last executing test programs: 17.031107822s ago: executing program 0 (id=551): socket$packet(0x11, 0x3, 0x300) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 14.232976094s ago: executing program 4 (id=557): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x1c6) 14.008881521s ago: executing program 0 (id=558): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') socket$inet6_tcp(0xa, 0x1, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB='\a'], 0x0) 13.696445548s ago: executing program 3 (id=559): kexec_load(0x3, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc56a4a866c499b04ef61edca4fc06d78b964868e16d82c97be81055b072720c06a8b8b3daad5131e84447a4809d131ce0927ee8ec587e37e0f2df3499327f170b861", 0xdf, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9989fa7b13df2f67b414330e5cff90a", 0xee, 0x5, 0xffffffff}, {&(0x7f0000000200), 0x0, 0x5, 0x4}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {&(0x7f00000004c0)="fd7cd1d51fb9987e67d12dded82fd30b5e7675f10da30291367bede16a4fe296961baf3caee5bd5c0d76b25c3de77c56ddefc936fa712ec3d7e51f4b16e682d3ee59b2abf6c05927c1edb91d54f66cf99928f710cf98acec87a3d75a6388bab3c5a1474d29cae1f0fd92cde6f444bf490f27f37e198aa55b403df846ce1732f7cf4c12d92aece1289b4b10b7d84532a07762548e3f3915b6575e8ef8130395476b9a721a7668c608c4d2f70aee2be4ae96ff0e5925b138fec99f91f19d8618037fe2842d248c8d44f425e54da4a668059f5124222cb4955f073d318b2f0dcecec611448d4ec0fd6b9bd0eac6bea1", 0xee, 0x5, 0x6}], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992e", 0x3d}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d622301673217c8ca26b5a362745ea01486a2ba576eb6601dfa400bb8", 0xb6}], 0x4}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13.407048449s ago: executing program 4 (id=560): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) r2 = syz_clone(0x8000, 0x0, 0xfe55, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x183383, 0x0) 11.072742432s ago: executing program 4 (id=563): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000002400)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000001380)='\v', 0x1}], 0x1, &(0x7f00000023c0)=ANY=[@ANYBLOB="200000000000000084000000020000000800410009000000c0000000", @ANYRES32=0x0, @ANYBLOB="18"], 0x38, 0x20000000}, 0x8040) 10.957995118s ago: executing program 3 (id=564): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000080)={0x46, 0x3, 0x2}, 0x10) 9.110657206s ago: executing program 0 (id=566): r0 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 8.523260576s ago: executing program 3 (id=568): syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) r3 = socket(0x10, 0x2, 0x4) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresuid(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x3, 0x2], [0x0, 0x0, 0x3], [0x4000000, 0xc, 0x0, 0x4]}) 7.677092444s ago: executing program 1 (id=571): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x80) r2 = dup3(r1, r0, 0x80000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40) read(r2, &(0x7f0000000680)=""/213, 0xd5) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000140)={0x8001, 0x5, 0x0, 0xffffffff, 0x15, "2ea98072973aefba56a9f8e8f77f20fbf5974a"}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040)=0x7f, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 7.448215229s ago: executing program 2 (id=572): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) socket$nl_generic(0x10, 0x3, 0x10) 7.284279942s ago: executing program 4 (id=573): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x6, 0x8, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc4, 0x8, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 6.822917194s ago: executing program 3 (id=574): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket(0x1, 0x3, 0x0) bind$unix(r0, &(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x25, &(0x7f0000000140)=0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bind$unix(r3, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e22}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00', 0x0, 0x82) close(0x3) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz1\x00', 0x200002, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x80) 6.447322083s ago: executing program 1 (id=575): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x80000) syz_80211_inject_frame(0x0, 0x0, 0x50) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x3, {{0x1, 0x1}, 0x4}}, 0x10, &(0x7f0000000800)=[{0x0}, {&(0x7f0000000780)="64fbc4335c6b95454c982af834e758e97827e03b7ebed1aa35af3ec612", 0x1d}], 0x2, 0x0, 0x0, 0x80}, 0x20000003) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket(0x11, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0x29, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES16=r1], 0x7) 6.376495649s ago: executing program 2 (id=576): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) ioctl$TCSETSF(r1, 0x5404, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0', @ANYBLOB=',group_id', @ANYRESDEC=0x0]) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000080)}], 0x1, 0x5405, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') read$FUSE(r4, 0x0, 0x0) pread64(r4, &(0x7f00000011c0)=""/159, 0x9f, 0x1c0000000) socket$nl_rdma(0x10, 0x3, 0x14) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x7fffffffffffffff]}, 0x8, 0x80000) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x20000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r7, 0x1, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e", 0x60}]) memfd_create(&(0x7f0000000000)='\x02A\xbb\xcc\xeb\x14\x16\xe8m\x14oSaW', 0x0) read$FUSE(r4, &(0x7f00000032c0)={0x2020}, 0x2020) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 5.811686907s ago: executing program 2 (id=577): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x10, 0x21e, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1bf, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0xf8, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0xfffffffd, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x1, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x74, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000002, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x10, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x1, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xfffffffc, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x2, 0x2, 0x9, 0x1000, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x8001, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x2, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x3, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x55d81519de704440}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r7, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x5dc}], 0x1}, 0x4000880) 5.7325278s ago: executing program 3 (id=578): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000080)={0x46, 0x3, 0x2}, 0x10) 5.577979276s ago: executing program 4 (id=579): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56561, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.136420249s ago: executing program 1 (id=580): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0xc8202) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) socket$alg(0x26, 0x5, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x66, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x7fff, 0x800000000000007d, 0x0, 0x8000, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x9, 0xffffffffffffffff, 0x1ff, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 3.66797519s ago: executing program 2 (id=581): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x2000005}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) sendto$packet(0xffffffffffffffff, &(0x7f0000000280)="1e967ad46e4ce0116c8ef5", 0xb, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc"], 0xfdef) 3.57577824s ago: executing program 0 (id=582): close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) syz_open_dev$dvb_demux(&(0x7f0000001340), 0x13, 0x41) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x14, r4, 0x701, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8814) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r5, &(0x7f0000001040)={0x9, {"a2e3ad21ed0d09f90e3d090987f70e06d038e7ff7fc6e5539b0d5b0e8b099b3f36006e090890e0878f0e1ac6e7f89b334d959b639a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0a6193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000400000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617679314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec230911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918c91243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac5a4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4b333bd5bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3be3b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ce0700c7e658828163e2d25c4aa348561f927eff7f3aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f05004b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d486046b2c0e2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee6157eb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de225727aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d78749a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29c60acebdbe8ddbd75c2f998d8a57f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95ff80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8870b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513007000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae8489d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60299473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d946a2daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810300000000000000a12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf000000800000000007b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae0e797e8bd1f4108b7807fb36207685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ad50dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b9048017848416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1db44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b00f1000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de9c0587c2cb5fe36d7d3e5db21b013b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cf4b23329072e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06810002000000000000957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f3e90d5943dbc10360a1a49700d1dfbf66d69f6fbafe1e83cdde8bb0d872a02238926407a4eddd5d0fc5a752f900000000000000100", 