last executing test programs: 6m52.232200102s ago: executing program 2 (id=162): prctl$PR_MCE_KILL(0x23, 0x0, 0xabb4e1ce1e1cd1e3) r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=0x0) prlimit64(r2, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x7, 0xe}, &(0x7f0000000240)=0xc) syz_emit_ethernet(0x7e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaea86a36eaaaad3e721184ce967c94185688fdd403dbb0800450000700000000000019078ac1efd01ac1414aa0c0090780607000045dc07ff00680008078400060a010102e0000002071be07f0000017f000001ffffffffac1e0001640101000a01010244244563ffffffff0000ffff0a01010000000001ac14"], 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'hsr0\x00', 0x4}, 0x18) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000040)={0x2000}) 6m51.054238924s ago: executing program 2 (id=164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x4200, 0x0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0xe) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) write(0xffffffffffffffff, &(0x7f0000000100)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) 6m49.274600156s ago: executing program 2 (id=166): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000140)) getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f00000016c0)) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) socket$nl_netfilter(0x10, 0x3, 0xc) getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) flistxattr(r3, &(0x7f0000001f40)=""/72, 0x48) r4 = socket$inet6(0xa, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x20000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r5}) keyctl$get_persistent(0x16, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000c40)="5c00000016006bab9a3fe3d86e17aa0a046b876c060048007ea60864160af36504811a0038001d001931a0e69ee517d34460be06000000a705251e6182949a9a7b9bcb84c9f4d4938037e70e4509c5bb4de385aa2adb88a899a655ab", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 6m48.116010437s ago: executing program 2 (id=168): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa1"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRES32=r3], 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), 0x0}, 0x20) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6m47.924222705s ago: executing program 2 (id=171): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRES32=r3], 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6m47.604063884s ago: executing program 2 (id=172): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f00000001c0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="06000000000000", @ANYRES32, @ANYBLOB="01000000050000000200"/20], 0x50) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_GETDRIVER(r3, 0x8008550e, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_clone3(&(0x7f00000007c0)={0x40120000, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) 6m32.176407974s ago: executing program 32 (id=172): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f00000001c0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="06000000000000", @ANYRES32, @ANYBLOB="01000000050000000200"/20], 0x50) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_GETDRIVER(r3, 0x8008550e, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_clone3(&(0x7f00000007c0)={0x40120000, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) 21.631492141s ago: executing program 5 (id=856): close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000002c0), 0x100000004, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x3, 0x100) setsockopt$sock_int(r1, 0x1, 0x6, 0x0, 0x0) timer_create(0x7, 0x0, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x3c) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54", 0xe) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x2000c051) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12011003000000252505a8a440000102030109021b0001010940080904000002070e0100090501020004ee0709"], 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x512c}, [@printk={@p, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0xe1}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x0, 0x30000000}, {}, {}, {}, {0x85, 0x0, 0x0, 0x11}}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf010000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x9, '\x00', @p_u8=0x0}}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8924, &(0x7f0000000240)={'macsec0\x00', 0x1}) 18.150476669s ago: executing program 5 (id=860): madvise(&(0x7f0000a34000/0x3000)=nil, 0x3000, 0xb) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe0200108500000007000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35b", 0x6) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000140)={'wg1\x00', @random="37b3d72c2908"}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="b26e00498be2d8fe30546597b24f393d6fe5c1271b06ca27", 0x18}], 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f00003e6000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/11, 0xb, 0x1, &(0x7f0000000340)=""/156, 0x9c}, &(0x7f0000000240)=0x40) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) lseek(0xffffffffffffffff, 0x289e0cb5, 0x0) 17.242895378s ago: executing program 4 (id=863): socket$nl_rdma(0x10, 0x3, 0x14) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x40810) syz_init_net_socket$llc(0x1a, 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046f41, &(0x7f0000000440)=0x1f) syz_emit_vhci(&(0x7f0000001e00)=ANY=[@ANYBLOB="040f047ce11620"], 0x7) 17.233479233s ago: executing program 1 (id=864): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015"], 0x38}, 0x1, 0x300}, 0x0) socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x80, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "dd690b", 0x4a, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100, 0x0, 0xe803, [0x3e8, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x315500, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000300)={0x1d, r5, 0x0, {}, 0x1}, 0x18) connect$can_j1939(r4, &(0x7f0000000640)={0x1d, r5, 0x0, {0x0, 0x0, 0x1}, 0x1}, 0x18) close_range(r2, 0xffffffffffffffff, 0x0) 15.958682013s ago: executing program 0 (id=867): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f00000001c0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="06000000000000", @ANYRES32, @ANYBLOB="01000000050000000200"/20], 0x50) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_GETDRIVER(r3, 0x8008550e, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_clone3(&(0x7f00000007c0)={0x40120000, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14.700035846s ago: executing program 1 (id=868): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 14.360871442s ago: executing program 4 (id=870): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) pipe2$9p(&(0x7f0000000400), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x9}, 0x3}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0xe, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.839681367s ago: executing program 0 (id=871): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000f000000080003", @ANYRES32=r5, @ANYBLOB="0800320000000000050033"], 0x2c}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r7 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r7, 0x2007ffb) sendfile(r7, r7, 0x0, 0x1000000201005) 12.82350635s ago: executing program 1 (id=872): close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000002c0), 0x100000004, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x3, 0x100) setsockopt$sock_int(r1, 0x1, 0x6, 0x0, 0x0) timer_create(0x7, 0x0, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x3c) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54", 0xe) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12011003000000252505a8a440000102030109021b0001010940080904000002070e0100090501020004ee0709"], 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x512c}, [@printk={@p, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0xe1}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x0, 0x30000000}, {}, {}, {}, {0x85, 0x0, 0x0, 0x11}}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000100)={0xf010000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x9, '\x00', @p_u8=0x0}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8924, &(0x7f0000000240)={'macsec0\x00', 0x1}) 11.65283313s ago: executing program 4 (id=873): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r5, @ANYBLOB="0800320000000000050033"], 0x2c}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r7 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r7, 0x2007ffb) sendfile(r7, r7, 0x0, 0x1000000201005) 11.257819021s ago: executing program 5 (id=874): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x5, 0x24, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) readv(r5, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000300)=""/61, 0x3d}], 0x2) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x5}, 0x10) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) getrusage(0x1, &(0x7f0000000300)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) 10.185750569s ago: executing program 1 (id=875): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000140)={0x5, 0xffffffffffffffff, 0x1c, {0x9, 0x1}, 0x6}, 0x1) 9.448017255s ago: executing program 3 (id=876): syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x400, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socket$inet(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000240)=']\xb1\a\xd2\xd2_\x06\xa5.\x83IV\xe4\xd1&\xe4\x9a\xe4\xeb$\x04\xc0\n\xc8cJw\xa6\xf6?\xd4\xcf\x86\xcd\x86\xf4e\xd1N\x89-D\x83\r\x06ek}\x013\xc8\xe0\x920\x8b\xbdF\xd9N\x96O\x97\xf4\xf6\xb7yi\xc5.f\x06\xd2B\xe9\xa9\xf3\x065P\x17\xb62|\xf9\x1ao\x92\x00\xd6n\xb1oqz8\xfb\'\xa1.3\x90&\x1b\xa1_\x9f\xcb!\x83?t\xbdW\xa8u\x14\xbbf\xc6N\xa6\xfd1\xe1\xd4\xa3(\al\xf4\xefO\xf7\x1a\x18\x1aP\x99>\xdd\xabU\xa5FH,\r\x91\xa1\x1a\xccI\x0f\x1eUI{\xf8\xc5\xf9A\xdf\xba\xc8\xbb', 0xfffffffffffffffd) 8.861178256s ago: executing program 0 (id=877): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x0, 0x40000002, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}}, 0x440a4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r5, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}}, 0x0) close(0x3) 8.212668889s ago: executing program 4 (id=878): prctl$PR_MCE_KILL(0x23, 0x0, 0xabb4e1ce1e1cd1e3) r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=0x0) prlimit64(r2, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000140)={r8, 0x2}, 0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r8, 0x7, 0xe}, &(0x7f0000000240)=0xc) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f00000003c0)={0x7, 0x1279c2f5ae9b31fd, &(0x7f0000000280), 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r6}, 0x18) syz_emit_ethernet(0x7e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaea86a36eaaaad3e721184ce967c94185688fdd403dbb0800450000700000000000019078ac1efd01ac1414aa0c0090780607000045dc07ff00680008078400060a010102e0000002071be07f0000017f000001ffffffffac1e0001640101000a01010244244563ffffffff0000ffff0a01010000000001ac14"], 0x0) write$cgroup_int(r1, &(0x7f0000000340)=0x4, 0x12) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'hsr0\x00', 0x4}, 0x18) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000040)={0x2000}) 8.123821986s ago: executing program 5 (id=879): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r5, @ANYBLOB="0800320000000000050033"], 0x2c}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r7 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r7, 0x2007ffb) sendfile(r7, r7, 0x0, 0x1000000201005) 7.980170847s ago: executing program 3 (id=880): r0 = socket(0x29, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000080), 0x23}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000011c0)={0x8000101c}) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x18, 0x0, 0x0) epoll_create(0x101) memfd_create(0x0, 0x3) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) dup3(r5, r4, 0x0) socket(0x10, 0x3, 0x0) 7.937086035s ago: executing program 0 (id=881): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000140)) getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f00000016c0)) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) socket$nl_netfilter(0x10, 0x3, 0xc) getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) flistxattr(r3, &(0x7f0000001f40)=""/72, 0x48) r4 = socket$inet6(0xa, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x20000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00'}) keyctl$get_persistent(0x16, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000c40)="5c00000016006bab9a3fe3d86e17aa0a046b876c060048007ea60864160af36504811a0038001d001931a0e69ee517d34460be06000000a705251e6182949a9a7b9bcb84c9f4d4938037e70e4509c5bb4de385aa2adb88", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 6.784677313s ago: executing program 3 (id=882): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x4c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1, 0x3, 0x10, 0x9, 0x40, 0xd3c25e1}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xa}, {0xd}, {0x1, 0x3d}}}, 0x24}}, 0x40) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff9}, 0xe) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7ff}, 0xe) writev(r7, &(0x7f0000000100)=[{0x0}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r7) shutdown(r7, 0x1) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) socket(0x10, 0x3, 0x0) setresuid(0x0, 0x0, 0x0) 6.708573538s ago: executing program 4 (id=883): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) socket$kcm(0x10, 0x2, 0x0) 5.741866056s ago: executing program 0 (id=884): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) pipe2$9p(&(0x7f0000000400), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x9}, 