last executing test programs: 7.940523369s ago: executing program 2 (id=36): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f0000006800)="10", 0x20) 3.578552095s ago: executing program 2 (id=69): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "5c8f020082395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 3.273123417s ago: executing program 0 (id=72): r0 = syz_open_dev$vbi(&(0x7f00000003c0), 0x3, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0cc5640, &(0x7f0000000780)={0x7, @sliced={0x6, [0x7, 0x7ff, 0x4, 0x0, 0x0, 0x1000, 0x2, 0x7, 0xfffe, 0x5, 0x57, 0x3, 0xf614, 0x9, 0x7, 0x80, 0x31, 0x6, 0x9, 0x3, 0x5, 0x20bc, 0x8, 0xa97, 0x8479, 0x0, 0x6, 0x4, 0x7, 0x100, 0x8001, 0x3, 0x1, 0x4, 0x0, 0x9, 0x100, 0x3, 0x7f, 0x6, 0x7f, 0x1, 0x4, 0x3, 0x2, 0x8, 0x1, 0xdcc3], 0x8000}}) 3.208708809s ago: executing program 3 (id=73): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3.17126838s ago: executing program 0 (id=74): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f000000d640)={0x0, 0x0, &(0x7f000000d600)={&(0x7f00000005c0)=@newtaction={0x9c0, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x8a8, 0x1, [@m_ipt={0x1a0, 0x10, 0x0, 0x0, {{0x8}, {0x9c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x45, 0x6, {0xa, 'filter\x00', 0x3, 0xfff8, "949ec298184175de8a1e95208bef2ef794a87535d14bb3652ca722"}}]}, {0xdd, 0x6, "03ac80cfd1249ed89da4b4e064a88cf7888759ce3312d67bbeea01f7f6c9f491935443f306d713a8fb7047a5159129297f7f8246cb8a74f94a6549059e3355756d6a3c9c08443c0c8eb49f72da898b3e59e137ba1d39ee10f5852964dcc1ae09f1d79ea65067e3beb0581a644fa59e12b2067de4a4887357334fb4a634cd5ab42abcbd529744bfa42595e567d534650556ea0f7f71b5eef650e2e8cdf4b1c668d2fd7e7dc16cc6f733b8af68288997aaefbf7899a0ca19983cb564fa5be768a31ab822d6c98aeef1a5fc9d6bcf7b9a1b88a94365931608d06f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x284, 0x10, 0x0, 0x0, {{0x8}, {0x218, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_TARG={0x115, 0x6, {0x5, 'mangle\x00', 0x9, 0xffff, "df40ef633d7fced138f5c05243813154eb9224b7d5a879ba47f4028b9724e2b60c112dcd91ea539f0e3a16b2e5954251ab980ce67f154c0b80200c58cdc14f75a70c11cc414052ea9459cf769637ed068ff882ac2d0e22126b60eb4d7a9cb0d3f36a6d30c0ab19297cf9c07a89b323a4a1201ab4a49a94b154a08c5be2d1f3391293a93bd401285fe709aff41fd049f1e803792de03e2f1b279b3026314b09299a7c683f73fef9d127b0df60cf2a903597038b49f197c9001c02f0bd5f4461086c6e2cf499a7942ba43fca26f05fd1199e2adff158342408f86f38d442a5f16537093caee1d5f07717032d"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TARG={0x51, 0x6, {0x0, 'mangle\x00', 0x2, 0x3, "4c62fdb6c1d9e9751b85131383111291d855fa8a1919a06334c9969770bab9c51972ad6e414dec"}}, @TCA_IPT_TARG={0x59, 0x6, {0x1, 'security\x00', 0x8, 0x9, "971abd9e3af5c1bfd53060e4436fe09d360b2e2cd7229a795eaf74a4275a09505046cef4f96f198c51e39933af8a7f"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x45, 0x6, "8c92234b521ffe981dd0d4e10afaec6dbee0efcb56e1ef9170b1cd45cae808519866ce57200c79038bb552b2c395487ede6fb7b593fc117195f7c49f88670cc444"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x104, 0x4, 0x0, 0x0, {{0x8}, {0x4}, {0xd9, 0x6, "316808d11baf2e7a87a1719cff1202295b3859aff61acafde2041d664c580c5a8c7b2ad459ffa172795ff364021113ef817bc4ad9a1d4059ec4674e9e80a395288a9cc0fa41ad0cbc5c7e84f16743929b5081efd398e27f286c48e14e20fe72b72cf113c0b3946f9d4c33ca5e4bc0ce96097ce357172e6ccf80818c0306fab9626b178a968b1c6b2de0b517302a9cc12fda509a7d256a4ff54a10e7946726678b31c6e99991735b21d31e8ef19e018e2c901e8d267cac71a9d3597b71e9b60fdb165fe02e8f3eaeb5739f4dfd19be90f69d368cd4f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0x4c, 0x1c, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ipt={0x330, 0x11, 0x0, 0x0, {{0x8}, {0x250, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x71, 0x6, {0x0, 'mangle\x00', 0x9, 0xfff7, "324c5880937062dd44953edc94d7272b4c88b39babcd9c65304f8a683018823a5e26ad479677a86742f2ae2ebc984490fe68940b5658702910f2b9d1b952c7318ce607b082e9db"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TARG={0xa5, 0x6, {0x3, 'mangle\x00', 0x4, 0x3, "f0f8f66d602b6783655db39e1cc948a0421e5d1393f4cd635a25e30c1719f35655ebc220059a6505e7e8de74849c425e9217e4cc351477cb2a445b66dd468c00d32929d5f3c2ea9992c262f0d79d8d361d1556aa1b2e21c4f045af07d8fce62f3493ce450ef47273cf7908ed5026fd1b3a1cab1153f7eb0951daf2"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x693b8aa2}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0xe1, 0x6, {0x7ff, 'security\x00', 0x2, 0x8, "fed0e0dacc4fc91d4e674122609e0a6162b34895637129fc809755c2b8d7d77e2e9bd17541036e25155b436d08daa8f6d6c96ee00292d32de94a5923b4762bed536f8d1b5634ea3ad83c7aa89e9a796237166ce1d5ce33a899c82ff0563bcc2c8e4abff8f2c8062ab102025a307c9c376b51089b89c2676f13aa867fc2c454cd141b4713532c3780d291e19348fea90fbfc1fe5d0d52c7ef25d06ebd7ca66eb9f552a3c5d6a9dcd88011be9ee1bd641a022baf2be1d2fb"}}]}, {0xb9, 0x6, "5de6ccedd6ab8060663a7ac5c9ad021c362c7981b166af53b704aec6d76d313d14822b2107088a89b23b5d63a0c635c17fb34c2036b49f31fea2bdc79cb41fef7dfd6683a7307848c9275e08e06c018a8c4dce0e1f509600cfc2deb018c8cedc9a9d619d63faf53492c28f9fd99c2952312d7437c45dc56b17dc63d3e5e97ab2a16ee79c81478e10ba888305e6817945a0b68306a971c4a2382bd9577b679196987065bd27745023d7a979e0bde20eb6328afee98a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}]}, {0x54, 0x1, [@m_ipt={0x50, 0x19, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, {0x4}, {0xac, 0x1, [@m_ipt={0x2c, 0x6, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ipt={0x2c, 0x13, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ipt={0x50, 0x20, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x9c0}, 