last executing test programs: 10.565800038s ago: executing program 0 (id=202): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ftruncate(r2, 0xc17a) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x11) 9.638942779s ago: executing program 2 (id=206): socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xd, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n'], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 9.429601297s ago: executing program 2 (id=207): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 9.184697336s ago: executing program 2 (id=208): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x4, &(0x7f0000020440)=ANY=[@ANYBLOB="18000000004000000000000009000000850000000f00000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000980)=r1, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400", 0x2}], 0x1}, 0x8c0) 8.982428366s ago: executing program 2 (id=210): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000002c0)={0x0}) 7.440230127s ago: executing program 0 (id=216): syz_open_dev$video(0x0, 0xa7, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000340)={0x3, 0x3, 0x79a, 0x0, 0xe, 0x7fff}) syz_emit_ethernet(0x42, 0x0, 0x0) r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x480, 0x0, 0x0) 7.189272066s ago: executing program 0 (id=217): unshare(0x2a020480) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000100)=0xfffffffa, 0x4) 7.042907277s ago: executing program 0 (id=219): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/172, 0xac) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r3, 0x4068aea3, &(0x7f0000000080)={0xed, 0x0, 0x3}) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000240)={[{0x8a0, 0x1ff, 0x0, 0x44, 0x0, 0x2, 0x2, 0x1, 0x6, 0x5, 0x0, 0x6, 0x6}, {0x3, 0x1, 0x1, 0x2a, 0xe1, 0xf6, 0x5, 0x2, 0xb4, 0x2, 0x1, 0x2, 0x2}, {0x0, 0x4, 0x9, 0x6, 0x80, 0x9, 0x1, 0x8, 0x9, 0xff, 0x4, 0x28, 0x3ff}], 0x400}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x5c, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="041c85ca4bc16d77becd09bcdc3a90f5"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c33a05e8b3f10925"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="6ed18822287b57133f9e0b341e9927b24b6565a5bd64f4f7"}]}]}, 0x5c}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_io_uring_setup(0x4e29, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000380)=[@ioring_restriction_sqe_flags_required={0x3, 0x5}, @ioring_restriction_sqe_op={0x1, 0x6f9a1da9fb2c77a8}], 0x2) set_mempolicy(0x4000, &(0x7f0000000000)=0x2, 0x9) openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) 6.447196048s ago: executing program 4 (id=221): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) open_tree(0xffffffffffffffff, &(0x7f00000000c0)='\x00', 0x89901) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000340)=@gcm_256={{0x304}, "00cd83f39500", "7979c06f94e1f3ed1945a2b2c7ff1bd557b28d5a73226a963826af565862c109", '\vv?\f', "dbdf3ad7d6801cf6"}, 0x38) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x11a, 0x4, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x202}], 0x18}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, 0x0, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x15}, 0x94) ioctl$int_in(r5, 0x5452, &(0x7f0000000180)=0x3) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xaf4, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=@newtaction={0x214, 0x30, 0x800, 0x70bd2b, 0xbc, {}, [{0x200, 0x1, [@m_ipt={0x1c0, 0x2, 0x0, 0x0, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0xbe, 0x6, {0x3, 'nat\x00', 0xd, 0x4, "6913ace14a6ed89a10126bdccf8bb0e47081056269c6b4936fa4dd86021e400713aaa74a4ed7ed21409e3670e5c1e0b6978f1ea244af83d36c88ea3fd2426e42da44e0d2bca6616cc7e5f21e0cd8f6a8062e8413d3c82db28de1c5702fd9a0c2415291aa1151a6ed6d7bd54b5779a32f19828d9c1dedfa99801bd6b8f167047c53cc93f2c49cf19fe1167292952695ee6b1faddd"}}, @TCA_IPT_TARG={0x79, 0x6, {0x7, 'raw\x00', 0xd, 0x5, "59597faf36b40c48a2ef5c1d5715596a6e9dadfdb2deddaaba256a17bc50464be57f4ab9d1cd65b44eff95117dfdaf3075c90e4e64e2f5ed82584c73f1b9ab010a3fb34835b08922d70ee649789830"}}]}, {0x2e, 0x6, "d4404c4a8824b84368d09ccdb5597b825dbbd7aef99c354d3ef3d520abe9d4cb7dce90320fdae5b234c4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ipt={0x3c, 0x16, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x214}}, 0x0) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000640)=""/219, 0xdb}], 0x3}}], 0x2, 0x60, 0x0) 5.804225259s ago: executing program 2 (id=222): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x2b00, 0x12) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x4) getsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, 0x0, &(0x7f0000000340)) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf, 0xa1}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, r2}, 0x94) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8a140, 0x0) 5.273061469s ago: executing program 1 (id=226): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e7ee7a8400000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}}, 0x8000) 4.792167522s ago: executing program 1 (id=227): socket$alg(0x26, 0x5, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x32}, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x7, 0x18) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, 0x0, 0x18}, 0x40c0) 4.554228777s ago: executing program 1 (id=228): unshare(0x22020400) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, 0xfffffffffffffffd, &(0x7f0000000000)) 4.401555695s ago: executing program 1 (id=229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000009c000000060a010400000000000000000100000008000b400000000074000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205000200070000003c0001800c00010062697477697365002c000280080003400000000408000140000000140800024000000012040005800c000480070002006eee7e000900010073797a30"], 0x110}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 4.073482443s ago: executing program 1 (id=230): ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000280)={0x200, 0x74fe, 0x1}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x24, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x103) poll(0x0, 0x0, 0x4) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r4, 0x4068aea3, &(0x7f0000000300)={0xdb, 0x0, 0x8c1}) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x33) 3.840863245s ago: executing program 0 (id=231): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0) r0 = syz_io_uring_setup(0x239, &(0x7f0000000680)={0x0, 0x405e5, 0x10100, 0x0, 0x2e0}, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x31a0}}) io_uring_enter(r0, 0x663e, 0x0, 0x2, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) 3.205788986s ago: executing program 0 (id=232): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000002c0)={0x0}) 2.954250792s ago: executing program 2 (id=233): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x40400) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) 2.203044515s ago: executing program 1 (id=234): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') read$alg(r4, &(0x7f0000000e80)=""/4096, 0x1000) sendmsg$nl_route(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@bridge_getneigh={0x30, 0x1e, 0x1, 0x70bd2b, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x10c1, 0x2802}, [@IFLA_MASTER={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40010) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x6f}}, 0x20000000) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x22, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c000000000a09040000000000000000020000040900010073797a300000000009000200"], 0x74}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x48, 0x15, r8}) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000"], 0x0) 2.202260827s ago: executing program 4 (id=235): r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000003c0)) 2.046181027s ago: executing program 3 (id=236): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x5, 0x802, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x5, 0xd90, 0x0, {}, {0x77359400}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "645b6048a2e4931133f6d9919fd48557d76811cd874f3c107bbfc1c8831026d40798a2be4cc414e02216198977dc3d41ed0880c64c39e5f4059bae641ed15112"}}, 0x80}}, 0x0) 1.911216421s ago: executing program 4 (id=237): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000580)=0xe) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) socket$l2tp(0x2, 0x2, 0x73) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f00000003c0)={0xa, 0x0, 0x0, {0x80000004, 0x1, 0x2, 0x8800001}}) sendto$inet6(r5, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0xf) syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)=0x6) dup3(r1, r2, 0x80000) capget(&(0x7f0000000140), &(0x7f0000000280)={0x8000, 0x4, 0x0, 0x8, 0x2, 0xffffffff}) read$dsp(r0, &(0x7f00000011c0)=""/4117, 0x200021d5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="18110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r8, 0x4) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005940)=ANY=[@ANYBLOB="28000000100001"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) 1.753023313s ago: executing program 3 (id=238): socket$alg(0x26, 0x5, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x32}, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x7, 0x18) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000000000029000000"], 0x18}, 0x40c0) 