0x3}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0xe, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.180316501s ago: executing program 3 (id=885): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0xfdff) 3.959902408s ago: executing program 1 (id=886): socket$inet(0x2, 0x4000000000000001, 0x0) pipe2$9p(0x0, 0x80000) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) get_mempolicy(0x0, 0x0, 0x1ff, &(0x7f0000ffd000/0x2000)=nil, 0xe) r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x17}}) socket$kcm(0x21, 0x2, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) request_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0) write(r1, &(0x7f0000000000)="0a000000010001", 0x7) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[], 0x18c0}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f0000000d80)={&(0x7f0000000000), &(0x7f0000002240)=""/4108, 0xffffffffffffff6d}) 3.092914564s ago: executing program 3 (id=887): close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000002c0), 0x100000004, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x3, 0x100) setsockopt$sock_int(r1, 0x1, 0x6, 0x0, 0x0) timer_create(0x7, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12011003000000252505a8a440000102030109021b0001010940080904000002070e0100090501020004ee0709"], 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x512c}, [@printk={@p, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0xe1}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x0, 0x30000000}, {}, {}, {}, {0x85, 0x0, 0x0, 0x11}}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xf010000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x9, '\x00', @p_u8=0x0}}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8924, &(0x7f0000000240)={'macsec0\x00', 0x1}) 3.003592895s ago: executing program 0 (id=888): socket$inet(0x2, 0x4000000000000001, 0x0) pipe2$9p(0x0, 0x80000) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) get_mempolicy(0x0, 0x0, 0x1ff, &(0x7f0000ffd000/0x2000)=nil, 0xe) r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x17}}) socket$kcm(0x21, 0x2, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) request_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0) write(r1, &(0x7f0000000000)="0a000000010001", 0x7) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0c0043001700000000000000fd11358084a64c4852ce59bc40427a1582ec7e9547999b7be18d57542e2971a2513a2b81d76f6ad9a7ceda50a48bcd2786f06ffd040009808cb297f99a3664c1952c24e42f729fc43262610d3652cef336adc19ee56c82ca3e707eb78d0148b668305d97f7ec33db8e3e9dc65e7c274e7bc24ed3a1184621df12504c07b14a737fcc8ef9009b890c6caeba9729fbfeca6b12211869a2716ea36f7399a7bd7c0f2377c94cfe62f2bcbff380ee256a7c3ec69110da7f9a6d89254f4ec5b539cbc7303ccdc6a8619996b6263165fa024adff951d4d8d2d6587b80d1c30440b0817f52c341360dc5df31f0b5639a5b96e26938d5bc55ea7bef35a4cf126c9183ac38fb34b319abe5f06082c1e8ce526cdb3066d523d12deb8697d8299c1f5edf46514913c4648f2fd1816a58beffaab5040d72e67ac75075da4c92fb2c60d17ee03c6cc004ceb9ef5abe60fe300faa63e19f5eefa54eaed41a4fa62c6a56be9ee7f691162545a8fd930f45517df0436b69efc7d5ac19e930a92ef86472205f87a61dd95dc35a6f258c8c7958a8175e8cd8dbf01f82cca2359aef93e3eb117014c231d67bc6da5248aeac9543ff47663c01581b945dd8507adb1689ac8244b010e66087ffd4c0b930f8ffc7408402d8ce7db0cfd9830cdd85aab9711919563d56d245801c371f040af5b8169de3c6fea317612f4c2317cc526e8ea8c8c1e953c791b20a1aaf4c62f6c906efa621b14e7d3e285aa55b7ef96e4feb652df2cf36e76132f396cedb9db9cf15eeaea7b13e1027ea5d1f5490e6688884e1f1df2a9853024e581c9ae87c12991f4f89aabc4020df65ac4683de032022e2d805273b2d6a62e841a74be316f2152002b87680d37f6b7faf2b24be1ebc0d7a95fc330a592d044fd05ed37465086402a1335ce622bc8526afbc6aad8bb1bc0b63bf46ff0496a8861f0ee2c990adaf568144fb15eb4492e049f762fe735ddf5d283433a9d2fb9faff70364046ed11752282c816611250cc1e14272470c12fbd96a06bd3b873da306810ed786bcdb8983bcc7acf941b819c4f59b132e6c81639b46b8ba630ae11e4751458aeaa9dc2cee291652e638a28d47ecd5e2df8830bc7267883dd7d77fe2392aa484b6dec167a1bf3e00c927b26832f5f8d67f5d1c0c935624bc6c917001dd4df77aea734fa05d4037db5b19cef7d161c5ad1e95b40dcdd369358fada0a2a04d7a99f0b93386f706aa3213c1c4428b8461062b29683b29e56748a65154e9c33eafd6dac22c2ef4f55c4ca8e4a6c0007b31305254a27425066fec4b41e11c8357bf67ce8e2a0facb1b26e1b19543cd5f075cc81b0873ec57bc7edf9a9fb8ae35d3a3ace676225b40a421e645301f304221763ecab8baa7515839ca7f29e9e646af9a1ff1fe8031b5b36a8f2d6d70ae3f514f1c2972df04bb4924373d39301c8708bdf1376d3be64f3614c183c5b5cf95edaf20d2e59ec124eb11526a7f2d28546b31566e161ff39233762c0e4b505f246454f3e27f8dbbedf1610464944ea873600ed8e95fa00d291fa3b1d9cb257ca29710f473ce1de492602202f23ab8102ec101110145fbafc73f41a830decc8fc46a9f8925e091fec25f87a69fa23f63621533da3e4f97d2ad78c1886b6783e46e2923fbc424bb010e5d586e5fce6f5191c161aac64eec1c3afb12b2c6b2047c9c9db9d6beeb10de8b1d8ed9b857c3c7e7c3b59e374c6a7407ef247c178147b3a0f82f8588b74ddbab03d4c78915750c463f68bc8f40f8e4ba87169bf6377c54d21d5a62cb0dcf466daa235ad887f5d2af2d8dd827047847190afa82fb866744bbfd38952705530e699270b1f13dc0b53fdc2de61de45ab153fd017274bb3b4b4c8b9fa2279dc3a6940e072e9fe87bc86011dcc0c1ab07b97868b0f51ff6208df234a2f5a10f896478a4c5d46ffbafaa810b45bb82368d0085f78e959d1b0f26dd7cff09a40d0d12285b1ccf203ef25f3a1cb5fd753c6aadf2a26c1a21b6355ec2ef8d29ac0f08cd44e94f9a9f6b8558c3e5d7db20ce3a8f147c0309fb3f4b856dec934af6072bc942de440d8cd0ec1944362cb579f75a91393e3ebaf5fc807c0df8367834bb0f08ca7c698991662d8b9e9e55dba84b968d316fce6311e5257ccf69348e06a693595bb94bdaba080fb1c0c88a33557c088a51948bd4f01c5544e9fbf5a8e09ae0dff397ea8522a4349d185f9a2f0b595093b29b88b5e2007e12e6b60ae8aed88bbc198dc7709c5e9181ead6ab91a0b7df795a0e9d349c1096bb29bf2e0643a0afc2f2ac9ffe3e5002a796b025da52dce5d89a8d76499a25bb4588202c18a12107b1fb9759f904ca3363921ed36d1fb3f0af559e771b0a708e26b39f00a87cf2e8489f53a6c0ae606ea8ced1b876895c1c21ece89b1955c4d827ffd4da4b994eb2dcff368ef534b34f6a566efd9480f1b6e308947684dc4960a083d3cf52960be62cf0c0d4ce6d256ff28141c274b7dc8dac819c04d4f1155a8bb4c29a2a00535ca4ea89ce1e218146b73e2103fadcf2c2de446e6c128cbe749c5f7aaf392e764a9397e06e443cb3e44d08af9a2ce55b0ef8cf1803f2167a67d59547d522d65934fba7875301db570cc4424f629a39a7bd36333029bdb818a3739f454966af6ffe4d237d6965cc81f335d8a787450abbe7c8ddfd2f8b749594cea4df455cdfb5eb5f7b0b4f67875adafb11b61639fd0be25bbf0d19cea430058fff31b0fb0ae36a84ad6ccd17038638fe38905fc24384bc60a15058c6b6defe60ed71c7697612b084d6a2cd0b15056f593335906c82265f38c47dcc1c1043da1ce74578a1919e03df4e155396b3dea89acd39d1449f00a9e8cf5ceb0684928432d21e6b7e83c099d285c126a430767e1e718c9dcaf83ae26120ed83c95d7d16a493d16c0a01f8bc05ac987bf8e378d7c8d28c201930890773c1d6ab6440cd3ff2454f17ced7e463d9753891a56833f5f673eb138d7e7ce6666b65ea74f6f0d3cc2d86dd7940ccf108ef7f0ad3c5c7da744c1988aee2a7fa5fd1bf52698221c6ed21de5077effb9bdb50b882523fa932bd1e3efe50b630599dfaf3b13167f57db1a12caeb51278b7fbd9768da62d45b1f056aac361b2da6cc4933a9159379a4152ad66a69362e347af0d414e8716c9869511034c2a366bfb5b125cfc5720c05af7895f4e318d89e85ad02e76c0d643b77c3bbab28865823d696dc5306e1731f56c29ddd25e378749493c762d9966e34b53049a84f4da9ff286bb20ea8c6918ae6df35bd82719ab07d197afe2c87cace76d139175fcfbb8ebc49a131d484244295baca1dec61526a5f844a6950899a0bfc13417b3df9b6580e5657a0d92bab2cfaab91e1513e0cb11c0f029841bf63da801ed3171aa7c039b45675b9197924a5429feeb52a7152d4b82304ff39f2d666edf8ccbfb35d2eee45af364ba98cc978ec7f4f361c4a9fb2bf1155e059c9874c9b00113b6d85ccfbeeb3bf33435ced0c94135a00162d1a1279041fca05ddb2ac02a0a34bbb15f5aac25ac3cdcc32cbb882b6456602bd011cb665661b483b20bcb6cadaf993b3d6fe59757e9fd2b00ebc3b6adfca5bd7bc016eac63adc33f450303dfc89a025d2e3e7fa99854cd468654428c4dbf40b078b24c939882bff81d871d19383b86a5d78e3dc5f53bbf31c56c9ceb28c43179b0f9829d9fdb9c126eaeee6858de67dc6cf0f75552fad19ab1dd381dfaf963790353816b68c1e4e0938d1312746e90d5ed32c32be83f2e1890ce24bd3594b8393280937ddd35475106a0336a61ef483202ca11d58dbb4345c5d68b41e949ad32a36b86983950a12dcb29e02b31880d041805197670fc30c8d6c30f736de8cf7955dd8ae6a46d6fa0d9955056abe5ef41acc00f94f9466327fa207f1f85aac9baceb25fcde2e8f1c6c5f68a66a62a7165c29afb66a17932c892fcd6c894c54abb3f56bbf1dd5901a60b2dc2a51615e6897e894aa15678403ce35a2dd94a31d03092a92e54be81c53adfefa653c00f63a76f2d6471625df5ccfdccffb30e1c545e435c3b3fad6249246d3c2f5796514a899d87905ef0a5bd1032c4718b467dc2df510183beb72b9140cf670e82c649460d782cbf33791088756a796c48d0f7df2b856a4b3e2914c7f8e707a05ed5956473c8eeca35aeb2b96c939b5bfd874e519b9d624e5b3fde44de50c1e9ccbd2642638ab2c1de38127c4c59c5d5710d82c619b634151b0fb1bb94a357e2e38b888f8fb30934009fbee693451b343f0cd656411565e4149433383a8ee7194bdf3907f8a9136296188c74bb3fb276da9cc275101882ac5046fa42b9142efce704014b17b72d0a7b2421b5efb3a0411da62d42019bf78d6a6c5c56f3e8e5fbd0240547c6db5404f1218ab391f361a5ecb9c2cd64c32693ca8dab991688b496daada1d02b5d9cd1b9df7f1258e1a9a70e22f229078b0b33f30cb3e4021335a4392548dbf11dd0ab1c138571179412f35b4106f9bfc0c5bf57b63909a5fd8892a584569cb7b9c330417ae9468d6583f2c923060e156d4a8c69114ac5281b8104b3dcee2abe8b94b7a0551079f6bc89dfe3c521a046b70b1d2a9f1df20fda6dd84adf9e57b34b795ffd5b3dca4c62c815177744c2c21046861135e70fed347985962f5409580c263a72cfd878fe10192902948c6bab642fab9be6b9b93fe41fdea762a9c78d1631f81c4d76c3187d23a26ad0d37ba1f44114afe994c18f8404f7ed02956eeec1ab8c87b0cf8450146705817beec015783b22e6d9125179887dc74b162b2890ffbf8c3443bf732c125f7d2ba0f75d0f81198eaf12e1251e85a34ebd23087ba790d6ad8a6c4cf0c85d410fef6bf6796e9a4c25699dd8bf51063b65b46aa5ad69ed243722b5ac050672fd3ba0c2d8b5e013f403dda3c30db4ca94da891a6d90ac9cfda97c0fce5bf7ed8c0d4b309ece7bbf0f536fcce750495dca0ba52c0c2e1972763f973a28925d8846b6a941bfc9dd1e96b889112336b1530327eaaddcb78ab1db7c35c4ef54a2888f770de481f0a6ba5b827a5013b6c9c0f9e6e629d7f0f65d260ee4ad62061305ba91ec2a29c27dc22b4d07cd090a66705f062ef25f632eaa2842b36dcf2807abb94403c458d78453a5bf20bae90912372db3e4ba83e66928dad13a734ecd912cff58640e8c3b4012ab0fd32f8679875b0f46812deb0f143d8c94b2d0c8d0d9bfc7c1f5eb6609179e1e4119e6c240d8ad581233f4b2bc55c39f3e46f4516ab2b2ac271f773809718f80efc4cd4fc28ebb09d7e8429203127de4aee25cb61bef5d71a3fd7b43741bb8d0f0b530f4d06e2c92c632930c8fec4c6a2b66f43efee55b50254dac26cbefde31cef6d044ce90e61bec3affde7682a14fd8327358b09b3445cc4af0bcf125d43d458d8089176f238d4253fc0e3f7b3b72fbd88bca0973539fdcab07ca1da7027a50ae01a071e080dd04718a82dc0ef72228a84598556d2f85777e72b4227475313a779b7cbc5c80314f7358cdb1e4ab8e178ef933e7192c60304770262e4b99d476b8f42c8eb2b10ba6ba0dd51a52710ac75d49f29ff6abfd791755a88c0456513b7e47915855ddb6b5c38b5955cac22aa6f2e96a135540b2da8d22b4c83590e585185946caf2307af83e4a9fc809301cb53284407cd5ed383477e0a0a1852b0b94c1c382d5a192ac2fc705f7eb05f2655a5c0220bc2eb03b8132290d7a2a3871d4c93fb48f0521c10590f35a90b813155483a2d64a408d21bcae12b5bf8977a42c7cf6810d7b300fcfe7b780688d227dba545cdb8104fc31d873f2ca8afe8a8ee1c8bfdc13663d5f4509b836e3901e41128bd694fef92737864630545ffba4afac3acc7b49a870566f245a2a3ed34ff266ff66ef1f45ecf83f33f548746c3f2d0868a2b0fda71312475a1e601c8b71a7b9231afa40936c42f7d1e3d053dc7dbf12956654590f55b12c6c77b9d7372d9805a84d6f99040e21b9791c62dda870814a60dbf27c4a82f3979410091ef1106220f96627d8f7f189de07ca85e0dab440efe5b8fdc8d7e434ba6162f0b5df11c0bd6489945c946953a21a2d0f0e8924337f401f42f96a87c26f76e4e6623eca76b8c81aa96741b248e07cc8fccb203903da21d364640549640aff4016c83c6e2586893212706aedd30c4b2b2c9c205d1332ea492d4aad97c2646c8082b6d769b5f5d606bec26fb762adf1308325c1c2ec38e2cfa424e41513718625a7d7004a7de11f937d177eee3da060e04b4f1311957fe7897e5f43d32f4c3b4234c3afdf3b069432ac235046efbe4e243c071f06c155bbc48cdac07171b38253c0de4afea667572ebbc28894cd2f9e21992d4d696710a0250acc1a355d951146cd46883787104494c20ca9abb33b07bb3e54b8c5861a1425f4d989029844ecdde4d851e57c9d39d757f473d55e4b0f0aeff40b304d3e04f6e2e9394b1e172d7482dad0b3ca2568aa3297391d614f912a08003300f50000000400238000000008004f00", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f0000000d80)={&(0x7f0000000000), &(0x7f0000002240)=""/4108, 0xffffffffffffff6d}) 2.272937812s ago: executing program 4 (id=889): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x5, 0x24, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) readv(r5, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000300)=""/61, 0x3d}], 0x2) 2.253035546s ago: executing program 5 (id=890): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x4c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1, 0x3, 0x10, 0x9, 0x40, 0xd3c25e1}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xa}, {0xd}, {0x1, 0x3d}}}, 0x24}}, 0x40) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff9}, 0xe) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7ff}, 0xe) writev(r7, &(0x7f0000000100)=[{0x0}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r7) shutdown(r7, 0x1) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) socket(0x10, 0x3, 0x0) setresuid(0x0, 0x0, 0x0) 134.116204ms ago: executing program 1 (id=891): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x4c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1, 0x3, 0x10, 0x9, 0x40, 0xd3c25e1}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xa}, {0xd}, {0x1, 0x3d}}}, 0x24}}, 0x40) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff9}, 0xe) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7ff}, 0xe) writev(r7, &(0x7f0000000100)=[{0x0}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r7) shutdown(r7, 0x1) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) socket(0x10, 0x3, 0x0) setresuid(0x0, 0x0, 0x0) 745.802µs ago: executing program 5 (id=892): r0 = socket(0x29, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000080), 0x23}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000011c0)={0x8000101c}) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x18, 0x0, 0x0) epoll_create(0x101) memfd_create(0x0, 0x3) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) dup3(r5, r4, 0x0) socket(0x10, 0x3, 0x0) 0s ago: executing program 