last executing test programs: 7.870474202s ago: executing program 0 (id=97): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb02163c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x4) 5.510034111s ago: executing program 3 (id=106): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1, 0x0, 0x2}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000100)={[&(0x7f0000000480)='=\x8d5\x10\xe4\x00\bj\xfb', &(0x7f0000000500)='\xaa\xc1d\rg\xae\x00\xab\xfb']}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x3f8, 0x0, 0x1f0, 0x0, 0x318, 0x318, 0x318, 0x4, &(0x7f0000000180), {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @multicast1, 0x1}}}, {{@uncond, 0xbc, 0xe4}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x5, 0x1}}}, {{@uncond, 0xbc, 0x128}, @unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0xc, 0x79, 0x9, 0x0, 0x0, "72a35cf68ac9f50f47acd117e6668eeb7210b56f18638af1541f592900b4f39b6298926fc5ed319c1745029bba378ef4a6e0db4f582376029145678cf5214738"}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x444) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7, 0x0, 0x0, 0x0, 0xeec}, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') preadv(r6, &(0x7f00000001c0), 0x0, 0x6, 0x0) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) write$proc_mixer(r7, &(0x7f0000000340)=ANY=[], 0x8c) close(r7) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x30, r9, 0x1, 0x70bd29, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0) read$FUSE(r8, &(0x7f00000061c0)={0x2020}, 0x115f) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendfile(r5, r4, &(0x7f0000000080)=0xb, 0x8) 5.33640387s ago: executing program 2 (id=107): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000780)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a0200000002b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6cc1da6ecc0c9dee6427dedbfdab90241e7b10f6de34010782fa654000000", 0xcf}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 5.0645719s ago: executing program 2 (id=108): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee200090582"], 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x238, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_HEAD={0x224, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0xe}, @device_b, @device_b, @initial, {0xf, 0x1}, @value=@ver_80211n={0x0, 0x72d7, 0x1, 0x0, 0x0, 0x1, 0x1}}, 0x8, @default, 0x201, @void, @void, @void, @val={0x4, 0x6, {0x9a, 0x10, 0xfffe, 0x1}}, @void, @val={0x5, 0x9, {0x0, 0xd, 0x40, "7eb81976a5fb"}}, @val={0x25, 0x3, {0x0, 0xb5, 0x2}}, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x405e, 0x0, 0x1, 0x0, {0x4bb55442, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x300, 0x81, 0xfc}}, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9}}, @void, [{0xdd, 0x88, "e3e1f4a028c310d037dab437406ca181c672fbf63d10c59b20ea29219ea7246df150bdc97028a1392c2d08d1870bb8e0acd87e2180939777dd079d87eb6d6d12a1863047b1257f7a7cdb59dbdfabebd3c0be71cc9941be89bd26b45dc87dbc380a78add94db97110c4b9bf6424e087e854207717f244f7fe6b7e93521c48d01b31d14a4bc31a4acd"}, {0xdd, 0xe, "06ca28e142fd029352add0e34fb6"}, {0xdd, 0x13, "337f22caedc2940951ce70d4ab26501ce9fabb"}, {0xdd, 0x62, "9d57fd9bb73e8a606c9254c571f178e7111a5e1a80264f9c61048590554f5c1ce0b377f6f98078fa32d8b013cd2b761b23dbc4539148d3fa43ac55fbccd8ee548d3f620a8e834645f1655f5b08fb195058bbbb4d5e75ee1c4424a1e3ecb0ecfe7973"}, {0xdd, 0xa3, "eab4136599456f96cd5e7827130a29cfaf4e18c182502170991e49f0d01e0dae973ceecc3a2b75adda4fcfc1ff86c9df3de9e17f95f723eaeca7ce64aa4e767e16d4f62250ab9f1a004456e26c3a3bfd654bf3dba48c8fd4783b129aff0ade7b51c800a0084591023de717123ccad54f301ad436052cdb2ddb9a847fc1a87f091899d1d7246a45be60fb1779394e734a1bd66603442f736c502f5514b3001c34489c19"}]}}]}, 0x238}, 0x1, 0x0, 0x0, 0x4085}, 0x41050) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x5, 0x80, 0xf9}}, [{{0x9, 0x5, 0x82, 0x2, 0x3bf, 0x3, 0xff, 0xe3}}]}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x6, 0x7f, 0x21, 0xa7, 0x2}, 0x33, &(0x7f00000001c0)={0x5, 0xf, 0x33, 0x3, [@ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x6, 0x6, 0xfff, 0xf00, 0x5, [0xc000, 0x0, 0xff3f00, 0x3f00, 0x3f, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x4, 0x2}]}, 0x4, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1007}}, {0x0, 0x0}, {0xdd, &(0x7f0000000680)=@string={0xdd, 0x3, "8b102fec7b039e2e9356cc460f6abbf649fcc9562373d3531b7f5a9a5356494caf263612f8659bbc4a1b0fb8c9fa18d74253964b0bfd9cc1d8c17ed766bf5cb09f360eb74d53465d86969dc7761ba7663ecf7c16435857ea565dd500d91d4f777248fb1d2f505b9664e78964dc3940e8c4f5f9a164c28914b4819467dbb02d4d2b249713242e07fe5a073356db022322797da112d53a470f9a2a2602120305b2fbfeac3702b66b124e370bade4b6a921f8505ce31019ae62197dcd3aaa21b5e9c6c6996996b0677e5f0fad057f44e2fff2d4624897202fa8e7729d"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x1004}}]}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000940)={0xc, &(0x7f0000000800)={0x0, 0x22, 0xe1, {0xe1, 0xf, "ef60d21398d4edf387e07da07cc47e398e42aad07ef0b8ec396c269a9e40ded3fd867f56cd6af68236f44a77d538ae86b99133f96ccebbf3c1d12e4808038a12a6d57ec3478d70738f36b02b54320c54e47aef1c2f58aa7a00a678ccc99d2220561d2695c2be10977b01585c2ddf656f05e4579042c6cac979c0fac3cae7cdfbac117a7a63dcf33597c8f5cdbdd2ff87c22a1da86d704ecaa490608eb89709158c1002ba3e896f04c4a2178817143a0f5129d61afaacd9db239048df6e1bb292a91cbeada2e59b95682fd32d372907a998a6c6cf2d853249e85a5db76f4b52"}}, &(0x7f0000000900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000ac0)={0x10, &(0x7f0000000980)={0x20, 0x0, 0x8d, "e64214daff65aa9dac8168a1753921d5cbd540572212c722bfeb0f95611f6b26079c318ae90db92e45e4a623069a10a4e5bc57961d8ff0fd44dc255f39fe885a2e5a0cee425ce786ed94b05e38ab946087ad40f87fa0da1f9000529a44618ef334087311bdc907f89b42770fdac3ebe5857c1e4d54c1f72764f1796aa2cc4dcbd5b67532384b736be6a85f88dc"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x1}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffff42, &(0x7f0000000000)=ANY=[]) 4.877815716s ago: executing program 0 (id=109): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x12, r0, 0x200, &(0x7f0000000080)={0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x9000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r3}) syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009a65d0860040800dec30102030109021b050000000000090400000178eaf50009058402"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x2, &(0x7f0000000000)=@string={0x2}}, {0x4, &(0x7f0000000180)=@string={0x4, 0x3, "46f9"}}, {0x0, 0x0}, {0x0, 0x0}]}) 4.801223197s ago: executing program 3 (id=110): r0 = syz_usb_connect$uac2(0x3, 0x87, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x582, 0x120, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x6, 0x10, 0x2, {0x8, 0xb, 0x1, 0x0, 0x1, 0xc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xff80, 0x7, 0x15, 0x4}, [@output_terminal={0xc, 0x24, 0x3, 0x2, 0x304, 0x5, 0x4, 0x0, 0x1ff, 0x1c}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xc, 0x2, 0x9, {0x8, 0x25, 0x1, 0x80, 0x30, 0xad, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0xfa, 0xbc, {0x8, 0x25, 0x1, 0x2, 0xfa4024f26d164786, 0x81, 0x9}}}}}}}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) unshare(0x28000600) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCSACTIVE(r1, 0x40047459, 0x0) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x40000000) 3.405991085s ago: executing program 1 (id=112): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000300000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100f3ff000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.248245624s ago: executing program 1 (id=113): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) landlock_restrict_self(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x2, 0x2, @loopback, 0x7}, 0x1c) 3.092800844s ago: executing program 1 (id=114): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0xfffffffe, 0x1000001}}, 0x10) r1 = openat$vicodec1(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000001300)={0x4, 0xe, 0x1, "4db3e119594ba90b137ed53abdbaf3f81bf6812ea93e6773a272ff53d299f0f9", 0x3432564e}) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x42}}}, 0x10) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0xc5d116e9899720b9, {{0x42}}}, 0x10) socket$inet(0x2, 