1.706425534s ago: executing program 3 (id=239): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48090}, 0xc001) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x1, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x6c}, {@multicast1, 0x4e20, 0x1, 0xcd, 0x1}}, 0x44) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB, @ANYRES64=r3], 0x3c}}, 0x0) 1.385663883s ago: executing program 3 (id=240): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x1, &(0x7f0000000940)) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0xa, 0x3, 0x1c}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) 1.158606393s ago: executing program 3 (id=241): r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x7ff}) r1 = syz_io_uring_setup(0x23d, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x2}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2f}}) io_uring_enter(r1, 0x2def, 0x0, 0x20, 0x0, 0x0) 977.268543ms ago: executing program 3 (id=242): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x1, &(0x7f00000003c0)='t'}], 0x1}) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000000)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x0, 0x172f, 0x500, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf, 0x40, 0x7, [{{0x9, 0x4, 0x0, 0x78, 0x1, 0x3, 0x1, 0x0, 0xf, {0x9, 0x21, 0xfff, 0x8, 0x1, {0x22, 0xcaa}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x4, 0x3}}}}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x310, 0x8, 0x4, 0x7, 0x10, 0x5f}, 0x3f, &(0x7f0000000580)={0x5, 0xf, 0x3f, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x6, 0x9, 0xe6c8, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "81199dd333516b982c9e14caa0a322b1"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x10, 0xf1, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xc, 0x4, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x3, 0x6, 0x33}]}, 0x9, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x810}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0xb6e424983df33350}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0c}}, {0x8d, &(0x7f0000000740)=@string={0x8d, 0x3, "d1f55f7ff84042dff18bfe2bc730d3c55759e2af3896a71831ddf168a0d516bcdea0ae0ae9624b1ab0800eb2a98788523a815c37d882f37c5342ec181362fa51ef13ffa6d9db33e0074561e4d535bdd297c02d67cc8a31868cf1fde2f5a4ed525aaf546d7df08f48db7785935996e798825f0cd9c12d93ea99cb721be52bd77b520e22f5d73bfc04b4f6a5"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x44e}}, {0x7d, &(0x7f0000000840)=@string={0x7d, 0x3, "b359af7c5ab3e1bb4820d7930d3037761af14535558aa192fbfc420281437d97939e1366781dcc6f95b6881cf15ecb3e37556bfa172bf68316013f74a25b9453f6f8bbb2b7d06f706be507c5cdb7b73789867a73e8032a764fc3711407467c769137c92067cf5a34f46f77e7520613b98d3c31cbb148d1db45474e"}}, {0x100, &(0x7f00000008c0)=@string={0x100, 0x3, "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"}}, {0x83, &(0x7f0000000a80)=@string={0x83, 0x3, "00c237e68848e276e871671d7225e8739b567796694ab2534adf3277011e5e6cb84fcadda364830b8dfceca4e924e77b366382cf26339c4dba0cb2f337169869c50275030c5843a5a4cefff838a01a9bea8cb72bad824ab1e692348022c4ac36e2b2a0119753a6adddc4f2a9cf89d9f752ae87483c6222efabae53e778cb8e6378"}}]}) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x8, r5, 0x0, 0x9, 0x3b0839, 0x0, 0x0, 0x10005}) r6 = io_uring_setup(0x664c, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1}) r7 = socket$kcm(0x29, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r9 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r9, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000040)={r9, r8}) r10 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$EXT4_IOC_GETFSUUID(r2, 0x8008662c, &(0x7f0000000080)) ioctl$RTC_UIE_ON(r10, 0x7003) ioctl$RTC_WKALM_SET(r10, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x0, 0x16, 0x16, 0x0, 0x8000}}) close_range(r6, 0xffffffffffffffff, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r11, 0x84, 0xf, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e24, 0x9, @private2, 0x6}}, 0x2, 0xff, 0x2, 0x6, 0x401}, &(0x7f0000000000)=0x67) 323.385689ms ago: executing program 4 (id=243): r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000140)={0x0, 0xa005, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) write$P9_RSTATu(r1, &(0x7f0000000780)={0x1c3, 0x7d, 0x2, {{0x0, 0x199, 0xd, 0x6, {0x1, 0x1, 0x2}, 0x8ca4ea090d8da800, 0x0, 0x5, 0x804, 0x38, '_H\xcf\x98d\xe2\xfa>\x12\r~\r\xb1\x9c\x83]\xfc\x80\x95I\x80\xa2I\x05I\xfa\n\x90\xb1F\x19\\\xbe\xab\xbdT\x86\x00d\xac\xc2\xeb\x17\xfad\xaa\x01\x00\xff\xff&\xbc\xe9\x84\xda7', 0xf0, 'o\xd6P\xf8m\xfc\xd7 =\x12\x82z$JLL\v[\x8a\x9b\xa4\v\xc7X\xb2\r\xc2c\xf1\xa0\x14}\xf8\xb8\x91.:\xa4\x87t\"=\x12Mm\xa1\xd1\xf7\xc5\xbcwM\x1ap\xd0\x8e\x91\x8d\xf2E\x0ewT\x1d\xf8\x0eA\x9c\xc6\x16\xa4\xc5\x83\xf0\xa6\x93\xf1 ke\xa0\x85$\xa5S@L\x16\xdb\xa5\xc2c)\xdf\xf4\xec\xc9\xf3\x95-+s\xe2\xa4\x16\x83\x0eA\x17\xba\x02\xeaj\x85\xb8#r\xf4\xce!oG\xf4\xecB\xd8\x19d\xcb)c\x86\xd8\x9b4x\xf2\x95\xa31(\x85\xdcI\xdfy\n\x04$\x98\xa6/TwA\xc5j\xc4\xde\x04\xa2\x18(\xd8j\x86\x89\xea\xb4OlIP\x83D2\xf0\xfdRh\xf0`\xef\x98\x03\x04\x1d\xcf\xc8=F\xf8\x83\xf2\xa66\\\xb1\xde4w\xab\x9c\xce\xcdC\x06\xb6\xd2M\xa7\xbe\xa6r\xe0\xf4\xf6\xfb\xbf\x17\x88\x9d\xbc\x83lJ\xa1\xb39\f\x1f\xe3\xb3>\xfb\xeb\x9f\xb1w\xf9', 0x12, '/dev/snd/midiC#D#\x00', 0x2c, '[+*:\x16\rU\xf7\xec\xaa\xef\xf7\xa9\xaa)\x9dYK\xe6m\x19\xc0\xb4d\xdb\xd1h!\xcd\x8540\xa2\xef\xe1\xc9\xadG\xbb\xfb\xab\xf9>\xfe'}, 0x15, '/dev/bus/usb/00#/00#\x00', 0x0, 0xee00}}, 0x20a) 201.622097ms ago: executing program 4 (id=244): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f0000000240)=[{r1, 0x600}], 0x1, 0x0, 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0xb) 0s ago: executing program 4 (id=245): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0x0, 0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000100001000000ddffffff00000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000d50900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.14' (ED25519) to the list of known hosts. [ 80.663218][ T5814] cgroup: Unknown subsys name 'net' [ 80.856216][ T5814] cgroup: Unknown subsys name 'cpuset' [ 80.865191][ T5814] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.321450][ T5814] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.198164][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.210815][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.220834][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.228487][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.236279][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.245314][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.255736][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.263492][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.271543][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.291904][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.297054][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.302513][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.313680][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.333594][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.342772][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.349929][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.353120][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.359180][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.372971][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.373322][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.388331][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.399833][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.404922][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.414914][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.416856][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.263830][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 88.290695][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 88.324967][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 88.343459][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 88.354927][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 88.657221][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.665295][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.672896][ T5829] bridge_slave_0: entered allmulticast mode [ 88.680164][ T5829] bridge_slave_0: entered promiscuous mode [ 88.689217][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.696439][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.703670][ T5829] bridge_slave_1: entered allmulticast mode [ 88.711797][ T5829] bridge_slave_1: entered promiscuous mode [ 88.730610][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.738035][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.745249][ T5844] bridge_slave_0: entered allmulticast mode [ 88.752400][ T5844] bridge_slave_0: entered promiscuous mode [ 88.760057][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.767397][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.775279][ T5830] bridge_slave_0: entered allmulticast mode [ 88.782748][ T5830] bridge_slave_0: entered promiscuous mode [ 88.790522][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.797866][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.805236][ T5837] bridge_slave_0: entered allmulticast mode [ 88.812558][ T5837] bridge_slave_0: entered promiscuous mode [ 