last executing test programs: 11.936105113s ago: executing program 3 (id=627): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000000000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x7fe2, 0x2}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) 11.935909333s ago: executing program 2 (id=628): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc040, 0x0) 11.323727318s ago: executing program 3 (id=633): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) r5 = syz_io_uring_setup(0xcd, &(0x7f0000000400)={0x0, 0xfffffffc, 0x400, 0x0, 0xdc}, &(0x7f00000004c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/173, 0xad}], 0x1}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) 9.311996318s ago: executing program 3 (id=635): r0 = socket(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x837, &(0x7f0000000200)={0x0, 0x679a, 0x80, 0x4, 0x3ce}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x80, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4090000}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) 7.048073s ago: executing program 3 (id=645): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndpcmp(0x0, 0x0, 0x62302) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$kcm(0x2, 0x200000000000001, 0x106) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000180), 0x300, 0x0) ioctl$TIOCSTI(r5, 0x5412, 0x0) ioctl$TIOCSTI(r5, 0x5412, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r6, 0x5412, 0x0) 6.660019424s ago: executing program 2 (id=648): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x10001) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) shmget(0x3, 0x2000, 0x200, &(0x7f000012f000/0x2000)=nil) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(0xffffffffffffffff, 0x40044103, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 5.043256859s ago: executing program 3 (id=651): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x10b202, 0x0) sendfile(r0, r0, 0x0, 0x40000f63c) 3.767993893s ago: executing program 2 (id=652): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7111}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x7, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xffffff00, 0x6, 0xc31, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x70}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000014}, 0x20000000) 3.126115461s ago: executing program 1 (id=653): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x4000000) 3.042687718s ago: executing program 1 (id=654): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000001250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.977206934s ago: executing program 1 (id=655): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000000000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x7fe2, 0x2}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000006c0)={r3, 0x0, 0x0}, 0x20) 2.788115421s ago: executing program 0 (id=656): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x4f27, 0x8, 0x10000, 0x10000004, 0x8, 0xfffffbf9, 0x0, 0x40000000, 0x800000, 0x100100, 0x2, 0x1, 0x1, 0xfffffffe, 0x404, 0xf, 0xfffffffc, 0x0, 0x3, 0x40000003, 0x89, 0xfffffffd, 0x0, 0x20001e52, 0x400000b, 0xfff, 0x3a, 0x7fffffff, 0x7, 0x8000000, 0xfffffff8]}) 2.649658773s ago: executing program 1 (id=657): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1f4, 0xd, 0x7, 0x4}, 0x9c) 2.532494284s ago: executing program 0 (id=658): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x5) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="30e01b3981ddca14"], 0x1000f) 1.45194086s ago: executing program 1 (id=659): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000340)={0x1, 0x0, [{0x2, 0x3, 0x3, 0x14, 0x2}]}) 1.45170776s ago: executing program 0 (id=660): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000380)={0x0, 0x0, 0x8}) 1.321656302s ago: executing program 0 (id=661): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000180)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xa) 1.256858378s ago: executing program 3 (id=662): openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="203111000000084677"], 0x0, 0x0, 0x0, 0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(r1, 0x0, 0x0, 0x400c010, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) 1.196078583s ago: executing program 2 (id=663): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000001250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.195794043s ago: executing program 0 (id=664): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) 1.132254699s ago: executing program 2 (id=665): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000000000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x7fe2, 0x2}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000006c0)={r3, 0x0, 0x0}, 0x20) 1.12132759s ago: executing program 1 (id=666): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x80) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xb6a6, 0x0, 0x4, 0x0, 0x3}) 653.761832ms ago: executing program 2 (id=667): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) ptrace(0x11, r3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_pidfd_open(r0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f00000000c0)=0x7f) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000640)="980bcfe393059bae3f648ed47a483be27024e4dd506130bdfbcd2df1d38ec7", 0x1f}], 0x1) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 0s ago: executing program 0 (id=668): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x4) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x4}, 0x80, 0x0}, 0xe07e872420dfef8a) close(0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000002400010026bd70000400df2504"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.75' (ED25519) to the list of known hosts. [ 62.700155][ T5750] cgroup: Unknown subsys name 'net' [ 62.800568][ T5750] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.183119][ T5750] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 65.781296][ T5769] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.789410][ T5769] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.800472][ T5774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.819311][ T5772] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.833924][ T5774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.835461][ T5773] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.849787][ T5772] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.854319][ T5769] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.863702][ T5773] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.865822][ T5769] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.871510][ T5773] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.879728][ T5769] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.893238][ T5769] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.901613][ T5773] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 65.901698][ T5774] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.910992][ T5769] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.917952][ T5774] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 65.931157][ T5769] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.931879][ T5774] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.947142][ T5774] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.955265][ T5774] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 65.962700][ T5774] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 65.969858][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.983336][ T5774] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.318391][ T5760] chnl_net:caif_netlink_parms(): no params data found [ 66.421203][ T5761] chnl_net:caif_netlink_parms(): no params data found [ 66.480026][ T5760] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.487600][ T5760] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.495035][ T5760] bridge_slave_0: entered allmulticast mode [ 66.502153][ T5760] bridge_slave_0: entered promiscuous mode [ 66.511901][ T5760] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.519389][ T5760] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.526713][ T5760] bridge_slave_1: entered allmulticast mode [ 66.533410][ T5760] bridge_slave_1: entered promiscuous mode [ 66.601606][ T5759] chnl_net:caif_netlink_parms(): no params data found [ 66.652238][ T5760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.665651][ T5760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.718245][ T5761] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.725503][ T5761] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.732732][ T5761] bridge_slave_0: entered allmulticast mode [ 66.740601][ T5761] bridge_slave_0: entered promiscuous mode [ 66.754946][ T5762] chnl_net:caif_netlink_parms(): no params data found [ 66.768794][ T5760] team0: Port device team_slave_0 added [ 66.774937][ T5761] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.782082][ T5761] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.789916][ T5761] bridge_slave_1: entered allmulticast mode [ 66.796988][ T5761] bridge_slave_1: entered promiscuous mode [ 66.814249][ T5760] team0: Port device team_slave_1 added [ 66.883496][ T5761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.905272][ T5760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.912240][ T5760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.938691][ T5760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.960375][ T5761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.982755][ T5760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.989883][ T5760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.016045][ T5760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.050582][ T5759] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.058086][ T5759] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.065801][ T5759] bridge_slave_0: entered allmulticast mode [ 67.072501][ T5759] bridge_slave_0: entered promiscuous mode [ 67.081317][ T5759] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.088565][ T5759] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.095916][ T5759] bridge_slave_1: entered allmulticast mode [ 67.102551][ T5759] bridge_slave_1: entered promiscuous mode [ 67.126653][ T5761] team0: Port device team_slave_0 added [ 67.161513][ T5761] team0: Port device team_slave_1 added [ 67.180656][ T5759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.192490][ T5759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.202030][ T5762] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.210353][ T5762] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.217614][ T5762] bridge_slave_0: entered allmulticast mode [ 67.225142][ T5762] bridge_slave_0: entered promiscuous mode [ 67.267699][ T5762] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.274893][ T5762] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.282100][ T5762] bridge_slave_1: entered allmulticast mode [ 67.289039][ T5762] bridge_slave_1: entered promiscuous mode [ 67.309107][ T5760] hsr_slave_0: entered promiscuous mode [ 67.315953][ T5760] hsr_slave_1: entered promiscuous mode [ 67.341616][ T5761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.348927][ T5761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.375116][ T5761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.388216][ T5761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.395528][ T5761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.422437][ T5761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.448088][ T5759] team0: Port device team_slave_0 added [ 67.457319][ T5759] team0: Port device team_slave_1 added [ 67.503718][ T5762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.516148][ T5762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.590033][ T5762] team0: Port device team_slave_0 added [ 67.597821][ T5759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.604965][ T5759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.630997][ T5759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.647171][ T5759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.654188][ T5759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.680156][ T5759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.694792][ T5761] hsr_slave_0: entered promiscuous mode [ 67.701048][ T5761] hsr_slave_1: entered promiscuous mode [ 67.707604][ T5761] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.716019][ T5761] Cannot create hsr debugfs directory [ 67.722894][ T5762] team0: Port device team_slave_1 added [ 67.754889][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.761857][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.787789][ T5762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.800229][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.807247][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.833356][ T5762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.934481][ T5774] Bluetooth: hci0: command tx timeout [ 67.966949][ T5762] hsr_slave_0: entered promiscuous mode [ 67.974178][ T5762] hsr_slave_1: entered promiscuous mode [ 67.980913][ T5762] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.988594][ T5762] Cannot create hsr debugfs directory [ 68.002317][ T5759] hsr_slave_0: entered promiscuous mode [ 68.009904][ T5759] hsr_slave_1: entered promiscuous mode [ 68.016582][ T5768] Bluetooth: hci2: command tx timeout [ 68.016811][ T5765] Bluetooth: hci1: command tx timeout [ 68.022398][ T5774] Bluetooth: hci3: command tx timeout [ 68.034280][ T5759] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.041867][ T5759] Cannot create hsr debugfs directory [ 68.263247][ T5760] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.291909][ T5760] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.302667][ T5760] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.317081][ T5760] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.400201][ T5761] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.410956][ T5761] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.432089][ T5761] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.458158][ T5761] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.499998][ T5759] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.515054][ T5759] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.525041][ T5759] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.538805][ T5759] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.630966][ T5762] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.647226][ T5762] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.659576][ T5762] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.670095][ T5762] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.704730][ T5760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.769597][ T5760] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.792837][ T1070] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.800240][ T1070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.821722][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.828866][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.861688][ T5761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.880577][ T5759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.938864][ T5761] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.954525][ T5759] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.982817][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.989972][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.999448][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.006577][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.032679][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.039819][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.049335][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.056439][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.137373][ T5762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.237340][ T5759] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.271516][ T5762] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.321782][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.328991][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.368538][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.375834][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.457109][ T5760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.526526][ T5761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.618032][ T5760] veth0_vlan: entered promiscuous mode [ 69.650744][ T5761] veth0_vlan: entered promiscuous mode [ 69.672941][ T5760] veth1_vlan: entered promiscuous mode [ 69.690964][ T5761] veth1_vlan: entered promiscuous