0x3, 0x2) r2 = syz_usb_connect(0x2, 0x58, &(0x7f0000000080)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000709800904e40503b956da020905080000040112fc09050b13200007039a0705d15b89"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\b\b'], 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2.884273068s ago: executing program 2 (id=115): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$I2C(0x0, 0xcda, 0x0) 2.796797822s ago: executing program 3 (id=116): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000780)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a0200000002b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6cc1da6ecc0c9dee6427dedbfdab90241e7b10f6de34010782fa654000000", 0xcf}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 2.753284809s ago: executing program 0 (id=117): close(0xffffffffffffffff) close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a400000000009"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 2.604469502s ago: executing program 3 (id=118): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1, 0x0, 0x2}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000100)={[&(0x7f0000000480)='=\x8d5\x10\xe4\x00\bj\xfb', &(0x7f0000000500)='\xaa\xc1d\rg\xae\x00\xab\xfb']}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x3f8, 0x0, 0x1f0, 0x0, 0x318, 0x318, 0x318, 0x4, &(0x7f0000000180), {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @multicast1, 0x1}}}, {{@uncond, 0xbc, 0xe4}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x5, 0x1}}}, {{@uncond, 0xbc, 0x128}, @unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0xc, 0x79, 0x9, 0x0, 0x0, "72a35cf68ac9f50f47acd117e6668eeb7210b56f18638af1541f592900b4f39b6298926fc5ed319c1745029bba378ef4a6e0db4f582376029145678cf5214738"}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x444) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7, 0x0, 0x0, 0x0, 0xeec}, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') preadv(r6, &(0x7f00000001c0), 0x0, 0x6, 0x0) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) write$proc_mixer(r7, &(0x7f0000000340)=ANY=[], 0x8c) close(r7) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x30, r9, 0x1, 0x70bd29, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0) read$FUSE(r8, &(0x7f00000061c0)={0x2020}, 0x115f) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendfile(r5, r4, &(0x7f0000000080)=0xb, 0x8) 2.346701883s ago: executing program 0 (id=119): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.203681694s ago: executing program 2 (id=120): ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[0x0], &(0x7f0000000200), &(0x7f0000000580), &(0x7f0000000040)}) r0 = socket$kcm(0x2, 0x3, 0x2) r1 = syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x40100) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000005c0)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1cd512406c7f000081004e7c8a4743198797b8000000001100008100", [0x4, 0xa]}}) r3 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001280)={r1, 0x0, {0x2a12, 0x80010000, 0x0, 0xa, 0x5, 0x0, 0x0, 0xe, 0x11, "fee8a2ab78fc179fd1f809000006aca7ca64c6a4b4e00d9683dda1af01000000deff12001000000000000000000000000008000000000100", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe0, 0x1]}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xfdef) 1.99858568s ago: executing program 3 (id=121): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000300000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100f3ff000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.741899715s ago: executing program 0 (id=122): recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006fc0)=[{{0x0, 0x0, &(0x7f0000004740)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1}}], 0x1, 0x40, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1.639060676s ago: executing program 3 (id=123): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee200090582"], 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x238, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_HEAD={0x224, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0xe}, @device_b, @device_b, @initial, {0xf, 0x1}, @value=@ver_80211n={0x0, 0x72d7, 0x1, 0x0, 0x0, 0x1, 0x1}}, 0x8, @default, 0x201, @void, @void, @void, @val={0x4, 0x6, {0x9a, 0x10, 0xfffe, 0x1}}, @void, @val={0x5, 0x9, {0x0, 0xd, 0x40, "7eb81976a5fb"}}, @val={0x25, 0x3, {0x0, 0xb5, 0x2}}, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x405e, 0x0, 0x1, 0x0, {0x4bb55442, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x300, 0x81, 0xfc}}, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9}}, @void, [{0xdd, 0x88, "e3e1f4a028c310d037dab437406ca181c672fbf63d10c59b20ea29219ea7246df150bdc97028a1392c2d08d1870bb8e0acd87e2180939777dd079d87eb6d6d12a1863047b1257f7a7cdb59dbdfabebd3c0be71cc9941be89bd26b45dc87dbc380a78add94db97110c4b9bf6424e087e854207717f244f7fe6b7e93521c48d01b31d14a4bc31a4acd"}, {0xdd, 0xe, "06ca28e142fd029352add0e34fb6"}, {0xdd, 0x13, "337f22caedc2940951ce70d4ab26501ce9fabb"}, {0xdd, 0x62, "9d57fd9bb73e8a606c9254c571f178e7111a5e1a80264f9c61048590554f5c1ce0b377f6f98078fa32d8b013cd2b761b23dbc4539148d3fa43ac55fbccd8ee548d3f620a8e834645f1655f5b08fb195058bbbb4d5e75ee1c4424a1e3ecb0ecfe7973"}, {0xdd, 0xa3, "eab4136599456f96cd5e7827130a29cfaf4e18c182502170991e49f0d01e0dae973ceecc3a2b75adda4fcfc1ff86c9df3de9e17f95f723eaeca7ce64aa4e767e16d4f62250ab9f1a004456e26c3a3bfd654bf3dba48c8fd4783b129aff0ade7b51c800a0084591023de717123ccad54f301ad436052cdb2ddb9a847fc1a87f091899d1d7246a45be60fb1779394e734a1bd66603442f736c502f5514b3001c34489c19"}]}}]}, 0x238}, 0x1, 0x0, 0x0, 0x4085}, 0x41050) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x5, 0x80, 0xf9}}, [{{0x9, 0x5, 0x82, 0x2, 0x3bf, 0x3, 0xff, 0xe3}}]}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x6, 0x7f, 0x21, 0xa7, 0x2}, 0x33, &(0x7f00000001c0)={0x5, 0xf, 0x33, 0x3, [@ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x6, 0x6, 0xfff, 0xf00, 0x5, [0xc000, 0x0, 0xff3f00, 0x3f00, 0x3f, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x4, 0x2}]}, 0x4, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1007}}, {0x0, 0x0}, {0xdd, &(0x7f0000000680)=@string={0xdd, 0x3, "8b102fec7b039e2e9356cc460f6abbf649fcc9562373d3531b7f5a9a5356494caf263612f8659bbc4a1b0fb8c9fa18d74253964b0bfd9cc1d8c17ed766bf5cb09f360eb74d53465d86969dc7761ba7663ecf7c16435857ea565dd500d91d4f777248fb1d2f505b9664e78964dc3940e8c4f5f9a164c28914b4819467dbb02d4d2b249713242e07fe5a073356db022322797da112d53a470f9a2a2602120305b2fbfeac3702b66b124e370bade4b6a921f8505ce31019ae62197dcd3aaa21b5e9c6c6996996b0677e5f0fad057f44e2fff2d4624897202fa8e7729d"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x1004}}]}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000940)={0xc, &(0x7f0000000800)={0x0, 0x22, 0xe1, {0xe1, 0xf, "ef60d21398d4edf387e07da07cc47e398e42aad07ef0b8ec396c269a9e40ded3fd867f56cd6af68236f44a77d538ae86b99133f96ccebbf3c1d12e4808038a12a6d57ec3478d70738f36b02b54320c54e47aef1c2f58aa7a00a678ccc99d2220561d2695c2be10977b01585c2ddf656f05e4579042c6cac979c0fac3cae7cdfbac117a7a63dcf33597c8f5cdbdd2ff87c22a1da86d704ecaa490608eb89709158c1002ba3e896f04c4a2178817143a0f5129d61afaacd9db239048df6e1bb292a91cbeada2e59b95682fd32d372907a998a6c6cf2d853249e85a5db76f4b52"}}, &(0x7f0000000900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000ac0)={0x10, &(0x7f0000000980)={0x20, 0x0, 0x8d, "e64214daff65aa9dac8168a1753921d5cbd540572212c722bfeb0f95611f6b26079c318ae90db92e45e4a623069a10a4e5bc57961d8ff0fd44dc255f39fe885a2e5a0cee425ce786ed94b05e38ab946087ad40f87fa0da1f9000529a44618ef334087311bdc907f89b42770fdac3ebe5857c1e4d54c1f72764f1796aa2cc4dcbd5b67532384b736be6a85f88dc"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x1}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffff42, &(0x7f0000000000)=ANY=[]) 1.515321046s ago: executing program 2 (id=124): r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$netlink(0x10, 0x3, 0x8000000004) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x17) read$dsp(r0, &(0x7f0000000280)=""/125, 0x7d) 1.113791086s ago: executing program 0 (id=125): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x12, r0, 