88.820816][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.828790][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.836305][ T5837] bridge_slave_1: entered allmulticast mode [ 88.843479][ T5837] bridge_slave_1: entered promiscuous mode [ 88.871951][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.879117][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.886787][ T5844] bridge_slave_1: entered allmulticast mode [ 88.893876][ T5844] bridge_slave_1: entered promiscuous mode [ 88.900709][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.908160][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.915425][ T5830] bridge_slave_1: entered allmulticast mode [ 88.922704][ T5830] bridge_slave_1: entered promiscuous mode [ 88.956554][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.963958][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.971334][ T5831] bridge_slave_0: entered allmulticast mode [ 88.978772][ T5831] bridge_slave_0: entered promiscuous mode [ 89.024588][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.037561][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.047081][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.054374][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.061546][ T5831] bridge_slave_1: entered allmulticast mode [ 89.069535][ T5831] bridge_slave_1: entered promiscuous mode [ 89.106245][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.171574][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.184736][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.197235][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.222320][ T5829] team0: Port device team_slave_0 added [ 89.231050][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.242897][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.266780][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.289580][ T5829] team0: Port device team_slave_1 added [ 89.297780][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.332454][ T5837] team0: Port device team_slave_0 added [ 89.362866][ T5844] team0: Port device team_slave_0 added [ 89.386714][ T5837] team0: Port device team_slave_1 added [ 89.417982][ T5844] team0: Port device team_slave_1 added [ 89.425944][ T5830] team0: Port device team_slave_0 added [ 89.444733][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.452130][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.463166][ T5842] Bluetooth: hci1: command tx timeout [ 89.478329][ T5851] Bluetooth: hci2: command tx timeout [ 89.484001][ T5849] Bluetooth: hci0: command tx timeout [ 89.490474][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.508806][ T5831] team0: Port device team_slave_0 added [ 89.528000][ T5830] team0: Port device team_slave_1 added [ 89.546122][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.553557][ T5849] Bluetooth: hci4: command tx timeout [ 89.553575][ T5842] Bluetooth: hci3: command tx timeout [ 89.553860][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.590486][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.604295][ T5831] team0: Port device team_slave_1 added [ 89.644030][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.650998][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.677222][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.689772][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.697381][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.723341][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.760307][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.767587][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.794259][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.827415][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.834579][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.862467][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.874384][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.881352][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.907469][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.919440][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.927213][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.953628][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.989373][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.997358][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.024591][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.043308][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.050347][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.076614][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.122785][ T5829] hsr_slave_0: entered promiscuous mode [ 90.129805][ T5829] hsr_slave_1: entered promiscuous mode [ 90.150195][ T5837] hsr_slave_0: entered promiscuous mode [ 90.157139][ T5837] hsr_slave_1: entered promiscuous mode [ 90.163714][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 90.169610][ T5837] Cannot create hsr debugfs directory [ 90.248549][ T5831] hsr_slave_0: entered promiscuous mode [ 90.254985][ T5831] hsr_slave_1: entered promiscuous mode [ 90.261131][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 90.267095][ T5831] Cannot create hsr debugfs directory [ 90.359909][ T5844] hsr_slave_0: entered promiscuous mode [ 90.366868][ T5844] hsr_slave_1: entered promiscuous mode [ 90.373191][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 90.378921][ T5844] Cannot create hsr debugfs directory [ 90.462148][ T5830] hsr_slave_0: entered promiscuous mode [ 90.468487][ T5830] hsr_slave_1: entered promiscuous mode [ 90.475377][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 90.481196][ T5830] Cannot create hsr debugfs directory [ 90.942452][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.955890][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.974032][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.985562][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.055983][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.067092][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.078731][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.089713][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.167173][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.183867][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.197238][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.208273][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.315481][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.344884][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.356416][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.389340][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.483396][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.508412][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.538917][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.546446][ T5849] Bluetooth: hci0: command tx timeout [ 91.546909][ T5842] Bluetooth: hci1: command tx timeout [ 91.552125][ T5851] Bluetooth: hci2: command tx timeout [ 91.561542][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.573855][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.622407][ T5851] Bluetooth: hci3: command tx timeout [ 91.628146][ T5849] Bluetooth: hci4: command tx timeout [ 91.636975][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.665927][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.673250][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.696456][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.703694][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.717629][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.766081][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.788989][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.804227][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.811392][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.828852][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.836089][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.915238][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.947986][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.955206][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.986163][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.994085][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.027978][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.055077][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.149529][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.186884][ T9] cfg80211: failed to load regulatory.db [ 92.235267][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.248784][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.256045][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.267887][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.275200][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.376959][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.434018][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.441184][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.452441][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.459643][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.481524][ T5844] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 92.496123][ T5844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.551290][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.577467][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.808373][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.832533][ T5829] veth0_vlan: entered promiscuous mode [ 92.906521][ T5829] veth1_vlan: entered promiscuous mode [ 93.074181][ T5831] veth0_vlan: entered promiscuous mode [ 93.108634][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.125380][ T5829] veth0_macvtap: entered promiscuous mode [ 93.138694][ T5829] veth1_macvtap: entered promiscuous mode [ 93.161002][ T5831] veth1_vlan: entered promiscuous mode [ 93.197452][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.210809][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.229857][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.264290][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.274264][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.311451][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.325121][ T5831] veth0_macvtap: entered promiscuous mode [ 93.339151][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.363188][ T5844] veth0_vlan: entered promiscuous mode [ 93.387443][ T5831] veth1_macvtap: entered promiscuous mode [ 93.412266][ T5844] veth1_vlan: entered promiscuous mode [ 93.488717][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.498105][ T5837] veth0_vlan: entered promiscuous mode [ 93.527881][ T5830] veth0_vlan: entered promiscuous mode [ 93.540083][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.551127][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.565067][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.607510][ T5837] veth1_vlan: entered promiscuous mode [ 93.627549][ T5849] Bluetooth: hci1: command tx timeout [ 93.629269][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.633418][ T5849] Bluetooth: hci0: command tx timeout [ 93.643744][ T5851] Bluetooth: hci2: command tx timeout [ 93.649035][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.652638][ T5830] veth1_vlan: entered promiscuous mode [ 93.667053][ T62] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.676041][ T62] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.686536][ T5844] veth0_macvtap: entered promiscuous mode [ 93.701985][ T5851] Bluetooth: hci4: command tx timeout [ 93.707427][ T5851] Bluetooth: hci3: command tx timeout [ 93.708086][ T62] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.724381][ T62] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.752361][ T5844] veth1_macvtap: entered promiscuous mode [ 93.810694][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.844169][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.896318][ T5830] veth0_macvtap: entered promiscuous mode [ 93.952834][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.965700][ T5837] veth0_macvtap: entered promiscuous mode [ 93.999757][ T5830] veth1_macvtap: entered promiscuous mode [ 94.023536][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.031487][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.069944][ T62] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.080267][ T62] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.114803][ T5837] veth1_macvtap: entered promiscuous mode [ 94.143755][ T62] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.152917][ T62] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.187070][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.203351][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.221629][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.313347][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.327804][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.508989][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.545870][ T1150] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.560487][ T1150] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.588454][ T1035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.598499][ T1035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.617040][ T1150] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.680177][ T1150] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.766623][ T1150] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.791600][ T1150] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.835313][ T1150] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.846966][ T1150] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.906553][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.933542][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.151387][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.184599][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.222947][ T5966] loop2: detected capacity change from 0 to 7 [ 95.267904][ T5197] Dev loop2: unable to read RDB block 7 [ 95.278366][ T5197] loop2: unable to read partition table [ 95.297498][ T1035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.315530][ T5197] loop2: partition table beyond EOD, truncated [ 95.326914][ T1035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.342968][ T5966] Dev loop2: unable to read RDB block 7 [ 95.349281][ T5966] loop2: unable to read partition table [ 95.361391][ T5966] loop2: partition table beyond EOD, truncated [ 95.385958][ T5966] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 95.425200][ T5197] Dev loop2: unable to read RDB block 7 [ 95.452353][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.461087][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.467252][ T5197] loop2: unable to read partition table [ 95.478560][ T1035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.490985][ T5197] loop2: partition table beyond EOD, truncated [ 95.512283][ T1035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.747213][ T5851] Bluetooth: hci2: command tx timeout [ 95.747365][ T5842] Bluetooth: hci0: command tx timeout [ 95.753991][ T5851] Bluetooth: hci1: command tx timeout [ 95.780089][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.788433][ T5851] Bluetooth: hci3: command tx timeout [ 95.788484][ T5851] Bluetooth: hci4: command tx timeout [ 95.811904][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.877240][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.081808][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.090501][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 96.131466][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.181756][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 96.183700][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 96.198847][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.219096][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 96.654680][ T24] usb 3-1: config 0 has no interfaces? [ 96.686706][ T24] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 96.700233][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.709579][ T24] usb 3-1: Product: syz [ 96.717418][ T24] usb 3-1: Manufacturer: syz [ 96.798684][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.835816][ T24] usb 3-1: SerialNumber: syz [ 97.005928][ T24] usb 3-1: config 0 descriptor?? [ 98.131933][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.583546][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.621802][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.728085][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 98.785368][ T1219] IPVS: starting estimator thread 0... [ 98.801941][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 98.832042][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.859152][ T24] usb 1-1: config 0 descriptor?? [ 98.862073][ T6016] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 98.876135][ C0] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 99.032569][ T6015] IPVS: using max 51 ests per chain, 122400 per kthread [ 99.346629][ T24] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 99.357023][ T24] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 99.371026][ T24] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 99.385082][ T24] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 99.393951][ T24] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 99.401647][ T24] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 99.409877][ T24] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 99.419200][ T24] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 99.451532][ T24] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 99.477732][ T24] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 99.555749][ T24] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 99.663481][ T24] usb 1-1: USB disconnect, device number 2 [ 99.866504][ T6018] fido_id[6018]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 100.013547][ T6028] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.049916][ T6027] nlmon0: Master is either lo or non-ether device [ 100.537253][ T5920] usb 3-1: USB disconnect, device number 2 [ 100.872157][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.055157][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 101.062322][ T24] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 101.071462][ T24] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 101.108050][ T24] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 101.120935][ T24] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 101.170710][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 101.183726][ T24] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 101.203884][ T24] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 101.217519][ T24] usb 2-1: Product: syz [ 101.301630][ T24] usb 2-1: Manufacturer: syz [ 101.313496][ T24] usb 2-1: SerialNumber: syz [ 101.341117][ T24] usb 2-1: config 0 descriptor?? [ 101.358676][ T24] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 101.530450][ T24] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 101.615478][ T6030] syz.3.24 uses obsolete (PF_INET,SOCK_PACKET) [ 101.663442][ T6030] syzkaller1: entered promiscuous mode [ 101.668953][ T6030] syzkaller1: entered allmulticast mode [ 101.723925][ T24] usb 2-1: USB disconnect, device number 2 [ 101.779338][ T24] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 103.921775][ T6090] Zero length message leads to an empty skb [ 104.732032][ T797] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 105.014735][ T797] usb 1-1: Using ep0 maxpacket: 32 [ 105.342244][ T797] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 105.350496][ T797] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 105.411614][ T797] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 105.434468][ T6106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.50'. [ 105.444406][ T6104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.49'. [ 105.508273][ T797] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 105.577759][ T797] usb 1-1: config 0 interface 0 has no altsetting 0 [ 105.646320][ T797] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 105.699918][ T797] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 105.920165][ T797] usb 1-1: Product: syz [ 105.924938][ T797] usb 1-1: Manufacturer: syz [ 105.929699][ T797] usb 1-1: SerialNumber: syz [ 105.945115][ T797] usb 1-1: config 0 descriptor?? [ 105.956757][ T797] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 105.988316][ T797] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 106.160833][ T9] usb 1-1: USB disconnect, device number 3 [ 106.194933][ T9] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 106.337127][ T6120] caif0: Master is either lo or non-ether device [ 106.601866][ T1211] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 106.853065][ T1211] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 107.105752][ T1211] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 107.149655][ T6130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.58'. [ 107.180669][ T1211] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 107.230141][ T6131] batadv_slave_0: entered promiscuous mode [ 107.248258][ T6131] macsec1: entered allmulticast mode [ 107.253906][ T6131] batadv_slave_0: entered allmulticast mode [ 107.268748][ T6131] batadv_slave_0: left allmulticast mode [ 107.276156][ T1211] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.294507][ T6131] batadv_slave_0: left promiscuous mode [ 107.393398][ T6121] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 107.448720][ T1211] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 107.626138][ T6135] wireguard0: entered promiscuous mode [ 107.633173][ T6135] wireguard0: entered allmulticast mode [ 108.774830][ T6152] loop2: detected capacity change from 0 to 7 [ 108.892247][ T6152] Dev loop2: unable to read RDB block 7 [ 108.901302][ T6152] loop2: AHDI p1 p2 p3 [ 108.908053][ T6152] loop2: partition table partially beyond EOD, truncated [ 108.930752][ T6152] loop2: p1 start 1601398130 is beyond EOD, truncated [ 108.971851][ T6152] loop2: p2 start 1702059890 is beyond EOD, truncated [ 108.971886][ T797] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 109.153524][ T797] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.172166][ T797] usb 2-1: config 0 has no interfaces? [ 109.178086][ T797] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 109.190359][ T797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.200221][ T797] usb 2-1: config 0 descriptor?? [ 109.362505][ T10] usb 3-1: USB disconnect, device number 3 [ 109.469988][ T6162] caif0: Master is either lo or non-ether device [ 109.476820][ T6163] netlink: 44 bytes leftover after parsing attributes in process `syz.4.66'. [ 109.872152][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 109.951819][ T797] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 110.034431][ T24] usb 3-1: device descriptor read/64, error -71 [ 110.104636][ T797] usb 5-1: Using ep0 maxpacket: 32 [ 110.113797][ T797] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 110.122449][ T797] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 110.159252][ T797] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 110.171800][ T1219] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 110.202688][ T797] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 110.249521][ T797] usb 5-1: config 0 interface 0 has no altsetting 0 [ 110.271223][ T797] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 110.281290][ T797] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 110.302589][ T797] usb 5-1: Product: syz [ 110.306793][ T797] usb 5-1: Manufacturer: syz [ 110.311407][ T797] usb 5-1: SerialNumber: syz [ 110.317668][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 110.326569][ T1219] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.349739][ T797] usb 5-1: config 0 descriptor?? [ 110.352503][ T1219] usb 1-1: config 0 has no interfaces? [ 110.362748][ T797] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 110.374545][ T1219] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 110.383084][ T797] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 110.397363][ T1219] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.399100][ T6179] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 110.425092][ T1219] usb 1-1: config 0 descriptor?? [ 110.471789][ T24] usb 3-1: device descriptor read/64, error -71 [ 110.567410][ T797] usb 5-1: USB disconnect, device number 2 [ 110.583278][ T797] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 110.597793][ T24] usb usb3-port1: attempt power cycle [ 110.616484][ T30] audit: type=1326 audit(1760823276.428:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6180 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd1f98efc9 code=0x7ffc0000 [ 110.706228][ T30] audit: type=1326 audit(1760823276.448:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6180 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7efd1f98efc9 code=0x7ffc0000 [ 110.797570][ T30] audit: type=1326 audit(1760823276.448:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6180 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd1f98efc9 code=0x7ffc0000 [ 110.851342][ T30] audit: type=1326 audit(1760823276.448:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6180 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7efd1f98efc9 code=0x7ffc0000 [ 110.878502][ T30] audit: type=1326 audit(1760823276.458:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6180 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd1f98efc9 code=0x7ffc0000 [ 110.922299][ T30] audit: type=1326 audit(1760823276.458:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6180 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efd1f98efc9 code=0x7ffc0000 [ 110.949489][ T30] audit: type=1326 audit(1760823276.458:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6180 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd1f98efc9 code=0x7ffc0000 [ 110.974618][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 110.977707][ T30] audit: type=1326 audit(1760823276.458:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6180 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efd1f98efc9 code=0x7ffc0000 [ 111.008468][ T30] audit: type=1326 audit(1760823276.458:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6180 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd1f98efc9 code=0x7ffc0000 [ 111.035824][ T30] audit: type=1326 audit(1760823276.468:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6180 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7efd1f98efc9 code=0x7ffc0000 [ 111.039788][ T24] usb 3-1: device descriptor read/8, error -71 [ 111.193531][ T1219] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 111.321879][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 111.534883][ T24] usb 3-1: device descriptor read/8, error -71 [ 111.541925][ T1219] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.555467][ T1219] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 111.565455][ T1219] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 111.576348][ T1219] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.606157][ T1219] usb 4-1: config 0 descriptor?? [ 111.618302][ T1219] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 111.626817][ T1219] dvb-usb: bulk message failed: -22 (3/0) [ 111.642190][ T24] usb usb3-port1: unable to enumerate USB device [ 111.668212][ T1219] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 111.696371][ T10] usb 2-1: USB disconnect, device number 3 [ 111.730546][ T1219] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 111.743231][ T1219] usb 4-1: media controller created [ 111.891315][ T1219] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 111.932476][ T1219] dvb-usb: bulk message failed: -22 (6/0) [ 111.948295][ T1219] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 111.998972][ T1219] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 112.058856][ T1219] dvb-usb: schedule remote query interval to 150 msecs. [ 112.076425][ T1219] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 112.211650][ T1219] usb 4-1: USB disconnect, device number 2 [ 112.255850][ T1219] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 112.359848][ T6203] trusted_key: encrypted_key: insufficient parameters specified [ 112.706253][ T6203] netlink: 'syz.1.81': attribute type 1 has an invalid length. [ 112.716517][ T6203] trusted_key: encrypted_key: insufficient parameters specified [ 112.726957][ T6203] nbd: must specify a device to reconfigure [ 113.022976][ T9] usb 1-1: USB disconnect, device number 4 [ 113.039966][ T6215] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 114.171829][ T1219] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 114.363995][ T1219] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.374428][ T1219] usb 4-1: config 0 has no interfaces? [ 114.379919][ T1219] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 114.391821][ T1219] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.429451][ T6243] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 114.489614][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 114.499792][ T1219] usb 4-1: config 0 descriptor?? [ 114.622443][ T9] usb 1-1: device descriptor read/64, error -71 [ 114.822792][ T5851] Bluetooth: hci4: command 0x0405 tx timeout [ 114.882075][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 115.021821][ T9] usb 1-1: device descriptor read/64, error -71 [ 115.352519][ T9] usb usb1-port1: attempt power cycle [ 115.761932][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 115.831325][ T9] usb 1-1: device descriptor read/8, error -71 [ 116.081807][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 116.149532][ T9] usb 1-1: device descriptor read/8, error -71 [ 116.332062][ T9] usb usb1-port1: unable to enumerate USB device [ 116.914621][ T797] usb 4-1: USB disconnect, device number 3 [ 117.130108][ T6282] trusted_key: syz.3.105 sent an empty control message without MSG_MORE. [ 118.010771][ T6298] netlink: 80 bytes leftover after parsing attributes in process `syz.4.110'. [ 118.086407][ T6298] netlink: 80 bytes leftover after parsing attributes in process `syz.4.110'. [ 121.327526][ T6349] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 122.861432][ T6373] binder: 6372:6373 ioctl c0306201 200000000640 returned -22 [ 123.582647][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 123.771790][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 123.779410][ T10] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 123.870189][ T10] usb 3-1: config 0 has no interface number 0 [ 124.385108][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 124.443418][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 124.589976][ T10] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 124.640397][ T10] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 124.671800][ T10] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 124.694768][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.759289][ T6399] netlink: 'syz.1.141': attribute type 2 has an invalid length. [ 124.767976][ T6399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.141'. [ 124.796794][ T10] usb 3-1: config 0 descriptor?? [ 124.846537][ T10] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 125.246691][ T1211] usb 3-1: USB disconnect, device number 8 [ 125.269076][ T1211] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 125.375574][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 125.413167][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 125.551895][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 125.589031][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.599826][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.600104][ T24] usb 5-1: config 0 has no interfaces? [ 125.615036][ T6417] binder: 6416:6417 ioctl c0306201 200000000640 returned -22 [ 125.616178][ T24] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 125.636789][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 125.690319][ T10] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 125.748749][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.767332][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.819223][ T10] usb 2-1: config 0 descriptor?? [ 125.863034][ T24] usb 5-1: config 0 descriptor?? [ 126.287788][ T6429] netlink: 28 bytes leftover after parsing attributes in process `syz.2.151'. [ 126.481063][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 126.481075][ T30] audit: type=1326 audit(1760823292.288:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6430 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2714f8efc9 code=0x7ffc0000 [ 126.720328][ T30] audit: type=1326 audit(1760823292.288:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6430 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2714f8efc9 code=0x7ffc0000 [ 126.788085][ T30] audit: type=1326 audit(1760823292.288:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6430 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f2714f8efc9 code=0x7ffc0000 [ 126.927938][ T30] audit: type=1326 audit(1760823292.288:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6430 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2714f8efc9 code=0x7ffc0000 [ 127.019396][ T30] audit: type=1326 audit(1760823292.288:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6430 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f2714f8efc9 code=0x7ffc0000 [ 127.075667][ T30] audit: type=1326 audit(1760823292.288:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6430 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2714f8efc9 code=0x7ffc0000 [ 127.599080][ T797] usb 2-1: USB disconnect, device number 4 [ 127.680423][ T30] audit: type=1326 audit(1760823292.288:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6430 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2714f8efc9 code=0x7ffc0000 [ 127.929155][ T6452] binder: 6450:6452 ioctl c0306201 200000000640 returned -22 [ 128.178432][ T797] usb 5-1: USB disconnect, device number 3 [ 128.183029][ T6459] nlmon0: Master is either lo or non-ether device [ 128.267667][ T6461] netlink: 28 bytes leftover after parsing attributes in process `syz.4.163'. [ 128.323542][ T10] hid_parser_main: 5 callbacks suppressed [ 128.323561][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.433267][ T10] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 128.652762][ T6473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.165'. [ 128.861819][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 129.036690][ T10] usb 3-1: config index 0 descriptor too short (expected 60690, got 18) [ 129.043504][ T6484] loop2: detected capacity change from 0 to 7 [ 129.048437][ T10] usb 3-1: config 15 has too many interfaces: 102, using maximum allowed: 32 [ 129.069564][ T6484] Dev loop2: unable to read RDB block 7 [ 129.076347][ T6484] loop2: unable to read partition table [ 129.082584][ T6484] loop2: partition table beyond EOD, truncated [ 129.088161][ T10] usb 3-1: config 15 has an invalid descriptor of length 224, skipping remainder of the config [ 129.113902][ T6484] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 129.123793][ T10] usb 3-1: config 15 has 0 interfaces, different from the descriptor's value: 102 [ 129.153466][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 129.169939][ T5197] Dev loop2: unable to read RDB block 7 [ 129.175488][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.252122][ T5197] loop2: unable to read partition table [ 129.262044][ T1219] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 129.276265][ T5197] loop2: partition table beyond EOD, truncated [ 129.432407][ T1219] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.442498][ T1219] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 129.470717][ T1219] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 129.501241][ T1219] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.568375][ T1219] usb 4-1: config 0 descriptor?? [ 129.755809][ T6492] netlink: 'syz.0.168': attribute type 2 has an invalid length. [ 129.764833][ T6492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.168'. [ 129.902504][ T1219] usb 4-1: string descriptor 0 read error: -71 [ 129.929248][ T1219] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6 [ 129.968103][ T5182] bcm5974 4-1:0.0: could not read from device [ 130.028998][ T5182] bcm5974 4-1:0.0: could not read from device [ 130.039422][ T1219] usb 4-1: USB disconnect, device number 4 [ 130.071869][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 130.241871][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 130.288916][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.299543][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 130.309146][ T9] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 130.322071][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.344224][ T9] usb 1-1: config 0 descriptor?? [ 131.533626][ T10] usb 3-1: string descriptor 0 read error: -71 [ 131.692380][ T10] usb 3-1: USB disconnect, device number 9 [ 131.748078][ T6516] netlink: 14212 bytes leftover after parsing attributes in process `syz.2.178'. [ 132.749186][ T6526] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 132.767474][ T797] usb 1-1: USB disconnect, device number 9 [ 