3 (id=893): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x20010, r1, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80383, 0x0) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000000), &(0x7f0000000040)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001300)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f00000003c0)="e37a2faa70dad95484650d09d731a9e02c1a5ebf2e8369120e0bccc928fd010feba119b149683b53a05e9da3db70ab3a0840b0a75a4ba4e2293320f974291826248aec148f546224f9f65f8fac114f607d165e411917d5ef67934b2791fcd034ff1aeb553558b2e8b7a97f7cd460ab92c8974364e06cbacf67bcf450776333", 0x7f}, {&(0x7f0000000480)}, {&(0x7f0000000580)="5a53de203689974594bcc131dde425f74bf71134347c91c34e7b9d1e9de0967505a974263eb9e86e506ac6a4f865f16b93642cc9ad50aa806ece28657bf1f49499df22c69bb5b05569973430b4cae0", 0x4f}, {&(0x7f0000001a80)="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", 0x193}, {&(0x7f0000000680)="ac21ac28a189af19b05f1b80330fe28903ae123330906e56ef4a817aecb2deed1091c6524116d6f0420f71c3cc3514939d2e2bfd6c94bc432ab822ef05e28d1be5af4dc027d1bc50127c8ac43ac02b81427e39d3f81a1b009287ec17df82b972afa1b8a7493f35b6ed1d66b2f0c7fea7aa2eb896a67e7fd42d73b63ff6c9728d8c8043f0d93a67547605ed67a1c2a889f526ca68ce6e1d9d48957f9fcb44ba56a70a826853935df8783b7d3e032780664729ed4bc7d9701a3184b61529fdc8f72ec0faf422b0ff42e550fa3592726475c5362292e696216f61fc0e18498eac6753e69afc76a9f2b592c1ec0f2ed7f67fc01189fcb9883dcf4c", 0xf9}], 0x5, 0x0, 0x0, 0x10}}, {{&(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000880)="15bf2e9f809919d82cf26d1404ffa4e7444f3963268f935e3dde42e69e3f0560e15ea606f0993b79bede9ae8e94aa995f95f4d705e3895197ae59728ec847016f3c6f1dbe44077f13391c009e5df9d0ad5b2b23304a6f08a790d2fd10a3fc47bd231290f4127c45aeea82d4049e5ddc1d0e9aafb903e013ef6bc92b15f9489f1791ec8fb8b71e04f165118bcca18f35ab6e8efca601ec1f6cd58b694d53ee0332d8ce541b4923db85261281c589b912065b6a27dcb6cfe620860c540774606e2eeef7ab8", 0xc4}, {&(0x7f0000000980)="4ac7c623fa9c35008f1475aac8eb135af1abc2543ded25b58c35cc582567702488f404ad9d8eef9261825c2e929b4c71f318a9f6701d239eae503178ea7b705efa027bc9b40e089645ed8c6d1e1f5fa50e204d4a39d5313a6710507cc3329bed86914a421889eb9d9a8ab2706ac315721a7d6ef091a293ad403df4c2270e83c5e56495144679c38ea9bebd1eb28c63f87b5058feb49dfd1af10d7ef9705ffe14a86725fa4469aede82b74122a4d6286b88235c2d306293dbdcf68a44759c3422c3c37b39c2885545cd7358f852e3ce458d8af4c8f4a66fc7da0d209a39cb936f38244aecd38f", 0xe6}, {&(0x7f0000000180)="3741b8936f", 0x5}, {0x0}, {&(0x7f0000000b00)="30e9a1c8a98b1985ca32d60b6bd75fad6847aee69aff9ba8fae597f25c938629f2b4f3b496461d830fa8b140e2dc067747e7ec75f8f35125bcaa2de8c41d0011336ae8158bd1bc9337e6043cb713f3cfac6f73e0fd3f742a00d6cb072858166bc80450c99a4e61c2229dc0bc949419284e682769b306b2cfb827500d38d4ca830cde86b54f4fb79dd3b011c0eae16a22768e00762589e28f222d759ac03232b2376abedb7295a6fcbc53beb460b5b3a238ec165170fca41b5034328f134da42480ea0ae1db13757d9bf50bdb245d5bc8b292cc13b7e73bcf34b35311bb1583", 0xdf}, {&(0x7f0000000c00)}, {&(0x7f0000000d00)="3285fa601da78a88653173690d74feaacfb9e54575022b755d29ee37eab617ff8b77b7e539ea94c94f84f1733872bcd1ac762cea5216de19dc90df4556600d94c098759fd4b320ebd26e2508734b2d43b018e26786f347112f9d8402e0da19978b55eb1b050b9b37b4e4663bea9be2b783ba6b7503505db6c54500429fbf7b6710d87d72d9b7d8c2980ab9", 0x8b}, {&(0x7f0000000dc0)="94d6bdf2d24f60755c3d43c36d49580a34c1794a7120a4aa622c1728aed76b199bbdbfbec3455e8dbc12fdbc0edfd1961705d6af009d20a3bc918434ea84daa9c5afce1e3c218a4aaa2b2cfb9497649dbbb06f97239bbc0274a3ad2bedd8abfff364e695f36739ab0c0fd2d0d05f6d88276a6a651bd79755dfde13fea051eb6563983e013d21b02bdf5f52e93d52f0c3c44d616c8d955636ec0de0809f7d3861dca1e11a99e45bd4aac6fb01bb5b3213e55277", 0xb3}], 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="1800000000000000", @ANYRES64=r3, @ANYRES32=r0, @ANYRESOCT, @ANYRES32=r0, @ANYRES16, @ANYRES32=r0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYBLOB="d5869c919d8a5e914e863eba02f7a34e6df02b06d97a67", @ANYBLOB="28000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r3, @ANYRES64=r1, @ANYRES32=r0, @ANYBLOB="2000000000000000010000000100", @ANYRES32=r1, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="1000000000000000010000000100000020000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32=r3, @ANYRESOCT, @ANYRES32=r0, @ANYRES16, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000e109950700000009"], 0x130}}], 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001800)=[{{&(0x7f0000000f00)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000f80)=""/155, 0x9b}, {&(0x7f0000001040)=""/46, 0x2e}, {&(0x7f0000001200)=""/185, 0xb9}, {&(0x7f0000001380)=""/24, 0x18}, {&(0x7f0000001840)=""/185, 0xb9}, {&(0x7f0000001500)=""/71, 0x47}, {&(0x7f0000001580)=""/220, 0xdc}, {&(0x7f0000001680)=""/112, 0x70}], 0x8, &(0x7f00000017c0)=""/24, 0x18}, 0x5}], 0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000841, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000000)="2e000300010000", 0x7) sched_setscheduler(0x0, 0x7, &(0x7f0000000000)=0x6) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.156' (ED25519) to the list of known hosts. [ 84.098211][ T5809] cgroup: Unknown subsys name 'net' [ 84.246230][ T5809] cgroup: Unknown subsys name 'cpuset' [ 84.256306][ T5809] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.984624][ T5809] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.840853][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.859138][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.868897][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.891712][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.901125][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.902501][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.915795][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.933494][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.933623][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.942296][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.956678][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.963218][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.965991][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.978557][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.978821][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.987351][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.000641][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.001601][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.009168][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.018150][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.022755][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.036207][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.044994][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.062327][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.072645][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.703861][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 89.773952][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 89.991171][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 90.034640][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 90.068077][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 90.203675][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.211014][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.219517][ T5821] bridge_slave_0: entered allmulticast mode [ 90.227586][ T5821] bridge_slave_0: entered promiscuous mode [ 90.237622][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.245095][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.252333][ T5819] bridge_slave_0: entered allmulticast mode [ 90.259418][ T5819] bridge_slave_0: entered promiscuous mode [ 90.307928][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.316064][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.325615][ T5821] bridge_slave_1: entered allmulticast mode [ 90.333548][ T5821] bridge_slave_1: entered promiscuous mode [ 90.341040][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.348907][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.356303][ T5819] bridge_slave_1: entered allmulticast mode [ 90.363599][ T5819] bridge_slave_1: entered promiscuous mode [ 90.445183][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.452780][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.460088][ T5820] bridge_slave_0: entered allmulticast mode [ 90.467621][ T5820] bridge_slave_0: entered promiscuous mode [ 90.520303][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.528097][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.535422][ T5820] bridge_slave_1: entered allmulticast mode [ 90.543286][ T5820] bridge_slave_1: entered promiscuous mode [ 90.582703][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.597125][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.653907][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.661595][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.669733][ T5827] bridge_slave_0: entered allmulticast mode [ 90.679312][ T5827] bridge_slave_0: entered promiscuous mode [ 90.689757][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.700930][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.726620][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.733966][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.741232][ T5831] bridge_slave_0: entered allmulticast mode [ 90.748725][ T5831] bridge_slave_0: entered promiscuous mode [ 90.758675][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.770543][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.780215][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.787790][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.795746][ T5827] bridge_slave_1: entered allmulticast mode [ 90.804124][ T5827] bridge_slave_1: entered promiscuous mode [ 90.837781][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.845233][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.852789][ T5831] bridge_slave_1: entered allmulticast mode [ 90.859935][ T5831] bridge_slave_1: entered promiscuous mode [ 90.928817][ T5819] team0: Port device team_slave_0 added [ 90.968348][ T5820] team0: Port device team_slave_0 added [ 90.992392][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.006224][ T5821] team0: Port device team_slave_0 added [ 91.014540][ T5819] team0: Port device team_slave_1 added [ 91.026105][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.033090][ T5839] Bluetooth: hci0: command tx timeout [ 91.039676][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.053756][ T5820] team0: Port device team_slave_1 added [ 91.063750][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.075506][ T5821] team0: Port device team_slave_1 added [ 91.112231][ T5833] Bluetooth: hci4: command tx timeout [ 91.112267][ T5836] Bluetooth: hci1: command tx timeout [ 91.123570][ T5830] Bluetooth: hci3: command tx timeout [ 91.129590][ T5839] Bluetooth: hci2: command tx timeout [ 91.223222][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.230306][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.256432][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.271094][ T5827] team0: Port device team_slave_0 added [ 91.294524][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.301550][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.328595][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.340464][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.347886][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.375531][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.389939][ T5831] team0: Port device team_slave_0 added [ 91.398364][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.405938][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.432492][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.454407][ T5827] team0: Port device team_slave_1 added [ 91.461060][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.468630][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.495677][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.507781][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.515161][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.542128][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.555723][ T5831] team0: Port device team_slave_1 added [ 91.716361][ T5820] hsr_slave_0: entered promiscuous mode [ 91.723509][ T5820] hsr_slave_1: entered promiscuous mode [ 91.730947][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.738859][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.764851][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.805898][ T5819] hsr_slave_0: entered promiscuous mode [ 91.813237][ T5819] hsr_slave_1: entered promiscuous mode [ 91.819534][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.827764][ T5819] Cannot create hsr debugfs directory [ 91.834504][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.841752][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.868512][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.881755][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.889548][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.915756][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.927403][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.934804][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.960996][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.985020][ T5821] hsr_slave_0: entered promiscuous mode [ 91.991476][ T5821] hsr_slave_1: entered promiscuous mode [ 92.002741][ T5821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.010353][ T5821] Cannot create hsr debugfs directory [ 92.217892][ T5831] hsr_slave_0: entered