0x200, &(0x7f0000000080)={0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009a65d0860040800dec30102030109021b050000000000090400000178eaf50009058402"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x2, &(0x7f0000000000)=@string={0x2}}, {0x4, &(0x7f0000000180)=@string={0x4, 0x3, "46f9"}}, {0x0, 0x0}, {0x0, 0x0}]}) 842.707039ms ago: executing program 1 (id=126): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000780)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a0200000002b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6cc1da6ecc0c9dee6427dedbfdab90241e7b10f6de34010782fa654000000", 0xcf}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 718.455192ms ago: executing program 1 (id=127): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000600)={0x2, 0x0, [{0x400000b0, 0x0, 0x81ef}, {0x400000b1, 0x0, 0x7f}]}) r3 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r3, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000005c0)={0x1, 0x0, [{0x40000084, 0x0, 0x39}]}) 347.946197ms ago: executing program 2 (id=128): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e36, 0x0, @remote, 0x5}, 0x1c) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x97ff) 0s ago: executing program 1 (id=129): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1, 0x0, 0x2}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000100)={[&(0x7f0000000480)='=\x8d5\x10\xe4\x00\bj\xfb', &(0x7f0000000500)='\xaa\xc1d\rg\xae\x00\xab\xfb']}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="01350104ff00"}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7, 0x0, 0x0, 0x0, 0xeec}, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') preadv(r6, &(0x7f00000001c0), 0x0, 0x6, 0x0) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) write$proc_mixer(r7, &(0x7f0000000340)=ANY=[], 0x8c) close(r7) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x30, r9, 0x1, 0x70bd29, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0) read$FUSE(r8, &(0x7f00000061c0)={0x2020}, 0x115f) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendfile(r5, r4, &(0x7f0000000080)=0xb, 0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.56' (ED25519) to the list of known hosts. [ 92.032472][ T823] cfg80211: failed to load regulatory.db [ 92.808727][ T5599] cgroup: Unknown subsys name 'net' [ 93.047531][ T5599] cgroup: Unknown subsys name 'cpuset' [ 93.102435][ T5599] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 95.172325][ T5599] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.691391][ T5616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.714390][ T5616] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.717886][ T5616] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.725401][ T5616] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.730377][ T5616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.824680][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.846851][ T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.848009][ T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.851402][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.856947][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.990061][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.008948][ T4928] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.032531][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.038896][ T5625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.039535][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.061046][ T4928] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.093679][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.094014][ T4928] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.095410][ T4928] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.096325][ T4928] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.835499][ T5616] Bluetooth: hci0: command tx timeout [ 99.981860][ T5616] Bluetooth: hci1: command tx timeout [ 100.154412][ T5616] Bluetooth: hci2: command tx timeout [ 100.221996][ T5616] Bluetooth: hci3: command tx timeout [ 100.294268][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.295699][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.295954][ T5618] bridge_slave_0: entered allmulticast mode [ 100.298649][ T5618] bridge_slave_0: entered promiscuous mode [ 100.372194][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.372493][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.372776][ T5618] bridge_slave_1: entered allmulticast mode [ 100.375491][ T5618] bridge_slave_1: entered promiscuous mode [ 100.417478][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.417787][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.417994][ T5615] bridge_slave_0: entered allmulticast mode [ 100.420503][ T5615] bridge_slave_0: entered promiscuous mode [ 100.498784][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.499112][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.499398][ T5615] bridge_slave_1: entered allmulticast mode [ 100.502938][ T5615] bridge_slave_1: entered promiscuous mode [ 100.555293][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.555654][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.556985][ T5621] bridge_slave_0: entered allmulticast mode [ 100.560246][ T5621] bridge_slave_0: entered promiscuous mode [ 100.623698][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.624212][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.624537][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.624839][ T5621] bridge_slave_1: entered allmulticast mode [ 100.627456][ T5621] bridge_slave_1: entered promiscuous mode [ 100.727936][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.758358][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.758848][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.759238][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.759532][ T5620] bridge_slave_0: entered allmulticast mode [ 100.767940][ T5620] bridge_slave_0: entered promiscuous mode [ 100.848131][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.848570][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.848821][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.849022][ T5620] bridge_slave_1: entered allmulticast mode [ 100.851589][ T5620] bridge_slave_1: entered promiscuous mode [ 100.920378][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.970976][ T5618] team0: Port device team_slave_0 added [ 100.981036][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.040560][ T5618] team0: Port device team_slave_1 added [ 101.079559][ T5615] team0: Port device team_slave_0 added [ 101.091097][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.141242][ T5615] team0: Port device team_slave_1 added [ 101.150232][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.180694][ T5621] team0: Port device team_slave_0 added [ 101.225469][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.225491][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.225513][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.230589][ T5621] team0: Port device team_slave_1 added [ 101.306062][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.306076][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.306096][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.370980][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.370993][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.371014][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.396391][ T5620] team0: Port device team_slave_0 added [ 101.453348][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.453363][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.453383][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.457099][ T5620] team0: Port device team_slave_1 added [ 101.461130][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.461142][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.461162][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.574987][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.575001][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.575022][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.664523][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.664536][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.664557][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.741369][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.741384][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.741405][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.799803][ T5618] hsr_slave_0: entered promiscuous mode [ 101.807160][ T5618] hsr_slave_1: entered promiscuous mode [ 101.903113][ T5616] Bluetooth: hci0: command tx timeout [ 102.061996][ T5616] Bluetooth: hci1: command tx timeout [ 102.173119][ T5615] hsr_slave_0: entered promiscuous mode [ 102.175365][ T5615] hsr_slave_1: entered promiscuous mode [ 102.177334][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 102.177446][ T5615] Cannot create hsr debugfs directory [ 102.221945][ T5616] Bluetooth: hci2: command tx timeout [ 102.249780][ T5621] hsr_slave_0: entered promiscuous mode [ 102.251372][ T5621] hsr_slave_1: entered promiscuous mode [ 102.258167][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 102.258240][ T5621] Cannot create hsr debugfs directory [ 102.301908][ T5616] Bluetooth: hci3: command tx timeout [ 102.385644][ T5620] hsr_slave_0: entered promiscuous mode [ 102.387268][ T5620] hsr_slave_1: entered promiscuous mode [ 102.388550][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 102.388586][ T5620] Cannot create hsr debugfs directory [ 103.265130][ T5618] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.307079][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.324112][ T5618] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.357913][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.359966][ T5618] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.386867][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.420571][ T5618] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.450489][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.578599][ T5615] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.612984][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.618620][ T5615] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.647833][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.652580][ T5615] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.697815][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.735203][ T5615] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.780075][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.955399][ T5621] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.982026][ T5616] Bluetooth: hci0: command tx timeout [ 103.997481][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.018168][ T5621] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.048266][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.068091][ T5621] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.109421][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.142510][ T5616] Bluetooth: hci1: command tx timeout [ 104.163580][ T5621] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.198262][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.302002][ T5616] Bluetooth: hci2: command tx timeout [ 104.368089][ T5620] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.383195][ T5616] Bluetooth: hci3: command tx timeout [ 104.403128][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.420161][ T5620] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.456346][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.471625][ T5620] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.509662][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.523670][ T5620] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.556976][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.659189][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.795340][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.841506][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.875746][ T120] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.875944][ T120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.995718][ T120] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.995857][ T120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.087459][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.155625][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.156279][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.207238][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.233421][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.233586][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.376897][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.396915][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.463739][ T120] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.464232][ T120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.575868][ T120] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.576105][ T120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.650298][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.714664][ T3342] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.714852][ T3342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.798993][ T3399] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.799110][ T3399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.061999][ T5616] Bluetooth: hci0: command tx timeout [ 106.222352][ T5616] Bluetooth: hci1: command tx timeout [ 106.382129][ T5616] Bluetooth: hci2: command tx timeout [ 106.461967][ T5616] Bluetooth: hci3: command tx timeout [ 106.629746][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.129858][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.190311][ T5618] veth0_vlan: entered promiscuous mode [ 107.288426][ T5618] veth1_vlan: entered promiscuous mode [ 107.550154][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.578728][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.620713][ T5618] veth0_macvtap: entered promiscuous mode [ 107.644613][ T5615] veth0_vlan: entered promiscuous mode [ 107.670237][ T5618] veth1_macvtap: entered promiscuous mode [ 107.717254][ T5615] veth1_vlan: entered promiscuous mode [ 107.803013][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.848533][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.928297][ T3342] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.946252][ T5621] veth0_vlan: entered promiscuous mode [ 107.957871][ T3342] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.970141][ T5620] veth0_vlan: entered promiscuous mode [ 107.993069][ T3342] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.030029][ T3342] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.115084][ T5615] veth0_macvtap: entered promiscuous mode [ 108.133331][ T5621] veth1_vlan: entered promiscuous mode [ 108.155317][ T5620] veth1_vlan: entered promiscuous mode [ 108.220578][ T5615] veth1_macvtap: entered promiscuous mode [ 108.527053][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.610522][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.667550][ T5621] veth0_macvtap: entered promiscuous mode [ 108.681218][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.681241][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.735200][ T3342] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.738677][ T3342] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.771566][ T3342] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.786544][ T5621] veth1_macvtap: entered promiscuous mode [ 108.799984][ T3342] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.801145][ T5620] veth0_macvtap: entered promiscuous mode [ 108.894037][ T5620] veth1_macvtap: entered promiscuous mode [ 108.965585][ T1326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.965607][ T1326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.131404][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.399394][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.420228][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.523141][ T44] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.528328][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.530529][ T44] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.572861][ T44] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.579445][ T3399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.579467][ T3399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.625397][ T44] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.678381][ T3399] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.701857][ T3399] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.781408][ T3399] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.928280][ T3399] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.192415][ T3342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.192437][ T3342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.954930][ T5765] binder: 5762:5765 ioctl c0045005 2000000002c0 returned -22 [ 110.990786][ T5765] binder: 5762:5765 ioctl c0306201 0 returned -14 [ 111.160262][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.160283][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.451287][ T5769] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 111.590932][ T1045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.590955][ T1045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.775572][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.775588][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.070629][ T1045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.070650][ T1045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.599895][ T5345] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 113.688106][ T5765] syz.3.6 (5765): drop_caches: 2 [ 113.781939][ T37] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 114.009675][ T5345] usb 1-1: config 0 has no interfaces? [ 114.009731][ T5345] usb 1-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 114.009757][ T5345] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.073386][ T37] usb 3-1: unable to get BOS descriptor or descriptor too short [ 114.096204][ T37] usb 3-1: not running at top speed; connect to a high speed hub [ 114.100265][ T37] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 114.100295][ T37] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 114.100316][ T37] usb 3-1: config 14 has an invalid descriptor of length 1, skipping remainder of the config [ 114.100336][ T37] usb 3-1: config 14 has no interface number 0 [ 114.100352][ T37] usb 3-1: config 14 has no interface number 1 [ 114.100421][ T37] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 114.100446][ T37] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 114.100465][ T37] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 114.100484][ T37] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 114.100503][ T37] usb 3-1: config 14 interface 57 has no altsetting 0 [ 114.100517][ T37] usb 3-1: config 14 interface 228 has no altsetting 0 [ 114.253794][ T37] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 114.255366][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.255391][ T37] usb 3-1: Product: syz [ 114.255407][ T37] usb 3-1: Manufacturer: syz [ 114.255428][ T37] usb 3-1: SerialNumber: syz [ 114.617198][ T5345] usb 1-1: config 0 descriptor?? [ 115.324334][ T37] legousbtower 3-1:14.57: interrupt endpoints not found [ 115.640998][ T37] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 115.744325][ T37] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 116.485687][ C0] usb 3-1: tower_interrupt_in_callback: usb_submit_urb failed (-1) [ 116.815579][ T5756] usb 1-1: USB disconnect, device number 2 [ 116.819175][ T5713] usb 3-1: USB disconnect, device number 2 [ 117.241579][ T5713] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 117.348862][ T5802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14'. [ 117.348904][ T5802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14'. [ 117.726573][ T5693] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 117.898238][ T5693] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 117.898277][ T5693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.898292][ T5693] usb 4-1: Product: syz [ 117.898302][ T5693] usb 4-1: Manufacturer: syz [ 117.898312][ T5693] usb 4-1: SerialNumber: syz [ 117.943243][ T5713] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 117.948975][ T5693] usb 4-1: config 0 descriptor?? [ 118.104584][ T5713] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.104610][ T5713] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 118.104657][ T5713] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 118.104679][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.216702][ T5693] usb 4-1: ignoring: probably an ADSL modem [ 118.235568][ T5713] usb 3-1: config 0 descriptor?? [ 118.354346][ T5713] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 118.365128][ T5713] dvb-usb: bulk message failed: -22 (3/0) [ 118.526331][ T5825] dvb-usb: bulk message failed: -22 (2/0) [ 118.629210][ T5693] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 118.648324][ T5713] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 118.649612][ T5713] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 118.649702][ T5713] usb 3-1: media controller created [ 118.670964][ T5713] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 118.749069][ T5713] dvb-usb: bulk message failed: -22 (6/0) [ 118.749224][ T5713] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 118.799830][ T5713] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 118.853231][ T9] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 118.912727][ T5756] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 118.917529][ T5713] dvb-usb: schedule remote query interval to 150 msecs. [ 118.917550][ T5713] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 119.018636][ T9] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 119.018667][ T9] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 119.018766][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 119.018821][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 119.018844][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 119.019418][ T9] usb 1-1: language id specifier not provided by device, defaulting to English [ 119.112098][ T9] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 119.112143][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.112165][ T9] usb 1-1: Manufacturer: 牢 [ 119.114780][ T5756] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 119.114812][ T5756] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.114834][ T5756] usb 2-1: Product: syz [ 119.114850][ T5756] usb 2-1: Manufacturer: syz [ 119.114866][ T5756] usb 2-1: SerialNumber: syz [ 119.124721][ T5345] dvb-usb: bulk message failed: -22 (1/0) [ 119.162042][ T5345] dvb-usb: error while querying for an remote control event. [ 119.216553][ T5756] usb 2-1: config 0 descriptor?? [ 119.242061][ T5756] ch341 2-1:0.0: ch341-uart converter detected [ 119.269745][ T9] usb 1-1: config 0 descriptor?? [ 119.281312][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 119.281346][ T9] hub 1-1:0.0: probe with driver hub failed with error -5 [ 119.324200][ T5345] dvb-usb: bulk message failed: -22 (1/0) [ 119.324249][ T5345] dvb-usb: error while querying for an remote control event. [ 119.326379][ T5345] usb 4-1: USB disconnect, device number 2 [ 119.333949][ T9] input: 牢 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6 [ 119.494213][ T5713] dvb-usb: bulk message failed: -22 (1/0) [ 119.494248][ T5713] dvb-usb: error while querying for an remote control event. [ 119.617259][ T9] usb 1-1: USB disconnect, device number 3 [ 119.655997][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 119.656047][ T10] dvb-usb: error while querying for an remote control event. [ 119.815254][ T5345] dvb-usb: bulk message failed: -22 (1/0) [ 119.815291][ T5345] dvb-usb: error while querying for an remote control event. [ 119.972031][ T5345] dvb-usb: bulk message failed: -22 (1/0) [ 119.972103][ T5345] dvb-usb: error while querying for an remote control event. [ 120.149428][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 120.149466][ T9] dvb-usb: error while querying for an remote control event. [ 120.260439][ T5756] usb 2-1: failed to send control message: -71 [ 120.260503][ T5756] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 120.312946][ T5756] usb 2-1: USB disconnect, device number 2 [ 120.319855][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 120.319888][ T9] dvb-usb: error while