0x35e}}, 0x1006) 3.01456023s ago: executing program 3 (id=583): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000040)=@in6={0xa, 0x4e24, 0x6, @empty, 0x8}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x801) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r1, 0x8010aebc, &(0x7f0000000080)={0xddd8c000, 0x6000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000580)=@vmx={0x0, 0x0, 0x2080, {0x0, 0xd000, {}, 0x1, 0xffffffffffffffff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000890}, 0x4000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.476475062s ago: executing program 1 (id=584): syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) r3 = socket(0x10, 0x2, 0x4) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresuid(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x3, 0x2], [0x0, 0x0, 0x3], [0x4000000, 0xc, 0x0, 0x4]}) 1.521518157s ago: executing program 0 (id=585): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x80) r2 = dup3(r1, r0, 0x80000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40) read(r2, &(0x7f0000000680)=""/213, 0xd5) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000140)={0x8001, 0x5, 0x0, 0xffffffff, 0x15, "2ea98072973aefba56a9f8e8f77f20fbf5974a"}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040)=0x7f, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 1.459012918s ago: executing program 2 (id=586): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1.443547178s ago: executing program 4 (id=587): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) ioctl$TCSETSF(r1, 0x5404, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0', @ANYBLOB=',group_id', @ANYRESDEC=0x0]) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000080)}], 0x1, 0x5405, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') read$FUSE(r4, 0x0, 0x0) pread64(r4, &(0x7f00000011c0)=""/159, 0x9f, 0x1c0000000) socket$nl_rdma(0x10, 0x3, 0x14) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x7fffffffffffffff]}, 0x8, 0x80000) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x20000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r7, 0x1, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e", 0x60}]) memfd_create(&(0x7f0000000000)='\x02A\xbb\xcc\xeb\x14\x16\xe8m\x14oSaW', 0x0) read$FUSE(r4, &(0x7f00000032c0)={0x2020}, 0x2020) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1.182329292s ago: executing program 1 (id=588): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r5 = fsmount(r4, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r3, r5, 0x16, 0x0, @void}, 0x10) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x0) sendmmsg$sock(r0, 0x0, 0x0, 0x0) 1.032152693s ago: executing program 2 (id=589): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x6, 0x1e, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000029c0)={0x6, 0x8000005, 0x9}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340)="8d19b21e5d0c9600b6e29ae680d132e4c1fb44687e524a3303", 0x19) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000030900010073797a310000000054000000030a010400000000000000000100ffff0900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6f6163767461700000000900010073797a310000000064000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000040004800b00070066696c"], 0x330}}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x10001}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3, 0x2, 0x6}) close_range(r1, r4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x3, 0x80, 0x3}) 436.169985ms ago: executing program 0 (id=590): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004780)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x6, 0x1, [0x7]}, 0xa) 0s ago: executing program 1 (id=591): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0xe0, 0xc, 0xa, 0x301, 0x0, 0x0, {0xb, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc4, 0x3, 0x0, 0x1, [{0xc0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffffa}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_KEY={0x64, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x59, 0x1, "92a117490793255709cd81f647f8797a41a482d28e5a3cb8125b60d2eb31ba36458f15c59bdbf0622f74ccdd3ade2e9915a16e02f2d4af05aebc14377341f84cd8badc5508399971ae52dec5abc4c34f35f8ef68f6"}, @NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_KEY_END={0x2c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x108}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, &(0x7f0000000140)=ANY=[]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.69' (ED25519) to the list of known hosts. [ 91.986547][ T10] cfg80211: failed to load regulatory.db [ 92.342034][ T5584] cgroup: Unknown subsys name 'net' [ 92.564313][ T5584] cgroup: Unknown subsys name 'cpuset' [ 92.608015][ T5584] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.637823][ T5584] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 98.454333][ T5605] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.494976][ T5609] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.495739][ T5605] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.514772][ T5611] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.543949][ T5609] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.548438][ T5605] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.550839][ T5609] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.570332][ T5605] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.573962][ T5605] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.576129][ T5605] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.610771][ T5609] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.633662][ T5602] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.654467][ T5605] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.676273][ T5609] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.676608][ T5605] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.701833][ T5605] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.704047][ T5609] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.721706][ T5605] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.723165][ T5602] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.744002][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.825705][ T5602] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.851828][ T5602] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.853663][ T5602] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.856380][ T5602] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.892253][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 100.679088][ T5609] Bluetooth: hci3: command tx timeout [ 100.837272][ T59] Bluetooth: hci0: command tx timeout [ 100.837519][ T5609] Bluetooth: hci2: command tx timeout [ 100.918417][ T5609] Bluetooth: hci4: command tx timeout [ 100.998169][ T5609] Bluetooth: hci1: command tx timeout [ 101.701207][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.702506][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.702691][ T5600] bridge_slave_0: entered allmulticast mode [ 101.704961][ T5600] bridge_slave_0: entered promiscuous mode [ 101.789971][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.790081][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.790571][ T5600] bridge_slave_1: entered allmulticast mode [ 101.792730][ T5600] bridge_slave_1: entered promiscuous mode [ 101.953972][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.954096][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.954268][ T5597] bridge_slave_0: entered allmulticast mode [ 101.956398][ T5597] bridge_slave_0: entered promiscuous mode [ 102.035125][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.050044][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.050216][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.050371][ T5597] bridge_slave_1: entered allmulticast mode [ 102.052591][ T5597] bridge_slave_1: entered promiscuous mode [ 102.111268][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.111393][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.111757][ T5599] bridge_slave_0: entered allmulticast mode [ 102.113661][ T5599] bridge_slave_0: entered promiscuous mode [ 102.144087][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.171391][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.171514][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.171660][ T5598] bridge_slave_0: entered allmulticast mode [ 102.173658][ T5598] bridge_slave_0: entered promiscuous mode [ 102.212396][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.212522][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.212702][ T5599] bridge_slave_1: entered allmulticast mode [ 102.215040][ T5599] bridge_slave_1: entered promiscuous mode [ 102.268784][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.268922][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.269840][ T5598] bridge_slave_1: entered allmulticast mode [ 102.271683][ T5598] bridge_slave_1: entered promiscuous mode [ 102.274627][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.274779][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.274962][ T5596] bridge_slave_0: entered allmulticast mode [ 102.276910][ T5596] bridge_slave_0: entered promiscuous mode [ 102.377853][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.404365][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.404499][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.404628][ T5596] bridge_slave_1: entered allmulticast mode [ 102.406570][ T5596] bridge_slave_1: entered promiscuous mode [ 102.453392][ T5600] team0: Port device team_slave_0 added [ 102.466388][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.510942][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.513750][ T5600] team0: Port device team_slave_1 added [ 102.565661][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.599133][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.638205][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.641460][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.695257][ T5597] team0: Port device team_slave_0 added [ 102.717758][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.740938][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.740951][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.740970][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.746607][ T5597] team0: Port device team_slave_1 added [ 102.757312][ T5609] Bluetooth: hci3: command tx timeout [ 102.835614][ T5599] team0: Port device team_slave_0 added [ 102.836482][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.836498][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.836527][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.894793][ T5598] team0: Port device team_slave_0 added [ 102.916124][ T5599] team0: Port device team_slave_1 added [ 102.918412][ T5609] Bluetooth: hci2: command tx timeout [ 102.918445][ T5609] Bluetooth: hci0: command tx timeout [ 102.956377][ T5598] team0: Port device team_slave_1 added [ 102.964576][ T5596] team0: Port device team_slave_0 added [ 102.986741][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.986753][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.986773][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.997930][ T5609] Bluetooth: hci4: command tx timeout [ 103.059463][ T5596] team0: Port device team_slave_1 added [ 103.077266][ T5609] Bluetooth: hci1: command tx timeout [ 103.084778][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.084793][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.084815][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.157901][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.157915][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.157934][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.598969][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.598984][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.599003][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.654962][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.654981][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.655010][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.716720][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.716739][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.716787][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.726403][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.726448][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.726554][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.821946][ T5600] hsr_slave_0: entered promiscuous mode [ 103.823185][ T5600] hsr_slave_1: entered promiscuous mode [ 103.842046][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.842060][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.842079][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.991537][ T5597] hsr_slave_0: entered promiscuous mode [ 103.993160][ T5597] hsr_slave_1: entered promiscuous mode [ 103.994108][ T5597] debugfs: 'hsr0' already exists in 'hsr' [ 103.994200][ T5597] Cannot create hsr debugfs directory [ 104.083349][ T5599] hsr_slave_0: entered promiscuous mode [ 104.084615][ T5599] hsr_slave_1: entered promiscuous mode [ 104.085375][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 104.085394][ T5599] Cannot create hsr debugfs directory [ 104.129728][ T5598] hsr_slave_0: entered promiscuous mode [ 104.130786][ T5598] hsr_slave_1: entered promiscuous mode [ 104.131582][ T5598] debugfs: 'hsr0' already exists in 'hsr' [ 104.131605][ T5598] Cannot create hsr debugfs directory [ 104.186108][ T5596] hsr_slave_0: entered promiscuous mode [ 104.191131][ T5596] hsr_slave_1: entered promiscuous mode [ 104.194273][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 104.194353][ T5596] Cannot create hsr debugfs directory [ 104.847461][ T5609] Bluetooth: hci3: command tx timeout [ 104.997363][ T5609] Bluetooth: hci2: command tx timeout [ 104.997372][ T59] Bluetooth: hci0: command tx timeout [ 105.077479][ T5609] Bluetooth: hci4: command tx timeout [ 105.157453][ T5609] Bluetooth: hci1: command tx timeout [ 105.324233][ T5600] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.372636][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.385062][ T5600] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.410470][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.417051][ T5600] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.453788][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.484398][ T5600] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.512655][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.655285][ T5597] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.683718][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.686990][ T5597] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.734142][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.742410][ T5597] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.778901][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.822841][ T5597] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.863002][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.018867][ T5596] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.053935][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.066312][ T5596] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.093736][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.107680][ T5596] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.132096][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.165311][ T5596] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.191994][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.424811][ T5598] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.453813][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.470892][ T5598] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.534485][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.556008][ T5598] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.581083][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.652200][ T5598] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.671384][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.765662][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.872177][ T5599] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.912364][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.917299][ T5609] Bluetooth: hci3: command tx timeout [ 106.938567][ T5599] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.975043][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 107.006128][ T5599] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 107.037926][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 107.068614][ T5599] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 107.078494][ T5609] Bluetooth: hci2: command tx timeout [ 107.078542][ T5609] Bluetooth: hci0: command tx timeout [ 107.121119][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 107.142062][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.167575][ T59] Bluetooth: hci4: command tx timeout [ 107.216511][ T1050] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.216708][ T1050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.238674][ T59] Bluetooth: hci1: command tx timeout [ 107.255481][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.326293][ T1050] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.326409][ T1050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.443547][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.474756][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.475058][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.550483][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.586697][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.586836][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.702301][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.764492][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.779568][ T1050] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.779773][ T1050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.899746][ T1050] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.899939][ T1050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.036386][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.087844][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.164475][ T1050] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.164588][ T1050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.254715][ T1050] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.254860][ T1050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.371851][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.471558][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.471754][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.553285][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.553428][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.022340][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.615041][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.616904][ T5600] veth0_vlan: entered promiscuous mode [ 109.713255][ T5600] veth1_vlan: entered promiscuous mode [ 109.979487][ T5597] veth0_vlan: entered promiscuous mode [ 110.021729][ T5600] veth0_macvtap: entered promiscuous mode [ 110.077776][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.080985][ T5600] veth1_macvtap: entered promiscuous mode [ 110.139293][ T5597] veth1_vlan: entered promiscuous mode [ 110.182157][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.267586][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.336445][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.396434][ T66] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.446245][ T66] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.467888][ T66] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.484648][ T5597] veth0_macvtap: entered promiscuous mode [ 110.501020][ T66] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.532937][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.622151][ T5597] veth1_macvtap: entered promiscuous mode [ 110.639002][ T5596] veth0_vlan: entered promiscuous mode [ 110.782757][ T5598] veth0_vlan: entered promiscuous mode [ 110.794221][ T5596] veth1_vlan: entered promiscuous mode [ 110.942926][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.018647][ T5598] veth1_vlan: entered promiscuous mode [ 111.022985][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.128746][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.134354][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.178155][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.185816][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.243364][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.243392][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.384270][ T5596] veth0_macvtap: entered promiscuous mode [ 111.540706][ T5596] veth1_macvtap: entered promiscuous mode [ 111.584410][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.584430][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.673185][ T5598] veth0_macvtap: entered promiscuous mode [ 111.736469][ T5598] veth1_macvtap: entered promiscuous mode [ 111.930745][ T5599] veth0_vlan: entered promiscuous mode [ 111.949041][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.954300][ T1572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.954322][ T1572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.150718][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.203923][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.268335][ T5599] veth1_vlan: entered promiscuous mode [ 112.304961][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.305666][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.305685][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.305727][ T144] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.350401][ T144] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.357030][ T144] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.414758][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.458208][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.462777][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.571569][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.595200][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.188925][ T5599] veth0_macvtap: entered promiscuous mode [ 114.341821][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.341843][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.394201][ T5599] veth1_macvtap: entered promiscuous mode [ 114.568538][ T4317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.568561][ T4317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.649207][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.654898][ T1572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.654919][ T1572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.723945][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.118695][ T66] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.304477][ T5803] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 118.009912][ T66] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.019374][ T66] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.053057][ T66] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.053142][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.053157][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.965610][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.965634][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.281370][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.281393][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.748106][ T5837] syz.1.14 uses obsolete (PF_INET,SOCK_PACKET) [ 123.854438][ T5843] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 124.623712][ T5825] syz.0.12 (5825) used greatest stack depth: 19104 bytes left [ 125.779935][ T5855] overlayfs: failed to resolve './file1': -2 [ 128.451815][ T1251] IPVS: starting estimator thread 0... [ 128.537303][ T5861] IPVS: using max 10 ests per chain, 24000 per kthread [ 133.678214][ T5884] 9pnet_virtio: no channels available for device 127.0.0.1 [ 135.484884][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.484984][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.847179][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.867175][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.877159][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.887158][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.897155][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.907163][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.917156][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.927183][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.937162][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.947155][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 143.265400][ T59] Bluetooth: hci1: command tx timeout [ 144.821553][ T5929] syzkaller0: entered promiscuous mode [ 144.821577][ T5929] syzkaller0: entered allmulticast mode [ 147.564214][ T5962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.45'. [ 147.588487][ T5962] Zero length message leads to an empty skb [ 152.760227][ T5998] [U]  [ 158.066337][ T6028] netlink: 'syz.2.66': attribute type 4 has an invalid length. [ 158.084405][ T6028] nbd: must specify an index to disconnect [ 158.091009][ T6028] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.223686][ T6030] netlink: 20 bytes leftover after parsing attributes in process `syz.1.67'. [ 158.271973][ T6030] netlink: 20 bytes leftover after parsing attributes in process `syz.1.67'. [ 158.274512][ T66] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.298921][ T66] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.298964][ T66] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.298991][ T66] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.658079][ T6040] binder_alloc: 6037: binder_alloc_buf, no vma [ 159.149786][ T6051] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.73'. [ 162.488821][ T6070] netlink: 'syz.2.80': attribute type 4 has an invalid length. [ 162.493911][ T6070] nbd: must specify an index to disconnect [ 162.496437][ T6070] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.929734][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.85'. [ 164.015326][ T6086] fuse: fd is not a fuse device [ 166.180603][ T5740] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 166.407267][ T5740] usb 1-1: Using ep0 maxpacket: 16 [ 168.065559][ T5740] usb 1-1: unable to read config index 0 descriptor/all [ 168.065594][ T5740] usb 1-1: can't read configurations, error -71 [ 168.348647][ T6115] netlink: 'syz.1.95': attribute type 4 has an invalid length. [ 168.352762][ T6115] nbd: must specify an index to disconnect [ 168.354406][ T6115] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.372759][ T6125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.99'. [ 172.857308][ T5740] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 173.050555][ T5740] usb 5-1: Using ep0 maxpacket: 16 [ 173.053138][ T5740] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.055579][ T5740] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 173.055601][ T5740] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.055616][ T5740] usb 5-1: Product: syz [ 173.055626][ T5740] usb 5-1: Manufacturer: syz [ 173.055637][ T5740] usb 5-1: SerialNumber: syz [ 173.090311][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.104'. [ 173.484099][ T5740] usb 5-1: config 0 descriptor?? [ 173.683592][ T6153] fuse: Bad value for 'fd' [ 175.589627][ T5973] usb 5-1: USB disconnect, device number 2 [ 175.816896][ T6167] netlink: 'syz.3.111': attribute type 4 has an invalid length. [ 175.832942][ T6167] nbd: must specify an index to disconnect [ 175.836927][ T6167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.601537][ T6177] [U]  [ 177.675972][ T6182] warning: `syz.2.115' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 181.932792][ T6212] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 183.757382][ T6235] [U]  [ 183.801853][ T6237] fuse: Unknown parameter 'group_id00000000000000000000' [ 183.880971][ T6235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.132'. [ 