last executing test programs: 23.611007176s ago: executing program 3 (id=911): socket$nl_netfilter(0x10, 0x3, 0xc) chdir(&(0x7f0000000000)='./cgroup\x00') read$FUSE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, 0x0, 0x8000) syz_open_dev$dri(0x0, 0x1, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) inotify_init() renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 23.30899515s ago: executing program 3 (id=913): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300), &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[r1, r2, 0x0], 0x3, 0x80000}) 23.034433075s ago: executing program 3 (id=915): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000400)=[{{0x2, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x4, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x2, 0x1, 0x1, 0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x3}}, {{0x2, 0x1, 0x1}, {0x2}}], 0x30) close(r4) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}]) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[], 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) 19.438425886s ago: executing program 3 (id=920): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7fff, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, 0x0) 19.256309532s ago: executing program 3 (id=922): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}, {}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) pipe(&(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2a7, 0x2000000000003ff, 0x2], 0x0, 0x200306}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18.116566434s ago: executing program 3 (id=935): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r3, 0x400454a4, &(0x7f0000000080)) syz_usb_disconnect(0xffffffffffffffff) madvise(&(0x7f0000569000/0x1000)=nil, 0x1000, 0x15) r5 = gettid() timer_create(0x3, &(0x7f0000000040)={0x0, 0x1a, 0x4, @tid=r5}, &(0x7f0000000000)) timer_settime(0x0, 0x236bd4336e4642df, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000280)={0x1d8, r1, 'id0\x00'}) io_uring_enter(r6, 0xe49, 0x4117, 0x49, 0x0, 0x0) dup(r1) r7 = dup(r0) ioctl$TIOCL_SETVESABLANK(r7, 0x560e, &(0x7f0000000140)) 16.700731566s ago: executing program 4 (id=944): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="208302"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x5e, &(0x7f0000000000)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000004e8f5b3371da3635b8b4fa63713") 12.399408356s ago: executing program 4 (id=955): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) unshare(0x6a040000) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x940d, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000180)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010100, 0x15, 0x3, 'sh\x00', 0x28, 0x0, 0x70}, 0x2c) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x9}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0}, 0x0) r6 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002) ioctl$CEC_S_MODE(r6, 0x40046109, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r7 = syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00') getdents64(r7, &(0x7f0000000fc0)=""/224, 0xe0) unlink(0x0) close(r6) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000007c0)={0xc, 0x34324142, 0x2, @discrete={0x2, 0x1}}) mbind(&(0x7f00003d1000/0x4000)=nil, 0x4000, 0x8003, &(0x7f0000000000)=0xa, 0x7, 0x0) 9.14414393s ago: executing program 2 (id=963): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x498, &(0x7f0000000300)={0x0, 0x9834, 0x8, 0x8000, 0xb}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r6, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x30) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) pread64(r8, 0x0, 0x0, 0x2000000000097) sendmsg$nl_route(r6, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=@ipv4_getroute={0x1c, 0x1a, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x14, 0x14, 0x0, 0xfc, 0x0, 0xfe, 0x4, 0x800}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) modify_ldt$read(0x1100, 0x0, 0x0) bind$alg(r7, 0x0, 0x0) r9 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r9, 0x40106f52, &(0x7f0000000000)={0x21, &(0x7f00000000c0)=[{0x11, '\x00', @data=0x6, 0x9}]}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r10, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000740)={0x34, r11, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="35000000000000004e00000000001c004000740000000000950000000000000041cca068850255544d211b541796"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) 7.899476181s ago: executing program 0 (id=967): socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000180), 0x880) socket$packet(0x11, 0x3, 0x300) syz_usb_connect$uac1(0x5, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b70800000000000003010902"], 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) syz_io_uring_setup(0x7bb9, &(0x7f0000000300)={0x0, 0xec22, 0x400, 0x3, 0x40000333}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 7.672243951s ago: executing program 4 (id=968): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, 0x0) 7.458721963s ago: executing program 4 (id=971): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 6.990355468s ago: executing program 4 (id=975): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x78, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000000800)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x6, "4eb85760"}]}}, 0x0}, 0x0) 6.541243479s ago: executing program 2 (id=979): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f00000004c0)={0xa0, 0x0, 0x0, {{0x2, 