promiscuous mode [ 92.226615][ T5831] hsr_slave_1: entered promiscuous mode [ 92.234570][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.243713][ T5831] Cannot create hsr debugfs directory [ 92.246953][ T10] cfg80211: failed to load regulatory.db [ 92.310701][ T5827] hsr_slave_0: entered promiscuous mode [ 92.317395][ T5827] hsr_slave_1: entered promiscuous mode [ 92.324081][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.331671][ T5827] Cannot create hsr debugfs directory [ 92.781666][ T5821] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.802849][ T5821] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.815976][ T5821] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.837606][ T5821] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.893587][ T5819] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.909082][ T5819] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.934285][ T5819] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.962608][ T5819] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.044874][ T5820] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.065449][ T5820] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.078129][ T5820] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.090909][ T5820] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.120430][ T5839] Bluetooth: hci0: command tx timeout [ 93.194156][ T5839] Bluetooth: hci4: command tx timeout [ 93.199768][ T5836] Bluetooth: hci2: command tx timeout [ 93.202964][ T5833] Bluetooth: hci3: command tx timeout [ 93.210768][ T5830] Bluetooth: hci1: command tx timeout [ 93.257779][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.302585][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.330100][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.344695][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.395731][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.485664][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.497239][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.517932][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.534049][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.547003][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.587975][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.611872][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.619308][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.660466][ T3031] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.667634][ T3031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.720564][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.790378][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.797681][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.830710][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.837989][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.869653][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.999088][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.023912][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.069008][ T3017] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.076730][ T3017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.103720][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.156105][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.163629][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.240858][ T3017] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.248224][ T3017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.328517][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.350084][ T3017] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.357319][ T3017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.491917][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.569026][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.597545][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.604911][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.650257][ T3017] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.657809][ T3017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.807628][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.899685][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.971866][ T5821] veth0_vlan: entered promiscuous mode [ 95.011195][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.045734][ T5821] veth1_vlan: entered promiscuous mode [ 95.070874][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.096615][ T5819] veth0_vlan: entered promiscuous mode [ 95.158725][ T5821] veth0_macvtap: entered promiscuous mode [ 95.193746][ T5830] Bluetooth: hci0: command tx timeout [ 95.204332][ T5819] veth1_vlan: entered promiscuous mode [ 95.216630][ T5821] veth1_macvtap: entered promiscuous mode [ 95.274309][ T5830] Bluetooth: hci1: command tx timeout [ 95.279843][ T5830] Bluetooth: hci3: command tx timeout [ 95.285566][ T5833] Bluetooth: hci2: command tx timeout [ 95.285863][ T5836] Bluetooth: hci4: command tx timeout [ 95.334959][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.405841][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.424523][ T5821] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.435020][ T5821] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.445722][ T5821] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.454585][ T5821] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.477403][ T5819] veth0_macvtap: entered promiscuous mode [ 95.507360][ T5819] veth1_macvtap: entered promiscuous mode [ 95.519176][ T5827] veth0_vlan: entered promiscuous mode [ 95.589084][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.633530][ T5827] veth1_vlan: entered promiscuous mode [ 95.681868][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.746544][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.759661][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.770275][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.820190][ T5819] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.829898][ T5819] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.839637][ T5819] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.850230][ T5819] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.863917][ T5827] veth0_macvtap: entered promiscuous mode [ 95.890891][ T5827] veth1_macvtap: entered promiscuous mode [ 95.918657][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.938525][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.944112][ T5831] veth0_vlan: entered promiscuous mode [ 95.965810][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.989901][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.016477][ T5831] veth1_vlan: entered promiscuous mode [ 96.060426][ T5827] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.063745][ T5821] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.074542][ T5827] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.097729][ T5827] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.107767][ T5827] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.209382][ T5820] veth0_vlan: entered promiscuous mode [ 96.300595][ T5820] veth1_vlan: entered promiscuous mode [ 96.355981][ T5820] veth0_macvtap: entered promiscuous mode [ 96.373683][ T5820] veth1_macvtap: entered promiscuous mode [ 96.517989][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.525993][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.564288][ T5831] veth0_macvtap: entered promiscuous mode [ 96.652738][ T5944] 9pnet_virtio: no channels available for device syz [ 97.312282][ T5836] Bluetooth: hci0: command tx timeout [ 97.321554][ T5831] veth1_macvtap: entered promiscuous mode [ 97.351778][ T5945] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.352907][ T5836] Bluetooth: hci3: command tx timeout [ 97.369476][ T5830] Bluetooth: hci2: command tx timeout [ 97.375796][ T5830] Bluetooth: hci4: command tx timeout [ 97.381818][ T5833] Bluetooth: hci1: command tx timeout [ 97.395588][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.418639][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.448730][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.461505][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.480272][ T5820] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.490668][ T5820] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.500868][ T5820] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.513007][ T5820] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.596301][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.639558][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.650574][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.714483][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.764606][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.783813][ T5831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.800838][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.807885][ T5831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.818143][ T5831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.827547][ T5831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.026260][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.055091][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.122957][ T5919] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.267502][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.278992][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.292674][ T5919] usb 2-1: Using ep0 maxpacket: 8 [ 98.314763][ T5919] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 98.332298][ T5919] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 98.360157][ T5919] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 98.382867][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.436221][ T5919] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.700480][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 98.709928][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.905279][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 98.914456][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.007684][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 99.016891][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.110128][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 99.348427][ T5919] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 99.358835][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.415017][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.479540][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.623720][ T5919] usb 2-1: GET_CAPABILITIES returned 0 [ 99.631544][ T5919] usbtmc 2-1:16.0: can't read capabilities [ 99.852148][ T43] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.891485][ T3031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.920072][ T3031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.973006][ T5950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.987169][ T5950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.033426][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 100.044027][ T43] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 100.061687][ T43] usb 1-1: config 0 has no interface number 0 [ 100.117191][ T43] usb 1-1: config 0 interface 50 has no altsetting 0 [ 100.153412][ T43] usb 1-1: New USB device found, idVendor=185b, idProduct=2041, bcdDevice= 6.51 [ 100.163222][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.176104][ T43] usb 1-1: Product: syz [ 100.187536][ T43] usb 1-1: Manufacturer: syz [ 100.211734][ T43] usb 1-1: SerialNumber: syz [ 100.246978][ T43] usb 1-1: config 0 descriptor?? [ 100.703074][ T43] usb 1-1: USB disconnect, device number 2 [ 100.762993][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.122630][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 105.562818][ T5992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'. [ 107.535951][ T6003] Zero length message leads to an empty skb [ 109.164602][ T980] usb 2-1: USB disconnect, device number 2 [ 109.359823][ T6012] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 110.208825][ T6010] ALSA: mixer_oss: invalid OSS volume '' [ 113.157308][ T6018] ALSA: mixer_oss: invalid OSS volume '' [ 113.419143][ T6041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.462583][ T980] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 116.652179][ T980] usb 2-1: Using ep0 maxpacket: 8 [ 116.900984][ T980] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 116.924347][ T980] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 116.959044][ T980] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 117.027575][ T980] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.071319][ T980] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 117.098157][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.555704][ T6066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.566377][ T6066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.836427][ T980] usb 2-1: GET_CAPABILITIES returned 0 [ 118.023380][ T980] usbtmc 2-1:16.0: can't read capabilities [ 120.755791][ T5822] usb 2-1: USB disconnect, device number 3 [ 120.792101][ T9] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 120.793046][ T5964] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 121.900592][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.165842][ T5964] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 122.182612][ T5964] usb 1-1: config 0 interface 0 has no altsetting 0 [ 122.185867][ T9] usb 5-1: config 0 has no interfaces? [ 122.196115][ T9] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 122.201265][ T5964] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 