querying for an remote control event. [ 120.346457][ T5756] ch341 2-1:0.0: device disconnected [ 120.420490][ T5831] process 'syz.3.24' launched './file0' with NULL argv: empty string added [ 120.476804][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 120.476837][ T9] dvb-usb: error while querying for an remote control event. [ 120.546437][ T5835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26'. [ 120.546463][ T5835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26'. [ 120.631854][ T5345] dvb-usb: bulk message failed: -22 (1/0) [ 120.631887][ T5345] dvb-usb: error while querying for an remote control event. [ 120.710368][ T5345] usb 3-1: USB disconnect, device number 3 [ 121.151148][ T5345] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 122.460655][ T5863] ÿ: renamed from dummy0 (while UP) [ 122.493454][ T5866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37'. [ 122.599692][ T5864] ALSA: mixer_oss: invalid OSS volume '' [ 123.789217][ T5897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.50'. [ 123.872265][ T5345] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 124.011868][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 124.039395][ T5345] usb 2-1: Using ep0 maxpacket: 32 [ 124.054848][ T5345] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 124.054878][ T5345] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 124.054900][ T5345] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.054920][ T5345] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 124.054943][ T5345] usb 2-1: config 1 has no interface number 0 [ 124.055001][ T5345] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 124.055056][ T5345] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 124.055081][ T5345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.209879][ T9] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 124.209911][ T9] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 124.209933][ T9] usb 1-1: Product: syz [ 124.209957][ T9] usb 1-1: SerialNumber: syz [ 124.245360][ T5345] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 124.284631][ T5907] ÿ: renamed from dummy0 (while UP) [ 124.383927][ T5891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.384568][ T5891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.418605][ T5345] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 124.419171][ T5345] snd_usb_pod 2-1:1.1: invalid control EP [ 124.419184][ T5345] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 124.421181][ T9] usb 1-1: config 0 descriptor?? [ 124.425023][ T5345] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 124.469185][ T5345] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 124.485303][ T5907] ALSA: mixer_oss: invalid OSS volume '' [ 124.700113][ T9] hso 1-1:0.0: Failed to find BULK eps [ 124.719111][ T5693] usb 2-1: USB disconnect, device number 3 [ 124.909672][ T32] usb 1-1: USB disconnect, device number 4 [ 125.176492][ T5917] warning: `syz.3.58' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 125.437685][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.61'. [ 126.039422][ T5937] ÿ: renamed from dummy0 (while UP) [ 126.057296][ T5940] ALSA: mixer_oss: invalid OSS volume '' [ 126.746021][ T9] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 126.850674][ T5963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.73'. [ 126.850696][ T5963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.73'. [ 126.944360][ T9] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 126.944402][ T9] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 126.944424][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 126.944477][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 126.944500][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 126.945255][ T9] usb 3-1: language id specifier not provided by device, defaulting to English [ 127.101401][ T9] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 127.101435][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.101456][ T9] usb 3-1: Manufacturer: 牢 [ 127.203611][ T9] usb 3-1: config 0 descriptor?? [ 127.245169][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 127.245219][ T9] hub 3-1:0.0: probe with driver hub failed with error -5 [ 127.433311][ T9] input: 牢 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input7 [ 127.704306][ T9] usb 3-1: USB disconnect, device number 4 [ 127.859028][ T5979] netlink: 'syz.0.80': attribute type 4 has an invalid length. [ 128.278606][ T5983] ALSA: mixer_oss: invalid OSS volume '' [ 128.402116][ T5693] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 128.458461][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.84'. [ 128.574093][ T5693] usb 2-1: Using ep0 maxpacket: 32 [ 128.586634][ T5693] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.586707][ T5693] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.586738][ T5693] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.586761][ T5693] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 128.586789][ T5693] usb 2-1: config 0 interface 0 has no altsetting 0 [ 128.586825][ T5693] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 128.586851][ T5693] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.678900][ T5693] usb 2-1: config 0 descriptor?? [ 128.831896][ T32] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 128.876853][ T6001] syz.3.86 uses obsolete (PF_INET,SOCK_PACKET) [ 129.010966][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 129.011082][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.011130][ T32] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 129.011148][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.081078][ T32] usb 3-1: config 0 descriptor?? [ 129.228704][ T5693] hid-thrustmaster 0003:044F:B65D.0001: report_id 34691 is invalid [ 129.228735][ T5693] hid-thrustmaster 0003:044F:B65D.0001: item 0 2 1 8 parsing failed [ 129.248186][ T5693] hid-thrustmaster 0003:044F:B65D.0001: parse failed with error -22 [ 129.248322][ T5693] hid-thrustmaster 0003:044F:B65D.0001: probe with driver hid-thrustmaster failed with error -22 [ 129.347425][ T5713] usb 2-1: USB disconnect, device number 4 [ 129.573609][ T32] aquacomputer_d5next 0003:0C70:F0B6.0002: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.2-1/input0 [ 129.780269][ T9] usb 3-1: USB disconnect, device number 5 [ 130.033708][ T32] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 130.185631][ T32] usb 4-1: unable to get BOS descriptor or descriptor too short [ 130.188912][ T32] usb 4-1: not running at top speed; connect to a high speed hub [ 130.191323][ T32] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 130.191353][ T32] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 130.191376][ T32] usb 4-1: config 14 has an invalid descriptor of length 1, skipping remainder of the config [ 130.191398][ T32] usb 4-1: config 14 has no interface number 0 [ 130.191416][ T32] usb 4-1: config 14 has no interface number 1 [ 130.191489][ T32] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 130.191523][ T32] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 130.191552][ T32] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 130.191580][ T32] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 130.191609][ T32] usb 4-1: config 14 interface 57 has no altsetting 0 [ 130.191629][ T32] usb 4-1: config 14 interface 228 has no altsetting 0 [ 130.346107][ T32] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 130.346142][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.346164][ T32] usb 4-1: Product: syz [ 130.346180][ T32] usb 4-1: Manufacturer: syz [ 130.346196][ T32] usb 4-1: SerialNumber: syz [ 130.525863][ T6019] ALSA: mixer_oss: invalid OSS volume '' [ 130.656125][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.95'. [ 130.872648][ T32] legousbtower 4-1:14.57: interrupt endpoints not found [ 130.902417][ T5693] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 131.054956][ T5693] usb 3-1: Using ep0 maxpacket: 32 [ 131.071020][ T5693] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 131.071051][ T5693] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 131.071073][ T5693] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.071093][ T5693] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 131.071116][ T5693] usb 3-1: config 1 has no interface number 0 [ 131.071175][ T5693] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 131.071221][ T5693] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 131.071246][ T5693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.242595][ T32] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 131.251187][ T5693] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 131.332808][ T32] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 131.428487][ T6024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.429209][ T6024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.430363][ T5693] snd_usb_pod 3-1:1.1: endpoint not available, using fallback values [ 131.430788][ T5693] snd_usb_pod 3-1:1.1: invalid control EP [ 131.430805][ T5693] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 131.431105][ T5693] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 131.479901][ T5693] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 131.597183][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 131.633895][ T5693] usb 3-1: USB disconnect, device number 6 [ 131.781402][ T9] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 131.781432][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.781529][ T9] usb 2-1: Product: syz [ 131.781547][ T9] usb 2-1: Manufacturer: syz [ 131.781563][ T9] usb 2-1: SerialNumber: syz [ 132.148260][ T9] rtl8150 2-1:1.0: couldn't reset the device [ 132.148859][ T9] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 132.277701][ T9] usb 2-1: USB disconnect, device number 5 [ 132.465372][ T6034] ======================================================= [ 132.465372][ T6034] WARNING: The mand mount option has been deprecated and [ 132.465372][ T6034] and is ignored by this kernel. Remove the mand [ 132.465372][ T6034] option from the mount to silence this warning. [ 132.465372][ T6034] ======================================================= [ 132.543501][ T6013] usb 4-1: LEGO USB Tower reset control request failed [ 132.563179][ T5693] usb 4-1: USB disconnect, device number 3 [ 132.620395][ T5693] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 132.947306][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.947443][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.011892][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 133.137604][ T6045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.105'. [ 133.167445][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 133.167482][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.167504][ T9] usb 2-1: Product: syz [ 133.167520][ T9] usb 2-1: Manufacturer: syz [ 133.167536][ T9] usb 2-1: SerialNumber: syz [ 133.261910][ T5616] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 133.380323][ T6047] ALSA: mixer_oss: invalid OSS volume '' [ 133.671130][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 133.671202][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 133.879683][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 133.879763][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 134.004448][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 134.044158][ T9] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 134.078587][ T9] usb 2-1: USB disconnect, device number 6 [ 134.161936][ T5713] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 134.211945][ T37] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 134.281924][ T5693] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 134.321954][ T5713] usb 3-1: Using ep0 maxpacket: 32 [ 134.323988][ T5713] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 134.324017][ T5713] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 134.324042][ T5713] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 134.324065][ T5713] usb 3-1: config 1 has no interface number 0 [ 134.324098][ T5713] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 134.324115][ T5713] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 134.324145][ T5713] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 134.324161][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.389966][ T5713] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 134.441959][ T37] usb 4-1: Using ep0 maxpacket: 32 [ 134.484629][ T37] usb 4-1: New USB device found, idVendor=0582, idProduct=0120, bcdDevice= 0.40 [ 134.484664][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.484686][ T37] usb 4-1: Product: syz [ 134.484702][ T37] usb 4-1: Manufacturer: syz [ 134.484717][ T37] usb 4-1: SerialNumber: syz [ 134.528836][ T5693] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 134.528868][ T5693] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 134.528891][ T5693] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 134.528945][ T5693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 134.528971][ T5693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 134.554846][ T5693] usb 1-1: language id specifier not provided by device, defaulting to English [ 134.642747][ T5693] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 134.642775][ T5693] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.642867][ T5693] usb 1-1: Manufacturer: 牢 [ 134.679716][ T5693] usb 1-1: config 0 descriptor?? [ 134.723076][ T5693] hub 1-1:0.0: bad descriptor, ignoring hub [ 134.723114][ T5693] hub 1-1:0.0: probe with driver hub failed with error -5 [ 134.759470][ T6055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.760431][ T5693] input: 牢 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input8 [ 134.795732][ T6055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.819924][ T5713] snd_usb_pod 3-1:1.1: invalid control EP [ 134.819947][ T5713] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 134.868224][ T5713] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 134.868806][ T5713] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 134.953413][ T37] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 134.961075][ T37] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 134.990649][ T5693] usb 1-1: USB disconnect, device number 5 [ 135.074450][ T9] usb 3-1: USB disconnect, device number 7 [ 135.620793][ T37] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 135.730491][ T37] usb 4-1: USB disconnect, device number 4 [ 135.731544][ T5808] udevd[5808]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 135.843883][ T5345] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 136.000422][ T5345] usb 2-1: unable to get BOS descriptor or descriptor too short [ 136.008179][ T5345] usb 2-1: not running at top speed; connect to a high speed hub [ 136.037610][ T5345] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 136.037641][ T5345] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 136.037664][ T5345] usb 2-1: config 14 has an invalid descriptor of length 1, skipping remainder of the config [ 136.037679][ T5345] usb 2-1: config 14 has no interface number 0 [ 136.037690][ T5345] usb 2-1: config 14 has no interface number 1 [ 136.038593][ T5345] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 136.038612][ T5345] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 136.038632][ T5345] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 136.038651][ T5345] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 136.038671][ T5345] usb 2-1: config 14 interface 57 has no altsetting 0 [ 136.038684][ T5345] usb 2-1: config 14 interface 228 has no altsetting 0 [ 136.093765][ T5345] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 136.093856][ T5345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.093921][ T5345] usb 2-1: Product: syz [ 136.093964][ T5345] usb 2-1: Manufacturer: syz [ 136.094005][ T5345] usb 2-1: SerialNumber: syz [ 136.453711][ T6079] ALSA: mixer_oss: invalid OSS volume '' [ 136.566550][ T5345] legousbtower 2-1:14.57: interrupt endpoints not found [ 136.975745][ T5345] legousbtower 2-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 137.058697][ T5345] legousbtower 2-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 137.207479][ T5693] usb 2-1: USB disconnect, device number 7 [ 137.380292][ T5693] legousbtower 