mode [ 69.719293][ T5759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.795897][ T5760] veth0_macvtap: entered promiscuous mode [ 69.819378][ T5761] veth0_macvtap: entered promiscuous mode [ 69.841279][ T5761] veth1_macvtap: entered promiscuous mode [ 69.872219][ T5760] veth1_macvtap: entered promiscuous mode [ 69.885246][ T5759] veth0_vlan: entered promiscuous mode [ 69.911237][ T5761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.948160][ T5762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.957578][ T5759] veth1_vlan: entered promiscuous mode [ 69.968885][ T5761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.977077][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.988313][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.001974][ T5760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.013148][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.014862][ T5774] Bluetooth: hci0: command tx timeout [ 70.025420][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.040836][ T5760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.052911][ T5760] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.062132][ T5760] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.071149][ T5760] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.080368][ T5760] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.094846][ T5774] Bluetooth: hci3: command tx timeout [ 70.094857][ T5765] Bluetooth: hci2: command tx timeout [ 70.105877][ T5774] Bluetooth: hci1: command tx timeout [ 70.116365][ T5761] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.125496][ T5761] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.135118][ T5761] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.144115][ T5761] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.251305][ T5762] veth0_vlan: entered promiscuous mode [ 70.306725][ T5759] veth0_macvtap: entered promiscuous mode [ 70.319362][ T5759] veth1_macvtap: entered promiscuous mode [ 70.326092][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.339084][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.346783][ T5762] veth1_vlan: entered promiscuous mode [ 70.403394][ T1070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.420449][ T1070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.428578][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.438094][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.462339][ T5759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.473007][ T5759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.483219][ T5759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.495555][ T5759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.508411][ T5759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.522243][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.528523][ T5762] veth0_macvtap: entered promiscuous mode [ 70.538327][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.548011][ T5759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.570197][ T5759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.581318][ T5759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.592949][ T5759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.605230][ T5759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.635510][ T5762] veth1_macvtap: entered promiscuous mode [ 70.646979][ T5759] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.657321][ T5759] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.666752][ T5759] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.676011][ T5759] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.707619][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.719037][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.729851][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.740793][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.750660][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.761343][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.772435][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.808668][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.825090][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.836160][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.847621][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.858443][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.879978][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.904803][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.953337][ T5762] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.971736][ T5762] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.043277][ T5762] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.065300][ T5762] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.216143][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.229704][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.619557][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.638919][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.814785][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.874717][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.009076][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.044498][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.094267][ T5765] Bluetooth: hci0: command tx timeout [ 72.287364][ T5765] Bluetooth: hci1: command tx timeout [ 72.296025][ T5774] Bluetooth: hci3: command tx timeout [ 72.304925][ T5765] Bluetooth: hci2: command tx timeout [ 72.618531][ T3448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.645388][ T3448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.737696][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 72.746694][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 72.840359][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 72.840426][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.353490][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.353562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.458147][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 73.557153][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.558858][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.562135][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.368737][ T5768] Bluetooth: hci0: command tx timeout [ 74.368779][ T5774] Bluetooth: hci3: command tx timeout [ 74.374265][ T5768] Bluetooth: hci1: command tx timeout [ 74.380532][ T5765] Bluetooth: hci2: command tx timeout [ 74.604617][ T5874] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.227993][ T5884] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10'. [ 75.257870][ T5884] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10'. [ 75.305501][ T5886] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10'. [ 75.328572][ T5886] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10'. [ 75.763741][ T5893] binder: 5892:5893 ioctl c0306201 200000000080 returned -14 [ 79.095141][ T5915] fuse: Bad value for 'rootmode' [ 79.554381][ T787] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 79.846644][ T787] usb 4-1: Using ep0 maxpacket: 8 [ 80.057416][ T787] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 80.084898][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.162641][ T787] pvrusb2: Hardware description: Terratec Grabster AV400 [ 80.200645][ T787] pvrusb2: ********** [ 80.223665][ T787] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 80.256746][ T787] pvrusb2: Important functionality might not be entirely working. [ 80.277008][ T787] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 80.329334][ T787] pvrusb2: ********** [ 80.394311][ T2315] pvrusb2: Invalid write control endpoint [ 80.550409][ T2315] pvrusb2: Invalid write control endpoint [ 80.563991][ T2315] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 80.637106][ T2315] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 80.663624][ T2315] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 80.688797][ T2315] pvrusb2: Device being rendered inoperable [ 80.712265][ T5917] pvrusb2: Attempted to execute control transfer when device not ok [ 80.739365][ T2315] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 80.743009][ T8] usb 4-1: USB disconnect, device number 2 [ 80.759578][ T2315] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 80.782781][ T2315] pvrusb2: Attached sub-driver cx25840 [ 80.796672][ T2315] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 80.807551][ T2315] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 80.935277][ T5931] kvm: emulating exchange as write [ 82.183924][ T9] cfg80211: failed to load regulatory.db [ 84.026950][ T5951] fuse: Bad value for 'rootmode' [ 86.837723][ T5964] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 86.844661][ T5964] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 86.857169][ T5964] vhci_hcd vhci_hcd.0: Device attached [ 88.421869][ T5846] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 88.947047][ T5965] vhci_hcd: connection reset by peer [ 89.037301][ T42] vhci_hcd: stop threads [ 89.088287][ T42] vhci_hcd: release socket [ 89.152673][ T42] vhci_hcd: disconnect device [ 89.612254][ T5985] : renamed from gre0 (while UP) [ 89.821496][ T5985] netlink: 'syz.0.31': attribute type 1 has an invalid length. [ 89.927245][ T5985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.31'. [ 90.070272][ T5985] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 90.408712][ T5988] fuse: Bad value for 'rootmode' [ 91.798201][ T6003] netlink: 'syz.2.44': attribute type 12 has an invalid length. [ 93.046208][ T6019] fuse: Unknown parameter 'use00000000000000000000' [ 93.192644][ T6022] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 93.819700][ T28] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 94.204290][ T28] usb 4-1: Using ep0 maxpacket: 16 [ 94.270556][ T28] usb 4-1: config 0 interface 0 altsetting 235 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.322383][ T28] usb 4-1: config 0 interface 0 altsetting 235 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.344386][ T5846] vhci_hcd: vhci_device speed not set [ 94.351537][ T6033] tmpfs: Bad value for 'mpol' [ 94.372505][ T28] usb 4-1: config 0 interface 0 has no altsetting 0 [ 94.420216][ T28] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 94.449021][ T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.471085][ T28] usb 4-1: config 0 descriptor?? [ 94.892894][ T6044] fuse: Unknown parameter 'use00000000000000000000' [ 94.919382][ T28] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 94.952455][ T28] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 94.970705][ T28] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 95.012483][ T28] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 95.025307][ T28] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 95.056356][ T28] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 95.706262][ T28] usb 4-1: USB disconnect, device number 3 [ 98.182115][ T6074] fuse: Unknown parameter 'use00000000000000000000' [ 98.333761][ T5815] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.347888][ T6076] binder: 6075:6076 ioctl c0306201 200000000080 returned -14 [ 98.553709][ T5815] usb 1-1: Using ep0 maxpacket: 32 [ 98.565723][ T5815] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.584142][ T5815] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.609830][ T5815] usb 1-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=db.74 [ 98.644679][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.655897][ T5815] usb 1-1: Product: syz [ 98.660105][ T5815] usb 1-1: Manufacturer: syz [ 98.681327][ T6087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.76'. [ 98.683763][ T5815] usb 1-1: SerialNumber: syz [ 98.701761][ T5815] usb 1-1: config 0 descriptor?? [ 98.737564][ T5815] usb 1-1: bad CDC descriptors [ 98.763173][ T5815] usb 1-1: bad CDC descriptors [ 98.806907][ T5815] cdc_acm 1-1:0.0: Zero length descriptor references [ 98.841167][ T5815] cdc_acm: probe of 1-1:0.0 failed with error -22 [ 98.996583][ T5604] usb 1-1: USB disconnect, device number 2 [ 100.147751][ T6101] fuse: Unknown parameter 'user_i00000000000000000000' [ 100.444986][ T6111] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.418140][ T6140] fuse: Unknown parameter 'user_i00000000000000000000' [ 106.064659][ T6171] fuse: Unknown parameter 'user_i00000000000000000000' [ 106.383785][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 106.593842][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 106.675915][ T23] usb 4-1: config 0 has an invalid interface descriptor of length 8, skipping [ 106.824743][ T23] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 106.979457][ T23] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 107.014048][ T23] usb 4-1: New USB device found, idVendor=17ef, idProduct=720c, bcdDevice=51.90 [ 107.045985][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.075761][ T23] usb 4-1: Product: syz [ 107.092303][ T23] usb 4-1: Manufacturer: syz [ 107.132759][ T23] usb 4-1: SerialNumber: syz [ 107.158848][ T23] r8152-cfgselector 4-1: config 0 descriptor?? [ 107.379239][ T23] r8152-cfgselector 4-1: Unknown version 0x0000 [ 107.397955][ T6197] fuse: Unknown parameter 'user_id00000000000000000000' [ 107.403401][ T23] r8152-cfgselector 4-1: USB disconnect, device number 4 [ 107.686371][ T6202] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 107.692945][ T6202] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 107.706825][ T6202] vhci_hcd vhci_hcd.0: Device attached [ 108.583915][ T23] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 108.706365][ T6204] vhci_hcd: connection closed [ 108.725148][ T3448] vhci_hcd: stop threads [ 108.871964][ T3448] vhci_hcd: release socket [ 108.951191][ T3448] vhci_hcd: disconnect device [ 109.205249][ T6215] capability: warning: `syz.3.118' uses 32-bit capabilities (legacy support in use) [ 109.558764][ T27] audit: type=1326 audit(1767509004.950:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6221 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66258f749 code=0x7ffc0000 [ 109.584421][ T27] audit: type=1326 audit(1767509004.950:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6221 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66258f749 code=0x7ffc0000 [ 109.732834][ T27] audit: type=1326 audit(1767509005.000:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6221 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd66258df90 code=0x7ffc0000 [ 110.382755][ T6228] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 110.627066][ T27] audit: type=1326 audit(1767509005.020:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6221 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd66258df90 code=0x7ffc0000 [ 110.669621][ T27] audit: type=1326 audit(1767509005.030:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6221 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66258f749 code=0x7ffc0000 [ 110.692027][ T27] audit: type=1326 audit(1767509005.040:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6221 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66258f749 code=0x7ffc0000 [ 110.715960][ T27] audit: type=1326 audit(1767509005.110:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6221 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7fd66258f749 code=0x7ffc0000 [ 110.743765][ T27] audit: type=1326 audit(1767509005.150:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6221 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66258f749 code=0x7ffc0000 [ 110.766264][ T27] audit: type=1326 audit(1767509005.150:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6221 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66258f749 code=0x7ffc0000 [ 110.774475][ T6231] fuse: Unknown parameter 'user_id00000000000000000000' [ 111.067509][ T6243] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 111.210636][ T6238] cgroup: name respecified [ 112.534808][ T6263] fuse: Unknown parameter 'user_id00000000000000000000' [ 114.028314][ T23] vhci_hcd: vhci_device speed not set [ 114.034114][ T28] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 114.045714][ T5815] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 114.504716][ T5815] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 114.517992][ T5815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.532337][ T5815] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 114.541868][ T28] usb 4-1: config 1 has an invalid interface number: 121 but max is 0 [ 115.232467][ T6292] syz.0.146 uses obsolete (PF_INET,SOCK_PACKET) [ 115.249811][ T5815] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 115.257948][ T28] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.268284][ T5815] usb 2-1: Manufacturer: syz [ 115.273049][ T28] usb 4-1: config 1 has no interface number 0 [ 115.279291][ T28] usb 4-1: config 1 interface 121 has no altsetting 0 [ 115.288861][ T28] usb 4-1: New USB device found, idVendor=0421, idProduct=01f5, bcdDevice=57.da [ 115.298329][ T28] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 115.314511][ T28] usb 4-1: Manufacturer: syz [ 115.324702][ T5815] usb 2-1: config 0 descriptor?? [ 115.349706][ T28] usb 4-1: bad CDC descriptors [ 115.360560][ T28] usb 4-1: bad CDC descriptors [ 115.463866][ T5815] rc_core: IR keymap rc-hauppauge not found [ 115.470896][ T5815] Registered IR keymap rc-empty [ 115.485003][ T5815] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 115.501818][ T5815] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6 [ 115.520619][ T6299] fuse: Bad value for 'fd' [ 115.574079][ T5815] usb 4-1: USB disconnect, device number 5 [ 115.597801][ T28] usb 2-1: USB disconnect, device number 2 [ 117.043048][ T6324] fuse: Bad value for 'fd' [ 117.189704][ T6328] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 119.589820][ T6353] fuse: Bad value for 'fd' [ 122.298586][ T6388] ======================================================= [ 122.298586][ T6388] WARNING: The mand mount option has been deprecated and [ 122.298586][ T6388] and is ignored by this kernel. Remove the mand [ 122.298586][ T6388] option from the mount to silence this warning. [ 122.298586][ T6388] ======================================================= [ 122.986474][ T6390] Bluetooth: MGMT ver 1.22 [ 123.033750][ T6390] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 123.063644][ T6394] Zero length message leads to an empty skb [ 123.164974][ T6396] netlink: 'syz.2.184': attribute type 9 has an invalid length. [ 123.172668][ T6396] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.184'. [ 124.411552][ T6416] 9pnet_virtio: no channels available for device syz [ 125.909846][ T6425] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 125.960018][ T6425] overlayfs: missing 'lowerdir' [ 126.233821][ T28] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 126.282587][ T27] audit: type=1326 audit(1767509021.670:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6443 comm="syz.3.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66258f749 code=0x7ffc0000 [ 126.344152][ T27] audit: type=1326 audit(1767509021.700:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6443 comm="syz.3.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66258f749 code=0x7ffc0000 [ 126.413676][ T27] audit: type=1326 audit(1767509021.710:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6443 comm="syz.3.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66258f749 code=0x7ffc0000 [ 126.440455][ T27] audit: type=1326 audit(1767509021.710:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6443 comm="syz.3.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66258f749 code=0x7ffc0000 [ 126.464312][ T27] audit: type=1326 audit(1767509021.710:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6443 comm="syz.3.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fd66258f749 code=0x7ffc0000 [ 126.486911][ T27] audit: type=1326 audit(1767509021.710:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6443 comm="syz.3.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66258f749 code=0x7ffc0000 [ 126.526265][ T28] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 126.557662][ T28] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.613383][ T28] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 126.731092][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.751542][ T27] audit: type=1326 audit(1767509021.710:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6443 comm="syz.3.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd66258f749 code=0x7ffc0000 [ 126.937072][ T28] usb 2-1: config 0 descriptor?? [ 127.101840][ T27] audit: type=1326 audit(1767509021.710:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6443 comm="syz.3.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd66258f749 code=0x7ffc0000 [ 128.940584][ T28] savu 0003:1E7D:2D5A.0002: unknown main item tag 0x0 [ 129.033797][ T28] savu 0003:1E7D:2D5A.0002: unknown main item tag 0x0 [ 129.054772][ T28] savu 0003:1E7D:2D5A.0002: unknown main item tag 0x0 [ 129.072647][ T28] savu 0003:1E7D:2D5A.0002: unknown main item tag 0x0 [ 129.083661][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 129.092917][ T28] savu 0003:1E7D:2D5A.0002: unknown main item tag 0x0 [ 129.123245][ T28] savu 0003:1E7D:2D5A.0002: unbalanced collection at end of report description [ 129.153597][ T28] savu 0003:1E7D:2D5A.0002: parse failed [ 129.164078][ T28] savu: probe of 0003:1E7D:2D5A.0002 failed with error -22 [ 129.192030][ T28] usb 2-1: USB disconnect, device number 3 [ 129.297480][ T9] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 129.323758][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.345108][ T9] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 129.363742][ T9] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 129.403481][ T9] usb 1-1: Manufacturer: syz [ 129.412739][ T9] usb 1-1: config 0 descriptor?? [ 129.416144][ T6473] syz.2.209[6473]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 129.503765][ T9] rc_core: IR keymap rc-hauppauge not found [ 129.530068][ T9] Registered IR keymap rc-empty [ 129.551234][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 129.576101][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input7 [ 129.807502][ T9] usb 1-1: USB disconnect, device number 3 [ 132.441256][ T6511] warning: `syz.1.221' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 133.067805][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.089585][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.758828][ T6537] netlink: 44 bytes leftover after parsing attributes in process `syz.2.227'. [ 136.060242][ T6585] netlink: 180 bytes leftover after parsing attributes in process `syz.0.250'. [ 139.097881][ T6633] fuse: Unknown parameter 'fd0x0000000000000003' [ 140.824951][ T6659] Device name cannot be null; rc = [-22] [ 142.322638][ T6665] fuse: Unknown parameter 'fd0x0000000000000003' [ 144.169190][ T6692] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 144.200063][ T6692] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 145.023129][ T6702] fuse: Unknown parameter 'fd0x0000000000000003' [ 145.110344][ T5815] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.144789][ T5815] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 146.548979][ T6728] hub 1-0:1.0: USB hub found [ 146.559370][ T6728] hub 1-0:1.0: 1 port detected [ 146.963656][ T5947] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 147.186793][ T6746] netlink: 44 bytes leftover after parsing attributes in process `syz.3.307'. [ 147.598829][ T5947] usb 1-1: Using ep0 maxpacket: 8 [ 148.177702][ T5947] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 148.186145][ T5947] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 148.196619][ T5947] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 148.209349][ T5947] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 148.219501][ T5947] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.233418][ T5947] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 148.243978][ T5947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.537933][ T5947] usb 1-1: GET_CAPABILITIES returned 0 [ 148.553695][ T5947] usbtmc 1-1:16.0: can't read capabilities [ 148.643819][ T5815] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 148.873754][ T5815] usb 4-1: Using ep0 maxpacket: 16 [ 148.937082][ T5846] usb 1-1: USB disconnect, device number 4 [ 148.964085][ T6733] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 148.966676][ T5815] usb 4-1: unable to get BOS descriptor or descriptor too short [ 149.039016][ T5815] usb 4-1: config 255 has an invalid interface number: 35 but max is 0 [ 149.403002][ T5815] usb 4-1: config 255 has no interface number 0 [ 149.688688][ T5815] usb 4-1: config 255 interface 35 has no altsetting 0 [ 149.706542][ T5815] usb 4-1: New USB device found, idVendor=2bde, idProduct=a2a4, bcdDevice=e0.2d [ 149.722295][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.730701][ T5815] usb 4-1: Product: syz [ 149.765492][ T5815] usb 4-1: Manufacturer: syz [ 149.800568][ T5815] usb 4-1: SerialNumber: syz [ 150.253041][ T5815] usb 4-1: bad CDC descriptors [ 150.281557][ T5815] usb 4-1: bad CDC descriptors [ 150.309833][ T5815] usb 4-1: USB disconnect, device number 6 [ 157.213012][ T6834] process 'syz.0.336' launched '/dev/fd/9' with NULL argv: empty string added [ 160.723812][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 161.053665][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 161.060988][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.071992][ T8] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 161.081099][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.329301][ T5815] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 161.675928][ T5815] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 161.685050][ T5815] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 161.704520][ T5815] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 161.719958][ T5815] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 161.738312][ T5815] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 161.755189][ T5815] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 161.770222][ T8] usb 2-1: config 0 descriptor?? [ 161.794353][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 161.838645][ T5815] usb 1-1: Product: syz [ 161.842868][ T5815] usb 1-1: Manufacturer: syz [ 161.890542][ T5815] cdc_wdm 1-1:1.0: skipping garbage [ 161.903114][ T5815] cdc_wdm 1-1:1.0: skipping garbage [ 161.926121][ T5815] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 161.942854][ T5815] cdc_wdm 1-1:1.0: Unknown control protocol [ 162.278376][ T8] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 162.292702][ T8] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 162.304047][ T8] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 162.312032][ T8] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 162.316885][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 162.328657][ T8] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 162.486055][ T5846] usb 1-1: USB disconnect, device number 5 [ 162.511102][ T8] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 162.791677][ T8] usb 2-1: USB disconnect, device number 4 [ 163.706376][ T6892] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 163.712944][ T6892] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 163.753802][ T6892] vhci_hcd vhci_hcd.0: Device attached [ 164.857722][ T5815] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 164.937879][ T6893] vhci_hcd: connection reset by peer [ 165.080290][ T12] vhci_hcd: stop threads [ 165.126623][ T12] vhci_hcd: release socket [ 165.430224][ T12] vhci_hcd: disconnect device [ 165.585873][ T6913] netlink: 7 bytes leftover after parsing attributes in process `syz.0.363'. [ 169.729782][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.380'. [ 169.750677][ T6964] io-wq is not configured for unbound workers [ 170.041800][ T5815] vhci_hcd: vhci_device speed not set [ 170.113705][ T5846] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 170.305568][ T5846] usb 2-1: Using ep0 maxpacket: 16 [ 170.333451][ T5846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 170.354014][ T5846] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 170.377676][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.393728][ T5846] usb 2-1: Product: syz [ 170.403775][ T5846] usb 2-1: Manufacturer: syz [ 170.413779][ T5846] usb 2-1: SerialNumber: syz [ 170.431707][ T5846] usb 2-1: config 0 descriptor?? [ 170.451092][ T5846] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 170.471854][ T5846] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 171.564506][ T5846] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 172.006763][ T5846] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 172.026646][ T5846] em28xx 2-1:0.0: board has no eeprom [ 172.124146][ T5846] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 172.141500][ T5846] em28xx 2-1:0.0: dvb set to bulk mode. [ 172.157513][ T9] em28xx 2-1:0.0: Binding DVB extension [ 172.185455][ T5846] usb 2-1: USB disconnect, device number 5 [ 172.227097][ T5846] em28xx 2-1:0.0: Disconnecting em28xx [ 172.277110][ T9] em28xx 2-1:0.0: Registering input extension [ 172.297698][ T5846] em28xx 2-1:0.0: Closing input extension [ 172.355323][ T5846] em28xx 2-1:0.0: Freeing device [ 172.407978][ T7009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.396'. [ 172.420153][ T7009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.396'. [ 172.642585][ T7012] kvm: pic: level sensitive irq not supported [ 172.642933][ T7012] kvm: pic: single mode not supported [ 172.652570][ T7012] kvm: pic: level sensitive irq not supported [ 173.013735][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 173.215293][ T9] usb 1-1: config index 0 descriptor too short (expected 1316, got 36) [ 173.223670][ T9] usb 1-1: config 7 has an invalid interface number: 204 but max is -1 [ 173.231927][ T9] usb 1-1: config 7 has 1 interface, different from the descriptor's value: 0 [ 173.240840][ T9] usb 1-1: config 7 has no interface number 0 [ 173.247087][ T9] usb 1-1: config 7 interface 204 altsetting 129 endpoint 0x4 has invalid wMaxPacketSize 0 [ 173.257234][ T9] usb 1-1: config 7 interface 204 has no altsetting 0 [ 173.266025][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=9904, bcdDevice=d1.ce [ 173.275165][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.283156][ T9] usb 1-1: Product: syz [ 173.287361][ T9] usb 1-1: Manufacturer: syz [ 173.291968][ T9] usb 1-1: SerialNumber: syz [ 173.523454][ T9] smsc95xx v2.0.0 [ 173.530514][ T9] smsc95xx 1-1:7.204 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 173.547643][ T9] smsc95xx: probe of 1-1:7.204 failed with error -22 [ 173.556832][ T9] usbhid 1-1:7.204: couldn't find an input interrupt endpoint [ 173.573767][ T9] usb 1-1: USB disconnect, device number 6 [ 176.885441][ T7081] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 178.585890][ T7106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.431'. [ 178.602952][ T7106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.680081][ T7106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.932032][ T7115] netlink: 24 bytes leftover after parsing attributes in process `syz.0.433'. [ 180.873337][ T7130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.436'. [ 181.313875][ T5846] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 181.513821][ T5846] usb 2-1: Using ep0 maxpacket: 32 [ 181.583115][ T5846] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.748497][ T5846] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.981282][ T5846] usb 2-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=db.74 [ 182.013940][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.066893][ T5846] usb 2-1: Product: syz [ 182.071108][ T5846] usb 2-1: Manufacturer: syz [ 182.102993][ T5846] usb 2-1: SerialNumber: syz [ 182.129478][ T5846] usb 2-1: config 0 descriptor?? [ 182.158258][ T5846] usb 2-1: bad CDC descriptors [ 182.176012][ T5846] usb 2-1: bad CDC descriptors [ 182.366616][ T5846] usb 2-1: USB disconnect, device number 6 [ 182.669452][ T7159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.449'. [ 183.954871][ T7177] netlink: 17 bytes leftover after parsing attributes in process `syz.3.456'. [ 184.629213][ T7196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.464'. [ 191.465721][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 191.465755][ T5081] Bluetooth: hci2: command 0x0406 tx timeout [ 191.478051][ T5769] Bluetooth: hci1: command 0x0406 tx timeout [ 193.733440][ T7312] netlink: 'syz.0.502': attribute type 83 has an invalid length. [ 194.505081][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.511592][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.294124][ T27] audit: type=1800 audit(1767509090.680:19): pid=7319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.503" name="/" dev="fuse" ino=9 res=0 errno=0 [ 197.530217][ T7266] Set syz1 is full, maxelem 65536 reached [ 198.050982][ T7374] netlink: 'syz.1.525': attribute type 1 has an invalid length. [ 198.156643][ T7374] 8021q: adding VLAN 0 to HW filter on device bond1 [ 198.187022][ T7380] bond1: entered promiscuous mode [ 198.201156][ T7380] bond1: entered allmulticast mode [ 198.433860][ T5815] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 199.151570][ T5774] Bluetooth: hci1: unexpected event for opcode 0x2040 [ 199.180346][ T7397] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.198300][ T5815] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 199.215318][ T5815] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 199.233718][ T5815] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 199.266794][ T5815] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 199.295301][ T5815] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 199.333169][ T5815] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 199.356107][ T7397] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.374502][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 199.382540][ T5815] usb 4-1: Product: syz [ 199.403851][ T5815] usb 4-1: Manufacturer: syz [ 199.456751][ T7397] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.510560][ T5815] cdc_wdm 4-1:1.0: skipping garbage [ 199.540303][ T5815] cdc_wdm 4-1:1.0: skipping garbage [ 199.553402][ T5815] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 199.561071][ T5815] cdc_wdm 4-1:1.0: Unknown control protocol [ 200.379710][ T7397] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.517946][ T7397] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.537665][ T7397] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.562031][ T7397] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.584284][ T7397] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.676187][ T787] usb 4-1: USB disconnect, device number 7 [ 202.678941][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.544'. [ 203.223708][ T787] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 203.594623][ T787] usb 3-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 203.604664][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.335016][ T787] usb 3-1: Product: syz [ 204.339236][ T787] usb 3-1: Manufacturer: syz [ 204.346155][ T787] usb 3-1: SerialNumber: syz [ 204.577357][ T7440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.646286][ T7440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.679640][ T787] usb 3-1: palm_os_4_probe - error -71 getting connection info [ 204.704083][ T787] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 204.762671][ T787] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 204.834430][ T787] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 204.886409][ T787] usb 3-1: USB disconnect, device number 2 [ 204.926272][ T787] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 204.983255][ T787] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 205.136756][ T787] visor 3-1:1.0: device disconnected [ 205.303915][ T5753] udevd[5753]: setting owner of /dev/bus/usb/003/002 to uid=0, gid=0 failed: No such file or directory [ 206.993733][ T7491] netlink: 20 bytes leftover after parsing attributes in process `syz.3.565'. [ 207.853659][ T5774] Bluetooth: hci3: command 0x0406 tx timeout [ 209.003526][ C1] sched: RT throttling activated [ 209.593805][ T23] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 210.537171][ T23] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 210.555545][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.684757][ T23] usb 4-1: Product: syz [ 210.689347][ T23] usb 4-1: Manufacturer: syz [ 210.694322][ T23] usb 4-1: SerialNumber: syz [ 210.719052][ T23] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 211.475011][ T28] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 212.684095][ T7554] autofs4:pid:7554:autofs_fill_super: called with bogus options [ 213.571078][ T28] usb 4-1: Service connection timeout for: 256 [ 213.603986][ T28] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 213.658772][ T23] usb 4-1: USB disconnect, device number 8 [ 213.729120][ T28] ath9k_htc: Failed to initialize the device [ 213.738504][ T23] usb 4-1: ath9k_htc: USB layer deinitialized [ 215.223849][ T6282] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 215.437667][ T7593] loop4: detected capacity change from 0 to 7 [ 215.483806][ T7593] Dev loop4: unable to read RDB block 7 [ 215.492162][ T7593] loop4: AHDI p1 p2 p3 p4 [ 215.510087][ T7593] loop4: partition table partially beyond EOD, truncated [ 215.519872][ T7593] loop4: p1 start 4291892788 is beyond EOD, truncated [ 215.527022][ T7593] loop4: p3 size 4227858431 extends beyond EOD, truncated [ 215.690214][ T7597] netlink: 68 bytes leftover after parsing attributes in process `syz.1.599'. [ 216.677281][ T7602] Bluetooth: hci0: invalid length 0, exp 2 for type 20 [ 216.698371][ T6282] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 216.713413][ T6282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.734827][ T6282] usb 4-1: config 0 descriptor?? [ 216.742775][ T6282] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 216.768306][ T5753] udevd[5753]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 217.502928][ T6282] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 217.953717][ T6282] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 218.262731][ T6282] usb 4-1: USB disconnect, device number 9 [ 225.228848][ T7702] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 225.261872][ T7702] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 225.334766][ T7702] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 225.381719][ T7702] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 225.421313][ T7702] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 225.444862][ T7702] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 226.970056][ T7728] netlink: 148 bytes leftover after parsing attributes in process `syz.0.643'. [ 226.981704][ T7728] netlink: 36 bytes leftover after parsing attributes in process `syz.0.643'. [ 227.233634][ T5774] Bluetooth: hci1: command 0x0406 tx timeout [ 227.373958][ T5774] Bluetooth: hci2: command 0x0406 tx timeout [ 227.453847][ T5774] Bluetooth: hci3: command 0x0406 tx timeout [ 230.303640][ T5774] Bluetooth: hci1: command 0x0406 tx timeout [ 230.303659][ T5768] Bluetooth: hci2: command 0x0406 tx timeout [ 230.309668][ T5774] Bluetooth: hci3: command 0x0406 tx timeout [ 233.543708][ T6282] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 233.840850][ T6282] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 233.911348][ T6282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.921500][ T6282] usb 4-1: Product: syz [ 233.936138][ T6282] usb 4-1: Manufacturer: syz [ 233.940780][ T6282] usb 4-1: SerialNumber: syz [ 234.100116][ T6282] usb 4-1: config 0 descriptor?? [ 234.824913][ T6282] hso 4-1:0.0: Failed to find INT IN ep [ 234.831057][ T6282] usb-storage 4-1:0.0: USB Mass Storage device detected [ 235.614735][ T7810] ------------[ cut here ]------------ [ 235.614913][ T7810] WARNING: CPU: 0 PID: 7810 at drivers/gpu/drm/vkms/vkms_crtc.c:103 vkms_get_vblank_timestamp+0x188/0x1d0 [ 235.614986][ T7810] Modules linked in: [ 235.615067][ T7810] CPU: 0 PID: 7810 Comm: syz.1.666 Not tainted syzkaller #0 [ 235.615102][ T7810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 235.615158][ T7810] RIP: 0010:vkms_get_vblank_timestamp+0x188/0x1d0 [ 235.615206][ T7810] Code: 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 2d b8 ab fc 4c 89 33 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 88 49 54 fc <0f> 0b eb ea 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c ba fe ff ff 4c [ 235.615240][ T7810] RSP: 0018:ffffc9000ceaf0c8 EFLAGS: 00010287 [ 235.615296][ T7810] RAX: ffffffff85314738 RBX: ffffc9000ceaf240 RCX: 0000000000080000 [ 235.615329][ T7810] RDX: ffffc9000eb0f000 RSI: 0000000000038c04 RDI: 0000000000038c05 [ 235.615360][ T7810] RBP: 1ffff920019d5e48 R08: ffffc9000402a000 R09: 0000000000000000 [ 235.615391][ T7810] R10: ffffc9000402a000 R11: 0000000000000000 R12: 00000036d993e4fa [ 235.615423][ T7810] R13: dffffc0000000000 R14: ffff8880213a0000 R15: 00000036d993e4fa [ 235.615458][ T7810] FS: 00007ff4b26bd6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 235.615494][ T7810] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 235.615525][ T7810] CR2: 000000110c2c9d6b CR3: 0000000023bb5000 CR4: 00000000003506f0 [ 235.615559][ T7810] Call Trace: [ 235.615587][ T7810] [ 235.615620][ T7810] ? vkms_disable_vblank+0x20/0x20 [ 235.615670][ T7810] drm_crtc_next_vblank_start+0x21f/0x450 [ 235.615745][ T7810] ? drm_vblank_count_and_time+0x4c0/0x4c0 [ 235.615793][ T7810] ? drm_gem_fb_vmap+0x230/0x8d0 [ 235.615859][ T7810] drm_atomic_helper_wait_for_fences+0x263/0x8b0 [ 235.615933][ T7810] ? drm_atomic_helper_commit_modeset_enables+0xb10/0xb10 [ 235.615978][ T7810] ? drm_atomic_helper_prepare_planes+0x660/0xb40 [ 235.616054][ T7810] drm_atomic_helper_commit+0x5b5/0xae0 [ 235.616125][ T7810] ? drm_atomic_helper_async_commit+0x5c0/0x5c0 [ 235.616170][ T7810] drm_atomic_commit+0x24c/0x2a0 [ 235.616220][ T7810] ? drm_atomic_check_only+0x3030/0x3030 [ 235.616265][ T7810] ? handle_bad_prq_event+0x290/0x290 [ 235.616315][ T7810] ? drm_client_rotation+0x446/0x570 [ 235.616382][ T7810] drm_client_modeset_commit_atomic+0x621/0x760 [ 235.616482][ T7810] ? drm_client_modeset_check+0x180/0x180 [ 235.616520][ T7810] ? __mutex_lock+0x304/0xcc0 [ 235.616591][ T7810] ? mutex_lock_nested+0x20/0x20 [ 235.616628][ T7810] ? __drm_fb_helper_restore_fbdev_mode_unlocked+0x77/0x140 [ 235.616678][ T7810] ? mutex_lock_nested+0x20/0x20 [ 235.616710][ T7810] ? raw_spin_rq_unlock_irq+0x11/0x90 [ 235.616781][ T7810] drm_client_modeset_commit_locked+0xcb/0x4c0 [ 235.616846][ T7810] drm_client_modeset_commit+0x4a/0x70 [ 235.616886][ T7810] __drm_fb_helper_restore_fbdev_mode_unlocked+0x98/0x140 [ 235.616938][ T7810] drm_fb_helper_set_par+0xaf/0x100 [ 235.616977][ T7810] fb_set_var+0x7ca/0xf20 [ 235.617046][ T7810] ? fb_pan_display+0x690/0x690 [ 235.617122][ T7810] ? mark_lock+0x94/0x320 [ 235.617166][ T7810] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 235.617210][ T7810] ? lock_chain_count+0x20/0x20 [ 235.617339][ T7810] fbcon_switch+0x955/0x1e80 [ 235.617417][ T7810] ? fbcon_scroll+0x760/0x760 [ 235.617523][ T7810] ? fbcon_cursor+0x430/0x640 [ 235.617571][ T7810] ? is_console_locked+0x9/0x20 [ 235.617610][ T7810] ? set_origin+0x348/0x480 [ 235.617654][ T7810] redraw_screen+0x561/0xe70 [ 235.617694][ T7810] ? fbcon_set_palette+0x638/0x790 [ 235.617765][ T7810] ? clear_buffer_attributes+0x1c0/0x1c0 [ 235.617837][ T7810] do_fb_ioctl+0x6f0/0x740 [ 235.617882][ T7810] ? fb_release+0x140/0x140 [ 235.618041][ T7810] ? __fget_files+0x28/0x4d0 [ 235.618116][ T7810] ? bpf_lsm_file_ioctl+0x9/0x10 [ 235.618152][ T7810] ? security_file_ioctl+0x80/0xa0 [ 235.618196][ T7810] ? fb_write+0x220/0x220 [ 235.618237][ T7810] __se_sys_ioctl+0xfd/0x170 [ 235.618281][ T7810] do_syscall_64+0x55/0xb0 [ 235.618316][ T7810] ? clear_bhb_loop+0x40/0x90 [ 235.618356][ T7810] ? clear_bhb_loop+0x40/0x90 [ 235.618398][ T7810] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 235.618437][ T7810] RIP: 0033:0x7ff4b178f749 [ 235.618486][ T7810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.618519][ T7810] RSP: 002b:00007ff4b26bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 235.618580][ T7810] RAX: ffffffffffffffda RBX: 00007ff4b19e6090 RCX: 00007ff4b178f749 [ 235.618612][ T7810] RDX: 0000200000000040 RSI: 0000000000004601 RDI: 0000000000000004 [ 235.618643][ T7810] RBP: 00007ff4b1813f91 R08: 0000000000000000 R09: 0000000000000000 [ 235.618677][ T7810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.618708][ T7810] R13: 00007ff4b19e6128 R14: 00007ff4b19e6090 R15: 00007ffcb54ab7a8 [ 235.618795][ T7810] [ 235.618827][ T7810] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 235.618836][ T7810] CPU: 0 PID: 7810 Comm: syz.1.666 Not tainted syzkaller #0 [ 235.618853][ T7810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 235.618862][ T7810] Call Trace: [ 235.618870][ T7810] [ 235.618876][ T7810] dump_stack_lvl+0x16c/0x230 [ 235.618906][ T7810] ? show_regs_print_info+0x20/0x20 [ 235.618925][ T7810] ? load_image+0x3b0/0x3b0 [ 235.618945][ T7810] panic+0x2c0/0x710 [ 235.618960][ T7810] ? bpf_jit_dump+0xd0/0xd0 [ 235.618981][ T7810] __warn+0x2e0/0x470 [ 235.618992][ T7810] ? vkms_get_vblank_timestamp+0x188/0x1d0 [ 235.619008][ T7810] ? vkms_get_vblank_timestamp+0x188/0x1d0 [ 235.619021][ T7810] report_bug+0x2be/0x4f0 [ 235.619030][ T7810] ? vkms_get_vblank_timestamp+0x188/0x1d0 [ 235.619045][ T7810] ? vkms_get_vblank_timestamp+0x188/0x1d0 [ 235.619059][ T7810] ? vkms_get_vblank_timestamp+0x18a/0x1d0 [ 235.619072][ T7810] handle_bug+0xcf/0x120 [ 235.619082][ T7810] exc_invalid_op+0x1a/0x50 [ 235.619092][ T7810] asm_exc_invalid_op+0x1a/0x20 [ 235.619102][ T7810] RIP: 0010:vkms_get_vblank_timestamp+0x188/0x1d0 [ 235.619116][ T7810] Code: 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 2d b8 ab fc 4c 89 33 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 88 49 54 fc <0f> 0b eb ea 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c ba fe ff ff 4c [ 235.619124][ T7810] RSP: 0018:ffffc9000ceaf0c8 EFLAGS: 00010287 [ 235.619132][ T7810] RAX: ffffffff85314738 RBX: ffffc9000ceaf240 RCX: 0000000000080000 [ 235.619139][ T7810] RDX: ffffc9000eb0f000 RSI: 0000000000038c04 RDI: 0000000000038c05 [ 235.619145][ T7810] RBP: 1ffff920019d5e48 R08: ffffc9000402a000 R09: 0000000000000000 [ 235.619151][ T7810] R10: ffffc9000402a000 R11: 0000000000000000 R12: 00000036d993e4fa [ 235.619157][ T7810] R13: dffffc0000000000 R14: ffff8880213a0000 R15: 00000036d993e4fa [ 235.619168][ T7810] ? vkms_get_vblank_timestamp+0x188/0x1d0 [ 235.619186][ T7810] ? vkms_get_vblank_timestamp+0x188/0x1d0 [ 235.619200][ T7810] ? vkms_disable_vblank+0x20/0x20 [ 235.619214][ T7810] drm_crtc_next_vblank_start+0x21f/0x450 [ 235.619233][ T7810] ? drm_vblank_count_and_time+0x4c0/0x4c0 [ 235.619248][ T7810] ? drm_gem_fb_vmap+0x230/0x8d0 [ 235.619262][ T7810] drm_atomic_helper_wait_for_fences+0x263/0x8b0 [ 235.619280][ T7810] ? drm_atomic_helper_commit_modeset_enables+0xb10/0xb10 [ 235.619293][ T7810] ? drm_atomic_helper_prepare_planes+0x660/0xb40 [ 235.619313][ T7810] drm_atomic_helper_commit+0x5b5/0xae0 [ 235.619330][ T7810] ? drm_atomic_helper_async_commit+0x5c0/0x5c0 [ 235.619343][ T7810] drm_atomic_commit+0x24c/0x2a0 [ 235.619360][ T7810] ? drm_atomic_check_only+0x3030/0x3030 [ 235.619373][ T7810] ? handle_bad_prq_event+0x290/0x290 [ 235.619388][ T7810] ? drm_client_rotation+0x446/0x570 [ 235.619403][ T7810] drm_client_modeset_commit_atomic+0x621/0x760 [ 235.619421][ T7810] ? drm_client_modeset_check+0x180/0x180 [ 235.619431][ T7810] ? __mutex_lock+0x304/0xcc0 [ 235.619453][ T7810] ? mutex_lock_nested+0x20/0x20 [ 235.619463][ T7810] ? __drm_fb_helper_restore_fbdev_mode_unlocked+0x77/0x140 [ 235.619479][ T7810] ? mutex_lock_nested+0x20/0x20 [ 235.619487][ T7810] ? raw_spin_rq_unlock_irq+0x11/0x90 [ 235.619504][ T7810] drm_client_modeset_commit_locked+0xcb/0x4c0 [ 235.619519][ T7810] drm_client_modeset_commit+0x4a/0x70 [ 235.619531][ T7810] __drm_fb_helper_restore_fbdev_mode_unlocked+0x98/0x140 [ 235.619548][ T7810] drm_fb_helper_set_par+0xaf/0x100 [ 235.619558][ T7810] fb_set_var+0x7ca/0xf20 [ 235.619574][ T7810] ? fb_pan_display+0x690/0x690 [ 235.619590][ T7810] ? mark_lock+0x94/0x320 [ 235.619602][ T7810] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 235.619614][ T7810] ? lock_chain_count+0x20/0x20 [ 235.619640][ T7810] fbcon_switch+0x955/0x1e80 [ 235.619660][ T7810] ? fbcon_scroll+0x760/0x760 [ 235.619682][ T7810] ? fbcon_cursor+0x430/0x640 [ 235.619696][ T7810] ? is_console_locked+0x9/0x20 [ 235.619708][ T7810] ? set_origin+0x348/0x480 [ 235.619721][ T7810] redraw_screen+0x561/0xe70 [ 235.619732][ T7810] ? fbcon_set_palette+0x638/0x790 [ 235.619748][ T7810] ? clear_buffer_attributes+0x1c0/0x1c0 [ 235.619766][ T7810] do_fb_ioctl+0x6f0/0x740 [ 235.619779][ T7810] ? fb_release+0x140/0x140 [ 235.619811][ T7810] ? __fget_files+0x28/0x4d0 [ 235.619829][ T7810] ? bpf_lsm_file_ioctl+0x9/0x10 [ 235.619838][ T7810] ? security_file_ioctl+0x80/0xa0 [ 235.619850][ T7810] ? fb_write+0x220/0x220 [ 235.619861][ T7810] __se_sys_ioctl+0xfd/0x170 [ 235.619874][ T7810] do_syscall_64+0x55/0xb0 [ 235.619883][ T7810] ? clear_bhb_loop+0x40/0x90 [ 235.619893][ T7810] ? clear_bhb_loop+0x40/0x90 [ 235.619905][ T7810] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 235.619915][ T7810] RIP: 0033:0x7ff4b178f749 [ 235.619924][ T7810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.619932][ T7810] RSP: 002b:00007ff4b26bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 235.619941][ T7810] RAX: ffffffffffffffda RBX: 00007ff4b19e6090 RCX: 00007ff4b178f749 [ 235.619948][ T7810] RDX: 0000200000000040 RSI: 0000000000004601 RDI: 0000000000000004 [ 235.619954][ T7810] RBP: 00007ff4b1813f91 R08: 0000000000000000 R09: 0000000000000000 [ 235.619959][ T7810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.619965][ T7810] R13: 00007ff4b19e6128 R14: 00007ff4b19e6090 R15: 00007ffcb54ab7a8 [ 235.619981][ T7810] [ 235.620314][ T7810] Kernel Offset: disabled