0x1, 0x0, 0x0, 0x8004}, 0x880) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x6, 0xfffffffffffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x5100}], 0x1, &(0x7f0000000380)={0x0, 0x3938700}, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.141737888s ago: executing program 2 (id=75): syz_usb_connect(0x5, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e95b1710720500cbc9bb000203010902340001fb0000000904ca010338e880060905012a0000060206090500000002f803070905061000041c0d090705c1", @ANYRES8], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024000ad50120800014000000000140004"], 0xa4}}, 0x40810) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x1, 0x1}, 0x26) socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000040)='test_dummy_encryption', 0x0, 0xffffffffffffff9c) r2 = fsopen(&(0x7f00000009c0)='f2fs\x00', 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) 2.664517474s ago: executing program 0 (id=76): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmmsg$alg(r0, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0xf4240}], 0x1}], 0x1, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x850}, 0x4048000) 2.58300578s ago: executing program 0 (id=77): openat$kvm(0x0, &(0x7f00000002c0), 0xa600, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r0 = eventfd2(0xb, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={r0, 0x4}) write$eventfd(r0, &(0x7f0000000080)=0x430f, 0x8) 2.416442933s ago: executing program 0 (id=79): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x1, 0x0, &(0x7f00000000c0)) 2.415954557s ago: executing program 1 (id=80): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0xf4240}], 0x1}], 0x1, 0x0) 2.343669017s ago: executing program 1 (id=81): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) 2.327838965s ago: executing program 0 (id=82): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f0000006800)="10", 0x20) 2.156124381s ago: executing program 3 (id=83): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "5c8f020082395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 2.15501092s ago: executing program 1 (id=84): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f000000d640)={0x0, 0x0, &(0x7f000000d600)={&(0x7f00000005c0)=@newtaction={0x918, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x8a8, 0x1, [@m_ipt={0x1a0, 0x10, 0x0, 0x0, {{0x8}, {0x9c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x45, 0x6, {0xa, 'filter\x00', 0x3, 0xfff8, "949ec298184175de8a1e95208bef2ef794a87535d14bb3652ca722"}}]}, {0xdd, 0x6, "03ac80cfd1249ed89da4b4e064a88cf7888759ce3312d67bbeea01f7f6c9f491935443f306d713a8fb7047a5159129297f7f8246cb8a74f94a6549059e3355756d6a3c9c08443c0c8eb49f72da898b3e59e137ba1d39ee10f5852964dcc1ae09f1d79ea65067e3beb0581a644fa59e12b2067de4a4887357334fb4a634cd5ab42abcbd529744bfa42595e567d534650556ea0f7f71b5eef650e2e8cdf4b1c668d2fd7e7dc16cc6f733b8af68288997aaefbf7899a0ca19983cb564fa5be768a31ab822d6c98aeef1a5fc9d6bcf7b9a1b88a94365931608d06f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x284, 0x10, 0x0, 0x0, {{0x8}, {0x218, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_TARG={0x115, 0x6, {0x5, 'mangle\x00', 0x9, 0xffff, "df40ef633d7fced138f5c05243813154eb9224b7d5a879ba47f4028b9724e2b60c112dcd91ea539f0e3a16b2e5954251ab980ce67f154c0b80200c58cdc14f75a70c11cc414052ea9459cf769637ed068ff882ac2d0e22126b60eb4d7a9cb0d3f36a6d30c0ab19297cf9c07a89b323a4a1201ab4a49a94b154a08c5be2d1f3391293a93bd401285fe709aff41fd049f1e803792de03e2f1b279b3026314b09299a7c683f73fef9d127b0df60cf2a903597038b49f197c9001c02f0bd5f4461086c6e2cf499a7942ba43fca26f05fd1199e2adff158342408f86f38d442a5f16537093caee1d5f07717032d"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TARG={0x51, 0x6, {0x0, 'mangle\x00', 0x2, 0x3, "4c62fdb6c1d9e9751b85131383111291d855fa8a1919a06334c9969770bab9c51972ad6e414dec"}}, @TCA_IPT_TARG={0x59, 0x6, {0x1, 'security\x00', 0x8, 0x9, "971abd9e3af5c1bfd53060e4436fe09d360b2e2cd7229a795eaf74a4275a09505046cef4f96f198c51e39933af8a7f"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x45, 0x6, "8c92234b521ffe981dd0d4e10afaec6dbee0efcb56e1ef9170b1cd45cae808519866ce57200c79038bb552b2c395487ede6fb7b593fc117195f7c49f88670cc444"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x104, 0x4, 0x0, 0x0, {{0x8}, {0x4}, {0xd9, 0x6, "316808d11baf2e7a87a1719cff1202295b3859aff61acafde2041d664c580c5a8c7b2ad459ffa172795ff364021113ef817bc4ad9a1d4059ec4674e9e80a395288a9cc0fa41ad0cbc5c7e84f16743929b5081efd398e27f286c48e14e20fe72b72cf113c0b3946f9d4c33ca5e4bc0ce96097ce357172e6ccf80818c0306fab9626b178a968b1c6b2de0b517302a9cc12fda509a7d256a4ff54a10e7946726678b31c6e99991735b21d31e8ef19e018e2c901e8d267cac71a9d3597b71e9b60fdb165fe02e8f3eaeb5739f4dfd19be90f69d368cd4f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0x4c, 0x1c, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ipt={0x330, 0x11, 0x0, 0x0, {{0x8}, {0x250, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x71, 0x6, {0x0, 'mangle\x00', 0x9, 0xfff7, "324c5880937062dd44953edc94d7272b4c88b39babcd9c65304f8a683018823a5e26ad479677a86742f2ae2ebc984490fe68940b5658702910f2b9d1b952c7318ce607b082e9db"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TARG={0xa5, 0x6, {0x3, 'mangle\x00', 0x4, 0x3, "f0f8f66d602b6783655db39e1cc948a0421e5d1393f4cd635a25e30c1719f35655ebc220059a6505e7e8de74849c425e9217e4cc351477cb2a445b66dd468c00d32929d5f3c2ea9992c262f0d79d8d361d1556aa1b2e21c4f045af07d8fce62f3493ce450ef47273cf7908ed5026fd1b3a1cab1153f7eb0951daf2"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x693b8aa2}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0xe1, 