last executing test programs: 7m30.803597293s ago: executing program 0 (id=264): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xb4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x0, 0x2}) 7m30.690627411s ago: executing program 0 (id=265): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000300)={&(0x7f0000000280)=[0x0], 0x1}) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) munlockall() r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000380)={0x0, 0x9}, 0xfffffffffffffd63) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r3 = syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$INCFS_IOC_PERMIT_FILL(r3, 0x40046721, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0d, &(0x7f0000000040)) 7m25.219691531s ago: executing program 0 (id=271): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_gettime(0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x19, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000700000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2b109, 0x40}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x6f}, 0x1, 0x0, 0x0, 0x10}, 0x0) 7m17.195173213s ago: executing program 0 (id=285): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x68, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) 7m12.480057033s ago: executing program 0 (id=293): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 7m11.959220209s ago: executing program 0 (id=294): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x18, 0x0, 0x1) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000004, 0x3, 0xfffffffffffffffb, 0xfffffffffedfff81, 0x3, 0x1, {0xffffffffffffffff, 0x8, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7fffffff, 0x9, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x13}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f04) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000300)=0x4, &(0x7f0000000340)=0x2) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000003c0)=0x20, 0x4) 6m56.295332489s ago: executing program 32 (id=294): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x18, 0x0, 0x1) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000004, 0x3, 0xfffffffffffffffb, 0xfffffffffedfff81, 0x3, 0x1, {0xffffffffffffffff, 0x8, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7fffffff, 0x9, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x13}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f04) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000300)=0x4, &(0x7f0000000340)=0x2) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000003c0)=0x20, 0x4) 6m13.191508285s ago: executing program 4 (id=382): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$key(0xf, 0x3, 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = syz_open_procfs(0x0, 0x0) getdents64(r5, &(0x7f0000000080)=""/147, 0x93) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d300000000000000800000000000000140000"], 0xac}}, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) 6m5.993427667s ago: executing program 4 (id=389): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getrlimit(0xb, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x25702020}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m3.836345969s ago: executing program 4 (id=391): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 5m59.480109409s ago: executing program 4 (id=397): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r0, @ANYBLOB="40005200060010"], 0x24}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) 5m59.192370797s ago: executing program 4 (id=399): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0xfffffffc, 0x7, 0x13) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@deltaction={0x5c, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='btrfs\x00', 0x0, &(0x7f00000001c0)='discard') r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000080), 0x4) sendto$inet(r7, &(0x7f00000002c0)='!', 0x1fff8, 0x2000c8d4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00'}) socket$inet6(0xa, 0x3, 0xff) 5m57.798322428s ago: executing program 4 (id=400): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}]}], {0x14}}, 0xd8}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) shutdown(r5, 0x1) r6 = socket$inet_icmp(0x2, 0x2, 0x1) listen(r6, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x4, 0xa}, {}, {0xf, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r11, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 5m41.133422267s ago: executing program 33 (id=400): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}]}], {0x14}}, 0xd8}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) shutdown(r5, 0x1) r6 = socket$inet_icmp(0x2, 0x2, 0x1) listen(r6, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x4, 0xa}, {}, {0xf, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r11, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 1m12.667810541s ago: executing program 5 (id=1115): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x54, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = socket(0x1d, 0x2, 0x6) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)={0x2, [0x0, 0x0]}, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000008c0)={&(0x7f00000000c0)=@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000940), 0x0, &(0x7f0000000380), 0x0, 0x4}, 0x4) inotify_init() ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x100}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = eventfd(0x8c69) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc04, 0x0, 0x4, r3, 0x11}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r3, 0x1}) 1m8.133474722s ago: executing program 5 (id=1137): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r2, r2, 0x4, 0xffffffffffffffff, r3) 1m5.427384391s ago: executing program 5 (id=1147): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x54, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = socket(0x1d, 0x2, 0x6) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)={0x2, [0x0, 0x0]}, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000008c0)={&(0x7f00000000c0)=@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000940), 0x0, &(0x7f0000000380), 0x0, 0x4}, 0x4) inotify_init() ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x100}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = eventfd(0x8c69) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc04, 0x0, 0x4, r3, 0x11}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r3, 0x1}) 1m4.376675867s ago: executing program 5 (id=1153): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000006c0)=""/83, 0x53, 0x0, 0x0, 0x0, 0x43, 0x10000000}}, 0x120) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000540)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="010000201000"}) writev(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}], 0x1) 1m3.309707967s ago: executing program 5 (id=1157): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r2, r2, 0x4, 0xffffffffffffffff, r3) 57.26361525s ago: executing program 5 (id=1165): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20}}, 0x4044085) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f000053c000/0x1000)=nil, 0x1000, 0x1000002, 0x11012, r4, 0x0) munmap(&(0x7f000053c000/0x4000)=nil, 0x4000) 40.316807807s ago: executing program 34 (id=1165): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20}}, 0x4044085) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f000053c000/0x1000)=nil, 0x1000, 0x1000002, 0x11012, r4, 0x0) munmap(&(0x7f000053c000/0x4000)=nil, 0x4000) 17.388897291s ago: executing program 6 (id=1259): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, 0x0, 0x24008804) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) 16.19591135s ago: executing program 6 (id=1261): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000000)=0x2004) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000000000d6a200000000000007020000f8ffffffb70300000000008500000015000000950000000000000000000000000061da0b8469512b6b4794194accf828c322a240679f195fc45eed6a0683cb6359f9fdd13a1e592356517476b65b349ed69268508be3d441e927f5b1b9df99ea782547e82bb8c78720f58f9e96204b399aecd7d0944bf5723794e70d038ca1ab9fe1ccfa88995f60e54fcf11cb0124dd748a8c98d73bef1e3b"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = fsopen(&(0x7f0000000040)='ntfs3\x00', 0x0) close(r5) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='yeah', 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)='2', 0x1, 0x20000045, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) shutdown(r0, 0x1) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4064891}, 0x4000) 14.974737919s ago: executing program 6 (id=1262): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a300000000028000000000a01040000000000000000030000000900010073797a3000000000080002400000000130000000030a03000000000000000000030000010900030073797a30000000000900010073797a3000000000040004071400000011"], 0xa0}}, 0x0) 14.756525673s ago: executing program 6 (id=1264): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_usb_disconnect(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0x801}, 0x880) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x24008804) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000380)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0x403, 0x0, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc680000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a31000000003c0003803800008008000340000000022c0007800a0001006c696d69740000001c0002800c00024000000000000000050c000140000000000000000414000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) close(r8) 13.828109327s ago: executing program 2 (id=1271): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf0000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000001c0)='sched_switch\x00', r0, 0x0, 0x4}, 0x18) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x55fdb4595c3d8036) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) 12.223388026s ago: executing program 2 (id=1275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x40) 10.63537616s ago: executing program 2 (id=1278): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x14, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}}, 0x14}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x38, 0x0, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xec10}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffffb}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20044095}, 0x4000000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfbfffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) 10.576141746s ago: executing program 1 (id=1280): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x841, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0xf, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x24000002) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8080000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x140) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.676215604s ago: executing program 1 (id=1282): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000000)=0x2004) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000000000d6a200000000000007020000f8ffffffb70300000000008500000015000000950000000000000000000000000061da0b8469512b6b4794194accf828c322a240679f195fc45eed6a0683cb6359f9fdd13a1e592356517476b65b349ed69268508be3d441e927f5b1b9df99ea782547e82bb8c78720f58f9e96204b399aecd7d0944bf5723794e70d038ca1ab9fe1ccfa88995f60e54fcf11cb0124dd748a8c98d73bef1e3b"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = fsopen(&(0x7f0000000040)='ntfs3\x00', 0x0) close(r5) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='yeah', 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)='2', 0x1, 0x20000045, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) shutdown(r0, 0x1) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4064891}, 0x4000) 8.505359779s ago: executing program 1 (id=1284): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="00220200"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f00000000c0)={0x20, 0x6, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, 0x0, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x8}, 0x0, &(0x7f00000004c0)={0x20, 0x1, 0x19, "641807dc71eb9be5f4b8f6dae155b22f461f3882fecc5228ef"}, 0x0}) 6.687764892s ago: executing program 6 (id=1292): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresgid(0x0, 0xee00, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0xfcde, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x203ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000480)="586775fb9901db49815172c1f747d4b7f006cde302a9915d508a026726989f48e7d7a4f8ad25e0ba2080b91f0aa200a8337d1018b387d7cc57c2e4413b4a82788410d3e411cb0ca1efa96a886164d6c1f974cae23a3ebab481e5e42c99e6882ea35031d7f412f72150c3299311a83bb1e39af73c0c2350f08b8912c23c75902ac99f982b1ca770", 0x3}, 0x23) 6.158378298s ago: executing program 1 (id=1296): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) unshare(0x30040e00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000"], 0x0, 0x3}, 0x94) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000007c0)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x20) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB, @ANYBLOB="05000000050000000300000000000000"], 0x50) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x50, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 5.843978713s ago: executing program 1 (id=1298): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e401", 0xbe8}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r2, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) 4.814780628s ago: executing program 1 (id=1306): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa10, 0xfff}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb", 0x3}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a300000000014000000110001"], 0x118}}, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000440)={@private1, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x2000003, 0x1000, 0x0, 0xf3e508e76205bd00, 0x8000, 0xa0c200a2, r5}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x206, 0x5, 0x0, 0x7}]}) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x20004, r6, 0x80000}) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') preadv(r9, &(0x7f0000000040), 0x0, 0x0, 0x0) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r10, 0x40505330, &(0x7f0000000bc0)={{0xfd, 0x1}, {0xe}, 0x2005, 0xbfbf}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x28, 0x1, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x804c}, 0xc080) r12 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r12, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r8}) openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 4.605777302s ago: executing program 2 (id=1308): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) unshare(0x30040e00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000"], 0x0, 0x3}, 0x94) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000007c0)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x20) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB, @ANYBLOB="05000000050000000300000000000000"], 0x50) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x50, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 4.571640824s ago: executing program 3 (id=1309): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) getsockopt(0xffffffffffffffff, 0x111, 0x1, 0x0, &(0x7f0000000080)=0x20) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x40000000) 4.387920548s ago: executing program 2 (id=1310): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x54, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = socket(0x1d, 0x2, 0x6) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)={0x2, [0x0, 0x0]}, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000008c0)={&(0x7f00000000c0)=@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000940), 0x0, &(0x7f0000000380), 0x0, 0x4}, 0x4) inotify_init() ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x100}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = eventfd(0x8c69) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc04, 0x0, 0x4, r3, 0x11}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r3, 0x1}) 4.272184342s ago: executing program 3 (id=1311): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_usb_disconnect(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0x801}, 0x880) sendmsg$NFT_BATCH(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000380)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0x403, 