122.206139][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.219191][ T5964] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 122.223381][ T6099] 9pnet_virtio: no channels available for device syz [ 122.237839][ T5964] usb 1-1: Product: syz [ 122.241878][ T9] usb 5-1: config 0 descriptor?? [ 122.243368][ T5964] usb 1-1: Manufacturer: syz [ 122.312334][ T6101] Bluetooth: MGMT ver 1.23 [ 123.051326][ T5964] usb 1-1: SerialNumber: syz [ 123.114554][ T5964] usb 1-1: config 0 descriptor?? [ 123.139007][ T5964] usb 1-1: selecting invalid altsetting 0 [ 123.346506][ T6088] mmap: syz.0.36 (6088) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 123.842186][ T6109] capability: warning: `syz.1.41' uses 32-bit capabilities (legacy support in use) [ 124.636639][ T6111] 9pnet_virtio: no channels available for device syz [ 125.471634][ T43] usb 5-1: USB disconnect, device number 2 [ 125.725333][ T6119] [U]  [ 125.728522][ T6119] [U] K{ [ 125.732571][ T6119] [U] T 1ŠFFˊ`GJǘGO/MC [ 125.745866][ T6119] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 125.763321][ T6119] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 125.785175][ T6119] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 125.830253][ T6119] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 125.857960][ T6119] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 125.871343][ T6119] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 125.887082][ T6119] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 125.990299][ T6119] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 126.001004][ T6119] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 126.015367][ T6119] [U] 22Ʃ۩X?0;3U [ 126.023573][ T6119] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 126.051857][ T6119] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 126.062994][ T6119] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 126.072477][ T6119] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 126.080775][ T6119] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 126.102368][ T6119] [U] EC [ 126.107537][ T6119] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 126.666931][ T6113] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 126.749464][ T43] usb 1-1: USB disconnect, device number 3 [ 129.321634][ T6151] tty tty22: ldisc open failed (-12), clearing slot 21 [ 130.361651][ T6163] 9pnet_virtio: no channels available for device syz [ 133.285976][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.292930][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.240876][ T6171] ALSA: mixer_oss: invalid OSS volume '' [ 139.358480][ T6206] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 140.578179][ T5910] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 141.482159][ T5910] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 141.531020][ T5910] usb 5-1: config 0 has no interface number 0 [ 141.537778][ T5964] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 141.545576][ T5910] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 141.571616][ T5910] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 141.618334][ T5910] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 141.641037][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.661556][ T5910] usb 5-1: config 0 descriptor?? [ 141.678799][ T6208] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 141.704769][ T5964] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 141.732172][ T5964] usb 4-1: config 0 interface 0 has no altsetting 0 [ 141.740343][ T5910] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 141.763322][ T5964] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 141.822205][ T5964] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 142.779401][ T5964] usb 4-1: Product: syz [ 142.784419][ T5964] usb 4-1: Manufacturer: syz [ 142.789067][ T5964] usb 4-1: SerialNumber: syz [ 142.797714][ T5964] usb 4-1: config 0 descriptor?? [ 142.866081][ T5964] usb 4-1: selecting invalid altsetting 0 [ 142.889373][ T5901] usb 5-1: USB disconnect, device number 3 [ 143.242782][ T6225] 9pnet_virtio: no channels available for device syz [ 147.421856][ T5822] usb 4-1: USB disconnect, device number 2 [ 147.768880][ T6249] [U]  [ 147.771761][ T6249] [U] K{ [ 147.776433][ T6249] [U] T 1ŠFFˊ`GJǘGO/MC [ 147.791862][ T6249] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 147.810359][ T6249] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 147.827825][ T6249] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 147.875439][ T6249] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 147.901409][ T6249] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 147.915071][ T6249] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 147.930702][ T6249] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 148.039847][ T6249] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 148.050760][ T6249] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 148.066156][ T6249] [U] 22Ʃ۩X?0;3U [ 148.076256][ T6249] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 148.103211][ T6249] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 148.114121][ T6249] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 148.123471][ T6249] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 148.131539][ T6249] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 148.144073][ T6249] [U] EC [ 148.149119][ T6249] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 148.673701][ T6245] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 149.662460][ T6254] tty tty26: ldisc open failed (-12), clearing slot 25 [ 150.031079][ T6263] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 150.186637][ T6266] netlink: 20 bytes leftover after parsing attributes in process `syz.4.75'. [ 151.197044][ T6260] syz.0.76 uses obsolete (PF_INET,SOCK_PACKET) [ 151.353014][ T6277] openvswitch: netlink: Flow actions attr not present in new flow. [ 153.713384][ T6296] 9pnet_virtio: no channels available for device syz [ 154.894362][ T6298] openvswitch: netlink: Flow actions attr not present in new flow. [ 159.234273][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 159.486940][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 159.509161][ T9] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 159.522426][ T9] usb 5-1: config 0 has no interface number 0 [ 159.537175][ T9] usb 5-1: config 0 interface 50 has no altsetting 0 [ 159.555543][ T9] usb 5-1: New USB device found, idVendor=185b, idProduct=2041, bcdDevice= 6.51 [ 159.565074][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.576165][ T9] usb 5-1: Product: syz [ 159.616843][ T9] usb 5-1: Manufacturer: syz [ 159.621545][ T9] usb 5-1: SerialNumber: syz [ 159.676091][ T9] usb 5-1: config 0 descriptor?? [ 159.988659][ T9] usb 5-1: USB disconnect, device number 4 [ 160.299891][ T6330] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 164.872206][ T5822] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 167.710473][ T6386] 9pnet_virtio: no channels available for device syz [ 169.550425][ T6400] openvswitch: netlink: Flow key attr not present in new flow. [ 170.688434][ T6406] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 177.634090][ T6454] usb usb8: usbfs: process 6454 (syz.2.120) did not claim interface 0 before use [ 179.136945][ T6464] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 179.151988][ C1] hrtimer: interrupt took 927826 ns [ 184.781414][ T6498] usb usb8: usbfs: process 6498 (syz.0.131) did not claim interface 0 before use [ 187.412159][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 188.316476][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 188.325120][ T6513] syz.1.136 (6513) used greatest stack depth: 19128 bytes left [ 188.513880][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 188.567638][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 189.021114][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 189.038290][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 189.061337][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 189.089411][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.883665][ T6526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.139'. [ 190.326648][ T24] usb 3-1: can't set config #16, error -71 [ 190.387463][ T24] usb 3-1: USB disconnect, device number 2 [ 191.783965][ T5822] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 191.982234][ T5822] usb 2-1: Using ep0 maxpacket: 32 [ 191.994399][ T5822] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 192.005520][ T5822] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 192.978146][ T5822] usb 2-1: config 0 interface 0 has no altsetting 0 [ 193.004656][ T5822] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 193.026003][ T5822] usb 2-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 193.053787][ T5822] usb 2-1: Product: syz [ 193.058260][ T5822] usb 2-1: Manufacturer: syz [ 193.071643][ T5822] usb 2-1: SerialNumber: syz [ 193.092841][ T5822] usb 2-1: config 0 descriptor?? [ 194.012300][ T5822] gs_usb 2-1:0.0: Couldn't get device config: (err=-121) [ 194.334250][ T5822] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -121 [ 194.406581][ T5822] usb 2-1: USB disconnect, device number 4 [ 194.660473][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.667065][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.737954][ T6605] process 'syz.3.157' launched '/dev/fd/6' with NULL argv: empty string added [ 202.522049][ T6623] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 204.565382][ T6632] hugetlbfs: syz.2.164 (6632): Using mlock ulimits for SHM_HUGETLB is obsolete [ 211.308240][ T6683] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 212.095168][ T5834] Bluetooth: hci0: command 0x0406 tx timeout [ 212.101626][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 212.108588][ T5143] Bluetooth: hci4: command 0x0406 tx timeout [ 212.114799][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 212.114821][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 222.978117][ T6751] netlink: 20 bytes leftover after parsing attributes in process `syz.0.199'. [ 224.835520][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 224.868815][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 224.878289][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 224.892322][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 224.901270][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 225.239777][ T6769] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 226.856355][ T6052] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.032138][ T5839] Bluetooth: hci5: command tx timeout [ 227.143349][ T6765] chnl_net:caif_netlink_parms(): no params data found [ 228.816198][ T6052] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.214010][ T5839] Bluetooth: hci5: command tx timeout [ 230.797950][ T6811] netlink: 20 bytes leftover after parsing attributes in process `syz.0.214'. [ 231.170211][ T6052] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.220383][ T6765] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.238480][ T6765] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.272097][ T5839] Bluetooth: hci5: command tx timeout [ 231.275055][ T6765] bridge_slave_0: entered allmulticast mode [ 231.301732][ T6765] bridge_slave_0: entered promiscuous mode [ 231.351229][ T6052] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.408117][ T6765] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.432438][ T6765] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.455003][ T6765] bridge_slave_1: entered allmulticast mode [ 231.500036][ T6765] bridge_slave_1: entered promiscuous mode [ 231.675656][ T6765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.886972][ T6765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.278596][ T6765] team0: Port device team_slave_0 added [ 232.376827][ T6765] team0: Port device team_slave_1 added [ 232.401075][ T6820] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 232.606570][ T6765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.832020][ T6765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.945618][ T6838] vivid-000: disconnect [ 233.742302][ T5839] Bluetooth: hci5: command tx timeout [ 233.753619][ T6765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.812271][ T9] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 234.033046][ T6765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.040408][ T6765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.069505][ T6765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.046294][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 235.067302][ T6052] bridge_slave_1: left allmulticast mode [ 235.083280][ T6052] bridge_slave_1: left promiscuous mode [ 235.094600][ T6052] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.116184][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 235.134770][ T6052] bridge_slave_0: left allmulticast mode [ 235.147568][ T6052] bridge_slave_0: left promiscuous mode [ 235.161172][ T9] usb 5-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 64 [ 235.184257][ T6052] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.193386][ T9] usb 5-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 235.246899][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 235.258140][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 235.277468][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.304659][ T9] usb 5-1: Product: syz [ 235.320595][ T9] usb 5-1: Manufacturer: syz [ 235.346806][ T9] usb 5-1: SerialNumber: syz [ 235.405510][ T6836] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 