185.996191][ T6253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.137'. [ 186.389466][ T6257] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 189.422797][ T6288] fuse: fd is not a fuse device [ 189.467240][ T5733] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 189.637226][ T5733] usb 5-1: Using ep0 maxpacket: 8 [ 189.653584][ T5733] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 189.653620][ T5733] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.653641][ T5733] usb 5-1: Product: syz [ 189.653652][ T5733] usb 5-1: Manufacturer: syz [ 189.653662][ T5733] usb 5-1: SerialNumber: syz [ 189.657290][ T5740] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 189.700076][ T5733] usb 5-1: config 0 descriptor?? [ 189.805021][ T6290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.147'. [ 189.889711][ T5740] usb 2-1: unable to get BOS descriptor or descriptor too short [ 189.947862][ T5733] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 189.988132][ T5740] usb 2-1: not running at top speed; connect to a high speed hub [ 190.401500][ T5740] usb 2-1: string descriptor 0 read error: -22 [ 190.401653][ T5740] usb 2-1: New USB device found, idVendor=0582, idProduct=0114, bcdDevice= 0.40 [ 190.401678][ T5740] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.192626][ T5733] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 191.329003][ T5733] usb 5-1: USB disconnect, device number 3 [ 191.357373][ T6278] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 191.600902][ T5740] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 191.600974][ T5740] usb 2-1: MIDIStreaming interface descriptor not found [ 192.756874][ T5740] usb 2-1: USB disconnect, device number 2 [ 193.884241][ T6326] fuse: Bad value for 'user_id' [ 193.884270][ T6326] fuse: Bad value for 'user_id' [ 194.765717][ T37] audit: type=1107 audit(1779677327.142:2): pid=6333 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 198.498754][ T6353] [U]  [ 198.601897][ T6353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.164'. [ 200.527959][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.532078][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.062188][ T6378] fuse: Bad value for 'user_id' [ 202.062204][ T6378] fuse: Bad value for 'user_id' [ 202.097375][ T5718] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 202.247257][ T5718] usb 2-1: Using ep0 maxpacket: 16 [ 202.250901][ T5718] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 202.255826][ T5718] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 202.255859][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.255882][ T5718] usb 2-1: Product: syz [ 202.255898][ T5718] usb 2-1: Manufacturer: syz [ 202.255913][ T5718] usb 2-1: SerialNumber: syz [ 202.341202][ T5718] usb 2-1: config 0 descriptor?? [ 204.637010][ T6100] usb 2-1: USB disconnect, device number 3 [ 204.696200][ T6419] [U]  [ 204.792533][ T6421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.181'. [ 204.907016][ T6426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.183'. [ 205.040860][ T6429] fuse: Bad value for 'fd' [ 209.737837][ T5863] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 209.887363][ T5863] usb 1-1: Using ep0 maxpacket: 32 [ 209.890492][ T5863] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 209.890523][ T5863] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 209.890546][ T5863] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 209.890569][ T5863] usb 1-1: config 1 has no interface number 0 [ 209.890616][ T5863] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 209.890646][ T5863] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 209.890690][ T5863] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 209.890715][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.312892][ T6453] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.314007][ T6453] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.457276][ T5863] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 210.614501][ T5863] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 210.750840][ T6453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.755831][ T6453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.075759][ T6463] [U]  [ 211.122768][ T5733] usb 1-1: USB disconnect, device number 4 [ 211.200969][ T5733] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 211.223158][ T6465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.195'. [ 211.721086][ T2179] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.725390][ T2179] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.725441][ T2179] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.725481][ T2179] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.937711][ T6468] netlink: 12 bytes leftover after parsing attributes in process `syz.4.196'. [ 218.282364][ T6515] [U]  [ 218.402020][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.211'. [ 220.659402][ T6531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.119691][ T5609] Bluetooth: hci3: command 0x0406 tx timeout [ 222.120349][ T59] Bluetooth: hci2: command tx timeout [ 222.199860][ T5609] Bluetooth: hci4: command 0x0406 tx timeout [ 222.199897][ T5609] Bluetooth: hci0: command 0x0406 tx timeout [ 222.808591][ T6545] ======================================================= [ 222.808591][ T6545] WARNING: The mand mount option has been deprecated and [ 222.808591][ T6545] and is ignored by this kernel. Remove the mand [ 222.808591][ T6545] option from the mount to silence this warning. [ 222.808591][ T6545] ======================================================= [ 223.197381][ T5973] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 223.358094][ T5973] usb 2-1: Using ep0 maxpacket: 32 [ 223.387342][ T5973] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 223.436141][ T5973] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 223.436175][ T5973] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 223.436195][ T5973] usb 2-1: Product: syz [ 223.436210][ T5973] usb 2-1: Manufacturer: syz [ 223.436224][ T5973] usb 2-1: SerialNumber: syz [ 223.660860][ T5973] usb 2-1: config 0 descriptor?? [ 223.674776][ T6547] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 225.301238][ T5973] usb 2-1: USB disconnect, device number 4 [ 226.363716][ T6565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.359286][ T6587] netlink: 64 bytes leftover after parsing attributes in process `syz.1.234'. [ 232.870855][ T5713] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 233.027345][ T5713] usb 5-1: Using ep0 maxpacket: 32 [ 233.032409][ T5713] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 233.032441][ T5713] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 233.032463][ T5713] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 233.032486][ T5713] usb 5-1: config 1 has no interface number 0 [ 233.032533][ T5713] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 233.032561][ T5713] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 233.032605][ T5713] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 233.032628][ T5713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.315534][ T5713] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 233.511777][ T5713] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 234.132942][ T6618] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 234.353407][ T5863] usb 5-1: USB disconnect, device number 4 [ 234.369396][ T5863] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 234.502195][ T6619] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 241.278417][ T5740] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 241.962701][ T5740] usb 2-1: Using ep0 maxpacket: 16 [ 242.083217][ T5740] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 242.083242][ T5740] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 242.126326][ T5740] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 242.126350][ T5740] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.126365][ T5740] usb 2-1: Product: syz [ 242.126375][ T5740] usb 2-1: Manufacturer: syz [ 242.126386][ T5740] usb 2-1: SerialNumber: syz [ 242.248714][ T5740] usb 2-1: config 0 descriptor?? [ 242.263326][ T5740] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 242.263353][ T5740] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 242.970828][ T5740] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 242.990478][ T5740] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 243.902588][ T5740] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 243.902612][ T5740] em28xx 2-1:0.0: No AC97 audio processor [ 244.363727][ T9] usb 2-1: USB disconnect, device number 5 [ 244.366721][ T9] em28xx 2-1:0.0: Disconnecting em28xx [ 246.702666][ T9] em28xx 2-1:0.0: Freeing device [ 246.866202][ T6686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.263'. [ 255.198619][ T6721] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 257.744525][ T6729] netlink: 24 bytes leftover after parsing attributes in process `syz.3.277'. [ 258.947262][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 260.226326][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 260.885592][ T9] usb 1-1: device descriptor read/all, error -71 [ 260.955057][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.955126][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.652581][ T6754] lo speed is unknown, defaulting to 1000 [ 262.654816][ T6754] lo speed is unknown, defaulting to 1000 [ 262.711388][ T6754] lo speed is unknown, defaulting to 1000 [ 262.751573][ T6754] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 262.751638][ T6754] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 262.751736][ T6754] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 262.822340][ T6754] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 262.991972][ T6754] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 263.333193][ T6754] lo speed is unknown, defaulting to 1000 [ 263.335445][ T6754] lo speed is unknown, defaulting to 1000 [ 263.339259][ T6754] lo speed is unknown, defaulting to 1000 [ 263.341370][ T6754] lo speed is unknown, defaulting to 1000 [ 263.343280][ T6754] lo speed is unknown, defaulting to 1000 [ 268.399121][ T6798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.297'. [ 269.057206][ T821] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 269.257295][ T821] usb 1-1: Using ep0 maxpacket: 16 [ 269.261270][ T821] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 269.261320][ T821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 269.337183][ T821] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 269.337216][ T821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.337237][ T821] usb 1-1: Product: syz [ 269.337252][ T821] usb 1-1: Manufacturer: syz [ 269.337267][ T821] usb 1-1: SerialNumber: syz [ 269.699433][ T821] usb 1-1: config 0 descriptor?? [ 269.724195][ T821] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 269.724233][ T821] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 270.501684][ T821] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 270.503640][ T821] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 270.505315][ T821] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 270.505336][ T821] em28xx 1-1:0.0: No AC97 audio processor [ 272.150619][ T5973] usb 1-1: USB disconnect, device number 7 [ 272.171897][ T5973] em28xx 1-1:0.0: Disconnecting em28xx [ 272.220043][ T6840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.310'. [ 272.240012][ T5973] em28xx 1-1:0.0: Freeing device [ 272.610494][ T6847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.315'. [ 273.291115][ T6847] 8021q: adding VLAN 0 to HW filter on device bond1 [ 273.563417][ T6850] 8021q: adding VLAN 0 to HW filter on device bond1 [ 273.565449][ T6850] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 273.566747][ T6850] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 278.387284][ T5973] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 278.601267][ T5973] usb 2-1: Using ep0 maxpacket: 32 [ 278.629640][ T5973] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 278.629662][ T5973] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 278.629677][ T5973] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 278.629692][ T5973] usb 2-1: config 1 has no interface number 0 [ 278.629736][ T5973] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 278.629755][ T5973] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 278.629786][ T5973] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 278.629802][ T5973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.765008][ T5973] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 279.890725][ T5973] snd_usb_pod 2-1:1.1: set_interface failed [ 279.890955][ T5973] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 279.955060][ T5973] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 280.001152][ T5973] usb 2-1: USB disconnect, device number 6 [ 286.712821][ T5713] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 287.897417][ T5973] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 287.992671][ T5713] usb 5-1: Using ep0 maxpacket: 16 [ 288.015354][ T5713] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 288.015388][ T5713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 288.075281][ T5713] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 288.075314][ T5713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.075335][ T5713] usb 5-1: Product: syz [ 288.075350][ T5713] usb 5-1: Manufacturer: syz [ 288.075366][ T5713] usb 5-1: SerialNumber: syz [ 288.127973][ T5973] usb 1-1: Using ep0 maxpacket: 32 [ 288.132433][ T5973] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 288.132463][ T5973] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 288.132486][ T5973] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 288.132508][ T5973] usb 1-1: config 1 has no interface number 0 [ 288.132555][ T5973] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 288.132588][ T5973] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 288.132643][ T5973] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 288.132668][ T5973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.221100][ T5713] usb 5-1: config 0 descriptor?? [ 288.268644][ T5713] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 288.268676][ T5713] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 288.323595][ T5973] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 288.553150][ T5973] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 288.834681][ T5713] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 288.849177][ T5713] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 288.855345][ T5713] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 288.855990][ T5713] em28xx 5-1:0.0: No AC97 audio processor [ 288.958041][ T4925] usb 1-1: USB disconnect, device number 8 [ 289.575570][ T5713] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 289.848703][ T4925] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 289.994867][ T5863] usb 5-1: USB disconnect, device number 5 [ 290.058854][ T5863] em28xx 5-1:0.0: Disconnecting em28xx [ 290.130826][ T5863] em28xx 5-1:0.0: Freeing device [ 290.406771][ T6946] tipc: Started in network mode [ 290.406807][ T6946] tipc: Node identity 4eadd69e7029, cluster identity 4711 [ 290.429091][ T6946] tipc: Enabled bearer , priority 0 [ 290.436460][ T6946] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 290.607899][ T6946] tipc: Resetting bearer [ 290.617160][ T5973] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 290.820102][ T5973] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 290.820135][ T5973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.820156][ T5973] usb 1-1: Product: syz [ 290.820170][ T5973] usb 1-1: Manufacturer: syz [ 290.820185][ T5973] usb 1-1: SerialNumber: syz [ 290.874120][ T5973] usb 1-1: config 0 descriptor?? [ 290.895938][ T6945] tipc: Disabling bearer [ 291.353851][ T5973] usb 1-1: ignoring: probably an ADSL modem [ 292.259152][ T5973] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 292.346229][ T5973] usb 1-1: USB disconnect, device number 9 [ 292.679134][ T5713] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 292.866436][ T5713] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 292.866468][ T5713] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 292.866487][ T5713] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 292.866529][ T5713] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 292.866548][ T5713] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 292.877174][ T5713] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 292.877206][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 292.877227][ T5713] usb 2-1: Product: syz [ 292.877243][ T5713] usb 2-1: Manufacturer: syz [ 292.965750][ T5713] cdc_wdm 2-1:1.0: skipping garbage [ 292.965772][ T5713] cdc_wdm 2-1:1.0: skipping garbage [ 293.015821][ T5713] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 293.015856][ T5713] cdc_wdm 2-1:1.0: Unknown control protocol [ 293.278277][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 293.278412][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 293.278672][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 293.278693][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 293.278926][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 293.278947][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 293.279191][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 293.279212][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 293.282068][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 293.282090][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 293.282321][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 293.282338][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 293.282559][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 293.282576][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 293.282790][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 293.282805][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 293.283796][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 293.283817][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 293.284049][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 293.284069][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 293.432410][ T5863] usb 2-1: USB disconnect, device number 7 [ 293.432593][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 293.512002][ T6955] cdc_wdm 2-1:1.0: Tx URB error: -19 [ 293.817217][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 293.939385][ T6966] lo speed is unknown, defaulting to 1000 [ 293.978434][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 293.996291][ T9] usb 1-1: config 0 has no interfaces? [ 294.043721][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 294.043755][ T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 294.043775][ T9] usb 1-1: Manufacturer: syz [ 294.131571][ T9] usb 1-1: config 0 descriptor?? [ 294.345265][ T6969] netlink: 36 bytes leftover after parsing attributes in process `syz.0.352'. [ 295.786755][ T6990] netlink: 'syz.2.360': attribute type 10 has an invalid length. [ 296.201220][ T9] usb 1-1: USB disconnect, device number 10 [ 