0x0, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc680000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a31000000003c0003803800008008000340000000022c0007800a0001006c696d69740000001c0002800c00024000000000000000050c000140000000000000000414000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) close(r7) 4.207347884s ago: executing program 3 (id=1312): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x841, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r3, 0x0, 0x24000002) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8080000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x140) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.07565565s ago: executing program 3 (id=1313): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x25702020}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.339939144s ago: executing program 6 (id=1314): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000001c0)={@hyper}) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x0) io_submit(0x0, 0x0, &(0x7f0000000300)) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x4, "f42a97b9"}}) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x7ff, 0x0, 0x7fff}) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000040)=0x90000) 3.123329409s ago: executing program 3 (id=1315): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000440), 0xfffffffffffffffd, 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000008c0)=0x7) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x18, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x10fff}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) userfaultfd(0x80001) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f00000000c0)=0x1200) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc0405602, &(0x7f00000001c0)=@multiplanar_fd={0x1, 0x2, 0x4, 0x4001, 0x6, {0x77359400}, {0x2, 0x8, 0x39, 0x25, 0x7, 0xe5, "a893db0e"}, 0x5, 0x4, {0x0}, 0x2}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) r6 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x5) write$vhost_msg_v2(r6, &(0x7f0000000280)={0x2, 0x0, {&(0x7f00000006c0)=""/128, 0x80, 0x0, 0x2, 0x2}}, 0x48) 1.082280413s ago: executing program 2 (id=1316): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setrlimit(0xc, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) epoll_create(0x7) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=@framed={{0xbe, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000480)='syzkaller\x00'}, 0x90) 0s ago: executing program 3 (id=1317): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}]}, 0x44}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x38, 0x0, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xec10}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffffb}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20044095}, 0x4000000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfbfffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) kernel console output (not intermixed with test programs): small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.812679][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.890134][ T5803] Bluetooth: hci0: command tx timeout [ 100.989104][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.989118][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.989138][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.990249][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.990260][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.990279][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.007645][ T5799] hsr_slave_0: entered promiscuous mode [ 101.009215][ T5799] hsr_slave_1: entered promiscuous mode [ 101.040696][ T5115] Bluetooth: hci2: command tx timeout [ 101.040964][ T5803] Bluetooth: hci3: command tx timeout [ 101.041154][ T5807] Bluetooth: hci1: command tx timeout [ 101.041353][ T5797] Bluetooth: hci4: command tx timeout [ 101.314830][ T5798] hsr_slave_0: entered promiscuous mode [ 101.315821][ T5798] hsr_slave_1: entered promiscuous mode [ 101.316630][ T5798] debugfs: 'hsr0' already exists in 'hsr' [ 101.316726][ T5798] Cannot create hsr debugfs directory [ 101.349778][ T5794] hsr_slave_0: entered promiscuous mode [ 101.350764][ T5794] hsr_slave_1: entered promiscuous mode [ 101.351492][ T5794] debugfs: 'hsr0' already exists in 'hsr' [ 101.351510][ T5794] Cannot create hsr debugfs directory [ 102.182676][ T5795] hsr_slave_0: entered promiscuous mode [ 102.183674][ T5795] hsr_slave_1: entered promiscuous mode [ 102.184361][ T5795] debugfs: 'hsr0' already exists in 'hsr' [ 102.184379][ T5795] Cannot create hsr debugfs directory [ 102.202725][ T5804] hsr_slave_0: entered promiscuous mode [ 102.203785][ T5804] hsr_slave_1: entered promiscuous mode [ 102.204476][ T5804] debugfs: 'hsr0' already exists in 'hsr' [ 102.204493][ T5804] Cannot create hsr debugfs directory [ 102.957407][ T5797] Bluetooth: hci0: command tx timeout [ 103.117557][ T5115] Bluetooth: hci2: command tx timeout [ 103.117612][ T5803] Bluetooth: hci3: command tx timeout [ 103.117649][ T5807] Bluetooth: hci1: command tx timeout [ 103.117684][ T5797] Bluetooth: hci4: command tx timeout [ 103.603409][ T5799] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.636726][ T5799] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 103.671927][ T5799] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.726123][ T5799] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 103.851311][ T5795] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.878194][ T5795] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.921147][ T5795] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.971444][ T5795] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.113806][ T5794] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.154081][ T5794] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.197867][ T5794] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.236185][ T5794] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.350417][ T5798] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.385373][ T5798] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.431739][ T5798] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.465854][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.499190][ T5798] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.661669][ T5804] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.703750][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.714443][ T5804] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.755705][ T5804] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.785409][ T5804] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.840906][ T3506] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.841949][ T3506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.890699][ T3506] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.890976][ T3506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.999545][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.094881][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.099500][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.154772][ T3538] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.155535][ T3538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.213551][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.227688][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.272919][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.306026][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.333608][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.333838][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.376440][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.376734][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.480568][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.494325][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.523549][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.524240][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.572004][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.572141][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.644731][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.683462][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.724461][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.724692][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.821361][ T3585] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.828947][ T3585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.385913][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.553746][ T5799] veth0_vlan: entered promiscuous mode [ 106.603831][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.624598][ T5799] veth1_vlan: entered promiscuous mode [ 106.701161][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.720047][ T5795] veth0_vlan: entered promiscuous mode [ 106.752684][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.783589][ T5795] veth1_vlan: entered promiscuous mode [ 106.823370][ T5799] veth0_macvtap: entered promiscuous mode [ 106.846161][ T5799] veth1_macvtap: entered promiscuous mode [ 106.876435][ T5794] veth0_vlan: entered promiscuous mode [ 106.930728][ T5794] veth1_vlan: entered promiscuous mode [ 106.934944][ T5798] veth0_vlan: entered promiscuous mode [ 106.949518][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.988231][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.996847][ T5795] veth0_macvtap: entered promiscuous mode [ 107.027378][ T5798] veth1_vlan: entered promiscuous mode [ 107.044969][ T5804] veth0_vlan: entered promiscuous mode [ 107.055514][ T3585] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.067869][ T5795] veth1_macvtap: entered promiscuous mode [ 107.073716][ T3585] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.092412][ T3585] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.101073][ T3585] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.138641][ T5804] veth1_vlan: entered promiscuous mode [ 107.246537][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.253323][ T5794] veth0_macvtap: entered promiscuous mode [ 107.322396][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.354335][ T5794] veth1_macvtap: entered promiscuous mode [ 107.388677][ T3585] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.390882][ T3585] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.391542][ T5798] veth0_macvtap: entered promiscuous mode [ 107.408682][ T3585] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.435873][ T3585] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.480079][ T5798] veth1_macvtap: entered promiscuous mode [ 107.535845][ T3506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.535867][ T3506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.580726][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.621833][ T5804] veth0_macvtap: entered promiscuous mode [ 107.671351][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.739671][ T5804] veth1_macvtap: entered promiscuous mode [ 107.764157][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.776201][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.776222][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.810061][ T1111] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.827882][ T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.831549][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.876985][ T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.915675][ T43] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.947386][ T43] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.013959][ T1165] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.016904][ T1165] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.016977][ T1165] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.045315][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.045336][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.070797][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.194395][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.392637][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.392658][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.424442][ T43] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.463966][ T1165] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.484871][ T3585] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.549951][ T3585] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.938807][ T3585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.938832][ T3585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.847335][ T3585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.847358][ T3585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.461041][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.461064][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.543356][ T5934] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 110.612674][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.612696][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.763856][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.763879][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.085451][ T3585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.085474][ T3585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.337465][ T5808] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 111.527186][ T5808] usb 5-1: Using ep0 maxpacket: 32 [ 111.556158][ T5808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 65535, setting to 1024 [ 111.556195][ T5808] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 111.587338][ T5808] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 111.587371][ T5808] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 111.587392][ T5808] usb 5-1: Product: syz [ 111.587407][ T5808] usb 5-1: Manufacturer: syz [ 111.587422][ T5808] usb 5-1: SerialNumber: syz [ 111.648446][ T5808] usb 5-1: config 0 descriptor?? [ 111.654511][ T5939] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 112.004884][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.029045][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.037125][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.047124][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.057143][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.067132][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.077123][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.087121][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.097136][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.107127][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.977860][ T5966] process 'syz.1.2' launched '/dev/fd/7/./file0' with NULL argv: empty string added [ 115.000872][ T5892] usb 5-1: USB disconnect, device number 2 [ 115.330143][ T5968] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 122.674572][ T6029] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.32'. [ 122.675262][ T6028] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.32'. [ 127.854556][ T6102] netlink: 'syz.4.42': attribute type 21 has an invalid length. [ 129.837867][ T6112] binder: 6110:6112 ioctl c0306201 200000000640 returned -22 [ 131.378100][ T5944] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 131.548909][ T5944] usb 1-1: Using ep0 maxpacket: 32 [ 131.568194][ T5944] usb 1-1: unable to get BOS descriptor or descriptor too short [ 131.593352][ T5944] usb 1-1: config 8 has an invalid interface number: 170 but max is 0 [ 131.593374][ T5944] usb 1-1: config 8 has no interface number 0 [ 131.593410][ T5944] usb 1-1: config 8 interface 170 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 131.593430][ T5944] usb 1-1: config 8 interface 170 altsetting 2 endpoint 0xB has invalid maxpacket 22275, setting to 64 [ 131.593448][ T5944] usb 1-1: config 8 interface 170 has no altsetting 0 [ 131.656896][ T5944] usb 1-1: New USB device found, idVendor=1385, idProduct=4250, bcdDevice=63.ab [ 131.656929][ T5944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.656952][ T5944] usb 1-1: Product: syz [ 131.656967][ T5944] usb 1-1: Manufacturer: syz [ 131.656982][ T5944] usb 1-1: SerialNumber: syz [ 132.298043][ T5944] usb 1-1: Could not find all expected endpoints [ 132.324085][ T5944] usb 1-1: USB disconnect, device number 2 [ 133.230684][ T6170] Zero length message leads to an empty skb [ 134.493384][ T6187] netlink: 'syz.4.54': attribute type 21 has an invalid length. [ 138.068182][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.068284][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.845888][ T6240] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 141.072561][ T6258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.66'. [ 