235.763481][ T9] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input6 [ 235.830748][ T5178] bcm5974 5-1:1.0: could not read from device [ 235.945742][ T6798] vivid-000: reconnect [ 235.960982][ T9] usb 5-1: USB disconnect, device number 5 [ 238.192265][ T6052] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.213524][ T6052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.253648][ T6052] bond0 (unregistering): Released all slaves [ 238.359260][ T6765] hsr_slave_0: entered promiscuous mode [ 238.401088][ T6765] hsr_slave_1: entered promiscuous mode [ 238.417349][ T6765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.463366][ T6052] IPVS: stopping backup sync thread 6623 ... [ 238.470483][ T6765] Cannot create hsr debugfs directory [ 241.024855][ T6895] vivid-000: disconnect [ 241.040958][ T6895] vivid-000: reconnect [ 241.887993][ T6052] hsr_slave_0: left promiscuous mode [ 242.116828][ T6052] hsr_slave_1: left promiscuous mode [ 242.137586][ T6052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.231312][ T6903] vivid-000: disconnect [ 242.249264][ T6903] vivid-000: reconnect [ 242.875045][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 242.892072][ T6052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.043814][ T6052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.052016][ T6052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.141063][ T6052] veth1_macvtap: left promiscuous mode [ 243.172324][ T6052] veth0_macvtap: left promiscuous mode [ 243.183860][ T6052] veth1_vlan: left promiscuous mode [ 243.185361][ T9] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 243.202870][ T6052] veth0_vlan: left promiscuous mode [ 243.822031][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 243.876941][ T9] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 243.958353][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 244.014806][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.054870][ T9] usb 1-1: can't set config #27, error -71 [ 244.578927][ T9] usb 1-1: USB disconnect, device number 5 [ 245.311522][ T6052] team0 (unregistering): Port device team_slave_1 removed [ 245.359452][ T6052] team0 (unregistering): Port device team_slave_0 removed [ 246.717053][ T6941] netlink: 16 bytes leftover after parsing attributes in process `syz.0.245'. [ 246.861494][ T6765] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 247.147407][ T6765] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 247.210526][ T6937] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 247.243224][ T6952] vivid-000: disconnect [ 247.963009][ T6947] vivid-000: reconnect [ 248.074304][ T6765] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 248.183578][ T6765] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 250.278526][ T6765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.611029][ T6765] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.533652][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.540870][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.011967][ T1315] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.019427][ T1315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.410535][ T7024] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 256.372946][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.379705][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.409057][ T6765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.219612][ T6765] veth0_vlan: entered promiscuous mode [ 261.235385][ T6765] veth1_vlan: entered promiscuous mode [ 261.430990][ T6765] veth0_macvtap: entered promiscuous mode [ 261.938723][ T6765] veth1_macvtap: entered promiscuous mode [ 262.046640][ T6765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.085459][ T6765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.145130][ T6765] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.202019][ T6765] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.233403][ T6765] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.262140][ T6765] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.897793][ T1315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.950087][ T1315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.100937][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.130350][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.432898][ T24] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 265.583783][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 265.652140][ T24] usb 1-1: not running at top speed; connect to a high speed hub [ 265.688343][ T24] usb 1-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 64 [ 265.722116][ T24] usb 1-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 265.775202][ T24] usb 1-1: config 1 interface 0 has no altsetting 0 [ 265.792903][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 265.802449][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.820452][ T24] usb 1-1: Product: syz [ 265.833202][ T24] usb 1-1: Manufacturer: syz [ 265.837857][ T24] usb 1-1: SerialNumber: syz [ 265.887310][ T7101] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 266.699184][ T24] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input8 [ 266.900499][ T5178] bcm5974 1-1:1.0: could not read from device [ 267.806559][ T5178] bcm5974 1-1:1.0: could not read from device [ 267.837322][ T24] usb 1-1: USB disconnect, device number 6 [ 267.867148][ T5178] bcm5974 1-1:1.0: could not read from device [ 269.511243][ T7157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.852377][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 270.105436][ T5822] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 270.562378][ T5822] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 270.582979][ T5822] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 270.781631][ T24] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 270.794654][ T5822] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 270.822013][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 270.856972][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 270.878361][ T24] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 271.001064][ T5822] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 271.013952][ T24] usb 2-1: Product: syz [ 271.047250][ T24] usb 2-1: Manufacturer: syz [ 271.082233][ T24] usb 2-1: SerialNumber: syz [ 271.096918][ T5822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.116734][ T24] usb 2-1: config 0 descriptor?? [ 271.167876][ T24] usb 2-1: selecting invalid altsetting 0 [ 272.348975][ T7179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.359882][ T7179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.319585][ T5822] usb 6-1: can't set config #27, error -71 [ 276.371778][ T5822] usb 6-1: USB disconnect, device number 2 [ 276.474082][ T43] usb 2-1: USB disconnect, device number 5 [ 277.054712][ T5916] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 277.486806][ T5916] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 277.526310][ T5916] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 277.553365][ T5916] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 277.566637][ T5916] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 277.576125][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.599034][ T5916] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 277.642995][ T5916] usb 4-1: invalid MIDI out EP 0 [ 278.591536][ T7235] vivid-000: disconnect [ 278.606911][ T7235] vivid-000: reconnect [ 279.260170][ T5916] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 279.284201][ T5916] usb 4-1: USB disconnect, device number 3 [ 282.521311][ T7283] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 284.798767][ T7298] netlink: 172 bytes leftover after parsing attributes in process `syz.3.311'. [ 287.371144][ T7327] 9pnet_virtio: no channels available for device syz [ 291.332956][ T7356] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 292.560396][ T7364] netlink: 4 bytes leftover after parsing attributes in process `syz.5.327'. [ 292.748960][ T7368] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 296.487786][ T7396] [U]  [ 296.490715][ T7396] [U] K{ [ 296.494766][ T7396] [U] T 1ŠFFˊ`GJǘGO/MC [ 296.505490][ T7396] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 296.522930][ T7396] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 296.538974][ T7396] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 296.582242][ T7396] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 296.607381][ T7396] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 296.620457][ T7396] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 296.636575][ T7396] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 296.741029][ T7396] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 296.753438][ T7396] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 296.768157][ T7396] [U] 22Ʃ۩X?0;3U [ 296.776761][ T7396] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 296.803205][ T7396] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 296.813705][ T7396] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 296.822917][ T7396] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 296.830695][ T7396] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 296.843408][ T7396] [U] EC [ 296.848854][ T7396] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 297.384092][ T7394] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 299.018566][ T7417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.338'. [ 304.690083][ T7467] netlink: 2 bytes leftover after parsing attributes in process `syz.3.346'. [ 310.419606][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 310.592675][ T24] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 310.609206][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.627045][ T24] usb 2-1: Product: syz [ 310.638367][ T24] usb 2-1: Manufacturer: syz [ 310.647189][ T24] usb 2-1: SerialNumber: syz [ 310.723048][ T24] usb 2-1: config 0 descriptor?? [ 310.902253][ T5910] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 310.924624][ T7466] delete_channel: no stack [ 311.022561][ T7532] vivid-000: disconnect [ 311.047257][ T7532] vivid-000: reconnect [ 311.766232][ T7520] Bluetooth: MGMT ver 1.23 [ 311.816116][ T7520] netlink: 356 bytes leftover after parsing attributes in process `syz.1.360'. [ 311.835455][ T24] usb-storage 2-1:0.0: USB Mass Storage device detected [ 311.863238][ T5910] usb 1-1: config 0 has no interfaces? [ 311.955901][ T5910] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 312.075727][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.094172][ T24] usb 2-1: USB disconnect, device number 6 [ 312.816158][ T5910] usb 1-1: Product: syz [ 312.894144][ T5910] usb 1-1: Manufacturer: syz [ 313.163549][ T5910] usb 1-1: SerialNumber: syz [ 313.185879][ T5910] usb 1-1: config 0 descriptor?? [ 314.732029][ T5839] Bluetooth: hci0: command 0x0406 tx timeout [ 317.533965][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.540501][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.333114][ T5910] usb 1-1: can't set config #0, error -110 [ 318.636937][ T5910] usb 1-1: USB disconnect, device number 7 [ 318.932042][ T5885] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 319.804207][ T7600] 9pnet_virtio: no channels available for device syz [ 319.979725][ T5885] usb 5-1: unable to get BOS descriptor or descriptor too short [ 320.053088][ T5885] usb 5-1: not running at top speed; connect to a high speed hub [ 320.062577][ T5885] usb 5-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 64 [ 320.076872][ T5885] usb 5-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 320.092635][ T5885] usb 5-1: config 1 interface 0 has no altsetting 0 [ 320.164868][ T5885] usb 5-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 320.205584][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.240020][ T5885] usb 5-1: Product: syz [ 320.260754][ T5885] usb 5-1: Manufacturer: syz [ 320.281983][ T5885] usb 5-1: SerialNumber: syz [ 320.311211][ T7591] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 320.560830][ T5885] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input11 [ 320.580475][ T43] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 320.751363][ T5178] bcm5974 5-1:1.0: could not read from device [ 320.767653][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.791194][ T43] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 320.801145][ T43] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 320.817812][ T43] usb 2-1: Product: syz [ 320.829905][ T43] usb 2-1: Manufacturer: syz [ 320.963827][ T43] usb 2-1: SerialNumber: syz [ 321.258352][ T43] usb 2-1: config 0 descriptor?? [ 321.280427][ T5178] bcm5974 5-1:1.0: could not read from device [ 321.342024][ T9] usb 5-1: USB disconnect, device number 6 [ 321.468985][ T43] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 321.904989][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 322.331422][ T7626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.363286][ T7626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.786785][ T7635] vivid-000: disconnect [ 322.804491][ T7635] vivid-000: reconnect [ 324.166099][ T7645] vivid-000: disconnect [ 324.184304][ T7645] vivid-000: reconnect [ 325.648995][ T9] usb 2-1: USB disconnect, device number 7 [ 326.049066][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.387'. [ 331.735614][ T7719] netlink: 40 bytes leftover after parsing attributes in process `syz.5.395'. [ 332.316725][ T7732] 9pnet_virtio: no channels available for device syz [ 333.658524][ T7739] netlink: 2 bytes