0x6, {0x7ff, 'security\x00', 0x2, 0x8, "fed0e0dacc4fc91d4e674122609e0a6162b34895637129fc809755c2b8d7d77e2e9bd17541036e25155b436d08daa8f6d6c96ee00292d32de94a5923b4762bed536f8d1b5634ea3ad83c7aa89e9a796237166ce1d5ce33a899c82ff0563bcc2c8e4abff8f2c8062ab102025a307c9c376b51089b89c2676f13aa867fc2c454cd141b4713532c3780d291e19348fea90fbfc1fe5d0d52c7ef25d06ebd7ca66eb9f552a3c5d6a9dcd88011be9ee1bd641a022baf2be1d2fb"}}]}, {0xb9, 0x6, "5de6ccedd6ab8060663a7ac5c9ad021c362c7981b166af53b704aec6d76d313d14822b2107088a89b23b5d63a0c635c17fb34c2036b49f31fea2bdc79cb41fef7dfd6683a7307848c9275e08e06c018a8c4dce0e1f509600cfc2deb018c8cedc9a9d619d63faf53492c28f9fd99c2952312d7437c45dc56b17dc63d3e5e97ab2a16ee79c81478e10ba888305e6817945a0b68306a971c4a2382bd9577b679196987065bd27745023d7a979e0bde20eb6328afee98a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}]}, {0x54, 0x1, [@m_ipt={0x50, 0x19, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, {0x4}, {0x4}]}, 0x918}, 0x1, 0x0, 0x0, 0x8004}, 0x880) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x6, 0xfffffffffffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x5100}], 0x1, &(0x7f0000000380)={0x0, 0x3938700}, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.834038549s ago: executing program 3 (id=85): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmmsg$alg(r0, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0xf4240}], 0x1}], 0x1, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x850}, 0x4048000) 1.584648121s ago: executing program 3 (id=86): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0) 1.406165725s ago: executing program 3 (id=87): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r1 = eventfd2(0xb, 0x0) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000000)={r1, 0x4}) write$eventfd(r1, &(0x7f0000000080)=0x430f, 0x8) 1.11823861s ago: executing program 3 (id=88): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8000007, 0x0, 0x5, 0x0, 0x40000000000006, 0xfa11, 0xffffffff}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x95) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r5, &(0x7f0000001540)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x1000, 0x7, 0x4) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r7 = memfd_create(&(0x7f00000003c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) ioctl$UDMABUF_CREATE_LIST(r6, 0x40087543, &(0x7f0000000040)={0x0, 0x2, [{r7, 0x0, 0x0, 0x8000}, {r7, 0x0, 0x1000, 0x1000}]}) syz_usb_connect(0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e518a708ac0501859d200000690109022f00010000000009040000000e010000152403"], 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) recvmmsg(0xffffffffffffffff, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001d00)=""/1, 0x1}], 0x1}, 0xc}], 0x1, 0x10002, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) 926.34642ms ago: executing program 2 (id=89): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0x706, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x7, 0x2e, 0xffffffb9, 0x1a}, 0x9c) 721.581036ms ago: executing program 2 (id=90): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x1, 0x0, &(0x7f00000000c0)) 604.414789ms ago: executing program 2 (id=91): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000280)={0x1000000000066fb, 0x800000000004, 0x376, 0x0, 0x0, 0x51, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240b, 0x3f, 0x9, 0x0, 0x7ca53c09, 0xfffffffffffffffd, 0x1fff, 0xfffffffffffffffc, 0x4, 0x10000000000, 0x0, 0x0, 0x100000000003f89, 0x0, 0x8000000000000000}) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r1, 0x5421, &(0x7f0000000440)=0x6) connect$bt_rfcomm(r1, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) 602.322335ms ago: executing program 1 (id=92): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0xf4240}], 0x1}], 0x1, 0x0) 276.365122ms ago: executing program 1 (id=93): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "5c8f020082395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 0s ago: executing program 1 (id=94): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0xf4240}], 0x1}], 0x1, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x850}, 0x4048000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.6' (ED25519) to the list of known hosts. [ 76.930079][ T5591] cgroup: Unknown subsys name 'net' [ 77.170462][ T5591] cgroup: Unknown subsys name 'cpuset' [ 77.224194][ T5591] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.885009][ T5591] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.373142][ T5608] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.396346][ T5608] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.424464][ T5608] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.427994][ T5608] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.434593][ T5608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.439368][ T5608] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.451888][ T5615] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.464515][ T5620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.465460][ T5615] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.471010][ T5615] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.476592][ T5615] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.482352][ T5615] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.483165][ T5615] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.485650][ T5620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.492719][ T5615] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.496964][ T5620] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.496985][ T5613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.500351][ T5613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.533476][ T5620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.584108][ T5620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.402587][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.404771][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.405480][ T5603] bridge_slave_0: entered allmulticast mode [ 84.408577][ T5603] bridge_slave_0: entered promiscuous mode [ 84.447517][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.447673][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.447844][ T5603] bridge_slave_1: entered allmulticast mode [ 84.452638][ T5603] bridge_slave_1: entered promiscuous mode [ 84.565996][ T5620] Bluetooth: hci2: command tx timeout [ 84.566001][ T5612] Bluetooth: hci0: command tx timeout [ 84.566194][ T60] Bluetooth: hci3: command tx timeout [ 84.566508][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.566763][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.567015][ T5604] bridge_slave_0: entered allmulticast mode [ 84.569407][ T5604] bridge_slave_0: entered promiscuous mode [ 84.622423][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.622895][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.623296][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.624340][ T5604] bridge_slave_1: entered allmulticast mode [ 84.627145][ T5604] bridge_slave_1: entered promiscuous mode [ 84.628962][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.629225][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.629446][ T5606] bridge_slave_0: entered allmulticast mode [ 84.632634][ T5606] bridge_slave_0: entered promiscuous mode [ 84.642636][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.642894][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.643753][ T60] Bluetooth: hci1: command tx timeout [ 84.643925][ T5605] bridge_slave_0: entered allmulticast mode [ 84.647137][ T5605] bridge_slave_0: entered promiscuous mode [ 84.660197][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.680319][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.680580][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.681089][ T5606] bridge_slave_1: entered allmulticast mode [ 84.685856][ T5606] bridge_slave_1: entered promiscuous mode [ 84.699508][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.699770][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.700095][ T5605] bridge_slave_1: entered allmulticast mode [ 84.703706][ T5605] bridge_slave_1: entered promiscuous mode [ 84.821420][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.858871][ T5603] team0: Port device team_slave_0 added [ 84.862183][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.868549][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.881219][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.886567][ T5603] team0: Port device team_slave_1 added [ 84.911995][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.128755][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.199072][ T5604] team0: Port device team_slave_0 added [ 85.234445][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.234463][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.234486][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.239317][ T5604] team0: Port device team_slave_1 added [ 85.241756][ T5606] team0: Port device team_slave_0 added [ 85.255726][ T5605] team0: Port device team_slave_0 added [ 85.259651][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.259667][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.259689][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.290906][ T5606] team0: Port device team_slave_1 added [ 85.295796][ T5605] team0: Port device team_slave_1 added [ 85.392706][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.392717][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.392733][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.448420][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.448430][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.448444][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.449822][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.449831][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.449845][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.451557][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.451566][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.451579][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.583509][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.583525][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.583547][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.586526][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.586541][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.586564][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.660150][ T5603] hsr_slave_0: entered promiscuous mode [ 85.662264][ T5603] hsr_slave_1: entered promiscuous mode [ 85.767844][ T5604] hsr_slave_0: entered promiscuous mode [ 85.768973][ T5604] hsr_slave_1: entered promiscuous mode [ 85.769940][ T5604] debugfs: 'hsr0' already exists in 'hsr' [ 85.770019][ T5604] Cannot create hsr debugfs directory [ 85.821742][ T5606] hsr_slave_0: entered promiscuous mode [ 85.822871][ T5606] hsr_slave_1: entered promiscuous mode [ 85.827226][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 85.827249][ T5606] Cannot create hsr debugfs directory [ 85.838838][ T5605] hsr_slave_0: entered promiscuous mode [ 85.840694][ T5605] hsr_slave_1: entered promiscuous mode [ 85.842228][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 85.842250][ T5605] Cannot create hsr debugfs directory [ 86.646927][ T60] Bluetooth: hci0: command tx timeout [ 86.646958][ T60] Bluetooth: hci3: command tx timeout [ 86.646978][ T60] Bluetooth: hci2: command tx timeout [ 86.723572][ T5620] Bluetooth: hci1: command tx timeout [ 86.781396][ T5603] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.821128][ T1255] cfg80211: failed to load regulatory.db [ 86.837793][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.853059][ T5603] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.878083][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.903041][ T5603] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.937470][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.961734][ T5603] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.998504][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.129148][ T5604] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.157944][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.161578][ T5604] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.188903][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.193184][ T5604] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.238692][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.260496][ T5604] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.302796][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.445617][ T5605] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.482426][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.495966][ T5605] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.542918][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.549850][ T5605] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.577112][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.601207][ T5605] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.640931][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.768682][ T5606] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.808587][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.825256][ T5606] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.871497][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.884892][ T5606] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.908796][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.919568][ T5606] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.947392][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.991310][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.079000][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.137435][ T776] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.138439][ T776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.194674][ T776] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.194830][ T776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.223145][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.309013][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.360707][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.372689][ T776] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.372829][ T776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.420032][ T776] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.420235][ T776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.535617][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.559605][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.640788][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.641024][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.706926][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.709599][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.725775][ T5620] Bluetooth: hci2: command tx timeout [ 88.725807][ T5620] Bluetooth: hci3: command tx timeout [ 88.725827][ T5620] Bluetooth: hci0: command tx timeout [ 88.775728][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.803932][ T60] Bluetooth: hci1: command tx timeout [ 88.828055][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.828196][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.867710][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.867844][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.475727][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.927551][ T5603] veth0_vlan: entered promiscuous mode [ 89.976721][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.055604][ T5603] veth1_vlan: entered promiscuous mode [ 90.262676][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.373845][ T5603] veth0_macvtap: entered promiscuous mode [ 90.389751][ T5604] veth0_vlan: entered promiscuous mode [ 90.448579][ T5603] veth1_macvtap: entered promiscuous mode [ 90.478108][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.479111][ T5604] veth1_vlan: entered promiscuous mode [ 90.554847][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.571797][ T5605] veth0_vlan: entered promiscuous mode [ 90.596275][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.639198][ T45] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.653188][ T45] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.662631][ T45] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.680730][ T45] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.682931][ T5605] veth1_vlan: entered promiscuous mode [ 90.710310][ T5604] veth0_macvtap: entered promiscuous mode [ 90.803807][ T60] Bluetooth: hci0: command tx timeout [ 90.803839][ T60] Bluetooth: hci3: command tx timeout [ 90.803858][ T60] Bluetooth: hci2: command tx timeout [ 90.811562][ T5604] veth1_macvtap: entered promiscuous mode [ 90.884425][ T5620] Bluetooth: hci1: command tx timeout [ 90.959580][ T5606] veth0_vlan: entered promiscuous mode [ 91.118083][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.120749][ T5606] veth1_vlan: entered promiscuous mode [ 91.179945][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.211121][ T93] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.211144][ T93] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.249724][ T5605] veth0_macvtap: entered promiscuous mode [ 91.259983][ T93] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.280557][ T93] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.301369][ T93] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.316191][ T5605] veth1_macvtap: entered promiscuous mode [ 91.337616][ T93] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.422134][ T776] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.422152][ T776] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.530298][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.553270][ T5606] veth0_macvtap: entered promiscuous mode [ 91.714038][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.737994][ T5606] veth1_macvtap: entered promiscuous mode [ 91.832515][ T776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.849654][ T776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.866385][ T776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.929114][ T776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.949726][ T93] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.949745][ T93] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.960405][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.123623][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.417822][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.417840][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.459648][ T151] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.477756][ T151] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.480149][ T151] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.482470][ T151] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.750147][ T5764] capability: warning: `syz.3.7' uses 32-bit capabilities (legacy support in use) [ 92.912324][ T93] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.912343][ T93] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.483433][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.483450][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.674839][ T4772] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.674857][ T4772] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.979313][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.979353][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.057368][ T5784] mmap: syz.3.14 (5784) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 96.412407][ T5821] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 99.382359][ T5702] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 99.683257][ T5702] usb 3-1: Using ep0 maxpacket: 32 [ 99.782317][ T5702] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 99.782368][ T5702] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 99.782393][ T5702] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 99.782417][ T5702] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 99.785858][ T5702] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 99.785887][ T5702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.785906][ T5702] usb 3-1: Product: syz [ 99.785919][ T5702] usb 3-1: Manufacturer: syz [ 99.785932][ T5702] usb 3-1: SerialNumber: syz [ 100.313103][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 100.425874][ T5702] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input5 [ 100.536624][ T5702] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 100.536644][ T5702] (id 0x00) [ 100.637892][ T5702] rc_core: IR keymap rc-imon-pad not found [ 100.637914][ T5702] Registered IR keymap rc-empty [ 100.638008][ T5702] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 100.638025][ T5702] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 100.771441][ T5702] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 100.791221][ T5702] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input6 [ 100.867675][ T5702] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:2> initialized [ 101.114360][ T5899] syz.0.51 (5899) used greatest stack depth: 19384 bytes left [ 101.825407][ T5911] kvm: kvm [5910]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000000 [ 101.846034][ T5911] kvm: kvm [5910]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000000 [ 101.863456][ T5911] kvm: kvm [5910]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000000 [ 101.888216][ T5911] kvm: kvm [5910]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000000 [ 101.909541][ T5911] kvm: kvm [5910]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000000 [ 101.974917][ T5911] kvm: kvm [5910]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000000 [ 101.989905][ T5911] kvm: kvm [5910]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000000 [ 102.024536][ T5911] kvm: kvm [5910]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000000 [ 102.106138][ T5921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.60'. [ 102.107639][ T5911] kvm: kvm [5910]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000000 [ 102.136766][ T5911] kvm: kvm [5910]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000000 [ 102.932394][ T5912] imon:send_packet: task interrupted [ 102.932465][ T5912] imon:send_packet: packet tx failed (-512) [ 102.932639][ T5912] imon:vfd_write: send packet #2 failed [ 103.012857][ T10] usb 3-1: USB disconnect, device number 2 [ 103.151964][ T5941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.69'. [ 104.221698][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 104.460978][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 104.475687][ T10] usb 3-1: config 251 has an invalid interface number: 202 but max is 0 [ 104.475712][ T10] usb 3-1: config 251 has no interface number 0 [ 104.475754][ T10] usb 3-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 104.475771][ T10] usb 3-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 104.475783][ T10] usb 3-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 104.475794][ T10] usb 3-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 104.475816][ T10] usb 3-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 104.475828][ T10] usb 3-1: config 251 interface 202 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.475841][ T10] usb 3-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.475852][ T10] usb 3-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.475866][ T10] usb 3-1: config 251 interface 202 has no altsetting 0 [ 104.477438][ T10] usb 3-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 104.477466][ T10] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 104.477485][ T10] usb 3-1: Product: syz [ 104.477498][ T10] usb 3-1: SerialNumber: syz [ 104.600925][ T5975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.83'. [ 104.731201][ T37] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.925788][ T37] usb 1-1: Using ep0 maxpacket: 32 [ 104.949975][ T37] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 104.950024][ T37] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 104.950049][ T37] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 104.950075][ T37] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 104.985203][ T37] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 104.985232][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.985250][ T37] usb 1-1: Product: syz [ 104.985262][ T37] usb 1-1: Manufacturer: syz [ 104.985275][ T37] usb 1-1: SerialNumber: syz [ 105.179038][ T10] cxacru 3-1:251.202: cxacru_bind: interface has incorrect endpoints [ 105.179162][ T10] cxacru 3-1:251.202: usbatm_usb_probe: bind failed: -19! [ 105.220556][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 105.320753][ T37] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input7 [ 105.387689][ T10] usb 3-1: USB disconnect, device number 3 [ 105.603013][ T37] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 105.603032][ T37] (id 0x00) [ 105.785418][ T37] rc_core: IR keymap rc-imon-pad not found [ 105.785437][ T37] Registered IR keymap rc-empty [ 105.785513][ T37] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 105.785531][ T37] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 105.805816][ T37] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 105.839057][ T37] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input8 [ 106.007101][ T37] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:2> initialized [ 106.563656][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 106.699495][ T5603] ------------[ cut here ]------------ [ 106.699507][ T5603] task_rq(p) != rq [ 106.699516][ T5603] WARNING: kernel/sched/fair.c:7656 at hrtick_start_fair+0x196/0x1f0, CPU#1: syz-executor/5603 [ 106.699551][ T5603] Modules linked in: [ 106.699575][ T5603] CPU: 1 UID: 0 PID: 5603 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 106.699591][ T5603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 106.699603][ T5603] RIP: 0010:hrtick_start_fair+0x196/0x1f0 [ 106.699622][ T5603] Code: 42 80 3c 20 00 74 08 4c 89 ff e8 85 f5 97 00 4d 39 37 0f 85 0c ff ff ff 48 89 df 5b 41 5c 41 5d 41 5e 41 5f e9 7b 64 fa ff 90 <0f> 0b 90 e9 d1 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 82 [ 106.699633][ T5603] RSP: 0018:ffffc90004447900 EFLAGS: 00010006 [ 106.699645][ T5603] RAX: ffff8880b863ba40 RBX: ffff8880b873ba40 RCX: ffffffff8197d8ae [ 106.699682][ T5603] RDX: 0000000000000000 RSI: ffff8880390c8000 RDI: ffff8880b873ba40 [ 106.699692][ T5603] RBP: dffffc0000000000 R08: ffffffff8fcf390f R09: 1ffffffff1f9e721 [ 106.699701][ T5603] R10: dffffc0000000000 R11: fffffbfff1f9e722 R12: dffffc0000000000 [ 106.699711][ T5603] R13: 1ffff110170e78d6 R14: ffff8880390c8000 R15: ffffffff8dc257d0 [ 106.699721][ T5603] FS: 000055555ee9e500(0000) GS:ffff888125b6b000(0000) knlGS:0000000000000000 [ 106.699733][ T5603] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.699742][ T5603] CR2: 0000200000078000 CR3: 0000000034300000 CR4: 00000000003526f0 [ 106.699755][ T5603] Call Trace: [ 106.699768][ T5603] [ 106.699777][ T5603] set_next_task_fair+0xa68/0xce0 [ 106.699799][ T5603] __schedule+0x3e03/0x5550 [ 106.699832][ T5603] ? __pfx___schedule+0x10/0x10 [ 106.699854][ T5603] ? schedule+0x90/0x360 [ 106.699871][ T5603] schedule+0x164/0x360 [ 106.699887][ T5603] do_nanosleep+0x287/0x730 [ 106.699905][ T5603] ? do_nanosleep+0x8a/0x730 [ 106.699922][ T5603] ? __pfx_do_nanosleep+0x10/0x10 [ 106.699936][ T5603] ? __asan_memset+0x22/0x50 [ 106.699957][ T5603] ? __hrtimer_setup+0x1c2/0x260 [ 106.699975][ T5603] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 106.699992][ T5603] hrtimer_nanosleep+0x217/0x450 [ 106.700008][ T5603] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 106.700030][ T5603] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 106.700052][ T5603] __se_sys_clock_nanosleep+0x35b/0x3b0 [ 106.700071][ T5603] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 106.700091][ T5603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.700106][ T5603] do_syscall_64+0x174/0x580 [ 106.700124][ T5603] ? clear_bhb_loop+0x40/0x90 [ 106.700141][ T5603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.700159][ T5603] RIP: 0033:0x7f4ade1bd68e [ 106.700175][ T5603] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 106.700186][ T5603] RSP: 002b:00007ffc5d7f6ff8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 106.700200][ T5603] RAX: ffffffffffffffda RBX: 000055555ee9e500 RCX: 00007f4ade1bd68e [ 106.700207][ T5603] RDX: 00007ffc5d7f7050 RSI: 0000000000000000 RDI: 0000000000000000 [ 106.700213][ T5603] RBP: 00007ffc5d7f70bc R08: 0000000000000000 R09: 0000000000000000 [ 106.700222][ T5603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 106.700228][ T5603] R13: 00000000000927c0 R14: 0000000000019dbe R15: 00007ffc5d7f7110 [ 106.700242][ T5603] [ 106.700248][ T5603] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 106.700256][ T5603] CPU: 1 UID: 0 PID: 5603 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 106.700266][ T5603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 106.700272][ T5603] Call Trace: [ 106.700276][ T5603] [ 106.700280][ T5603] vpanic+0x56c/0xa60 [ 106.700295][ T5603] ? __pfx__printk+0x10/0x10 [ 106.700306][ T5603] ? __pfx_vpanic+0x10/0x10 [ 106.700318][ T5603] ? is_bpf_text_address+0x292/0x2b0 [ 106.700334][ T5603] ? is_bpf_text_address+0x26/0x2b0 [ 106.700351][ T5603] panic+0xc5/0xd0 [ 106.700365][ T5603] ? __pfx_panic+0x10/0x10 [ 106.700390][ T5603] __warn+0x315/0x4c0 [ 106.700404][ T5603] ? hrtick_start_fair+0x196/0x1f0 [ 106.700417][ T5603] ? hrtick_start_fair+0x196/0x1f0 [ 106.700430][ T5603] __report_bug+0x339/0x540 [ 106.700446][ T5603] ? hrtick_start_fair+0x196/0x1f0 [ 106.700459][ T5603] ? __pfx___report_bug+0x10/0x10 [ 106.700471][ T5603] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 106.700489][ T5603] ? hrtick_start_fair+0x196/0x1f0 [ 106.700502][ T5603] report_bug+0x16a/0x220 [ 106.700514][ T5603] ? hrtick_start_fair+0x196/0x1f0 [ 106.700526][ T5603] ? hrtick_start_fair+0x198/0x1f0 [ 106.700538][ T5603] handle_bug+0x9c/0x200 [ 106.700552][ T5603] exc_invalid_op+0x1a/0x50 [ 106.700566][ T5603] asm_exc_invalid_op+0x1a/0x20 [ 106.700577][ T5603] RIP: 0010:hrtick_start_fair+0x196/0x1f0 [ 106.700590][ T5603] Code: 42 80 3c 20 00 74 08 4c 89 ff e8 85 f5 97 00 4d 39 37 0f 85 0c ff ff ff 48 89 df 5b 41 5c 41 5d 41 5e 41 5f e9 7b 64 fa ff 90 <0f> 0b 90 e9 d1 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 82 [ 106.700598][ T5603] RSP: 0018:ffffc90004447900 EFLAGS: 00010006 [ 106.700606][ T5603] RAX: ffff8880b863ba40 RBX: ffff8880b873ba40 RCX: ffffffff8197d8ae [ 106.700613][ T5603] RDX: 0000000000000000 RSI: ffff8880390c8000 RDI: ffff8880b873ba40 [ 106.700619][ T5603] RBP: dffffc0000000000 R08: ffffffff8fcf390f R09: 1ffffffff1f9e721 [ 106.700626][ T5603] R10: dffffc0000000000 R11: fffffbfff1f9e722 R12: dffffc0000000000 [ 106.700633][ T5603] R13: 1ffff110170e78d6 R14: ffff8880390c8000 R15: ffffffff8dc257d0 [ 106.700644][ T5603] ? set_next_task_fair+0xa4e/0xce0 [ 106.700664][ T5603] set_next_task_fair+0xa68/0xce0 [ 106.700682][ T5603] __schedule+0x3e03/0x5550 [ 106.700704][ T5603] ? __pfx___schedule+0x10/0x10 [ 106.700719][ T5603] ? schedule+0x90/0x360 [ 106.700731][ T5603] schedule+0x164/0x360 [ 106.700742][ T5603] do_nanosleep+0x287/0x730 [ 106.700755][ T5603] ? do_nanosleep+0x8a/0x730 [ 106.700767][ T5603] ? __pfx_do_nanosleep+0x10/0x10 [ 106.700778][ T5603] ? __asan_memset+0x22/0x50 [ 106.700791][ T5603] ? __hrtimer_setup+0x1c2/0x260 [ 106.700800][ T5603] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 106.700812][ T5603] hrtimer_nanosleep+0x217/0x450 [ 106.700824][ T5603] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 106.700836][ T5603] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 106.700852][ T5603] __se_sys_clock_nanosleep+0x35b/0x3b0 [ 106.700864][ T5603] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 106.700878][ T5603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.700888][ T5603] do_syscall_64+0x174/0x580 [ 106.700901][ T5603] ? clear_bhb_loop+0x40/0x90 [ 106.700913][ T5603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.700923][ T5603] RIP: 0033:0x7f4ade1bd68e [ 106.700931][ T5603] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 106.700938][ T5603] RSP: 002b:00007ffc5d7f6ff8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 106.700947][ T5603] RAX: ffffffffffffffda RBX: 000055555ee9e500 RCX: 00007f4ade1bd68e [ 106.700954][ T5603] RDX: 00007ffc5d7f7050 RSI: 0000000000000000 RDI: 0000000000000000 [ 106.700960][ T5603] RBP: 00007ffc5d7f70bc R08: 0000000000000000 R09: 0000000000000000 [ 106.700966][ T5603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 106.700972][ T5603] R13: 00000000000927c0 R14: 0000000000019dbe R15: 00007ffc5d7f7110 [ 106.700986][ T5603] [ 107.788629][ T5603] Shutting down cpus with NMI [ 107.789018][ T5603] Kernel Offset: disabled