142.326402][ T6269] netlink: 'syz.1.68': attribute type 21 has an invalid length. [ 145.791972][ T5931] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 149.818687][ T6348] netlink: 'syz.3.81': attribute type 1 has an invalid length. [ 149.818711][ T6348] netlink: 472 bytes leftover after parsing attributes in process `syz.3.81'. [ 153.073380][ T6376] capability: warning: `syz.2.90' uses 32-bit capabilities (legacy support in use) [ 153.617206][ T805] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 154.460929][ T805] usb 3-1: Using ep0 maxpacket: 8 [ 154.475607][ T805] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 154.475631][ T805] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 154.475649][ T805] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 154.475666][ T805] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.475696][ T805] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 154.475725][ T805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.818172][ T805] usb 3-1: usb_control_msg returned -32 [ 155.818224][ T805] usbtmc 3-1:16.0: can't read capabilities [ 155.822716][ T6401] netlink: 'syz.1.93': attribute type 20 has an invalid length. [ 156.120147][ T6207] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 156.663337][ T6207] usb 4-1: device descriptor read/64, error -71 [ 157.397623][ T6207] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 157.483205][ T6077] usb 3-1: USB disconnect, device number 3 [ 163.642062][ T5931] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 163.797466][ T5931] usb 1-1: Using ep0 maxpacket: 8 [ 163.803331][ T5931] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 163.803368][ T5931] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 163.803394][ T5931] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 163.803418][ T5931] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.803461][ T5931] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 163.803484][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.896247][ T6456] fuse: Unknown parameter 'fd0x0000000000000006' [ 164.960650][ T5931] usb 1-1: usb_control_msg returned -32 [ 164.960702][ T5931] usbtmc 1-1:16.0: can't read capabilities [ 165.360375][ T6466] gfs2: not a GFS2 filesystem [ 166.647261][ T805] usb 1-1: USB disconnect, device number 3 [ 168.231084][ T6496] fuse: Unknown parameter 'fd0x0000000000000006' [ 169.701516][ T6500] affs: No valid root block on device nullb0 [ 171.160751][ T6515] netlink: 28 bytes leftover after parsing attributes in process `syz.3.125'. [ 173.657263][ T5886] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 173.988043][ T6532] sctp: [Deprecated]: syz.3.131 (pid 6532) Use of int in max_burst socket option deprecated. [ 173.988043][ T6532] Use struct sctp_assoc_value instead [ 174.577113][ T5886] usb 3-1: Using ep0 maxpacket: 8 [ 174.596537][ T5886] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 174.596573][ T5886] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 174.596600][ T5886] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 174.596626][ T5886] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 174.596669][ T5886] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 174.596693][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.927518][ T5886] usb 3-1: usb_control_msg returned -32 [ 174.927571][ T5886] usbtmc 3-1:16.0: can't read capabilities [ 176.424119][ T6207] usb 3-1: USB disconnect, device number 4 [ 181.287285][ T5886] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 181.479126][ T5886] usb 5-1: Using ep0 maxpacket: 8 [ 181.501023][ T5886] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 181.501061][ T5886] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 181.501088][ T5886] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 181.501463][ T5886] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.501509][ T5886] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 181.501534][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.862220][ T5886] usb 5-1: usb_control_msg returned -32 [ 181.862275][ T5886] usbtmc 5-1:16.0: can't read capabilities [ 183.861365][ T6271] usb 5-1: USB disconnect, device number 3 [ 185.191917][ T6610] netlink: 'syz.4.154': attribute type 10 has an invalid length. [ 185.575275][ T6610] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 186.387146][ T6207] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 188.009566][ T6207] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 188.009592][ T6207] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 188.009611][ T6207] usb 5-1: config 0 interface 0 has no altsetting 0 [ 188.009636][ T6207] usb 5-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 188.009653][ T6207] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.042730][ T6207] usb 5-1: config 0 descriptor?? [ 188.089182][ T6622] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 189.186905][ T6622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.428693][ T6207] usbhid 5-1:0.0: can't add hid device: -71 [ 189.428837][ T6207] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 189.441861][ T6207] usb 5-1: USB disconnect, device number 4 [ 191.333303][ T6650] netlink: 'syz.4.165': attribute type 10 has an invalid length. [ 191.364698][ T5885] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 191.527115][ T5885] usb 3-1: Using ep0 maxpacket: 8 [ 191.546941][ T5885] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 191.546986][ T5885] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 191.569638][ T5885] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 191.569672][ T5885] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 191.569723][ T5885] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 191.569746][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.777547][ T6656] hugetlbfs: syz.1.160 (6656): Using mlock ulimits for SHM_HUGETLB is obsolete [ 193.415458][ T5885] usb 3-1: usb_control_msg returned -32 [ 193.415521][ T5885] usbtmc 3-1:16.0: can't read capabilities [ 193.460156][ T6662] 9pnet_virtio: no channels available for device syz [ 195.577211][ T6504] usb 3-1: USB disconnect, device number 5 [ 195.797820][ T6686] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.089031][ T6697] 9pnet_virtio: no channels available for device syz [ 200.356138][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.356215][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.232248][ T5944] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 203.217227][ T5944] usb 4-1: Using ep0 maxpacket: 8 [ 203.220286][ T5944] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 203.220321][ T5944] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 203.220347][ T5944] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 203.220371][ T5944] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 203.220416][ T5944] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 203.220439][ T5944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.479329][ T5944] usb 4-1: usb_control_msg returned -32 [ 203.479381][ T5944] usbtmc 4-1:16.0: can't read capabilities [ 204.131812][ T6745] 9pnet_virtio: no channels available for device syz [ 204.691858][ T6739] 9p: Could not find request transport: fd0x0000000000000004 [ 205.385313][ T5892] usb 4-1: USB disconnect, device number 4 [ 209.880865][ T6782] 9pnet_virtio: no channels available for device syz [ 210.468059][ T6786] 9p: Could not find request transport: fd0x0000000000000004 [ 212.023007][ T6082] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 212.237435][ T6082] usb 2-1: Using ep0 maxpacket: 8 [ 212.253869][ T6082] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 212.253906][ T6082] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 212.253933][ T6082] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 212.253957][ T6082] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.254001][ T6082] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 212.254025][ T6082] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.850682][ T6082] usb 2-1: usb_control_msg returned -32 [ 212.850738][ T6082] usbtmc 2-1:16.0: can't read capabilities [ 214.975323][ T6822] 9pnet_virtio: no channels available for device syz [ 215.231227][ T5944] usb 2-1: USB disconnect, device number 2 [ 215.588662][ T6825] 9p: Could not find request transport: fd0x0000000000000004 [ 215.989566][ T5944] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 216.610073][ T5944] usb 2-1: Using ep0 maxpacket: 32 [ 216.634370][ T5944] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 216.634400][ T5944] usb 2-1: config 0 has no interface number 0 [ 216.634449][ T5944] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 216.666192][ T5944] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 216.666222][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.666241][ T5944] usb 2-1: Product: syz [ 216.666256][ T5944] usb 2-1: Manufacturer: syz [ 216.666270][ T5944] usb 2-1: SerialNumber: syz [ 216.741460][ T5944] usb 2-1: config 0 descriptor?? [ 216.959311][ T5807] Bluetooth: hci0: command 0x0406 tx timeout [ 217.021833][ T5944] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 217.021877][ T5944] em28xx 2-1:0.132: Video interface 132 found: [ 217.264372][ T5944] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 218.710571][ T5944] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 218.710611][ T5944] em28xx 2-1:0.132: board has no eeprom [ 218.778080][ T5944] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 218.778123][ T5944] em28xx 2-1:0.132: analog set to bulk mode. [ 218.779054][ T9] em28xx 2-1:0.132: Registering V4L2 extension [ 218.841082][ T5944] usb 2-1: USB disconnect, device number 3 [ 218.843489][ T5944] em28xx 2-1:0.132: Disconnecting em28xx [ 218.997882][ T6863] 9pnet_virtio: no channels available for device syz [ 219.337211][ T6627] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 219.537856][ T6627] usb 5-1: Using ep0 maxpacket: 8 [ 219.540399][ T6627] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 219.540435][ T6627] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 219.540462][ T6627] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 219.540488][ T6627] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 219.540532][ T6627] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 219.540556][ T6627] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.647313][ T9] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 219.647402][ T9] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 219.647418][ T9] em28xx 2-1:0.132: No AC97 audio processor [ 219.811368][ T6627] usb 5-1: usb_control_msg returned -32 [ 219.811419][ T6627] usbtmc 5-1:16.0: can't read capabilities [ 219.816908][ T9] usb 2-1: Decoder not found [ 219.816929][ T9] em28xx 2-1:0.132: failed to create media graph [ 219.847267][ T9] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 219.905741][ T9] em28xx 2-1:0.132: Remote control support is not available for this card. [ 219.906758][ T5944] em28xx 2-1:0.132: Closing input extension [ 220.546164][ T5944] em28xx 2-1:0.132: Freeing device [ 220.569620][ T5974] udevd[5974]: setting mode of /dev/bus/usb/002/003 to 020664 failed: No such file or directory [ 220.569828][ T5974] udevd[5974]: setting owner of /dev/bus/usb/002/003 to uid=0, gid=0 failed: No such file or directory [ 221.177147][ T5944] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 221.328003][ T5944] usb 2-1: Using ep0 maxpacket: 32 [ 221.343636][ T5944] usb 2-1: unable to get BOS descriptor or descriptor too short [ 221.346865][ T5944] usb 2-1: config 8 has an invalid interface number: 170 but max is 0 [ 221.346891][ T5944] usb 2-1: config 8 has no interface number 0 [ 221.346941][ T5944] usb 2-1: config 8 interface 170 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 221.346968][ T5944] usb 2-1: config 8 interface 170 has no altsetting 0 [ 221.398648][ T5944] usb 2-1: New USB device found, idVendor=1385, idProduct=4250, bcdDevice=63.ab [ 221.398682][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.398703][ T5944] usb 2-1: Product: syz [ 221.398719][ T5944] usb 2-1: Manufacturer: syz [ 221.398742][ T5944] usb 2-1: SerialNumber: syz [ 221.649957][ T5944] usb 2-1: Could not find all expected endpoints [ 221.677506][ T5944] usb 2-1: USB disconnect, device number 4 [ 221.953511][ T5944] usb 5-1: USB disconnect, device number 5 [ 221.997207][ T5806] Bluetooth: hci3: command 0x0406 tx timeout [ 221.997436][ T5806] Bluetooth: hci1: command 0x0406 tx timeout [ 221.997593][ T5806] Bluetooth: hci4: command 0x0406 tx timeout [ 221.997700][ T5806] Bluetooth: hci2: command 0x0406 tx timeout [ 224.375407][ T6917] ======================================================= [ 224.375407][ T6917] WARNING: The mand mount option has been deprecated and [ 224.375407][ T6917] and is ignored by this kernel. Remove the mand [ 224.375407][ T6917] option from the mount to silence this warning. [ 224.375407][ T6917] ======================================================= [ 224.379910][ T6917] hfsplus: unable to find HFS+ superblock [ 225.228225][ T6907] 9pnet_virtio: no channels available for device syz [ 226.597160][ T5931] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 226.747215][ T5931] usb 2-1: Using ep0 maxpacket: 8 [ 226.749957][ T5931] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 226.749985][ T5931] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 226.750010][ T5931] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 226.750034][ T5931] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.750083][ T5931] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 226.750102][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.826944][ T5885] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 226.997474][ T5885] usb 4-1: Using ep0 maxpacket: 32 [ 227.074070][ T5931] usb 2-1: usb_control_msg returned -32 [ 227.074178][ T5931] usbtmc 2-1:16.0: can't read capabilities [ 227.074795][ T5885] usb 4-1: unable to get BOS descriptor or descriptor too short [ 227.127895][ T5885] usb 4-1: config 8 has an invalid interface number: 170 but max is 0 [ 227.127924][ T5885] usb 4-1: config 8 has no interface number 0 [ 227.127957][ T5885] usb 4-1: config 8 interface 170 has no altsetting 0 [ 227.171021][ T5885] usb 4-1: New USB device found, idVendor=1385, idProduct=4250, bcdDevice=63.ab [ 227.171053][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.171074][ T5885] usb 4-1: Product: syz [ 227.171089][ T5885] usb 4-1: Manufacturer: syz [ 227.171105][ T5885] usb 4-1: SerialNumber: syz [ 227.598540][ T5885] usb 4-1: Could not find all expected endpoints [ 227.666045][ T5885] usb 4-1: USB disconnect, device number 5 [ 229.354534][ T6077] usb 2-1: USB disconnect, device number 5 [ 229.683384][ T6960] 9pnet_virtio: no channels available for device syz [ 231.273932][ T6969] netlink: 'syz.1.256': attribute type 21 has an invalid length. [ 231.274041][ T6969] IPv6: NLM_F_CREATE should be specified when creating new route [ 231.278861][ T6969] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 231.279529][ T6969] IPv6: NLM_F_CREATE should be set when creating new route [ 231.355032][ T6969] sctp: [Deprecated]: syz.1.256 (pid 6969) Use of int in max_burst socket option deprecated. [ 231.355032][ T6969] Use struct sctp_assoc_value instead [ 233.763790][ T5885] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 234.967059][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 234.976290][ T5885] usb 3-1: unable to get BOS descriptor or descriptor too short [ 234.994206][ T5885] usb 3-1: config 8 has an invalid interface number: 170 but max is 0 [ 234.994236][ T5885] usb 3-1: config 8 has no interface number 0 [ 234.994272][ T5885] usb 3-1: config 8 interface 170 has no altsetting 0 [ 234.996926][ T5885] usb 3-1: New USB device found, idVendor=1385, idProduct=4250, bcdDevice=63.ab [ 234.996956][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.996977][ T5885] usb 3-1: Product: syz [ 235.002283][ T5885] usb 3-1: Manufacturer: syz [ 235.002335][ T5885] usb 3-1: SerialNumber: syz [ 235.227267][ T5893] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 235.818240][ T5893] usb 1-1: Using ep0 maxpacket: 8 [ 235.825683][ T5893] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 235.825709][ T5893] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 235.825726][ T5893] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 235.825743][ T5893] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 235.825774][ T5893] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 