133.212623][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.219370][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.011821][ T5898] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 134.256670][ T5898] usb 2-1: config index 0 descriptor too short (expected 60690, got 18) [ 134.271651][ T5898] usb 2-1: config 15 has too many interfaces: 102, using maximum allowed: 32 [ 134.308678][ T5898] usb 2-1: config 15 has an invalid descriptor of length 224, skipping remainder of the config [ 134.354491][ T5898] usb 2-1: config 15 has 0 interfaces, different from the descriptor's value: 102 [ 134.408016][ T5898] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 134.464514][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.007774][ T6570] netlink: 'syz.4.193': attribute type 2 has an invalid length. [ 135.041909][ T6570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.193'. [ 135.501778][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 135.691818][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 135.705812][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.749536][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 135.761128][ T24] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 135.775018][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.847828][ T24] usb 5-1: config 0 descriptor?? [ 136.814320][ T5898] usb 2-1: string descriptor 0 read error: -71 [ 136.850779][ T5898] usb 2-1: USB disconnect, device number 5 [ 137.821796][ T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 137.971910][ T24] usb 1-1: device descriptor read/64, error -71 [ 138.029013][ T5920] usb 5-1: USB disconnect, device number 4 [ 138.173000][ T6600] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 138.221803][ T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 138.392212][ T24] usb 1-1: device descriptor read/64, error -71 [ 138.408098][ T6608] fuse: Unknown parameter 'group_i00000000000000000000' [ 138.502963][ T24] usb usb1-port1: attempt power cycle [ 138.583897][ T6610] caif0: Master is either lo or non-ether device [ 138.751303][ T6614] loop2: detected capacity change from 0 to 7 [ 138.775923][ T6614] Dev loop2: unable to read RDB block 7 [ 138.794078][ T6614] loop2: AHDI p1 p2 p3 [ 138.804506][ T6614] loop2: partition table partially beyond EOD, truncated [ 138.817116][ T6614] loop2: p1 start 1601398130 is beyond EOD, truncated [ 138.824396][ T6614] loop2: p2 start 1702059890 is beyond EOD, truncated [ 138.861953][ T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 138.912502][ T24] usb 1-1: device descriptor read/8, error -71 [ 139.189546][ T24] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 139.232468][ T24] usb 1-1: device descriptor read/8, error -71 [ 139.342139][ T24] usb usb1-port1: unable to enumerate USB device [ 139.471908][ T1219] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 139.603292][ T797] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 139.732467][ T6637] netlink: 'syz.1.214': attribute type 2 has an invalid length. [ 139.750410][ T797] usb 4-1: device descriptor read/64, error -71 [ 139.751803][ T1219] usb 3-1: Using ep0 maxpacket: 16 [ 139.771200][ T1219] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 139.783549][ T6637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.214'. [ 139.787851][ T1219] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.813279][ T1219] usb 3-1: Product: syz [ 139.817486][ T1219] usb 3-1: Manufacturer: syz [ 139.822561][ T1219] usb 3-1: SerialNumber: syz [ 139.853583][ T1219] usb 3-1: config 0 descriptor?? [ 140.031811][ T797] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 140.116380][ T5898] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 140.268579][ T1219] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 140.276504][ T5898] usb 2-1: Using ep0 maxpacket: 32 [ 140.285860][ T5898] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.297159][ T1219] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 140.307014][ T5898] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 140.373744][ T1219] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 140.385030][ T5898] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 140.394277][ T1219] usb 3-1: media controller created [ 140.422739][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.461801][ T797] usb 4-1: device descriptor read/64, error -71 [ 140.509395][ T5898] usb 2-1: config 0 descriptor?? [ 140.530266][ T1219] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 140.601389][ T797] usb usb4-port1: attempt power cycle [ 140.663500][ T1219] zl10353_read_register: readreg error (reg=127, ret==0) [ 140.670647][ T1219] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 140.684734][ T1219] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 140.962956][ T797] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 140.992843][ T797] usb 4-1: device descriptor read/8, error -71 [ 141.117228][ T6646] loop2: detected capacity change from 0 to 7 [ 141.161386][ T6646] Dev loop2: unable to read RDB block 7 [ 141.176117][ T6646] loop2: unable to read partition table [ 141.196793][ T6646] loop2: partition table beyond EOD, truncated [ 141.231907][ T797] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 141.242600][ T6646] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 141.274479][ T797] usb 4-1: device descriptor read/8, error -71 [ 141.298157][ T5197] Dev loop2: unable to read RDB block 7 [ 141.311794][ T5197] loop2: unable to read partition table [ 141.326082][ T5197] loop2: partition table beyond EOD, truncated [ 141.392549][ T797] usb usb4-port1: unable to enumerate USB device [ 141.399461][ T5920] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 141.532826][ T5920] usb 1-1: device descriptor read/64, error -71 [ 141.771976][ T5920] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 141.921123][ T5920] usb 1-1: device descriptor read/64, error -71 [ 142.032834][ T5920] usb usb1-port1: attempt power cycle [ 142.292271][ T5898] usb 3-1: USB disconnect, device number 10 [ 142.322780][ T797] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 142.409920][ T5920] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 142.442569][ T5920] usb 1-1: device descriptor read/8, error -71 [ 142.486903][ T5948] usb 2-1: USB disconnect, device number 6 [ 142.534402][ T797] usb 5-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 142.544676][ T5898] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 142.549230][ T797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.772208][ T5920] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 142.791544][ T797] usb 5-1: config 0 descriptor?? [ 142.821158][ T797] pwc: Creative Labs Webcam Pro Ex detected. [ 142.827922][ T5920] usb 1-1: device descriptor read/8, error -71 [ 142.979018][ T5920] usb usb1-port1: unable to enumerate USB device [ 143.031980][ T6669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.226'. [ 143.261073][ T6669] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.421822][ T24] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 145.556018][ T5920] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 145.581936][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 145.602581][ T24] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 145.656639][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.697848][ T24] usb 1-1: Product: syz [ 145.712164][ T24] usb 1-1: Manufacturer: syz [ 145.731970][ T5920] usb 3-1: device descriptor read/64, error -71 [ 145.738484][ T24] usb 1-1: SerialNumber: syz [ 145.795921][ T24] usb 1-1: config 0 descriptor?? [ 145.819304][ T797] pwc: Failed to set LED on/off time (-71) [ 145.826781][ T797] pwc: send_video_command error -71 [ 145.846993][ T797] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 145.912694][ T797] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 145.937216][ T797] usb 5-1: USB disconnect, device number 5 [ 146.013014][ T5920] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 146.136222][ T6706] netlink: 'syz.1.234': attribute type 2 has an invalid length. [ 146.144216][ T6706] netlink: 12 bytes leftover after parsing attributes in process `syz.1.234'. [ 146.222648][ T24] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 146.239669][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 146.277566][ T24] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 146.286122][ T5920] usb 3-1: device descriptor read/64, error -71 [ 146.320840][ T24] usb 1-1: media controller created [ 146.402159][ T5920] usb usb3-port1: attempt power cycle [ 146.411541][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 146.411823][ T1219] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 146.542800][ T24] zl10353_read_register: readreg error (reg=127, ret==0) [ 146.549925][ T24] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 146.562961][ T6713] netlink: 'syz.4.237': attribute type 15 has an invalid length. [ 146.574032][ T6713] netlink: 24 bytes leftover after parsing attributes in process `syz.4.237'. [ 146.623118][ T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 146.681868][ T1219] usb 2-1: Using ep0 maxpacket: 32 [ 146.719055][ T1219] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.733471][ T1219] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 146.773958][ T1219] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 146.792131][ T5920] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 146.808240][ T1219] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.822797][ T5920] usb 3-1: device descriptor read/8, error -71 [ 146.829380][ T6716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.237'. [ 146.854575][ T1219] usb 2-1: config 0 descriptor?? [ 147.061796][ T5920] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 147.147760][ T5920] usb 3-1: device descriptor read/8, error -71 [ 147.280667][ T5920] usb usb3-port1: unable to enumerate USB device [ 147.541920][ T797] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 147.701889][ T797] usb 4-1: Using ep0 maxpacket: 8 [ 147.709953][ T797] usb 4-1: unable to get BOS descriptor or descriptor too short [ 147.755968][ T797] usb 4-1: config 4 interface 0 has no altsetting 0 [ 147.772618][ T797] usb 4-1: string descriptor 0 read error: -22 [ 147.779482][ T797] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 147.805053][ T797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.835813][ T797] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 147.852305][ T797] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 147.875139][ T797] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 147.884670][ T797] usb 4-1: media controller created [ 147.949753][ T797] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 148.052225][ T6724] ------------[ cut here ]------------ [ 148.057977][ T6724] usb 1-1: BOGUS control dir, pipe 80001280 doesn't match bRequestType c0 [ 148.107623][ T6724] WARNING: drivers/usb/core/urb.c:414 at usb_submit_urb+0x114d/0x18b0, CPU#1: syz.3.242/6724 [ 148.117904][ T6724] Modules linked in: [ 148.122054][ T6724] CPU: 1 UID: 0 PID: 6724 Comm: syz.3.242 Not tainted syzkaller #0 PREEMPT(full) [ 148.131266][ T6724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 148.141405][ T6724] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 148.147118][ T6724] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 60 97 12 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 c4 67 87 fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 148.166901][ T6724] RSP: 0018:ffffc90003077800 EFLAGS: 00010246 [ 148.173104][ T6724] RAX: 04da437103980b00 RBX: ffff88807f6ffa00 RCX: 0000000000080000 [ 148.181094][ T6724] RDX: ffffc9000c925000 RSI: 0000000000005b38 RDI: 0000000000005b39 [ 148.189218][ T6724] RBP: 1ffff110477fa5ff R08: 0000000000000003 R09: 0000000000000004 [ 148.197284][ T6724] R10: dffffc0000000000 R11: fffffbfff1bfa6c0 R12: ffff888021309100 [ 148.206764][ T6724] R13: ffff88823bfd2ff8 R14: 0000000080001280 R15: ffff888022356300 [ 148.215928][ T6724] FS: 00007efd207766c0(0000) GS:ffff888125dfd000(0000) knlGS:0000000000000000 [ 148.224978][ T6724] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 148.231589][ T6724] CR2: 000020000030b030 CR3: 0000000029c9c000 CR4: 00000000003526f0 [ 148.239708][ T6724] Call Trace: [ 148.243119][ T6724] [ 148.246132][ T6724] usb_start_wait_urb+0x114/0x4c0 [ 148.251178][ T6724] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 148.256827][ T6724] usb_control_msg+0x232/0x3e0 [ 148.261616][ T6724] dtv5100_i2c_msg+0x231/0x2f0 [ 148.266559][ T6724] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 148.271451][ T6724] __i2c_transfer+0x874/0x2170 [ 148.276301][ T6724] ? lockdep_hardirqs_on+0x9c/0x150 [ 148.281538][ T6724] ? __pfx___i2c_transfer+0x10/0x10 [ 148.286864][ T6724] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 148.292297][ T6724] ? i2c_transfer+0x120/0x3a0 [ 148.293859][ T6731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.296990][ T6724] i2c_transfer+0x25b/0x3a0 [ 148.312304][ T6724] ? __pfx_i2c_transfer+0x10/0x10 [ 148.317575][ T6724] ? _copy_from_user+0x94/0xb0 [ 148.322452][ T6724] i2cdev_ioctl_rdwr+0x460/0x740 [ 148.327432][ T6724] i2cdev_ioctl+0x64b/0x7f0 [ 148.332009][ T6724] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 148.337163][ T6724] ? __fget_files+0x3a0/0x420 [ 148.341894][ T6724] ? __fget_files+0x2a/0x420 [ 148.346613][ T6724] ? bpf_lsm_file_ioctl+0x9/0x20 [ 148.351747][ T6724] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 148.356799][ T6724] __se_sys_ioctl+0xfc/0x170 [ 148.361409][ T6724] do_syscall_64+0xfa/0xfa0 [ 148.366005][ T6724] ? lockdep_hardirqs_on+0x9c/0x150 [ 148.371405][ T6724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.377542][ T6724] ? clear_bhb_loop+0x60/0xb0 [ 148.382453][ T6724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.388380][ T6724] RIP: 0033:0x7efd1f98efc9 [ 148.392900][ T6724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.414077][ T6724] RSP: 002b:00007efd20776038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 148.424011][ T6724] RAX: ffffffffffffffda RBX: 00007efd1fbe5fa0 RCX: 00007efd1f98efc9 [ 148.432054][ T6724] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000005 [ 148.440145][ T6724] RBP: 00007efd1fa11f91 R08: 0000000000000000 R09: 0000000000000000 [ 148.448171][ T6724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.456181][ T6724] R13: 00007efd1fbe6038 R14: 00007efd1fbe5fa0 R15: 00007ffd0071be48 [ 148.464233][ T6724] [ 148.467404][ T6724] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 148.474695][ T6724] CPU: 1 UID: 0 PID: 6724 Comm: syz.3.242 Not tainted syzkaller #0 PREEMPT(full) [ 148.483908][ T6724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 148.493977][ T6724] Call Trace: [ 148.497265][ T6724] [ 148.500286][ T6724] dump_stack_lvl+0x99/0x250 [ 148.504889][ T6724] ? __asan_memcpy+0x40/0x70 [ 148.509503][ T6724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.514798][ T6724] ? __pfx__printk+0x10/0x10 [ 148.519401][ T6724] vpanic+0x237/0x6d0 [ 148.523387][ T6724] ? __pfx_vpanic+0x10/0x10 [ 148.527889][ T6724] ? is_bpf_text_address+0x292/0x2b0 [ 148.533170][ T6724] ? is_bpf_text_address+0x26/0x2b0 [ 148.538454][ T6724] panic+0xb9/0xc0 [ 148.542413][ T6724] ? __pfx_panic+0x10/0x10 [ 148.547026][ T6724] __warn+0x334/0x4c0 [ 148.551452][ T6724] ? usb_submit_urb+0x114d/0x18b0 [ 148.556471][ T6724] ? usb_submit_urb+0x114d/0x18b0 [ 148.561483][ T6724] report_bug+0x2be/0x4f0 [ 148.565824][ T6724] ? usb_submit_urb+0x114d/0x18b0 [ 148.570852][ T6724] ? usb_submit_urb+0x114d/0x18b0 [ 148.575863][ T6724] ? usb_submit_urb+0x114f/0x18b0 [ 148.580887][ T6724] handle_bug+0x84/0x160 [ 148.585119][ T6724] exc_invalid_op+0x1a/0x50 [ 148.589789][ T6724] asm_exc_invalid_op+0x1a/0x20 [ 148.594634][ T6724] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 148.600263][ T6724] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 60 97 12 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 c4 67 87 fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 148.619952][ T6724] RSP: 0018:ffffc90003077800 EFLAGS: 00010246 [ 148.626105][ T6724] RAX: 04da437103980b00 RBX: ffff88807f6ffa00 RCX: 0000000000080000 [ 148.634076][ T6724] RDX: ffffc9000c925000 RSI: 0000000000005b38 RDI: 0000000000005b39 [ 148.642041][ T6724] RBP: 1ffff110477fa5ff R08: 0000000000000003 R09: 0000000000000004 [ 148.650019][ T6724] R10: dffffc0000000000 R11: fffffbfff1bfa6c0 R12: ffff888021309100 [ 148.658024][ T6724] R13: ffff88823bfd2ff8 R14: 0000000080001280 R15: ffff888022356300 [ 148.666203][ T6724] usb_start_wait_urb+0x114/0x4c0 [ 148.671540][ T6724] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 148.677100][ T6724] usb_control_msg+0x232/0x3e0 [ 148.681868][ T6724] dtv5100_i2c_msg+0x231/0x2f0 [ 148.686725][ T6724] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 148.691579][ T6724] __i2c_transfer+0x874/0x2170 [ 148.696342][ T6724] ? lockdep_hardirqs_on+0x9c/0x150 [ 148.701541][ T6724] ? __pfx___i2c_transfer+0x10/0x10 [ 148.706908][ T6724] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 148.712267][ T6724] ? i2c_transfer+0x120/0x3a0 [ 148.716949][ T6724] i2c_transfer+0x25b/0x3a0 [ 148.721510][ T6724] ? __pfx_i2c_transfer+0x10/0x10 [ 148.726710][ T6724] ? _copy_from_user+0x94/0xb0 [ 148.731484][ T6724] i2cdev_ioctl_rdwr+0x460/0x740 [ 148.736693][ T6724] i2cdev_ioctl+0x64b/0x7f0 [ 148.741287][ T6724] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 148.746320][ T6724] ? __fget_files+0x3a0/0x420 [ 148.750990][ T6724] ? __fget_files+0x2a/0x420 [ 148.755596][ T6724] ? bpf_lsm_file_ioctl+0x9/0x20 [ 148.760527][ T6724] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 148.765540][ T6724] __se_sys_ioctl+0xfc/0x170 [ 148.770210][ T6724] do_syscall_64+0xfa/0xfa0 [ 148.774895][ T6724] ? lockdep_hardirqs_on+0x9c/0x150 [ 148.780173][ T6724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.786224][ T6724] ? clear_bhb_loop+0x60/0xb0 [ 148.791003][ T6724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.796989][ T6724] RIP: 0033:0x7efd1f98efc9 [ 148.801414][ T6724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.821199][ T6724] RSP: 002b:00007efd20776038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 148.829628][ T6724] RAX: ffffffffffffffda RBX: 00007efd1fbe5fa0 RCX: 00007efd1f98efc9 [ 148.837685][ T6724] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000005 [ 148.845687][ T6724] RBP: 00007efd1fa11f91 R08: 0000000000000000 R09: 0000000000000000 [ 148.853739][ T6724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.861716][ T6724] R13: 00007efd1fbe6038 R14: 00007efd1fbe5fa0 R15: 00007ffd0071be48 [ 148.869871][ T6724] [ 148.873204][ T6724] Kernel Offset: disabled [ 148.877613][ T6724] Rebooting in 86400 seconds..