/0xc0 [ 85.805613][ T5691] usb_unbind_interface+0x295/0x9f0 [ 85.811341][ T5691] ? kernfs_remove_by_name_ns+0x101/0x140 [ 85.817157][ T5691] ? kernfs_remove_by_name_ns+0x101/0x140 [ 85.822892][ T5691] ? __pfx_usb_unbind_interface+0x10/0x10 [ 85.828800][ T5691] device_release_driver_internal+0x4f5/0x880 [ 85.834946][ T5691] bus_remove_device+0x444/0x560 [ 85.839910][ T5691] ? __pfx_bus_remove_device+0x10/0x10 [ 85.845434][ T5691] ? kernfs_remove_by_name_ns+0x101/0x140 [ 85.852357][ T5691] device_del+0x524/0x8f0 [ 85.857496][ T5691] ? __pfx_device_del+0x10/0x10 [ 85.862395][ T5691] ? kobject_put+0x516/0x550 [ 85.867065][ T5691] usb_disable_device+0x3d4/0x8d0 [ 85.872117][ T5691] usb_disconnect+0x346/0x9a0 [ 85.876877][ T5691] hub_event+0x1bbb/0x4d30 [ 85.881310][ T5691] ? __lock_acquire+0x6df/0x2e50 [ 85.886361][ T5691] ? register_lock_class+0x31/0x2e0 [ 85.891591][ T5691] ? rcu_is_watching+0x16/0xb0 [ 85.896442][ T5691] ? __pfx_hub_event+0x10/0x10 [ 85.901232][ T5691] ? rcu_is_watching+0x16/0xb0 [ 85.906066][ T5691] ? process_scheduled_works+0x97a/0x1630 [ 85.911804][ T5691] process_scheduled_works+0xc3d/0x1630 [ 85.917437][ T5691] ? __pfx_process_scheduled_works+0x10/0x10 [ 85.923437][ T5691] ? assign_work+0x3cf/0x5d0 [ 85.928104][ T5691] worker_thread+0xa47/0xfb0 [ 85.932729][ T5691] ? __kthread_parkme+0x71/0x1f0 [ 85.937752][ T5691] kthread+0x38b/0x480 [ 85.941844][ T5691] ? __pfx_worker_thread+0x10/0x10 [ 85.947021][ T5691] ? __pfx_kthread+0x10/0x10 [ 85.952814][ T5691] ret_from_fork+0x514/0xb70 [ 85.958216][ T5691] ? __pfx_ret_from_fork+0x10/0x10 [ 85.963360][ T5691] ? __switch_to+0xc89/0x1420 [ 85.968138][ T5691] ? __pfx_kthread+0x10/0x10 [ 85.972749][ T5691] ret_from_fork_asm+0x1a/0x30 [ 85.977590][ T5691] [ 85.980617][ T5691] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 85.987900][ T5691] CPU: 1 UID: 0 PID: 5691 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT(full) [ 85.997274][ T5691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.007345][ T5691] Workqueue: usb_hub_wq hub_event [ 86.012393][ T5691] Call Trace: [ 86.015680][ T5691] [ 86.018617][ T5691] vpanic+0x56d/0xa60 [ 86.022627][ T5691] ? __pfx__printk+0x10/0x10 [ 86.027230][ T5691] ? __pfx_vpanic+0x10/0x10 [ 86.031760][ T5691] ? is_bpf_text_address+0x292/0x2b0 [ 86.037061][ T5691] ? is_bpf_text_address+0x26/0x2b0 [ 86.042284][ T5691] panic+0xc5/0xd0 [ 86.046036][ T5691] ? __pfx_panic+0x10/0x10 [ 86.050485][ T5691] ? ret_from_fork_asm+0x1a/0x30 [ 86.055448][ T5691] __warn+0x315/0x4c0 [ 86.059451][ T5691] ? debug_print_object+0xec/0x230 [ 86.064594][ T5691] ? debug_print_object+0xec/0x230 [ 86.069733][ T5691] __report_bug+0x276/0x570 [ 86.074260][ T5691] ? debug_print_object+0xec/0x230 [ 86.079383][ T5691] ? __pfx___report_bug+0x10/0x10 [ 86.084416][ T5691] ? kasan_save_track+0x4f/0x80 [ 86.089264][ T5691] ? kasan_save_free_info+0x40/0x50 [ 86.094465][ T5691] ? __kasan_slab_free+0x5c/0x80 [ 86.099397][ T5691] ? kfree+0x1c5/0x650 [ 86.103468][ T5691] report_bug_entry+0x19b/0x290 [ 86.108316][ T5691] ? debug_print_object+0x18a/0x230 [ 86.113535][ T5691] ? debug_print_object+0x18f/0x230 [ 86.118924][ T5691] handle_bug+0xce/0x200 [ 86.123200][ T5691] exc_invalid_op+0x1a/0x50 [ 86.127706][ T5691] asm_exc_invalid_op+0x1a/0x20 [ 86.132553][ T5691] RIP: 0010:debug_print_object+0x18a/0x230 [ 86.138364][ T5691] Code: f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 2d 77 46 fd 4d 8b 0f 