235.825790][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.920716][ T5885] usb 3-1: Could not find all expected endpoints [ 235.978922][ T5885] usb 3-1: USB disconnect, device number 6 [ 236.134751][ T7000] 9pnet_virtio: no channels available for device syz [ 236.173483][ T5893] usb 1-1: usb_control_msg returned -32 [ 236.173519][ T5893] usbtmc 1-1:16.0: can't read capabilities [ 238.537363][ T7015] netlink: 'syz.3.269': attribute type 21 has an invalid length. [ 238.537392][ T7015] IPv6: NLM_F_CREATE should be specified when creating new route [ 239.646353][ T7015] sctp: [Deprecated]: syz.3.269 (pid 7015) Use of int in max_burst socket option deprecated. [ 239.646353][ T7015] Use struct sctp_assoc_value instead [ 239.790799][ T6001] usb 1-1: USB disconnect, device number 4 [ 246.177181][ T6077] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 246.367142][ T6077] usb 5-1: Using ep0 maxpacket: 8 [ 246.541150][ T6077] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 246.541185][ T6077] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 246.541210][ T6077] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 246.541234][ T6077] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 246.541275][ T6077] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 246.541298][ T6077] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.839519][ T6077] usb 5-1: usb_control_msg returned -32 [ 246.839558][ T6077] usbtmc 5-1:16.0: can't read capabilities [ 247.382173][ T7061] netlink: 'syz.3.283': attribute type 21 has an invalid length. [ 247.462773][ T7062] sctp: [Deprecated]: syz.3.283 (pid 7062) Use of int in max_burst socket option deprecated. [ 247.462773][ T7062] Use struct sctp_assoc_value instead [ 249.777207][ T5885] usb 5-1: USB disconnect, device number 6 [ 253.901233][ T7098] 9pnet_virtio: no channels available for device syz [ 256.512005][ T7106] netlink: 'syz.1.296': attribute type 21 has an invalid length. [ 256.516061][ T7106] sctp: [Deprecated]: syz.1.296 (pid 7106) Use of int in max_burst socket option deprecated. [ 256.516061][ T7106] Use struct sctp_assoc_value instead [ 258.671615][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 259.403441][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 259.408461][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 259.408499][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 259.408526][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 259.408551][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 259.408595][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 259.408619][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.943605][ T9] usb 2-1: usb_control_msg returned -32 [ 259.943667][ T9] usbtmc 2-1:16.0: can't read capabilities [ 261.001481][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.001566][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.386386][ T6271] usb 2-1: USB disconnect, device number 6 [ 263.578025][ T7157] netlink: 'syz.1.308': attribute type 21 has an invalid length. [ 263.583622][ T7157] sctp: [Deprecated]: syz.1.308 (pid 7157) Use of int in max_burst socket option deprecated. [ 263.583622][ T7157] Use struct sctp_assoc_value instead [ 264.501523][ T7166] gfs2: not a GFS2 filesystem [ 267.608384][ T7185] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.318'. [ 267.618696][ T7184] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.318'. [ 270.716620][ T5803] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 270.747444][ T5803] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 270.767338][ T5803] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 270.788773][ T5803] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 270.790971][ T5803] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 271.380161][ T7230] netlink: 'syz.1.324': attribute type 21 has an invalid length. [ 271.432423][ T7230] sctp: [Deprecated]: syz.1.324 (pid 7230) Use of int in max_burst socket option deprecated. [ 271.432423][ T7230] Use struct sctp_assoc_value instead [ 273.184349][ T7240] gfs2: not a GFS2 filesystem [ 273.470801][ T5797] Bluetooth: hci5: command tx timeout [ 274.011692][ T7252] netlink: 'syz.2.331': attribute type 10 has an invalid length. [ 275.368116][ T7258] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.330'. [ 275.547083][ T5797] Bluetooth: hci5: command tx timeout [ 278.595091][ T5797] Bluetooth: hci5: command tx timeout [ 279.171067][ T7252] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 280.387337][ T7316] netlink: 'syz.4.336': attribute type 21 has an invalid length. [ 280.471421][ T7316] sctp: [Deprecated]: syz.4.336 (pid 7316) Use of int in max_burst socket option deprecated. [ 280.471421][ T7316] Use struct sctp_assoc_value instead [ 280.544042][ T7319] gfs2: not a GFS2 filesystem [ 280.890444][ T5803] Bluetooth: hci5: command tx timeout [ 282.287038][ T7329] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.342'. [ 282.309271][ T7328] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.342'. [ 282.649360][ T7360] trusted_key: encrypted_key: insufficient parameters specified [ 286.089668][ T6066] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.516404][ T7388] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 286.855881][ T7392] overlayfs: overlapping lowerdir path [ 287.304824][ T7396] /dev/nullb0: Can't open blockdev [ 287.607926][ T6066] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.857638][ T7225] chnl_net:caif_netlink_parms(): no params data found [ 289.534258][ T7402] binder_alloc: 7401: binder_alloc_buf, no vma [ 289.798772][ T6066] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.970611][ T7419] trusted_key: encrypted_key: insufficient parameters specified [ 293.936366][ T6066] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.754399][ T7225] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.769786][ T7225] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.769998][ T7225] bridge_slave_0: entered allmulticast mode [ 295.791051][ T7225] bridge_slave_0: entered promiscuous mode [ 295.817924][ T7225] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.818140][ T7225] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.818361][ T7225] bridge_slave_1: entered allmulticast mode [ 297.477992][ T7225] bridge_slave_1: entered promiscuous mode [ 297.904703][ T7225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.938681][ T7225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.160233][ T7447] binder_alloc: 7446: binder_alloc_buf, no vma [ 299.360816][ T7455] hfsplus: unable to find HFS+ superblock [ 300.289201][ T7225] team0: Port device team_slave_0 added [ 300.292669][ T7225] team0: Port device team_slave_1 added [ 301.028881][ T7465] gfs2: not a GFS2 filesystem [ 304.250535][ T7475] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.364'. [ 304.251665][ T6066] bridge_slave_1: left allmulticast mode [ 304.251778][ T6066] bridge_slave_1: left promiscuous mode [ 304.252516][ T6066] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.668715][ T6066] bridge_slave_0: left allmulticast mode [ 305.668764][ T6066] bridge_slave_0: left promiscuous mode [ 305.671462][ T6066] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.913539][ T7522] trusted_key: encrypted_key: insufficient parameters specified [ 312.354509][ T7541] gfs2: not a GFS2 filesystem [ 319.177950][ T6066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.258411][ T6066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.305247][ T6066] bond0 (unregistering): Released all slaves [ 319.462180][ T7225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.462199][ T7225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.462228][ T7225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.530364][ T7225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.530395][ T7225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.530422][ T7225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.792498][ T7576] trusted_key: encrypted_key: insufficient parameters specified [ 322.670559][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.670640][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.980105][ T7581] Process accounting resumed [ 325.129952][ T7225] hsr_slave_0: entered promiscuous mode [ 325.131376][ T7225] hsr_slave_1: entered promiscuous mode [ 325.132467][ T7225] debugfs: 'hsr0' already exists in 'hsr' [ 325.132488][ T7225] Cannot create hsr debugfs directory [ 327.308729][ T7619] netlink: 'syz.4.399': attribute type 21 has an invalid length. [ 327.308758][ T7619] IPv6: NLM_F_CREATE should be specified when creating new route [ 327.313616][ T7619] sctp: [Deprecated]: syz.4.399 (pid 7619) Use of int in max_burst socket option deprecated. [ 327.313616][ T7619] Use struct sctp_assoc_value instead [ 328.201571][ T7631] Illegal XDP return value 4294967262 on prog (id 84) dev syz_tun, expect packet loss! [ 328.503077][ T6066] hsr_slave_0: left promiscuous mode [ 328.523950][ T6066] hsr_slave_1: left promiscuous mode [ 328.525242][ T6066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.525368][ T6066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.578779][ T6066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.578800][ T6066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.714572][ T6066] veth1_macvtap: left promiscuous mode [ 328.714885][ T6066] veth0_macvtap: left promiscuous mode [ 328.715190][ T6066] veth1_vlan: left promiscuous mode [ 328.715585][ T6066] veth0_vlan: left promiscuous mode [ 330.241864][ T5803] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 330.254411][ T5803] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 330.255692][ T5803] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 330.258412][ T5803] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 330.298912][ T5803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 332.851361][ T5803] Bluetooth: hci1: command tx timeout [ 334.419503][ T7639] Set syz1 is full, maxelem 65536 reached [ 334.877176][ T5803] Bluetooth: hci1: command tx timeout [ 335.081640][ T7655] netlink: 'syz.2.405': attribute type 21 has an invalid length. [ 335.125375][ T7655] sctp: [Deprecated]: syz.2.405 (pid 7655) Use of int in max_burst socket option deprecated. [ 335.125375][ T7655] Use struct sctp_assoc_value instead [ 337.202564][ T5803] Bluetooth: hci1: command tx timeout [ 337.248451][ T7665] trusted_key: encrypted_key: insufficient parameters specified [ 339.277095][ T5803] Bluetooth: hci1: command tx timeout [ 345.131048][ T5797] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 345.135694][ T5797] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 345.136782][ T5797] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 345.171587][ T5797] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 345.172872][ T5797] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 345.417987][ T6066] team0 (unregistering): Port device team_slave_1 removed [ 345.837885][ T6066] team0 (unregistering): Port device team_slave_0 removed [ 347.398697][ T5797] Bluetooth: hci6: command tx timeout [ 349.495625][ T5803] Bluetooth: hci6: command tx timeout [ 351.520801][ T5803] Bluetooth: hci6: command tx timeout [ 353.597301][ T5803] Bluetooth: hci6: command tx timeout [ 354.627663][ T7738] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.427'. [ 359.562329][ T7811] futex_wake_op: syz.2.435 tries to shift op by -1; fix this program [ 360.077168][ T6077] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 360.238997][ T6077] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.239034][ T6077] usb 3-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 360.239050][ T6077] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.242813][ T6077] usb 3-1: config 0 descriptor?? [ 360.903218][ T6077] apple 0003:05AC:027D.0001: collection stack underflow [ 360.903254][ T6077] apple 0003:05AC:027D.0001: item 0 4 0 12 parsing failed [ 360.904199][ T6077] apple 0003:05AC:027D.0001: parse failed [ 360.904319][ T6077] apple 0003:05AC:027D.0001: probe with driver apple failed with error -22 [ 361.147497][ T7691] chnl_net:caif_netlink_parms(): no params data found [ 361.174521][ T7642] chnl_net:caif_netlink_parms(): no params data found [ 361.206412][ T6066] bridge_slave_1: left allmulticast mode [ 361.206444][ T6066] bridge_slave_1: left promiscuous mode [ 361.206749][ T6066] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.723743][ T5808] usb 3-1: USB disconnect, device number 7 [ 362.290466][ T6066] bridge_slave_0: left allmulticast mode [ 362.292456][ T6066] bridge_slave_0: left promiscuous mode [ 362.302284][ T6066] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.130415][ T6066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.436447][ T6066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.481869][ T6066] bond0 (unregistering): Released all slaves [ 364.507432][ T7829] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.438'. [ 367.119742][ T6066] hsr_slave_0: left promiscuous mode [ 367.167206][ T6066] hsr_slave_1: left promiscuous mode [ 367.187292][ T6066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.238537][ T6066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.312001][ T6066] team0 (unregistering): Port device team_slave_1 removed [ 370.511749][ T6066] team0 (unregistering): Port device team_slave_0 removed [ 373.676390][ T7912] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 373.676732][ T7912] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 373.750666][ T7938] trusted_key: encrypted_key: insufficient parameters specified [ 376.367128][ T5808] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 377.773165][ T5808] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 377.773196][ T5808] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 377.773210][ T5808] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 377.773244][ T5808] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 377.773264][ T5808] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 377.774731][ T5808] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 377.774750][ T5808] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 377.774765][ T5808] usb 3-1: Product: syz [ 377.774775][ T5808] usb 3-1: Manufacturer: syz [ 377.868361][ T5808] cdc_wdm 3-1:1.0: skipping garbage [ 377.868377][ T5808] cdc_wdm 3-1:1.0: skipping garbage [ 377.903518][ T7691] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.903649][ T7691] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.903852][ T7691] bridge_slave_0: entered allmulticast mode [ 377.915041][ T5808] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 377.915109][ T5808] cdc_wdm 3-1:1.0: Unknown control protocol [ 377.932004][ T7691] bridge_slave_0: entered promiscuous mode [ 378.155888][ T7642] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.156125][ T7642] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.156331][ T7642] bridge_slave_0: entered allmulticast mode [ 378.168464][ T7642] bridge_slave_0: entered promiscuous mode [ 378.480685][ T5808] usb 3-1: USB disconnect, device number 8 [ 378.909790][ T7691] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.909903][ T7691] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.910120][ T7691] bridge_slave_1: entered allmulticast mode [ 378.957762][ T7691] bridge_slave_1: entered promiscuous mode [ 379.102238][ T7642] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.102360][ T7642] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.102573][ T7642] bridge_slave_1: entered allmulticast mode [ 379.105311][ T7642] bridge_slave_1: entered promiscuous mode [ 380.360336][ T7691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.451747][ T7642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.471859][ T7691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.497892][ T7642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.768149][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.768225][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.901399][ T7691] team0: Port device team_slave_0 added [ 383.918350][ T7642] team0: Port device team_slave_0 added [ 383.923483][ T7691] team0: Port device team_slave_1 added [ 383.959001][ T7642] team0: Port device team_slave_1 added [ 389.714117][ T7691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.714137][ T7691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.714165][ T7691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.716854][ T7691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.716869][ T7691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.716895][ T7691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.897217][ T7642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.897248][ T7642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.897278][ T7642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.977826][ T7642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.977840][ T7642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.977860][ T7642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.545003][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 390.569000][ T5797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 390.579298][ T5797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 390.581256][ T5797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 390.587954][ T5797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 390.681233][ T7691] hsr_slave_0: entered promiscuous mode [ 390.682688][ T7691] hsr_slave_1: entered promiscuous mode [ 390.683732][ T7691] debugfs: 'hsr0' already exists in 'hsr' [ 390.683757][ T7691] Cannot create hsr debugfs directory [ 391.997146][ T5944] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 392.159906][ T5944] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 392.159936][ T5944] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 392.159957][ T5944] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 392.160009][ T5944] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 392.160037][ T5944] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 392.162366][ T5944] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 392.162394][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 392.162416][ T5944] usb 2-1: Product: syz [ 392.162431][ T5944] usb 2-1: Manufacturer: syz [ 392.331564][ T5944] cdc_wdm 2-1:1.0: skipping garbage [ 392.331588][ T5944] cdc_wdm 2-1:1.0: skipping garbage [ 392.377370][ T5944] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 392.377388][ T5944] cdc_wdm 2-1:1.0: Unknown control protocol [ 392.565913][ T5944] usb 2-1: USB disconnect, device number 7 [ 392.717528][ T5803] Bluetooth: hci3: command tx timeout [ 392.750728][ T7990] syz.3.467 (7990): drop_caches: 2 [ 394.335822][ T8034] tmpfs: Unknown parameter 'grpquota"ÈYFü)_inode_hardlimit' [ 394.850685][ T5803] Bluetooth: hci3: command tx timeout [ 396.946209][ T5797] Bluetooth: hci3: command tx timeout [ 399.340153][ T5803] Bluetooth: hci3: command tx timeout [ 400.622222][ T6319] bridge_slave_1: left allmulticast mode [ 400.622251][ T6319] bridge_slave_1: left promiscuous mode [ 400.622546][ T6319] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.668766][ T6319] bridge_slave_0: left allmulticast mode [ 400.668795][ T6319] bridge_slave_0: left promiscuous mode [ 400.669076][ T6319] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.402125][ T8079] syz.2.481 (8079): drop_caches: 2 [ 406.533930][ T5797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 406.554245][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 406.555847][ T5797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 406.564275][ T5797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 406.565395][ T5797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 408.184713][ T6319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.484655][ T6319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.710703][ T5803] Bluetooth: hci1: command tx timeout [ 409.326657][ T8110] Process accounting resumed [ 409.436614][ T6319] bond0 (unregistering): Released all slaves [ 410.877276][ T5803] Bluetooth: hci1: command tx timeout [ 411.246851][ T8131] syz.2.491 (8131): drop_caches: 2 [ 411.846837][ T6319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.898910][ T6319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.974415][ T5803] Bluetooth: hci1: command tx timeout [ 414.793842][ T6319] team0 (unregistering): Port device team_slave_1 removed [ 415.276759][ T5803] Bluetooth: hci1: command tx timeout [ 415.460344][ T6319] team0 (unregistering): Port device team_slave_0 removed [ 418.138455][ T8193] Bluetooth: MGMT ver 1.23 [ 418.527389][ T8015] chnl_net:caif_netlink_parms(): no params data found [ 418.779301][ T5944] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 419.284688][ T5944] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 419.284718][ T5944] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 419.284738][ T5944] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 419.284974][ T5944] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 419.285003][ T5944] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 419.289027][ T5944] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 419.289055][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 419.289076][ T5944] usb 2-1: Product: syz [ 419.289092][ T5944] usb 2-1: Manufacturer: syz [ 419.353534][ T5944] cdc_wdm 2-1:1.0: skipping garbage [ 419.353579][ T5944] cdc_wdm 2-1:1.0: skipping garbage [ 419.403315][ T5944] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 419.403337][ T5944] cdc_wdm 2-1:1.0: Unknown control protocol [ 419.542521][ T5865] usb 2-1: USB disconnect, device number 8 [ 421.812349][ T8097] chnl_net:caif_netlink_parms(): no params data found [ 421.847666][ T8015] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.847811][ T8015] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.847975][ T8015] bridge_slave_0: entered allmulticast mode [ 421.882711][ T8015] bridge_slave_0: entered promiscuous mode [ 421.929898][ T8015] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.930028][ T8015] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.930217][ T8015] bridge_slave_1: entered allmulticast mode [ 421.932965][ T8015] bridge_slave_1: entered promiscuous mode [ 421.997266][ T8225] futex_wake_op: syz.3.515 tries to shift op by -1; fix this program [ 422.258203][ T5892] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 422.297034][ T72] bridge_slave_1: left allmulticast mode [ 422.297065][ T72] bridge_slave_1: left promiscuous mode [ 422.297337][ T72] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.389211][ T72] bridge_slave_0: left allmulticast mode [ 422.389235][ T72] bridge_slave_0: left promiscuous mode [ 422.389596][ T72] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.562411][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.562461][ T5892] usb 4-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 422.562485][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.657288][ T5892] usb 4-1: config 0 descriptor?? [ 423.239333][ T72] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.339774][ T72] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.403647][ T5892] usbhid 4-1:0.0: can't add hid device: -71 [ 423.403780][ T5892] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 423.432993][ T5892] usb 4-1: USB disconnect, device number 6 [ 423.462672][ T72] bond0 (unregistering): Released all slaves [ 423.713748][ T8227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.516'. [ 423.748077][ T8231] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 423.748193][ T8231] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 423.791707][ T8015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.890689][ T8015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.262629][ T72] hsr_slave_0: left promiscuous mode [ 427.812054][ T8267] Process accounting resumed [ 427.867103][ T72] hsr_slave_1: left promiscuous mode [ 427.872267][ T72] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.980721][ T72] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.169456][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 428.325215][ T10] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 428.325248][ T10] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 428.325268][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 428.325322][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 428.325350][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 428.406151][ T10] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 428.406182][ T10] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 428.406203][ T10] usb 2-1: Product: syz [ 428.406218][ T10] usb 2-1: Manufacturer: syz [ 428.499375][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 428.499392][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 428.501579][ T10] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 428.501597][ T10] cdc_wdm 2-1:1.0: Unknown control protocol [ 428.665270][ T5892] usb 2-1: USB disconnect, device number 9 [ 430.022253][ T72] team0 (unregistering): Port device team_slave_1 removed [ 430.148473][ T72] team0 (unregistering): Port device team_slave_0 removed [ 430.788953][ T8274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.526'. [ 430.922697][ T8297] futex_wake_op: syz.3.528 tries to shift op by -1; fix this program [ 431.377171][ T5944] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 431.570758][ T8015] team0: Port device team_slave_0 added [ 431.615954][ T8097] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.616169][ T8097] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.616416][ T8097] bridge_slave_0: entered allmulticast mode [ 431.634887][ T5944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.635039][ T5944] usb 4-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 431.635097][ T5944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.653703][ T8097] bridge_slave_0: entered promiscuous mode [ 431.701037][ T5944] usb 4-1: config 0 descriptor?? [ 431.769289][ T8015] team0: Port device team_slave_1 added [ 431.769874][ T8097] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.770063][ T8097] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.770361][ T8097] bridge_slave_1: entered allmulticast mode [ 431.837819][ T8097] bridge_slave_1: entered promiscuous mode [ 432.530878][ T5944] usbhid 4-1:0.0: can't add hid device: -71 [ 432.531010][ T5944] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 432.585332][ T5944] usb 4-1: USB disconnect, device number 7 [ 434.771625][ T8015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.771638][ T8015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.771657][ T8015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.772122][ T8341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.537'. [ 434.874017][ T8097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.888304][ T8015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.888329][ T8015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.888352][ T8015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.927323][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 434.951627][ T8097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.089091][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 435.089121][ T10] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 435.089141][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 435.089193][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 435.089219][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 435.096520][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 435.096547][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 435.096568][ T10] usb 3-1: Product: syz [ 435.096583][ T10] usb 3-1: Manufacturer: syz [ 435.230766][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 435.230788][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 435.265764][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 435.265786][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 435.375072][ T10] usb 3-1: USB disconnect, device number 9 [ 435.394668][ T8097] team0: Port device team_slave_0 added [ 435.524418][ T8097] team0: Port device team_slave_1 added [ 435.803545][ T5865] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 436.784121][ T5865] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 436.784170][ T5865] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 436.784201][ T5865] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 436.784217][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.924571][ T8015] hsr_slave_0: entered promiscuous mode [ 436.926169][ T8015] hsr_slave_1: entered promiscuous mode [ 436.928945][ T8015] debugfs: 'hsr0' already exists in 'hsr' [ 436.928970][ T8015] Cannot create hsr debugfs directory [ 437.429487][ T5865] usb 2-1: usb_control_msg returned -32 [ 437.429550][ T5865] usbtmc 2-1:16.0: can't read capabilities [ 437.572738][ T8097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.572757][ T8097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.572782][ T8097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.985866][ T8097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.985884][ T8097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.985910][ T8097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.420062][ T8375] netlink: 'syz.2.545': attribute type 21 has an invalid length. [ 438.420144][ T8375] IPv6: NLM_F_CREATE should be specified when creating new route [ 438.463944][ T8375] sctp: [Deprecated]: syz.2.545 (pid 8375) Use of int in max_burst socket option deprecated. [ 438.463944][ T8375] Use struct sctp_assoc_value instead [ 439.343370][ T10] usb 2-1: USB disconnect, device number 10 [ 439.450478][ T8380] futex_wake_op: syz.2.546 tries to shift op by -1; fix this program [ 439.717161][ T5944] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 439.981708][ T5944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.981756][ T5944] usb 3-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 439.981780][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.993119][ T5944] usb 3-1: config 0 descriptor?? [ 440.212515][ T8097] hsr_slave_0: entered promiscuous mode [ 440.214146][ T8097] hsr_slave_1: entered promiscuous mode [ 440.215284][ T8097] debugfs: 'hsr0' already exists in 'hsr' [ 440.215309][ T8097] Cannot create hsr debugfs directory [ 440.582528][ T5944] usbhid 3-1:0.0: can't add hid device: -71 [ 440.582666][ T5944] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 440.604851][ T5944] usb 3-1: USB disconnect, device number 10 [ 441.467355][ T805] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 441.619995][ T8015] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 441.675638][ T805] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 441.675667][ T805] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 441.675693][ T805] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 441.675750][ T805] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 441.675778][ T805] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 441.725290][ T805] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 441.725354][ T805] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 441.725373][ T805] usb 4-1: Product: syz [ 441.725386][ T805] usb 4-1: Manufacturer: syz [ 441.783114][ T805] cdc_wdm 4-1:1.0: skipping garbage [ 441.783135][ T805] cdc_wdm 4-1:1.0: skipping garbage [ 441.808230][ T805] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 441.808252][ T805] cdc_wdm 4-1:1.0: Unknown control protocol [ 441.842933][ T8015] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 441.903207][ T8015] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 441.985251][ T8015] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 442.002952][ T5885] usb 4-1: USB disconnect, device number 8 [ 442.135231][ T8097] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 442.171546][ T8097] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 442.211656][ T8097] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 442.446991][ T8097] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 443.704111][ T8015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.679298][ T8015] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.831664][ T6159] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.835884][ T6159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.932426][ T37] audit: type=1804 audit(1767676196.702:2): pid=8452 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.557" name="/newroot/137/bus/file0" dev="overlay" ino=753 res=1 errno=0 [ 445.199919][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.200071][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.203865][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.203935][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.277673][ T8097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.448994][ T8097] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.514703][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.520526][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.591671][ T6088] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.593535][ T6088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.957262][ T8468] futex_wake_op: syz.1.562 tries to shift op by -1; fix this program [ 446.217136][ T5892] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 446.369688][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.369736][ T5892] usb 2-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 446.369759][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.468876][ T5892] usb 2-1: config 0 descriptor?? [ 446.883817][ T8015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.942804][ T5892] usbhid 2-1:0.0: can't add hid device: -71 [ 446.942946][ T5892] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 446.969231][ T5892] usb 2-1: USB disconnect, device number 11 [ 447.539569][ T8097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.142756][ T8015] veth0_vlan: entered promiscuous mode [ 448.181085][ T8015] veth1_vlan: entered promiscuous mode [ 448.260487][ T8015] veth0_macvtap: entered promiscuous mode [ 448.276478][ T8015] veth1_macvtap: entered promiscuous mode [ 448.287060][ T5808] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 448.332446][ T8015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.356771][ T8015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.386375][ T6159] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.396875][ T6159] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.401155][ T6159] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.404294][ T6159] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.453636][ T5808] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 448.453666][ T5808] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 448.453689][ T5808] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 448.453737][ T5808] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 448.453756][ T5808] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 448.457339][ T5808] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 448.457421][ T5808] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 448.457474][ T5808] usb 4-1: Product: syz [ 448.457509][ T5808] usb 4-1: Manufacturer: syz [ 448.556836][ T5808] cdc_wdm 4-1:1.0: skipping garbage [ 448.556851][ T5808] cdc_wdm 4-1:1.0: skipping garbage [ 448.572999][ T5808] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 448.573019][ T5808] cdc_wdm 4-1:1.0: Unknown control protocol [ 448.786321][ T5886] usb 4-1: USB disconnect, device number 9 [ 448.874680][ T8097] veth0_vlan: entered promiscuous mode [ 448.925623][ T8097] veth1_vlan: entered promiscuous mode [ 448.939076][ T6070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.939096][ T6070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.554716][ T8097] veth0_macvtap: entered promiscuous mode [ 450.590900][ T5797] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 450.594489][ T5797] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 450.595714][ T5797] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 450.622828][ T5797] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 450.624257][ T5797] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 450.676858][ T8097] veth1_macvtap: entered promiscuous mode [ 450.730729][ T8518] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 450.730858][ T8518] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 450.785681][ T8097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.850640][ T8097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.974419][ T6092] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.050192][ T6092] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.074397][ T6092] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.093918][ T6092] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.717113][ T5797] Bluetooth: hci5: command tx timeout [ 453.512669][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.512690][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.970632][ T8561] binder: 8558:8561 ioctl c0306201 0 returned -14 [ 454.123413][ T6092] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.581682][ T6092] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.701218][ T8515] chnl_net:caif_netlink_parms(): no params data found [ 454.703606][ T3506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.703623][ T3506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.797106][ T5797] Bluetooth: hci5: command tx timeout [ 455.051577][ T6092] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.289974][ T8586] binder: 8585:8586 ioctl c0306201 0 returned -14 [ 457.728141][ T5797] Bluetooth: hci5: command tx timeout [ 458.728039][ T8614] hfsplus: unable to find HFS+ superblock [ 459.787084][ T5797] Bluetooth: hci5: command tx timeout [ 459.871356][ T6092] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.961383][ T8515] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.961528][ T8515] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.961797][ T8515] bridge_slave_0: entered allmulticast mode [ 461.057359][ T8515] bridge_slave_0: entered promiscuous mode [ 461.199509][ T8515] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.207454][ T8515] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.207733][ T8515] bridge_slave_1: entered allmulticast mode [ 461.235722][ T8515] bridge_slave_1: entered promiscuous mode [ 461.938916][ T8515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.034095][ T8515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.868509][ T8515] team0: Port device team_slave_0 added [ 462.939791][ T8515] team0: Port device team_slave_1 added [ 463.329717][ T6092] bridge_slave_1: left allmulticast mode [ 463.329748][ T6092] bridge_slave_1: left promiscuous mode [ 463.330016][ T6092] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.479633][ T6092] bridge_slave_0: left allmulticast mode [ 463.479663][ T6092] bridge_slave_0: left promiscuous mode [ 463.479927][ T6092] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.879317][ T8671] netlink: 'syz.1.620': attribute type 21 has an invalid length. [ 464.879348][ T8671] IPv6: NLM_F_CREATE should be specified when creating new route [ 464.887615][ T8671] sctp: [Deprecated]: syz.1.620 (pid 8671) Use of int in max_burst socket option deprecated. [ 464.887615][ T8671] Use struct sctp_assoc_value instead [ 466.412417][ T5885] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 466.586796][ T5885] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 466.586827][ T5885] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 466.586847][ T5885] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 466.588937][ T5885] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 466.588965][ T5885] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 466.603893][ T5885] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 466.603950][ T5885] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 466.604022][ T5885] usb 7-1: Product: syz [ 466.604053][ T5885] usb 7-1: Manufacturer: syz [ 466.759340][ T5885] cdc_wdm 7-1:1.0: skipping garbage [ 466.759362][ T5885] cdc_wdm 7-1:1.0: skipping garbage [ 466.762037][ T5885] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 466.762051][ T5885] cdc_wdm 7-1:1.0: Unknown control protocol [ 466.918014][ T5808] usb 7-1: USB disconnect, device number 2 [ 468.551612][ T6092] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 468.614876][ T6092] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.651856][ T6092] bond0 (unregistering): Released all slaves [ 468.998122][ T8515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.998141][ T8515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.998168][ T8515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.090873][ T8515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.090891][ T8515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.090984][ T8515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.597857][ T8713] Set syz1 is full, maxelem 65536 reached [ 478.315093][ T8515] hsr_slave_0: entered promiscuous mode [ 478.316635][ T8515] hsr_slave_1: entered promiscuous mode [ 478.338180][ T8515] debugfs: 'hsr0' already exists in 'hsr' [ 478.338208][ T8515] Cannot create hsr debugfs directory [ 479.139659][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 479.241049][ T6092] hsr_slave_0: left promiscuous mode [ 479.289520][ T6092] hsr_slave_1: left promiscuous mode [ 479.295430][ T6092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 479.295460][ T6092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.325519][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 479.325541][ T10] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 479.325555][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 479.325595][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 479.325614][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 479.348974][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 479.349006][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 479.349028][ T10] usb 3-1: Product: syz [ 479.349044][ T10] usb 3-1: Manufacturer: syz [ 479.470267][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 479.470289][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 479.473756][ T6092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.473784][ T6092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 479.475344][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 479.475358][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 479.667162][ T10] usb 3-1: USB disconnect, device number 11 [ 479.803597][ T6092] veth1_macvtap: left promiscuous mode [ 479.803707][ T6092] veth0_macvtap: left promiscuous mode [ 479.820027][ T6092] veth1_vlan: left promiscuous mode [ 479.820466][ T6092] veth0_vlan: left promiscuous mode [ 485.167242][ T6077] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 485.329517][ T6077] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 485.329549][ T6077] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 485.329570][ T6077] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 485.331185][ T6077] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 485.331217][ T6077] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 485.386659][ T6077] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 485.386744][ T6077] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 485.386797][ T6077] usb 3-1: Product: syz [ 485.386838][ T6077] usb 3-1: Manufacturer: syz [ 485.449588][ T6077] cdc_wdm 3-1:1.0: skipping garbage [ 485.449603][ T6077] cdc_wdm 3-1:1.0: skipping garbage [ 485.451646][ T6077] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 485.451665][ T6077] cdc_wdm 3-1:1.0: Unknown control protocol [ 485.707526][ T6077] usb 3-1: USB disconnect, device number 12 [ 493.421874][ T6092] team0 (unregistering): Port device team_slave_1 removed [ 493.955855][ T6092] team0 (unregistering): Port device team_slave_0 removed [ 494.019422][ T5944] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 494.169930][ T5944] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 494.169962][ T5944] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 494.169982][ T5944] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 494.170035][ T5944] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 494.170062][ T5944] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 494.172368][ T5944] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 494.172395][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 494.172416][ T5944] usb 2-1: Product: syz [ 494.172431][ T5944] usb 2-1: Manufacturer: syz [ 494.275345][ T5944] cdc_wdm 2-1:1.0: skipping garbage [ 494.275366][ T5944] cdc_wdm 2-1:1.0: skipping garbage [ 494.340394][ T5944] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 494.340419][ T5944] cdc_wdm 2-1:1.0: Unknown control protocol [ 494.488672][ T5944] usb 2-1: USB disconnect, device number 12 [ 497.857099][ T8974] 9p: Bad value for 'source' [ 498.897127][ T5944] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 499.075241][ T5944] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 499.075260][ T5944] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 499.075273][ T5944] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 499.075304][ T5944] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 499.075321][ T5944] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 499.132132][ T5944] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 499.132153][ T5944] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 499.132166][ T5944] usb 7-1: Product: syz [ 499.132175][ T5944] usb 7-1: Manufacturer: syz [ 499.219165][ T5944] cdc_wdm 7-1:1.0: skipping garbage [ 499.219194][ T5944] cdc_wdm 7-1:1.0: skipping garbage [ 499.223528][ T5944] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 499.223545][ T5944] cdc_wdm 7-1:1.0: Unknown control protocol [ 499.472623][ T31] usb 7-1: USB disconnect, device number 3 [ 502.487029][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 502.640829][ T10] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 502.640860][ T10] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 502.640881][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 502.640935][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 502.640963][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 502.643240][ T10] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 502.643267][ T10] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 502.643288][ T10] usb 7-1: Product: syz [ 502.643302][ T10] usb 7-1: Manufacturer: syz [ 502.789725][ T10] cdc_wdm 7-1:1.0: skipping garbage [ 502.790998][ T10] cdc_wdm 7-1:1.0: skipping garbage [ 502.816219][ T10] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 502.816239][ T10] cdc_wdm 7-1:1.0: Unknown control protocol [ 502.993696][ T10] usb 7-1: USB disconnect, device number 4 [ 503.514063][ T9034] hfsplus: unable to find HFS+ superblock [ 503.523562][ T37] audit: type=1800 audit(1767676255.272:3): pid=9034 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.753" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 504.622109][ T9045] trusted_key: encrypted_key: insufficient parameters specified [ 505.901172][ T8971] netlink: 'syz.1.728': attribute type 2 has an invalid length. [ 506.645125][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.645197][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.977066][ T5944] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 507.209264][ T9071] hfsplus: unable to find HFS+ superblock [ 507.217347][ T9076] trusted_key: encrypted_key: insufficient parameters specified [ 507.865432][ T5944] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 507.865470][ T5944] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 507.865499][ T5944] usb 2-1: config 0 interface 0 has no altsetting 0 [ 507.865541][ T5944] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 507.865566][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.009583][ T5944] usb 2-1: config 0 descriptor?? [ 508.012244][ T9064] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 508.361247][ T9064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 509.409096][ T5944] usbhid 2-1:0.0: can't add hid device: -71 [ 509.409227][ T5944] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 509.463490][ T5944] usb 2-1: USB disconnect, device number 13 [ 511.646709][ T9122] trusted_key: encrypted_key: insufficient parameters specified [ 512.876365][ T9129] hfsplus: unable to find HFS+ superblock [ 512.943288][ T5803] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 512.975664][ T5803] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 512.978212][ T5803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 513.140288][ T5803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 513.141493][ T5803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 513.288780][ T9138] binder: 9132:9138 ioctl 4018620d 0 returned -22 [ 515.201349][ T5803] Bluetooth: hci3: command tx timeout [ 515.658228][ T5954] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 515.658267][ T5954] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 515.658292][ T5954] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 515.658324][ T5954] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 515.658348][ T5954] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 515.658371][ T5954] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 515.658394][ T5954] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 