296.867180][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 297.017188][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 297.026221][ T9] usb 1-1: config 0 has no interfaces? [ 297.026262][ T9] usb 1-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 297.026288][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.086032][ T9] usb 1-1: config 0 descriptor?? [ 297.542791][ T9] usb 1-1: USB disconnect, device number 11 [ 298.313479][ T7036] Set syz0 is full, maxelem 0 reached [ 299.460477][ T5587] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 299.617223][ T5587] usb 2-1: Using ep0 maxpacket: 16 [ 299.619780][ T5587] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.619808][ T5587] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 299.622379][ T5587] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 299.622412][ T5587] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.622427][ T5587] usb 2-1: Product: syz [ 299.622438][ T5587] usb 2-1: Manufacturer: syz [ 299.622448][ T5587] usb 2-1: SerialNumber: syz [ 299.749188][ T5587] usb 2-1: 0:2 : does not exist [ 299.970762][ T7069] futex_wake_op: syz.0.388 tries to shift op by 144; fix this program [ 300.434163][ T7069] lo speed is unknown, defaulting to 1000 [ 301.236955][ T5587] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 301.345331][ T5587] usb 2-1: USB disconnect, device number 8 [ 301.906718][ T5936] udevd[5936]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 306.808915][ T7115] syzkaller1: entered promiscuous mode [ 306.808945][ T7115] syzkaller1: entered allmulticast mode [ 308.266850][ T5607] Bluetooth: hci3: unexpected event for opcode 0x4889 [ 308.457194][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 308.607214][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 308.609690][ T9] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 308.609719][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.609741][ T9] usb 5-1: config 0 has no interface number 0 [ 308.609790][ T9] usb 5-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 308.609819][ T9] usb 5-1: config 0 interface 12 has no altsetting 0 [ 308.613292][ T9] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 308.613331][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.613352][ T9] usb 5-1: Product: syz [ 308.613367][ T9] usb 5-1: Manufacturer: syz [ 308.613383][ T9] usb 5-1: SerialNumber: syz [ 308.774763][ T9] usb 5-1: config 0 descriptor?? [ 308.808004][ T9] f81534 5-1:0.12: required endpoints missing [ 309.527347][ T7139] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 311.188302][ T7152] Bluetooth: MGMT ver 1.23 [ 312.308080][ T7171] syzkaller1: entered promiscuous mode [ 312.308108][ T7171] syzkaller1: entered allmulticast mode [ 312.850672][ T5713] usb 5-1: USB disconnect, device number 6 [ 313.955051][ T7184] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 314.472617][ T7195] capability: warning: `syz.1.429' uses 32-bit capabilities (legacy support in use) [ 314.777201][ T5863] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 314.888709][ T7199] [U]  [ 314.927189][ T5863] usb 1-1: Using ep0 maxpacket: 32 [ 314.929553][ T5863] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 314.929582][ T5863] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 314.929604][ T5863] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 314.929656][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 314.929681][ T5863] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 314.929724][ T5863] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 314.929769][ T5863] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 314.929804][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.029719][ T5863] usb 1-1: config 0 descriptor?? [ 315.183449][ T7201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.430'. [ 315.349846][ T5863] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 315.399982][ T5863] usb 1-1: USB disconnect, device number 12 [ 315.573487][ T5863] usblp0: removed [ 315.673041][ T7206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.137245][ T5863] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 316.308718][ T5863] usb 1-1: Using ep0 maxpacket: 32 [ 316.325556][ T5863] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 316.325587][ T5863] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 316.325609][ T5863] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 316.325677][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 316.325702][ T5863] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 316.325728][ T5863] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 316.325783][ T5863] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 316.325809][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.368276][ T5863] usb 1-1: config 0 descriptor?? [ 316.695121][ T5863] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 316.885082][ T5863] usb 1-1: USB disconnect, device number 13 [ 317.012251][ T5863] usblp0: removed [ 318.168716][ T7232] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 318.596631][ T7236] [U]  [ 318.950979][ T7241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.441'. [ 320.431452][ T7254] syz.1.446 (7254) used greatest stack depth: 17408 bytes left [ 321.117182][ T5973] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 321.277139][ T5973] usb 2-1: Using ep0 maxpacket: 16 [ 321.280983][ T5973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 321.284631][ T5973] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 321.284663][ T5973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.284685][ T5973] usb 2-1: Product: syz [ 321.284700][ T5973] usb 2-1: Manufacturer: syz [ 321.284716][ T5973] usb 2-1: SerialNumber: syz [ 321.356828][ T5973] usb 2-1: config 0 descriptor?? [ 321.394897][ T5973] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 321.394935][ T5973] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 322.873860][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.873934][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.989454][ T5973] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 324.325789][ T7291] ceph: No mds server is up or the cluster is laggy [ 324.413912][ T36] libceph: connect (1)[c::]:6789 error -101 [ 324.414545][ T36] libceph: mon0 (1)[c::]:6789 connect error [ 324.689194][ T5973] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 324.689229][ T5973] em28xx 2-1:0.0: board has no eeprom [ 324.767161][ T5973] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 324.767192][ T5973] em28xx 2-1:0.0: dvb set to bulk mode. [ 324.767283][ T36] em28xx 2-1:0.0: Binding DVB extension [ 324.851386][ T5973] usb 2-1: USB disconnect, device number 9 [ 324.875212][ T5973] em28xx 2-1:0.0: Disconnecting em28xx [ 325.812425][ T7308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.459'. [ 325.855198][ T7305] vlan2: entered promiscuous mode [ 325.855222][ T7305] bridge0: entered promiscuous mode [ 325.887314][ T36] em28xx 2-1:0.0: Registering input extension [ 325.887618][ T5973] em28xx 2-1:0.0: Closing input extension [ 326.178127][ T7314] netlink: 'syz.1.465': attribute type 4 has an invalid length. [ 326.179708][ T7314] nbd: must specify an index to disconnect [ 326.412556][ T5973] em28xx 2-1:0.0: Freeing device [ 327.860998][ T7340] trusted_key: encrypted_key: master key parameter 'BìÞ' is invalid [ 328.458973][ T7347] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 328.588397][ T7352] netlink: 'syz.3.479': attribute type 4 has an invalid length. [ 328.590278][ T7352] nbd: must specify an index to disconnect [ 330.318728][ T5973] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 330.469602][ T5973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 330.473290][ T5973] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 330.473332][ T5973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.473354][ T5973] usb 2-1: Product: syz [ 330.473370][ T5973] usb 2-1: Manufacturer: syz [ 330.473385][ T5973] usb 2-1: SerialNumber: syz [ 330.545116][ T5973] usb 2-1: config 0 descriptor?? [ 330.849917][ T5973] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-8 [ 330.850027][ T5973] dvb_usb_af9035 2-1:0.0: probe with driver dvb_usb_af9035 failed with error -8 [ 330.963543][ T5973] usb 2-1: USB disconnect, device number 10 [ 332.513356][ T7391] lo speed is unknown, defaulting to 1000 [ 336.356170][ T7407] fuse: Unknown parameter '0x0000000000000003' [ 337.049658][ T7417] tipc: Enabled bearer , priority 0 [ 337.050428][ T7417] syzkaller0: entered promiscuous mode [ 337.050446][ T7417] syzkaller0: entered allmulticast mode [ 337.094511][ T7417] tipc: Resetting bearer [ 337.128316][ T7416] tipc: Resetting bearer [ 338.455641][ T7416] tipc: Disabling bearer [ 338.650528][ T31] tipc: Node number set to 1048893086 [ 339.641960][ T9] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 339.819863][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30 [ 339.819914][ T9] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 339.819944][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 339.819979][ T9] usb 5-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 339.820004][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.952974][ T9] usb 5-1: config 0 descriptor?? [ 340.575651][ T9] lenovo 0003:17EF:60EE.0001: unknown main item tag 0x2 [ 340.575695][ T9] lenovo 0003:17EF:60EE.0001: unknown main item tag 0x6 [ 340.576115][ T9] lenovo 0003:17EF:60EE.0001: ignoring exceeding usage max [ 340.702061][ T9] lenovo 0003:17EF:60EE.0001: hidraw0: USB HID v0.81 Device [HID 17ef:60ee] on usb-dummy_hcd.4-1/input0 [ 341.256071][ T7453] fuse: Unknown parameter '0x0000000000000003' [ 