4c 89 ef 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f0 ff 34 24 <67> 48 0f b9 3a 48 83 c4 08 ff 05 13 14 ab 0b 48 83 c4 10 5b 41 5c [ 86.157998][ T5691] RSP: 0018:ffffc900045a6fd0 EFLAGS: 00010246 [ 86.164352][ T5691] RAX: 1ffffffff1816f34 RBX: dffffc0000000000 RCX: 0000000000000000 [ 86.172318][ T5691] RDX: ffffffff8c6e0e40 RSI: ffffffff8c6e08c0 RDI: ffffffff90a5e380 [ 86.180281][ T5691] RBP: ffffffff8c6e0e40 R08: ffff888058c752c8 R09: ffffffff8c0b8bc0 [ 86.188247][ T5691] R10: dffffc0000000000 R11: ffffffff818f75b0 R12: 0000000000000000 [ 86.196218][ T5691] R13: ffffffff90a5e380 R14: ffff888058c752c8 R15: ffffffff8c0b79a0 [ 86.204198][ T5691] ? __pfx_work_debug_hint+0x10/0x10 [ 86.209490][ T5691] ? __pfx_k90_record_led_work+0x10/0x10 [ 86.215156][ T5691] ? __pfx_k90_record_led_work+0x10/0x10 [ 86.220786][ T5691] debug_check_no_obj_freed+0x2e3/0x450 [ 86.226339][ T5691] kfree+0x13e/0x650 [ 86.230236][ T5691] ? corsair_remove+0xfd/0x260 [ 86.235005][ T5691] corsair_remove+0xfd/0x260 [ 86.239590][ T5691] ? __pfx_corsair_remove+0x10/0x10 [ 86.244779][ T5691] hid_device_remove+0xc5/0x1c0 [ 86.249632][ T5691] ? __pfx_hid_device_remove+0x10/0x10 [ 86.255086][ T5691] device_release_driver_internal+0x48b/0x880 [ 86.261173][ T5691] bus_remove_device+0x444/0x560 [ 86.266164][ T5691] ? __pfx_bus_remove_device+0x10/0x10 [ 86.271634][ T5691] ? kernfs_remove_by_name_ns+0x101/0x140 [ 86.277358][ T5691] device_del+0x524/0x8f0 [ 86.281698][ T5691] ? __pfx_device_del+0x10/0x10 [ 86.286555][ T5691] hid_destroy_device+0x6b/0x1b0 [ 86.291494][ T5691] usbhid_disconnect+0x9f/0xc0 [ 86.296261][ T5691] usb_unbind_interface+0x295/0x9f0 [ 86.301460][ T5691] ? kernfs_remove_by_name_ns+0x101/0x140 [ 86.307186][ T5691] ? kernfs_remove_by_name_ns+0x101/0x140 [ 86.312909][ T5691] ? __pfx_usb_unbind_interface+0x10/0x10 [ 86.318625][ T5691] device_release_driver_internal+0x4f5/0x880 [ 86.324702][ T5691] bus_remove_device+0x444/0x560 [ 86.329646][ T5691] ? __pfx_bus_remove_device+0x10/0x10 [ 86.335105][ T5691] ? kernfs_remove_by_name_ns+0x101/0x140 [ 86.340823][ T5691] device_del+0x524/0x8f0 [ 86.345159][ T5691] ? __pfx_device_del+0x10/0x10 [ 86.350008][ T5691] ? kobject_put+0x516/0x550 [ 86.354606][ T5691] usb_disable_device+0x3d4/0x8d0 [ 86.359633][ T5691] usb_disconnect+0x346/0x9a0 [ 86.364352][ T5691] hub_event+0x1bbb/0x4d30 [ 86.368784][ T5691] ? __lock_acquire+0x6df/0x2e50 [ 86.373737][ T5691] ? register_lock_class+0x31/0x2e0 [ 86.378945][ T5691] ? rcu_is_watching+0x16/0xb0 [ 86.383724][ T5691] ? __pfx_hub_event+0x10/0x10 [ 86.388488][ T5691] ? rcu_is_watching+0x16/0xb0 [ 86.393247][ T5691] ? process_scheduled_works+0x97a/0x1630 [ 86.398962][ T5691] process_scheduled_works+0xc3d/0x1630 [ 86.404526][ T5691] ? __pfx_process_scheduled_works+0x10/0x10 [ 86.410503][ T5691] ? assign_work+0x3cf/0x5d0 [ 86.415094][ T5691] worker_thread+0xa47/0xfb0 [ 86.419699][ T5691] ? __kthread_parkme+0x71/0x1f0 [ 86.424651][ T5691] kthread+0x38b/0x480 [ 86.428719][ T5691] ? __pfx_worker_thread+0x10/0x10 [ 86.433823][ T5691] ? __pfx_kthread+0x10/0x10 [ 86.438415][ T5691] ret_from_fork+0x514/0xb70 [ 86.443006][ T5691] ? __pfx_ret_from_fork+0x10/0x10 [ 86.448150][ T5691] ? __switch_to+0xc89/0x1420 [ 86.452871][ T5691] ? __pfx_kthread+0x10/0x10 [ 86.457476][ T5691] ret_from_fork_asm+0x1a/0x30 [ 86.462262][ T5691] [ 86.465542][ T5691] Kernel Offset: disabled [ 86.469860][ T5691] Rebooting in 86400 seconds..