515.658417][ T5954] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 515.658440][ T5954] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 515.658463][ T5954] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 515.777025][ T5954] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.43 Device [syz1] on syz1 [ 516.053837][ T5931] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 516.073093][ T9179] hfsplus: unable to find HFS+ superblock [ 516.086635][ T37] audit: type=1800 audit(1767676267.852:4): pid=9179 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.799" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 516.255793][ T5931] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 516.255827][ T5931] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 516.255853][ T5931] usb 3-1: config 0 interface 0 has no altsetting 0 [ 516.255884][ T5931] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 516.255906][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.316122][ T5931] usb 3-1: config 0 descriptor?? [ 516.322990][ T9171] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 516.469184][ T9182] fido_id[9182]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 516.732211][ T9171] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 516.834298][ T9133] chnl_net:caif_netlink_parms(): no params data found [ 516.915354][ T5931] usbhid 3-1:0.0: can't add hid device: -71 [ 516.915447][ T5931] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 516.935912][ T5931] usb 3-1: USB disconnect, device number 13 [ 517.277037][ T5803] Bluetooth: hci3: command tx timeout [ 519.483538][ T5803] Bluetooth: hci3: command tx timeout [ 521.975869][ T5803] Bluetooth: hci3: command tx timeout [ 522.536778][ T9133] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.568943][ T9133] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.569195][ T9133] bridge_slave_0: entered allmulticast mode [ 522.582514][ T9133] bridge_slave_0: entered promiscuous mode [ 524.067417][ T9133] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.067575][ T9133] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.067842][ T9133] bridge_slave_1: entered allmulticast mode [ 524.100372][ T9133] bridge_slave_1: entered promiscuous mode [ 525.362153][ T3585] bridge_slave_1: left allmulticast mode [ 525.362184][ T3585] bridge_slave_1: left promiscuous mode [ 525.362455][ T3585] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.509654][ T3585] bridge_slave_0: left allmulticast mode [ 526.509684][ T3585] bridge_slave_0: left promiscuous mode [ 526.509955][ T3585] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.699947][ T5803] Bluetooth: hci1: command 0x0406 tx timeout [ 531.949377][ T3585] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 532.176168][ T9334] futex_wake_op: syz.1.840 tries to shift op by -1; fix this program [ 532.311857][ T3585] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 532.359840][ T3585] bond0 (unregistering): Released all slaves [ 532.457065][ T5886] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 532.561652][ T9133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 532.603936][ T9133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 532.640345][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.640392][ T5886] usb 2-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 532.640417][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.678714][ T5886] usb 2-1: config 0 descriptor?? [ 532.767077][ T3585] hsr_slave_0: left promiscuous mode [ 532.807202][ T3585] hsr_slave_1: left promiscuous mode [ 532.808306][ T3585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.862941][ T3585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.325981][ T5886] usbhid 2-1:0.0: can't add hid device: -71 [ 533.326109][ T5886] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 533.372115][ T5886] usb 2-1: USB disconnect, device number 14 [ 534.443031][ T9365] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 538.568518][ T3585] team0 (unregistering): Port device team_slave_1 removed [ 539.088368][ T3585] team0 (unregistering): Port device team_slave_0 removed [ 540.658438][ T9377] bridge0: port 3(gretap0) entered blocking state [ 540.658588][ T9377] bridge0: port 3(gretap0) entered disabled state [ 540.658845][ T9377] gretap0: entered allmulticast mode [ 540.663770][ T9377] gretap0: entered promiscuous mode [ 540.667025][ T9377] bridge0: port 3(gretap0) entered blocking state [ 540.667521][ T9377] bridge0: port 3(gretap0) entered forwarding state [ 541.361823][ T9133] team0: Port device team_slave_0 added [ 541.380815][ T9133] team0: Port device team_slave_1 added [ 541.866027][ T9434] 9p: Bad value for 'source' [ 541.868353][ T9434] netlink: 8 bytes leftover after parsing attributes in process `syz.6.881'. [ 541.868372][ T9434] netlink: 8 bytes leftover after parsing attributes in process `syz.6.881'. [ 542.007163][ T9133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.007178][ T9133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.007198][ T9133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.119816][ T9133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.119829][ T9133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.119847][ T9133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.782218][ T9133] hsr_slave_0: entered promiscuous mode [ 542.790436][ T9133] hsr_slave_1: entered promiscuous mode [ 542.792831][ T9133] debugfs: 'hsr0' already exists in 'hsr' [ 542.792894][ T9133] Cannot create hsr debugfs directory [ 543.567040][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 543.716960][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 543.725196][ T9] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 543.725229][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.949480][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 543.949504][ T9] pvrusb2: ********** [ 543.949511][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 543.949524][ T9] pvrusb2: Important functionality might not be entirely working. [ 543.949533][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 543.949545][ T9] pvrusb2: ********** [ 544.111686][ T2368] pvrusb2: Invalid write control endpoint [ 544.327196][ T9456] pvrusb2: Killing an I2C write to 107 that is too large (desired=63 limit=61) [ 544.340151][ T9] usb 7-1: USB disconnect, device number 5 [ 544.458207][ T9133] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 544.539924][ T2368] pvrusb2: Invalid write control endpoint [ 544.539940][ T2368] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 544.539951][ T2368] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 544.539959][ T2368] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 544.539969][ T2368] pvrusb2: Device being rendered inoperable [ 544.552377][ T2368] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 544.552653][ T2368] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 544.580432][ T2368] pvrusb2: Attached sub-driver cx25840 [ 544.580457][ T2368] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 544.580467][ T2368] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 544.673042][ T9133] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 544.743788][ T9133] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 544.786745][ T9133] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 544.867756][ T9475] syz.2.898 (9475): drop_caches: 2 [ 548.877970][ T9509] 9p: Bad value for 'source' [ 548.884219][ T9509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.904'. [ 548.884300][ T9509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.904'. [ 549.858032][ T9133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.051818][ T9133] 8021q: adding VLAN 0 to HW filter on device team0 [ 550.088488][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.088603][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.157898][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.158070][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.213726][ T9133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.519137][ T9551] 9p: Bad value for 'source' [ 553.527715][ T9551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.917'. [ 553.527797][ T9551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.917'. [ 556.905724][ T9133] veth0_vlan: entered promiscuous mode [ 556.926519][ T9133] veth1_vlan: entered promiscuous mode [ 557.161082][ T9133] veth0_macvtap: entered promiscuous mode [ 557.174838][ T9133] veth1_macvtap: entered promiscuous mode [ 557.327338][ T9133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 557.333184][ T9133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 557.368479][ T69] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.374535][ T69] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.374764][ T69] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.374990][ T69] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.243842][ T3506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.243864][ T3506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.803813][ T9596] Set syz1 is full, maxelem 65536 reached [ 563.131375][ T6053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.131399][ T6053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.816991][ T5954] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 563.857274][ T9628] hfsplus: unable to find HFS+ superblock [ 564.005932][ T5954] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 564.005981][ T5954] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 564.006001][ T5954] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 564.006054][ T5954] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 564.006082][ T5954] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 564.009216][ T5954] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 564.009275][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 564.009327][ T5954] usb 2-1: Product: syz [ 564.009366][ T5954] usb 2-1: Manufacturer: syz [ 564.491018][ T5954] cdc_wdm 2-1:1.0: skipping garbage [ 564.491040][ T5954] cdc_wdm 2-1:1.0: skipping garbage [ 564.545907][ T5954] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 564.545930][ T5954] cdc_wdm 2-1:1.0: Unknown control protocol [ 564.695672][ T5808] usb 2-1: USB disconnect, device number 15 [ 564.955130][ T5892] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 565.597321][ T5892] usb 6-1: Using ep0 maxpacket: 8 [ 565.599903][ T5892] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 565.599935][ T5892] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 565.599960][ T5892] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 565.599985][ T5892] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 565.600027][ T5892] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 565.600051][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.388660][ T5892] usb 6-1: usb_control_msg returned -32 [ 566.388696][ T5892] usbtmc 6-1:16.0: can't read capabilities [ 567.840582][ T5808] usb 6-1: USB disconnect, device number 2 [ 568.234843][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.234915][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.887099][ T9261] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 570.039466][ T9261] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 570.039498][ T9261] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 570.039518][ T9261] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 570.039571][ T9261] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 570.039599][ T9261] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 570.041930][ T9261] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 570.041958][ T9261] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 570.041979][ T9261] usb 2-1: Product: syz [ 570.041994][ T9261] usb 2-1: Manufacturer: syz [ 570.165537][ T9261] cdc_wdm 2-1:1.0: skipping garbage [ 570.165558][ T9261] cdc_wdm 2-1:1.0: skipping garbage [ 570.188255][ T9261] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 570.188279][ T9261] cdc_wdm 2-1:1.0: Unknown control protocol [ 570.373487][ T9261] usb 2-1: USB disconnect, device number 16 [ 574.507032][ T5885] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 574.657295][ T5885] usb 3-1: Using ep0 maxpacket: 8 [ 574.729626][ T5885] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 574.729665][ T5885] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 574.729691][ T5885] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 574.729716][ T5885] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 574.729762][ T5885] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 574.729785][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.025910][ T5885] usb 3-1: usb_control_msg returned -32 [ 575.025960][ T5885] usbtmc 3-1:16.0: can't read capabilities [ 577.631750][ T5808] usb 3-1: USB disconnect, device number 14 [ 587.461488][ T9896] hfsplus: unable to find HFS+ superblock [ 590.208097][ T9913] 9p: Bad value for 'source' [ 590.214793][ T9913] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1047'. [ 590.214870][ T9913] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1047'. [ 592.441915][ T5865] hid_parser_main: 73 callbacks suppressed [ 592.441939][ T5865] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 592.441984][ T5865] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 592.442010][ T5865] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 592.442037][ T5865] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 592.442073][ T5865] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 592.442099][ T5865] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 592.442124][ T5865] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 592.442149][ T5865] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 592.442174][ T5865] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 592.442199][ T5865] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 592.619288][ T5865] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.43 Device [syz1] on syz1 [ 594.000799][ T9925] fido_id[9925]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 594.967346][ T9746] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 595.119951][ T9746] usb 7-1: Using ep0 maxpacket: 8 [ 595.134552][ T9746] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 595.134586][ T9746] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 595.134614][ T9746] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 595.134639][ T9746] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 595.134682][ T9746] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 595.134707][ T9746] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.702154][ T9746] usb 7-1: usb_control_msg returned -32 [ 595.702213][ T9746] usbtmc 7-1:16.0: can't read capabilities [ 597.701730][ T9] usb 7-1: USB disconnect, device number 6 [ 602.209216][T10014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1085'. [ 613.468163][T10103] hfsplus: unable to find HFS+ superblock [ 614.569832][ T5886] hid_parser_main: 73 callbacks suppressed [ 614.569857][ T5886] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 614.569887][ T5886] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 614.569914][ T5886] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 614.569939][ T5886] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 614.569965][ T5886] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 614.569991][ T5886] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 614.570017][ T5886] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 614.570043][ T5886] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 614.570069][ T5886] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 614.570095][ T5886] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 614.674075][ T5886] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.43 Device [syz1] on syz1 [ 615.397456][ T5886] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 616.203883][ T5886] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 616.218184][ T5886] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 616.218269][ T5886] usb 7-1: config 0 interface 0 has no altsetting 0 [ 616.355472][ T5886] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 616.355506][ T5886] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 616.355529][ T5886] usb 7-1: Product: syz [ 616.355545][ T5886] usb 7-1: Manufacturer: syz [ 616.355561][ T5886] usb 7-1: SerialNumber: syz [ 616.503484][ T5886] usb 7-1: config 0 descriptor?? [ 616.514756][ T5886] hub 