341.339470][ T9] usb 5-1: USB disconnect, device number 7 [ 342.891591][ T7468] tipc: Enabling of bearer rejected, failed to enable media [ 345.316262][ T7491] netlink: 12 bytes leftover after parsing attributes in process `syz.0.518'. [ 345.521127][ T36] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 345.679380][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 345.681843][ T36] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 345.681882][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.681904][ T36] usb 5-1: Product: syz [ 345.681919][ T36] usb 5-1: Manufacturer: syz [ 345.681934][ T36] usb 5-1: SerialNumber: syz [ 345.737159][ T36] usb 5-1: config 0 descriptor?? [ 345.953066][ T36] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-8 [ 345.953166][ T36] dvb_usb_af9035 5-1:0.0: probe with driver dvb_usb_af9035 failed with error -8 [ 346.002757][ T36] usb 5-1: USB disconnect, device number 8 [ 356.091952][ T7552] vivid-003: disconnect [ 356.941951][ T7551] vivid-003: reconnect [ 358.943122][ T7587] syzkaller1: entered promiscuous mode [ 358.943143][ T7587] syzkaller1: entered allmulticast mode [ 358.966258][ T7587] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96 [ 362.283065][ T5863] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 362.437235][ T5863] usb 1-1: Using ep0 maxpacket: 16 [ 362.459901][ T5863] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 362.459930][ T5863] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 362.463322][ T5863] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 362.463353][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.463375][ T5863] usb 1-1: Product: syz [ 362.463390][ T5863] usb 1-1: Manufacturer: syz [ 362.463405][ T5863] usb 1-1: SerialNumber: syz [ 362.617264][ T5863] usb 1-1: 0:2 : does not exist [ 364.569719][ T5863] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 366.262457][ T5863] usb 1-1: USB disconnect, device number 14 [ 366.467337][ T7623] tipc: Enabling of bearer rejected, failed to enable media [ 366.538129][ T7617] syz.1.562 (7617) used greatest stack depth: 17088 bytes left [ 366.900794][ T5936] udevd[5936]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 367.068180][ T7637] syzkaller1: entered promiscuous mode [ 367.068209][ T7637] syzkaller1: entered allmulticast mode [ 368.647275][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 368.797136][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 368.800074][ T9] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 368.800111][ T9] usb 5-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 368.800138][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 368.800176][ T9] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 368.800193][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.806936][ T9] usb 5-1: config 0 descriptor?? [ 369.297257][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 369.297396][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 369.356685][ T9] usb 5-1: USB disconnect, device number 9 [ 369.450236][ T7657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.958546][ T7680] tipc: Enabled bearer , priority 0 [ 371.962321][ T7683] syzkaller0: entered promiscuous mode [ 371.962349][ T7683] syzkaller0: entered allmulticast mode [ 372.115801][ T7677] tipc: Resetting bearer [ 372.295315][ T7675] tipc: Resetting bearer [ 372.678961][ T7675] tipc: Disabling bearer [ 376.277237][ T5713] ------------[ cut here ]------------ [ 376.277253][ T5713] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 376.277279][ T5713] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x357/0x500, CPU#1: kworker/1:4/5713 [ 376.277329][ T5713] Modules linked in: [ 376.277372][ T5713] CPU: 1 UID: 0 PID: 5713 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 376.277417][ T5713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 376.277432][ T5713] Workqueue: events drm_fb_helper_damage_work [ 376.277562][ T5713] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 376.277624][ T5713] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 ba 4a d0 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 376.277673][ T5713] RSP: 0018:ffffc900050778c0 EFLAGS: 00010246 [ 376.277719][ T5713] RAX: 1ffff11004c33000 RBX: ffffffff8f941e40 RCX: 0000000000000000 [ 376.277734][ T5713] RDX: ffffffff8bc05880 RSI: ffffffff8bc21fa0 RDI: ffffffff8f941e40 [ 376.277750][ T5713] RBP: ffffc900050779a8 R08: 0000000000000000 R09: 0000000000000000 [ 376.277763][ T5713] R10: dffffc0000000000 R11: fffffbfff1f1225f R12: ffffffff8bc21fa0 [ 376.277779][ T5713] R13: ffff888026198000 R14: 0000000000000000 R15: ffffffff8bc05880 [ 376.277794][ T5713] FS: 0000000000000000(0000) GS:ffff888126270000(0000) knlGS:0000000000000000 [ 376.277811][ T5713] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 376.277825][ T5713] CR2: 00007fb31b165d58 CR3: 00000000388f6000 CR4: 00000000003526f0 [ 376.277844][ T5713] Call Trace: [ 376.277878][ T5713] [ 376.277954][ T5713] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 376.278029][ T5713] ? __pfx_autoremove_wake_function+0x10/0x10 [ 376.278095][ T5713] ? drm_client_modeset_wait_for_vblank+0xbd/0xf0 [ 376.278149][ T5713] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 376.278176][ T5713] drm_fb_helper_damage_work+0x131/0x6f0 [ 376.278208][ T5713] ? process_scheduled_works+0xa70/0x1860 [ 376.278274][ T5713] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 376.278304][ T5713] ? preempt_schedule_thunk+0x16/0x30 [ 376.278367][ T5713] ? process_scheduled_works+0xa70/0x1860 [ 376.278390][ T5713] ? process_scheduled_works+0xa70/0x1860 [ 376.278418][ T5713] process_scheduled_works+0xb5d/0x1860 [ 376.278481][ T5713] ? __pfx_process_scheduled_works+0x10/0x10 [ 376.278516][ T5713] ? assign_work+0x3d5/0x5e0 [ 376.278547][ T5713] worker_thread+0xa53/0xfc0 [ 376.278639][ T5713] kthread+0x388/0x470 [ 376.278701][ T5713] ? __pfx_worker_thread+0x10/0x10 [ 376.278725][ T5713] ? __pfx_kthread+0x10/0x10 [ 376.278757][ T5713] ret_from_fork+0x514/0xb70 [ 376.278799][ T5713] ? __pfx_ret_from_fork+0x10/0x10 [ 376.278825][ T5713] ? __switch_to+0xc79/0x1410 [ 376.278863][ T5713] ? __pfx_kthread+0x10/0x10 [ 376.278894][ T5713] ret_from_fork_asm+0x1a/0x30 [ 376.278955][ T5713] [ 376.278967][ T5713] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 376.278990][ T5713] CPU: 1 UID: 0 PID: 5713 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 376.279014][ T5713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 376.279029][ T5713] Workqueue: events drm_fb_helper_damage_work [ 376.279062][ T5713] Call Trace: [ 376.279071][ T5713] [ 376.279080][ T5713] vpanic+0x56c/0xa60 [ 376.279117][ T5713] ? __pfx__printk+0x10/0x10 [ 376.279151][ T5713] ? __pfx_vpanic+0x10/0x10 [ 376.279181][ T5713] ? is_bpf_text_address+0x292/0x2b0 [ 376.279269][ T5713] ? is_bpf_text_address+0x26/0x2b0 [ 376.279311][ T5713] panic+0xc5/0xd0 [ 376.279343][ T5713] ? __pfx_panic+0x10/0x10 [ 376.279383][ T5713] ? ret_from_fork_asm+0x1a/0x30 [ 376.279424][ T5713] __warn+0x315/0x4c0 [ 376.279450][ T5713] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 376.279480][ T5713] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 376.279509][ T5713] __report_bug+0x29a/0x540 [ 376.279653][ T5713] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 376.279688][ T5713] ? __pfx___report_bug+0x10/0x10 [ 376.279743][ T5713] report_bug_entry+0x19a/0x290 [ 376.279775][ T5713] ? drm_crtc_wait_one_vblank+0x4b6/0x500 [ 376.279800][ T5713] ? drm_crtc_wait_one_vblank+0x4bb/0x500 [ 376.279832][ T5713] handle_bug+0xce/0x200 [ 376.279887][ T5713] exc_invalid_op+0x1a/0x50 [ 376.279910][ T5713] asm_exc_invalid_op+0x1a/0x20 [ 376.279960][ T5713] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 376.279989][ T5713] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 ba 4a d0 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 376.280007][ T5713] RSP: 0018:ffffc900050778c0 EFLAGS: 00010246 [ 376.280026][ T5713] RAX: 1ffff11004c33000 RBX: ffffffff8f941e40 RCX: 0000000000000000 [ 376.280043][ T5713] RDX: ffffffff8bc05880 RSI: ffffffff8bc21fa0 RDI: ffffffff8f941e40 [ 376.280061][ T5713] RBP: ffffc900050779a8 R08: 0000000000000000 R09: 0000000000000000 [ 376.280076][ T5713] R10: dffffc0000000000 R11: fffffbfff1f1225f R12: ffffffff8bc21fa0 [ 376.280093][ T5713] R13: ffff888026198000 R14: 0000000000000000 R15: ffffffff8bc05880 [ 376.280134][ T5713] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 376.280164][ T5713] ? __pfx_autoremove_wake_function+0x10/0x10 [ 376.280198][ T5713] ? drm_client_modeset_wait_for_vblank+0xbd/0xf0 [ 376.280230][ T5713] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 376.280255][ T5713] drm_fb_helper_damage_work+0x131/0x6f0 [ 376.280286][ T5713] ? process_scheduled_works+0xa70/0x1860 [ 376.280316][ T5713] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 376.280346][ T5713] ? preempt_schedule_thunk+0x16/0x30 [ 376.280381][ T5713] ? process_scheduled_works+0xa70/0x1860 [ 376.280406][ T5713] ? process_scheduled_works+0xa70/0x1860 [ 376.280434][ T5713] process_scheduled_works+0xb5d/0x1860 [ 376.280495][ T5713] ? __pfx_process_scheduled_works+0x10/0x10 [ 376.280530][ T5713] ? assign_work+0x3d5/0x5e0 [ 376.280561][ T5713] worker_thread+0xa53/0xfc0 [ 376.280618][ T5713] kthread+0x388/0x470 [ 376.280649][ T5713] ? __pfx_worker_thread+0x10/0x10 [ 376.280672][ T5713] ? __pfx_kthread+0x10/0x10 [ 376.280705][ T5713] ret_from_fork+0x514/0xb70 [ 376.280734][ T5713] ? __pfx_ret_from_fork+0x10/0x10 [ 376.280760][ T5713] ? __switch_to+0xc79/0x1410 [ 376.280800][ T5713] ? __pfx_kthread+0x10/0x10 [ 376.280832][ T5713] ret_from_fork_asm+0x1a/0x30 [ 376.280879][ T5713] [ 376.281507][ T5713] Kernel Offset: disabled