leftover after parsing attributes in process `syz.1.399'. [ 334.388399][ T7735] delete_channel: no stack [ 335.452222][ T980] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 336.210714][ T7754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.403'. [ 336.502002][ T980] usb 1-1: Using ep0 maxpacket: 8 [ 336.513862][ T980] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 336.525152][ T980] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 336.577124][ T980] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 336.732071][ T980] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 336.854770][ T980] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 337.049196][ T980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.791808][ T980] usb 1-1: usb_control_msg returned -71 [ 339.863992][ T980] usbtmc 1-1:16.0: can't read capabilities [ 339.932962][ T980] usb 1-1: USB disconnect, device number 8 [ 341.761682][ T7808] 9pnet_virtio: no channels available for device syz [ 345.906157][ T7832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.082081][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 348.215199][ T9] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 348.288743][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 348.302809][ T9] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 348.316163][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 348.325812][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.353659][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 348.362117][ T9] usb 2-1: invalid MIDI out EP 0 [ 348.751439][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 348.770125][ T9] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 350.379680][ T5839] Bluetooth: hci5: command 0x0406 tx timeout [ 350.430046][ T43] usb 2-1: USB disconnect, device number 8 [ 351.407210][ T7882] [U]  [ 351.410513][ T7882] [U] K{ [ 351.414648][ T7882] [U] T 1ŠFFˊ`GJǘGO/MC [ 351.432995][ T7882] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 351.451041][ T7882] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 351.483833][ T7882] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 351.536959][ T7882] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 351.563726][ T7882] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 351.577368][ T7882] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 351.814987][ T7882] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 389.828878][ T8193] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 389.853201][ T8193] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 389.864620][ T8193] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 389.876800][ T8193] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 389.969608][ T8193] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 389.978779][ T8193] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 389.992520][ T8193] [U] 22Ʃ۩X?0;3U [ 389.997229][ T8193] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 390.022643][ T8193] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 390.033260][ T8193] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 390.042070][ T8193] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 390.048468][ T8193] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 390.060863][ T8193] [U] EC [ 390.064312][ T8193] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 390.730379][ T8191] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 395.448736][ T8227] netlink: 12 bytes leftover after parsing attributes in process `syz.3.499'. [ 400.833579][ T5822] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 400.888836][ T8258] netlink: 356 bytes leftover after parsing attributes in process `syz.1.502'. [ 401.113490][ T5822] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 401.168065][ T5822] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 401.221679][ T5822] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 401.379920][ T5822] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 401.389328][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.398789][ T980] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 401.431801][ T5822] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 401.439971][ T5822] usb 5-1: invalid MIDI out EP 0 [ 401.576512][ T5822] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 401.622113][ T980] usb 1-1: Using ep0 maxpacket: 8 [ 401.635497][ T980] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 401.765797][ T980] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 401.792956][ T980] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 401.814459][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 401.930080][ T980] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 402.366408][ T980] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 402.453867][ T980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.900426][ T980] usb 1-1: GET_CAPABILITIES returned 0 [ 402.906461][ T980] usbtmc 1-1:16.0: can't read capabilities [ 403.146199][ T8262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.159176][ T8262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.372727][ T9] usb 5-1: USB disconnect, device number 7 [ 403.927382][ T8278] vivid-000: disconnect [ 403.944083][ T8278] vivid-000: reconnect [ 405.862181][ T8297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.513'. [ 406.520794][ T5910] usb 1-1: USB disconnect, device number 10 [ 412.475481][ T8338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.523'. [ 413.969233][ T8362] vivid-000: disconnect [ 413.985767][ T8362] vivid-000: reconnect [ 415.741950][ T8372] vivid-000: disconnect [ 415.758998][ T8372] vivid-000: reconnect [ 417.034325][ T8389] vivid-000: disconnect [ 417.050210][ T8389] vivid-000: reconnect [ 417.703191][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 418.914382][ T8394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.535'. [ 419.555968][ T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 420.255676][ T24] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 420.312089][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.320174][ T24] usb 2-1: Product: syz [ 420.380342][ T24] usb 2-1: Manufacturer: syz [ 420.403273][ T24] usb 2-1: SerialNumber: syz [ 420.518531][ T8406] netlink: 12 bytes leftover after parsing attributes in process `syz.5.540'. [ 421.522638][ T24] usb 2-1: config 0 descriptor?? [ 421.667142][ T24] usb 2-1: can't set config #0, error -71 [ 421.713928][ T24] usb 2-1: USB disconnect, device number 11 [ 422.247213][ T8416] vivid-000: disconnect [ 422.259544][ T8416] vivid-000: reconnect [ 424.072916][ T9] usb 1-1: device descriptor read/all, error -110 [ 426.832208][ T8438] 9pnet_virtio: no channels available for device syz [ 428.186854][ T8446] netlink: 12 bytes leftover after parsing attributes in process `syz.1.549'. [ 429.586140][ T8454] vivid-000: disconnect [ 429.592483][ T8454] vivid-000: reconnect [ 433.282201][ T43] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 433.747945][ T43] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 433.865729][ T8494] 9pnet_virtio: no channels available for device syz [ 434.261991][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.390676][ T43] usb 2-1: Product: syz [ 434.394991][ T43] usb 2-1: Manufacturer: syz [ 434.399627][ T43] usb 2-1: SerialNumber: syz [ 434.409532][ T43] usb 2-1: config 0 descriptor?? [ 434.474934][ T43] usb 2-1: can't set config #0, error -71 [ 434.515208][ T43] usb 2-1: USB disconnect, device number 12 [ 434.522818][ T5885] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 436.286013][ T5885] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 436.352872][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.361011][ T5885] usb 5-1: Product: syz [ 436.389433][ T5885] usb 5-1: Manufacturer: syz [ 436.438022][ T5885] usb 5-1: SerialNumber: syz [ 436.535511][ T5885] usb 5-1: config 0 descriptor?? [ 436.991255][ T5885] usb-storage 5-1:0.0: USB Mass Storage device detected [ 437.202278][ T5885] usb 5-1: USB disconnect, device number 8 [ 438.543543][ T8532] vivid-000: disconnect [ 438.560977][ T8532] vivid-000: reconnect [ 440.444053][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.452151][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.774787][ T8547] 9pnet_virtio: no channels available for device syz [ 441.871726][ T8549] fuse: Invalid rootmode [ 443.066495][ T8567] netlink: 12 bytes leftover after parsing attributes in process `syz.5.583'. [ 443.966159][ T8573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.585'. [ 445.584829][ T8582] fuse: Bad value for 'fd' [ 446.942620][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 447.113598][ T5825] Bluetooth: hci5: command 0x0406 tx timeout [ 447.251310][ T9] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 447.268662][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.312041][ T9] usb 6-1: Product: syz [ 447.316247][ T9] usb 6-1: Manufacturer: syz [ 447.349925][ T9] usb 6-1: SerialNumber: syz [ 447.392885][ T9] usb 6-1: config 0 descriptor?? [ 447.613062][ T8588] netlink: 356 bytes leftover after parsing attributes in process `syz.5.589'. [ 447.650436][ T9] usb-storage 6-1:0.0: USB Mass Storage device detected [ 447.974178][ T9] usb 6-1: USB disconnect, device number 3 [ 450.552394][ T24] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 450.723416][ T5910] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 450.951995][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 450.980345][ T8640] vivid-000: disconnect [ 450.989479][ T8640] vivid-000: reconnect [ 451.754430][ T8641] 9pnet: Unknown protocol version 9p2000. [ 451.802829][ T5910] usb 6-1: Using ep0 maxpacket: 8 [ 452.192287][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 452.354839][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 452.398503][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 452.409831][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 452.427943][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 452.449078][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.678149][ T8653] 9pnet_virtio: no channels available for device syz [ 456.660165][ T24] usb 1-1: can't set config #16, error -71 [ 456.802935][ T24] usb 1-1: USB disconnect, device number 13 [ 456.937571][ T5910] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 457.012117][ T5910] usb 6-1: can't read configurations, error -71 [ 458.935330][ T8687] netlink: 12 bytes leftover after parsing attributes in process `syz.5.612'. [ 459.114195][ T8690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.611'. [ 461.842079][ T8704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.615'. [ 463.261951][ T5901] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 463.355671][ T8721] vivid-000: disconnect [ 463.367213][ T8721] vivid-000: reconnect [ 464.401932][ T980] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 464.409692][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 464.461998][ T5901] usb 2-1: Using ep0 maxpacket: 8 [ 464.522237][ T5901] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 464.574069][ T5901] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 464.613988][ T980] usb 6-1: device descriptor read/64, error -32 [ 464.748321][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.981948][ T980] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 465.252162][ T5916] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 465.282807][ T980] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.316465][ T980] usb 6-1: config 0 has no interfaces? [ 465.329647][ T980] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 465.361982][ T980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.404278][ T5916] usb 4-1: Using ep0 maxpacket: 8 [ 465.410872][ T5916] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 465.448411][ T980] usb 6-1: config 0 descriptor?? [ 465.456814][ T5916] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 465.527110][ T8737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.539427][ T8737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.828030][ T5916] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 465.899424][ T5916] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 465.955020][ T5916] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 465.981574][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.965683][ T5916] usb 4-1: GET_CAPABILITIES returned 0 [ 466.971274][ T5916] usbtmc 4-1:16.0: can't read capabilities [ 467.208866][ T5916] usb 4-1: USB disconnect, device number 5 [ 467.480832][ T8749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.616705][ T980] usb 6-1: USB disconnect, device number 7 [ 468.687608][ T5822] usb 2-1: USB disconnect, device number 13 [ 470.045201][ T8764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.630'. [ 471.034055][ T8781] netlink: 4 bytes leftover after parsing attributes in process `syz.5.633'. [ 472.151099][ T5839] Bluetooth: hci0: unexpected event for opcode 0x2016 [ 474.851924][ T5964] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 475.054600][ T5964] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 475.454266][ T5964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.488547][ T5964] usb 5-1: Product: syz [ 475.493191][ T5964] usb 5-1: Manufacturer: syz [ 475.514973][ T5964] usb 5-1: SerialNumber: syz [ 475.614707][ T5964] usb 5-1: config 0 descriptor?? [ 475.897460][ T8806] netlink: 356 bytes leftover after parsing attributes in process `syz.4.640'. [ 476.011357][ T5964] usb-storage 5-1:0.0: USB Mass Storage device detected [ 476.129670][ T5964] usb 5-1: USB disconnect, device