7-1:0.0: bad descriptor, ignoring hub [ 616.514814][ T5886] hub 7-1:0.0: probe with driver hub failed with error -5 [ 616.544475][ T5886] usb 7-1: selecting invalid altsetting 0 [ 617.919931][T10163] 9p: Bad value for 'source' [ 617.920721][T10163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1135'. [ 617.920745][T10163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1135'. [ 618.875547][ T5886] usb 7-1: USB disconnect, device number 7 [ 619.300356][T10154] udevd[10154]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 621.294493][ T5954] hid_parser_main: 73 callbacks suppressed [ 621.294520][ T5954] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 621.294549][ T5954] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 621.294575][ T5954] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 621.294602][ T5954] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 621.294628][ T5954] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 621.294654][ T5954] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 621.294679][ T5954] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 621.294704][ T5954] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 621.294730][ T5954] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 621.294756][ T5954] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 621.384534][ T5954] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.43 Device [syz1] on syz1 [ 622.259001][T10213] hfsplus: unable to find HFS+ superblock [ 629.523635][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.523709][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.581034][ T805] hid_parser_main: 73 callbacks suppressed [ 629.581053][ T805] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 629.581075][ T805] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 629.581094][ T805] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 629.581112][ T805] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 629.581131][ T805] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 629.581149][ T805] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 629.581167][ T805] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 629.581186][ T805] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 629.581204][ T805] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 629.581223][ T805] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 630.487366][ T805] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.43 Device [syz1] on syz1 [ 631.468600][T10264] 9p: Bad value for 'source' [ 631.485534][T10264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1173'. [ 631.485613][T10264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1173'. [ 632.428580][T10255] fido_id[10255]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 638.246518][ T9322] Bluetooth: hci3: command 0x0406 tx timeout [ 641.707520][T10335] 9p: Bad value for 'source' [ 642.447137][T10339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1201'. [ 648.148318][ T9322] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 648.301875][ T6207] hid_parser_main: 73 callbacks suppressed [ 648.301895][ T6207] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 648.301916][ T6207] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 648.301934][ T6207] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 648.301952][ T6207] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 648.301970][ T6207] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 648.301988][ T6207] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 648.302012][ T6207] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 648.302030][ T6207] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 648.302048][ T6207] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 648.302066][ T6207] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 648.328561][ T6207] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.43 Device [syz1] on syz1 [ 649.158793][ T9322] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 649.220202][ T9322] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 649.234670][ T9322] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 649.254751][ T9322] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 649.813582][T10376] fido_id[10376]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 649.932219][T10383] 9p: Bad value for 'source' [ 651.432584][ T9322] Bluetooth: hci5: command tx timeout [ 652.816188][T10366] chnl_net:caif_netlink_parms(): no params data found [ 653.438284][ T9322] Bluetooth: hci5: command tx timeout [ 655.516939][ T9322] Bluetooth: hci5: command tx timeout [ 656.197339][T10366] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.197583][T10366] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.197862][T10366] bridge_slave_0: entered allmulticast mode [ 656.200881][T10366] bridge_slave_0: entered promiscuous mode [ 656.204883][T10366] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.207191][T10366] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.207407][T10366] bridge_slave_1: entered allmulticast mode [ 656.301957][T10366] bridge_slave_1: entered promiscuous mode [ 657.599162][ T9322] Bluetooth: hci5: command tx timeout [ 660.108433][T10464] hfsplus: unable to find HFS+ superblock [ 663.086983][ T6207] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 664.044767][T10490] 9p: Bad value for 'source' [ 664.713001][T10366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 665.049275][ T6207] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 665.049309][ T6207] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 665.049331][ T6207] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 665.049391][ T6207] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 665.049420][ T6207] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 665.051780][ T6207] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 665.051812][ T6207] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 665.051835][ T6207] usb 3-1: Product: syz [ 665.051851][ T6207] usb 3-1: Manufacturer: syz [ 665.403956][ T6207] cdc_wdm 3-1:1.0: skipping garbage [ 665.403978][ T6207] cdc_wdm 3-1:1.0: skipping garbage [ 665.454978][ T6207] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 665.455002][ T6207] cdc_wdm 3-1:1.0: Unknown control protocol [ 665.563506][T10501] 9p: Bad value for 'source' [ 666.409519][ T6207] usb 3-1: USB disconnect, device number 15 [ 667.419619][ T6053] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.108102][T10366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 670.593796][ T6053] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.037151][ T6207] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 671.190811][ T6053] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.220806][ T6207] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 671.220836][ T6207] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 671.220857][ T6207] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 671.220912][ T6207] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 671.220939][ T6207] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 671.223408][ T6207] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 671.223435][ T6207] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 671.223457][ T6207] usb 7-1: Product: syz [ 671.223472][ T6207] usb 7-1: Manufacturer: syz [ 671.328338][ T6207] cdc_wdm 7-1:1.0: skipping garbage [ 671.328360][ T6207] cdc_wdm 7-1:1.0: skipping garbage [ 671.331119][T10366] team0: Port device team_slave_0 added [ 671.359182][T10366] team0: Port device team_slave_1 added [ 671.365433][ T6207] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 671.365453][ T6207] cdc_wdm 7-1:1.0: Unknown control protocol [ 671.526333][ T5808] usb 7-1: USB disconnect, device number 8 [ 671.880897][ T6053] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.008483][T10557] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 673.239752][T10366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.239772][T10366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.239801][T10366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.242305][T10366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.242319][T10366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.242347][T10366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 674.619290][T10366] hsr_slave_0: entered promiscuous mode [ 674.634506][T10366] hsr_slave_1: entered promiscuous mode [ 674.668483][T10366] debugfs: 'hsr0' already exists in 'hsr' [ 674.668512][T10366] Cannot create hsr debugfs directory [ 677.205727][ T6053] bridge_slave_1: left allmulticast mode [ 677.205755][ T6053] bridge_slave_1: left promiscuous mode [ 677.205964][ T6053] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.367028][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 677.398012][ T6053] bridge_slave_0: left allmulticast mode [ 677.398034][ T6053] bridge_slave_0: left promiscuous mode [ 677.398260][ T6053] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.517261][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 677.523110][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 677.523142][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 677.523181][ T9] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 677.523204][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.597652][ T9] usb 2-1: config 0 descriptor?? [ 678.051676][ T9] hid_parser_main: 73 callbacks suppressed [ 678.051701][ T9] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 678.051732][ T9] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 678.224673][ T9] ft260 0003:0403:6030.0008: chip code: 6424 8183 [ 678.701453][ T9] usb 2-1: USB disconnect, device number 17 [ 686.557636][ T5954] ------------[ cut here ]------------ [ 686.557653][ T5954] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 686.557676][ T5954] WARNING: drivers/gpu/drm/drm_vblank.c:1318 at drm_wait_one_vblank+0x39a/0x5c0, CPU#1: kworker/1:9/5954 [ 686.557729][ T5954] Modules linked in: [ 686.557766][ T5954] CPU: 1 UID: 0 PID: 5954 Comm: kworker/1:9 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 686.557792][ T5954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 686.557808][ T5954] Workqueue: events drm_fb_helper_damage_work [ 686.557840][ T5954] RIP: 0010:drm_wait_one_vblank+0x587/0x5c0 [ 686.557866][ T5954] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 ba cb f6 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 d5 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 686.557887][ T5954] RSP: 0000:ffffc90005827860 EFLAGS: 00010246 [ 686.557906][ T5954] RAX: 1ffff11028f5ae00 RBX: ffffffff8ee5b070 RCX: 0000000000000000 [ 686.557922][ T5954] RDX: ffffffff8b569b80 RSI: ffffffff8b584ca0 RDI: ffffffff8ee5b070 [ 686.557939][ T5954] RBP: ffffc90005827948 R08: 0000000000000000 R09: 0000000000000000 [ 686.557953][ T5954] R10: dffffc0000000000 R11: fffffbfff1db66ef R12: ffffffff8b584ca0 [ 686.557970][ T5954] R13: ffff888147ad7000 R14: 1ffff92000b04f10 R15: ffffffff8b569b80 [ 686.557987][ T5954] FS: 0000000000000000(0000) GS:ffff888126def000(0000) knlGS:0000000000000000 [ 686.558005][ T5954] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 686.558021][ T5954] CR2: 00007f6c3aa46798 CR3: 0000000065b72000 CR4: 00000000003526f0 [ 686.558040][ T5954] Call Trace: [ 686.558053][ T5954] [ 686.558068][ T5954] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 686.558093][ T5954] ? rt_spin_unlock+0x150/0x200 [ 686.558125][ T5954] ? __pfx_autoremove_wake_function+0x10/0x10 [ 686.558157][ T5954] ? rt_spin_unlock+0x161/0x200 [ 686.558193][ T5954] ? drm_vblank_get+0x147/0x260 [ 686.558229][ T5954] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 686.558270][ T5954] drm_fb_helper_damage_work+0xc9/0x650 [ 686.558299][ T5954] ? process_scheduled_works+0x9ef/0x1770 [ 686.558332][ T5954] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 686.558359][ T5954] ? preempt_schedule_thunk+0x16/0x30 [ 686.558392][ T5954] ? process_scheduled_works+0x9ef/0x1770 [ 686.558417][ T5954] ? process_scheduled_works+0x9ef/0x1770 [ 686.558445][ T5954] process_scheduled_works+0xad1/0x1770 [ 686.558507][ T5954] ? __pfx_process_scheduled_works+0x10/0x10 [ 686.558530][ T5954] ? do_raw_spin_lock+0x121/0x290 [ 686.558576][ T5954] worker_thread+0x8a0/0xda0 [ 686.558620][ T5954] ? __kthread_parkme+0x7b/0x200 [ 686.558661][ T5954] kthread+0x711/0x8a0 [ 686.558696][ T5954] ? __pfx_worker_thread+0x10/0x10 [ 686.558722][ T5954] ? __pfx_kthread+0x10/0x10 [ 686.558751][ T5954] ? rt_spin_unlock+0x150/0x200 [ 686.558787][ T5954] ? rt_spin_unlock+0x161/0x200 [ 686.558816][ T5954] ? __pfx_kthread+0x10/0x10 [ 686.558851][ T5954] ret_from_fork+0x510/0xa50 [ 686.558879][ T5954] ? __pfx_ret_from_fork+0x10/0x10 [ 686.558900][ T5954] ? __switch_to+0xc9e/0x1480 [ 686.558941][ T5954] ? __pfx_kthread+0x10/0x10 [ 686.558975][ T5954] ret_from_fork_asm+0x1a/0x30 [ 686.559030][ T5954] [ 686.559056][ T5954] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 686.559072][ T5954] CPU: 1 UID: 0 PID: 5954 Comm: kworker/1:9 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 686.559096][ T5954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 686.559111][ T5954] Workqueue: events drm_fb_helper_damage_work [ 686.559136][ T5954] Call Trace: [ 686.559145][ T5954] [ 686.559154][ T5954] vpanic+0x1e0/0x670 [ 686.559191][ T5954] panic+0xb9/0xc0 [ 686.559222][ T5954] ? __pfx_panic+0x10/0x10 [ 686.559267][ T5954] ? ret_from_fork_asm+0x1a/0x30 [ 686.559307][ T5954] __warn+0x317/0x4b0 [ 686.559337][ T5954] ? drm_wait_one_vblank+0x39a/0x5c0 [ 686.559367][ T5954] ? drm_wait_one_vblank+0x39a/0x5c0 [ 686.559408][ T5954] __report_bug+0x288/0x500 [ 686.559446][ T5954] ? drm_wait_one_vblank+0x39a/0x5c0 [ 686.559479][ T5954] ? __pfx___report_bug+0x10/0x10 [ 686.559524][ T5954] ? drm_wait_one_vblank+0x58c/0x5c0 [ 686.559548][ T5954] ? drm_wait_one_vblank+0x587/0x5c0 [ 686.559583][ T5954] report_bug_entry+0x19a/0x290 [ 686.559621][ T5954] ? drm_wait_one_vblank+0x587/0x5c0 [ 686.559644][ T5954] ? drm_wait_one_vblank+0x58c/0x5c0 [ 686.559668][ T5954] handle_bug+0xca/0x200 [ 686.559696][ T5954] exc_invalid_op+0x1a/0x50 [ 686.559721][ T5954] asm_exc_invalid_op+0x1a/0x20 [ 686.559743][ T5954] RIP: 0010:drm_wait_one_vblank+0x587/0x5c0 [ 686.559769][ T5954] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 ba cb f6 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 d5 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 686.559789][ T5954] RSP: 0000:ffffc90005827860 EFLAGS: 00010246 [ 686.559808][ T5954] RAX: 1ffff11028f5ae00 RBX: ffffffff8ee5b070 RCX: 0000000000000000 [ 686.559825][ T5954] RDX: ffffffff8b569b80 RSI: ffffffff8b584ca0 RDI: ffffffff8ee5b070 [ 686.559842][ T5954] RBP: ffffc90005827948 R08: 0000000000000000 R09: 0000000000000000 [ 686.559857][ T5954] R10: dffffc0000000000 R11: fffffbfff1db66ef R12: ffffffff8b584ca0 [ 686.559874][ T5954] R13: ffff888147ad7000 R14: 1ffff92000b04f10 R15: ffffffff8b569b80 [ 686.559918][ T5954] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 686.559942][ T5954] ? rt_spin_unlock+0x150/0x200 [ 686.559972][ T5954] ? __pfx_autoremove_wake_function+0x10/0x10 [ 686.560003][ T5954] ? rt_spin_unlock+0x161/0x200 [ 686.560038][ T5954] ? drm_vblank_get+0x147/0x260 [ 686.560066][ T5954] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 686.560105][ T5954] drm_fb_helper_damage_work+0xc9/0x650 [ 686.560135][ T5954] ? process_scheduled_works+0x9ef/0x1770 [ 686.560167][ T5954] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 686.560194][ T5954] ? preempt_schedule_thunk+0x16/0x30 [ 686.560220][ T5954] ? process_scheduled_works+0x9ef/0x1770 [ 686.560244][ T5954] ? process_scheduled_works+0x9ef/0x1770 [ 686.560273][ T5954] process_scheduled_works+0xad1/0x1770 [ 686.560334][ T5954] ? __pfx_process_scheduled_works+0x10/0x10 [ 686.560357][ T5954] ? do_raw_spin_lock+0x121/0x290 [ 686.560409][ T5954] worker_thread+0x8a0/0xda0 [ 686.560453][ T5954] ? __kthread_parkme+0x7b/0x200 [ 686.560494][ T5954] kthread+0x711/0x8a0 [ 686.560530][ T5954] ? __pfx_worker_thread+0x10/0x10 [ 686.560557][ T5954] ? __pfx_kthread+0x10/0x10 [ 686.560585][ T5954] ? rt_spin_unlock+0x150/0x200 [ 686.560621][ T5954] ? rt_spin_unlock+0x161/0x200 [ 686.560650][ T5954] ? __pfx_kthread+0x10/0x10 [ 686.560684][ T5954] ret_from_fork+0x510/0xa50 [ 686.560712][ T5954] ? __pfx_ret_from_fork+0x10/0x10 [ 686.560735][ T5954] ? __switch_to+0xc9e/0x1480 [ 686.560776][ T5954] ? __pfx_kthread+0x10/0x10 [ 686.560809][ T5954] ret_from_fork_asm+0x1a/0x30 [ 686.560865][ T5954] [ 686.561453][ T5954] Kernel Offset: disabled