2-1:14.228: LEGO USB Tower #-160 now disconnected [ 137.442916][ T37] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 137.591969][ T37] usb 4-1: Using ep0 maxpacket: 32 [ 137.602643][ T37] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 137.602674][ T37] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 137.602696][ T37] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 137.602719][ T37] usb 4-1: config 1 has no interface number 0 [ 137.602765][ T37] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 137.602790][ T37] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 137.602838][ T37] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 137.602863][ T37] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.701089][ T37] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 137.833549][ T5754] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 137.912112][ T6091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.912838][ T6091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.939158][ T37] snd_usb_pod 4-1:1.1: invalid control EP [ 137.939178][ T37] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 137.939426][ T37] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 137.963125][ T37] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 137.987050][ T5754] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 137.987083][ T5754] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 137.987104][ T5754] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 137.987157][ T5754] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 137.987181][ T5754] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 137.987794][ T5754] usb 1-1: language id specifier not provided by device, defaulting to English [ 138.070078][ T5754] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 138.070113][ T5754] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.070135][ T5754] usb 1-1: Manufacturer: 牢 [ 138.099846][ T5754] usb 1-1: config 0 descriptor?? [ 138.138090][ T5754] hub 1-1:0.0: bad descriptor, ignoring hub [ 138.138128][ T5754] hub 1-1:0.0: probe with driver hub failed with error -5 [ 138.215694][ T5345] usb 4-1: USB disconnect, device number 5 [ 138.257752][ T5754] input: 牢 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input9 [ 138.348601][ T5754] usb 1-1: USB disconnect, device number 6 [ 138.753338][ T6106] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 138.753359][ T6106] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 138.753384][ T6106] CPU: 1 UID: 0 PID: 6106 Comm: syz.2.128 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 138.753403][ T6106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 138.753413][ T6106] RIP: 0010:__schedule+0x4030/0x5550 [ 138.753434][ T6106] Code: 24 80 00 00 00 e8 80 97 f2 f6 48 8b 84 24 80 00 00 00 48 8b 18 4c 8d 7b 14 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 87 04 00 00 45 8b 3f 49 83 ff 08 0f 83 98 [ 138.753447][ T6106] RSP: 0018:ffffc9000554f280 EFLAGS: 00010003 [ 138.753468][ T6106] RAX: 0000000000000002 RBX: 0000000000000000 RCX: dffffc0000000000 [ 138.753478][ T6106] RDX: 0000000000000003 RSI: 0000000000000001 RDI: ffff8880b863c918 [ 138.753489][ T6106] RBP: ffffc9000554f468 R08: ffffffff8fcf38f7 R09: 1ffffffff1f9e71e [ 138.753501][ T6106] R10: dffffc0000000000 R11: ffffffff8199feb0 R12: ffff8880b873c658 [ 138.753513][ T6106] R13: ffff888125b6b000 R14: 1ffff110170e7922 R15: 0000000000000014 [ 138.753525][ T6106] FS: 00007f588e4656c0(0000) GS:ffff888125b6b000(0000) knlGS:0000000000000000 [ 138.753539][ T6106] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.753550][ T6106] CR2: 0000200000011038 CR3: 000000002b18c000 CR4: 00000000003526f0 [ 138.753564][ T6106] Call Trace: [ 138.753573][ T6106] [ 138.753589][ T6106] ? __pfx___irq_work_queue_local+0x10/0x10 [ 138.753612][ T6106] ? __pfx___schedule+0x10/0x10 [ 138.753630][ T6106] ? irq_work_queue_on+0x4c0/0x670 [ 138.753654][ T6106] preempt_schedule_irq+0x4d/0xa0 [ 138.753673][ T6106] irqentry_exit+0x14f/0x8c0 [ 138.753693][ T6106] ? trace_irq_disable+0x3b/0x140 [ 138.753715][ T6106] asm_sysvec_irq_work+0x1a/0x20 [ 138.753732][ T6106] RIP: 0010:__local_bh_enable_ip+0x1c2/0x2b0 [ 138.753758][ T6106] Code: f7 89 df e8 60 01 00 00 41 f7 c4 00 02 00 00 74 05 e8 d2 c9 45 00 9c 58 a9 00 02 00 00 75 23 41 f7 c4 00 02 00 00 74 01 fb 5b <41> 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 e9 66 fe [ 138.753771][ T6106] RSP: 0018:ffffc9000554f590 EFLAGS: 00000206 [ 138.753784][ T6106] RAX: 0000000000000006 RBX: dffffc0000000000 RCX: 0000000000000046 [ 138.753796][ T6106] RDX: 0000000000000000 RSI: ffffffff8d978313 RDI: ffffffff8bcc4d80 [ 138.753807][ T6106] RBP: 1ffff1100672a17e R08: ffffffff8fcf38f7 R09: 1ffffffff1f9e71e [ 138.753819][ T6106] R10: dffffc0000000000 R11: fffffbfff1f9e71f R12: 0000000000000286 [ 138.753850][ T6106] R13: dffffc0000000000 R14: ffff888033950bf4 R15: 0000000000000001 [ 138.753872][ T6106] udpv6_sendmsg+0x10ac/0x25c0 [ 138.753898][ T6106] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 138.753917][ T6106] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 138.753943][ T6106] ? aa_sk_perm+0x703/0x950 [ 138.753975][ T6106] ? inet_send_prepare+0x5c/0x270 [ 138.753993][ T6106] ? inet6_sendmsg+0xe4/0x120 [ 138.754021][ T6106] ? __pfx_inet6_sendmsg+0x10/0x10 [ 138.754047][ T6106] sock_sendmsg_nosec+0x90/0x180 [ 138.754076][ T6106] ____sys_sendmsg+0x55c/0x870 [ 138.754100][ T6106] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.754125][ T6106] ? import_iovec+0x73/0xa0 [ 138.754144][ T6106] ___sys_sendmsg+0x2a5/0x360 [ 138.754168][ T6106] ? __pfx____sys_sendmsg+0x10/0x10 [ 138.754189][ T6106] ? __lock_acquire+0x6b5/0x2d10 [ 138.754230][ T6106] __sys_sendmmsg+0x279/0x4d0 [ 138.754253][ T6106] ? __pfx___sys_sendmmsg+0x10/0x10 [ 138.754279][ T6106] ? reacquire_held_locks+0x104/0x190 [ 138.754316][ T6106] ? kfree+0x4d/0x6c0 [ 138.754345][ T6106] ? __pfx_kcov_ioctl+0x10/0x10 [ 138.754367][ T6106] __x64_sys_sendmmsg+0xa0/0xc0 [ 138.754389][ T6106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.754407][ T6106] do_syscall_64+0x174/0x580 [ 138.754429][ T6106] ? trace_irq_disable+0x3b/0x140 [ 138.754450][ T6106] ? clear_bhb_loop+0x40/0x90 [ 138.754470][ T6106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.754487][ T6106] RIP: 0033:0x7f589022ce59 [ 138.754509][ T6106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.754524][ T6106] RSP: 002b:00007f588e465028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 138.754541][ T6106] RAX: ffffffffffffffda RBX: 00007f58904a6090 RCX: 00007f589022ce59 [ 138.754554][ T6106] RDX: 00000000000004ff RSI: 00002000000092c0 RDI: 0000000000000003 [ 138.754565][ T6106] RBP: 00007f58902c2d6f R08: 0000000000000000 R09: 0000000000000000 [ 138.754576][ T6106] R10: 00000000000097ff R11: 0000000000000246 R12: 0000000000000000 [ 138.754586][ T6106] R13: 00007f58904a6128 R14: 00007f58904a6090 R15: 00007ffd55906708 [ 138.754606][ T6106] [ 138.754612][ T6106] Modules linked in: [ 138.754628][ T6106] ---[ end trace 0000000000000000 ]--- [ 138.754644][ T6106] RIP: 0010:__schedule+0x4030/0x5550 [ 138.754664][ T6106] Code: 24 80 00 00 00 e8 80 97 f2 f6 48 8b 84 24 80 00 00 00 48 8b 18 4c 8d 7b 14 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 87 04 00 00 45 8b 3f 49 83 ff 08 0f 83 98 [ 138.754679][ T6106] RSP: 0018:ffffc9000554f280 EFLAGS: 00010003 [ 138.754693][ T6106] RAX: 0000000000000002 RBX: 0000000000000000 RCX: dffffc0000000000 [ 138.754704][ T6106] RDX: 0000000000000003 RSI: 0000000000000001 RDI: ffff8880b863c918 [ 138.754715][ T6106] RBP: ffffc9000554f468 R08: ffffffff8fcf38f7 R09: 1ffffffff1f9e71e [ 138.754729][ T6106] R10: dffffc0000000000 R11: ffffffff8199feb0 R12: ffff8880b873c658 [ 138.754742][ T6106] R13: ffff888125b6b000 R14: 1ffff110170e7922 R15: 0000000000000014 [ 138.754754][ T6106] FS: 00007f588e4656c0(0000) GS:ffff888125b6b000(0000) knlGS:0000000000000000 [ 138.754769][ T6106] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.754781][ T6106] CR2: 0000200000011038 CR3: 000000002b18c000 CR4: 00000000003526f0 [ 138.754800][ T6106] Kernel panic - not syncing: Fatal exception [ 139.859976][ T6106] Shutting down cpus with NMI [ 139.860206][ T6106] Kernel Offset: disabled