number 9 [ 476.385056][ T8827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.645'. [ 478.268734][ T8842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.649'. [ 481.619710][ T8870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 481.686119][ T8874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.653'. [ 481.764379][ T980] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 481.986331][ T980] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 482.414838][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.441882][ T980] usb 1-1: Product: syz [ 482.446249][ T980] usb 1-1: Manufacturer: syz [ 482.451108][ T980] usb 1-1: SerialNumber: syz [ 482.622908][ T980] usb 1-1: config 0 descriptor?? [ 482.777585][ T8879] fuse: Unknown parameter 'user_i0000000000000000000000000000000000000000' [ 482.866724][ T8867] netlink: 356 bytes leftover after parsing attributes in process `syz.0.654'. [ 482.946708][ T980] usb-storage 1-1:0.0: USB Mass Storage device detected [ 483.166316][ T980] usb 1-1: USB disconnect, device number 14 [ 487.284885][ T8916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 488.604781][ T8925] fuse: Unknown parameter 'user_0000000000000000000000000000000000000000' [ 489.394440][ T8927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.759626][ T8928] delete_channel: no stack [ 491.660977][ T8941] vivid-000: disconnect [ 491.676371][ T8941] vivid-000: reconnect [ 497.942521][ T8971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.680'. [ 498.402861][ T8979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.679'. [ 502.169951][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.176495][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.011744][ T9026] fuse: Unknown parameter '0x0000000000000003' [ 505.234334][ T9024] fuse: Unknown parameter '0x0000000000000003' [ 508.626232][ T9060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.703'. [ 509.762560][ T43] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 509.871938][ T5901] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 510.122048][ T43] usb 4-1: device not accepting address 6, error -71 [ 511.081970][ T5901] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 511.126586][ T5901] usb 6-1: config 0 interface 0 has no altsetting 0 [ 511.148848][ T5901] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 511.166604][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 511.317639][ T5901] usb 6-1: Product: syz [ 511.404330][ T9083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.711'. [ 512.003453][ T5901] usb 6-1: Manufacturer: syz [ 512.008145][ T5901] usb 6-1: SerialNumber: syz [ 512.599547][ T5901] usb 6-1: config 0 descriptor?? [ 512.783769][ T9089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 512.802199][ T5901] usb 6-1: can't set config #0, error -71 [ 512.891231][ T5901] usb 6-1: USB disconnect, device number 8 [ 513.325196][ T9098] netlink: 12 bytes leftover after parsing attributes in process `syz.4.714'. [ 514.444452][ T9109] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 515.637427][ T9111] vivid-000: disconnect [ 515.654962][ T9111] vivid-000: reconnect [ 518.878076][ T9124] netlink: 356 bytes leftover after parsing attributes in process `syz.1.720'. [ 522.334581][ T9153] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.724' sets config #0 [ 524.272348][ T9164] vivid-000: disconnect [ 524.890097][ T9151] delete_channel: no stack [ 525.042546][ T9164] vivid-000: reconnect [ 527.135683][ T9172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.730'. [ 534.265746][ T9228] netlink: 12 bytes leftover after parsing attributes in process `syz.5.743'. [ 535.776227][ T5901] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 536.609771][ T9241] ALSA: mixer_oss: invalid OSS volume '' [ 536.722078][ T5901] usb 5-1: Using ep0 maxpacket: 8 [ 536.735981][ T5901] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 536.748166][ T5901] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 536.769260][ T5901] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 536.830569][ T5901] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 536.862043][ T5901] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 536.881939][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.076559][ T5839] Bluetooth: hci5: unexpected event for opcode 0x2016 [ 538.842800][ T5916] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 539.350246][ T5916] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 539.839737][ T5916] usb 2-1: config 0 interface 0 has no altsetting 0 [ 539.885182][ T5916] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 540.783005][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 540.801293][ T5916] usb 2-1: Product: syz [ 540.818692][ T5916] usb 2-1: Manufacturer: syz [ 540.829743][ T5916] usb 2-1: SerialNumber: syz [ 540.851154][ T5916] usb 2-1: config 0 descriptor?? [ 540.892176][ T5916] usb 2-1: can't set config #0, error -71 [ 540.928989][ T5916] usb 2-1: USB disconnect, device number 14 [ 542.168938][ T5901] usb 5-1: usb_control_msg returned -110 [ 542.617542][ T5901] usbtmc 5-1:16.0: can't read capabilities [ 542.959278][ T9289] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 543.514796][ T9294] vivid-000: disconnect [ 544.023451][ T9294] vivid-000: reconnect [ 546.616941][ T9301] vivid-000: disconnect [ 546.622573][ T9301] vivid-000: reconnect [ 547.761733][ T5964] usb 5-1: USB disconnect, device number 10 [ 549.213840][ T9329] vivid-000: disconnect [ 549.227491][ T9329] vivid-000: reconnect [ 550.623603][ T9344] vivid-000: disconnect [ 550.642437][ T9344] vivid-000: reconnect [ 555.657509][ T9370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.782'. [ 562.555526][ T9417] netlink: 8 bytes leftover after parsing attributes in process `syz.5.796'. [ 564.091107][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.098224][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.541942][ T5901] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 567.264935][ T5901] usb 4-1: Using ep0 maxpacket: 8 [ 567.284213][ T5901] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 567.303242][ T5901] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 567.331921][ T5901] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 567.383443][ T5901] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 567.458808][ T5901] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 567.479060][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.347356][ T9469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.812'. [ 571.402921][ T5839] Bluetooth: hci5: unexpected event for opcode 0x2016 [ 573.166462][ T5901] usb 4-1: usb_control_msg returned -110 [ 573.172403][ T5901] usbtmc 4-1:16.0: can't read capabilities [ 573.265932][ T24] usb 4-1: USB disconnect, device number 8 [ 576.959811][ T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 577.053903][ T9520] netlink: 'syz.0.827': attribute type 2 has an invalid length. [ 585.925419][ T9591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 586.379599][ T9610] vivid-000: disconnect [ 586.401399][ T9610] vivid-000: reconnect [ 588.752630][ T9623] netlink: 12 bytes leftover after parsing attributes in process `syz.0.848'. [ 591.804663][ T5825] Bluetooth: hci5: command 0x0406 tx timeout [ 592.297214][ T9648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 592.913429][ T9655] netlink: 'syz.3.855': attribute type 20 has an invalid length. [ 592.928294][ T9655] netlink: 16 bytes leftover after parsing attributes in process `syz.3.855'. [ 596.085724][ T9671] vivid-000: disconnect [ 596.091618][ T9671] vivid-000: reconnect [ 597.537525][ T9679] ALSA: mixer_oss: invalid OSS volume '' [ 597.712196][ T5839] Bluetooth: hci1: unexpected event for opcode 0x2016 [ 601.561993][ T9715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.869'. [ 602.710158][ T9725] netlink: 16 bytes leftover after parsing attributes in process `syz.0.871'. [ 608.934146][ T9765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.882'. [ 611.612064][ T5964] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 611.802090][ T5885] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 612.079438][ T5885] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 612.109844][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.126131][ T5964] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 612.136392][ T5885] usb 2-1: Product: syz [ 612.140650][ T5885] usb 2-1: Manufacturer: syz [ 612.149153][ T5964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.157877][ T5885] usb 2-1: SerialNumber: syz [ 612.163111][ T5964] usb 1-1: Product: syz [ 612.167312][ T5964] usb 1-1: Manufacturer: syz [ 612.175990][ T5885] usb 2-1: config 0 descriptor?? [ 612.189211][ T5964] usb 1-1: SerialNumber: syz [ 612.215440][ T5964] usb 1-1: config 0 descriptor?? [ 612.416234][ T5885] usb-storage 2-1:0.0: USB Mass Storage device detected [ 613.128265][ T9787] netlink: 356 bytes leftover after parsing attributes in process `syz.0.888'. [ 613.222592][ T9798] netlink: 12 bytes leftover after parsing attributes in process `syz.5.890'. [ 614.166060][ T5964] usb-storage 1-1:0.0: USB Mass Storage device detected [ 614.244869][ T5885] usb 2-1: USB disconnect, device number 15 [ 614.309898][ T5964] usb 1-1: USB disconnect, device number 15 [ 614.433968][ T9806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.891'. [ 614.746604][ T5825] non-paged memory [ 614.751523][ T5825] list_del corruption, ffff888034674080->next is LIST_POISON1 (dead000000000100) [ 614.761811][ T5825] ------------[ cut here ]------------ [ 614.767488][ T5825] kernel BUG at lib/list_debug.c:58! [ 614.790457][ T5825] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 614.797024][ T5825] CPU: 0 UID: 0 PID: 5825 Comm: kworker/u9:2 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 614.809380][ T5825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 614.819641][ T5825] Workqueue: hci5 hci_conn_timeout [ 614.824870][ T5825] RIP: 0010:__list_del_entry_valid_or_report+0x10e/0x190 [ 614.831905][ T5825] Code: 80 ba e1 8b 48 89 de e8 c0 02 67 fc 90 0f 0b 4c 89 e7 e8 65 92 40 fd 48 c7 c7 e0 ba e1 8b 48 89 de 4c 89 e2 e8 a3 02 67 fc 90 <0f> 0b 4c 89 e7 e8 48 92 40 fd 48 c7 c7 40 bb e1 8b 48 89 de 4c 89 [ 614.851701][ T5825] RSP: 0018:ffffc9000450f980 EFLAGS: 00010246 [ 614.857816][ T5825] RAX: 000000000000004e RBX: ffff888034674080 RCX: df37be84f18f8800 [ 614.866053][ T5825] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 614.874395][ T5825] RBP: ffffffff8a6e6610 R08: ffffc9000450f6a7 R09: 1ffff920008a1ed4 [ 614.882726][ T5825] R10: dffffc0000000000 R11: fffff520008a1ed5 R12: dead000000000100 [ 614.890743][ T5825] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 614.899420][ T5825] FS: 0000000000000000(0000) GS:ffff888125c85000(0000) knlGS:0000000000000000 [ 614.908562][ T5825] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 614.915465][ T5825] CR2: 0000200000002000 CR3: 0000000076308000 CR4: 00000000003526f0 [ 614.923725][ T5825] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 614.931715][ T5825] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 614.939895][ T5825] Call Trace: [ 614.943218][ T5825] [ 614.946246][ T5825] hci_cmd_sync_dequeue_once+0x24a/0x370 [ 614.951902][ T5825] hci_cancel_connect_sync+0xc8/0x120 [ 614.957282][ T5825] hci_abort_conn+0x191/0x330 [ 614.962151][ T5825] ? process_scheduled_works+0x9ef/0x17b0 [ 614.967887][ T5825] process_scheduled_works+0xade/0x17b0 [ 614.973530][ T5825] ? __pfx_process_scheduled_works+0x10/0x10 [ 614.979738][ T5825] worker_thread+0x8a0/0xda0 [ 614.984365][ T5825] kthread+0x70e/0x8a0 [ 614.988485][ T5825] ? __pfx_worker_thread+0x10/0x10 [ 614.993740][ T5825] ? __pfx_kthread+0x10/0x10 [ 614.998601][ T5825] ? _raw_spin_unlock_irq+0x23/0x50 [ 615.003827][ T5825] ? lockdep_hardirqs_on+0x9c/0x150 [ 615.009041][ T5825] ? __pfx_kthread+0x10/0x10 [ 615.014089][ T5825] ret_from_fork+0x3fc/0x770 [ 615.018795][ T5825] ? __pfx_ret_from_fork+0x10/0x10 [ 615.024037][ T5825] ? __switch_to_asm+0x39/0x70 [ 615.028810][ T5825] ? __switch_to_asm+0x33/0x70 [ 615.033582][ T5825] ? __pfx_kthread+0x10/0x10 [ 615.038295][ T5825] ret_from_fork_asm+0x1a/0x30 [ 615.043099][ T5825] [ 615.046144][ T5825] Modules linked in: [ 615.052598][ T5825] ---[ end trace 0000000000000000 ]--- [ 615.426314][ T5825] RIP: 0010:__list_del_entry_valid_or_report+0x10e/0x190 [ 615.434103][ T5825] Code: 80 ba e1 8b 48 89 de e8 c0 02 67 fc 90 0f 0b 4c 89 e7 e8 65 92 40 fd 48 c7 c7 e0 ba e1 8b 48 89 de 4c 89 e2 e8 a3 02 67 fc 90 <0f> 0b 4c 89 e7 e8 48 92 40 fd 48 c7 c7 40 bb e1 8b 48 89 de 4c 89 [ 615.456146][ T5825] RSP: 0018:ffffc9000450f980 EFLAGS: 00010246 [ 615.462873][ T5825] RAX: 000000000000004e RBX: ffff888034674080 RCX: df37be84f18f8800 [ 615.478111][ T5825] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 615.486310][ T5825] RBP: ffffffff8a6e6610 R08: ffffc9000450f6a7 R09: 1ffff920008a1ed4 [ 615.494737][ T5825] R10: dffffc0000000000 R11: fffff520008a1ed5 R12: dead000000000100 [ 615.503145][ T5825] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 615.511166][ T5825] FS: 0000000000000000(0000) GS:ffff888125d85000(0000) knlGS:0000000000000000 [ 615.521449][ T5825] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 615.528353][ T5825] CR2: 0000001b2f906ff8 CR3: 000000000df38000 CR4: 00000000003526f0 [ 615.536440][ T5825] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 615.544857][ T5825] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 615.553004][ T5825] Kernel panic - not syncing: Fatal exception [ 615.559448][ T5825] Kernel Offset: disabled [ 615.563778][ T5825] Rebooting in 86400 seconds..