0x2, 0x9, 0xa, 0x99ea, 0x0, {0x5, 0xc4, 0x4, 0x3, 0x8, 0x80000000, 0x2, 0x9, 0x7f, 0xa000, 0x7, r2, 0x0, 0x3, 0x7}}, {0x0, 0x4}}}, 0xa0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.181110984s ago: executing program 0 (id=981): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, 0x0) 6.042217539s ago: executing program 0 (id=983): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', 0x0}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r2, 0x0) sendto$packet(r0, &(0x7f0000000180)="d7c3961822fd39f009b1", 0xa, 0x40000, &(0x7f00000020c0)={0x11, 0x15, r1, 0x1, 0x3}, 0x14) 5.880341679s ago: executing program 1 (id=984): syz_clone(0x40100000, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.807339138s ago: executing program 2 (id=985): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8012, 0x3}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) 5.694999589s ago: executing program 1 (id=986): socket$nl_netfilter(0x10, 0x3, 0xc) chdir(&(0x7f0000000000)='./cgroup\x00') read$FUSE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, 0x0, 0x8000) syz_open_dev$dri(0x0, 0x1, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) inotify_init() renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 5.694763507s ago: executing program 0 (id=987): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 5.581309429s ago: executing program 1 (id=988): move_pages(0x0, 0x2, &(0x7f00000003c0)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000000540)=[0x1, 0x1], &(0x7f0000001680), 0x0) 5.510476323s ago: executing program 2 (id=989): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000003b00000000000000000000060000"], 0x34) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 5.442313794s ago: executing program 0 (id=990): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x1) socket$netlink(0x10, 0x3, 0xf) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000400)='exofs\x00', 0x1214040, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x864, 0xa, 0x93, 0x369e}]}, 0x10) write$binfmt_misc(r4, &(0x7f0000000100), 0x6) accept4(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0) keyctl$setperm(0x5, r0, 0x30925) keyctl$set_timeout(0xf, r0, 0x0) 5.424776716s ago: executing program 1 (id=991): socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000180), 0x880) socket$packet(0x11, 0x3, 0x300) syz_usb_connect$uac1(0x5, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b70800000000000003010902"], 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) socket$kcm(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) syz_io_uring_setup(0x7bb9, &(0x7f0000000300)={0x0, 0xec22, 0x400, 0x3, 0x40000333}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 5.3936055s ago: executing program 2 (id=992): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 5.106888062s ago: executing program 1 (id=993): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r3, &(0x7f00000000c0), 0x12) 5.057448439s ago: executing program 2 (id=994): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000280), 0x10) close(r4) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}]) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYBLOB="01000000010000001c0012000c0001006272"], 0x3c}}, 0x0) 4.186410101s ago: executing program 0 (id=995): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x3a, &(0x7f0000000c40)={@local, @random="429e82211cf8", @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x3, 0x5, 0x2c, 0x66, 0x0, 0x7, 0x6, 0x0, @private=0xa010102, @loopback}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x2, 0x7, 0x0, 0x1, 0x2, 0x0, 0x0, 0x9, 0x4, 0x4, 0x4e22, 0x4e20}}}}}}}, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) unshare(0x2040400) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00'}) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) process_vm_readv(r0, 0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/13, 0xd}], 0x2, 0x0) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) 4.185522302s ago: executing program 1 (id=996): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0xa, 0xa, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0x1011, &(0x7f0000000840)=""/4113, 0x41100, 0x2}, 0x94) 4.094981857s ago: executing program 4 (id=997): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 0s ago: executing program 32 (id=935): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r3, 0x400454a4, &(0x7f0000000080)) syz_usb_disconnect(0xffffffffffffffff) madvise(&(0x7f0000569000/0x1000)=nil, 0x1000, 0x15) r5 = gettid() timer_create(0x3, &(0x7f0000000040)={0x0, 0x1a, 0x4, @tid=r5}, &(0x7f0000000000)) timer_settime(0x0, 0x236bd4336e4642df, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000280)={0x1d8, r1, 'id0\x00'}) io_uring_enter(r6, 0xe49, 0x4117, 0x49, 0x0, 0x0) dup(r1) r7 = dup(r0) ioctl$TIOCL_SETVESABLANK(r7, 0x560e, &(0x7f0000000140)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.201' (ED25519) to the list of known hosts. [ 73.786110][ T5779] cgroup: Unknown subsys name 'net' [ 74.046948][ T5779] cgroup: Unknown subsys name 'cpuset' [ 74.103028][ T5779] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.731852][ T5779] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.917577][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.919655][ T5797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.939678][ T5795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.954881][ T5795] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.962334][ T5795] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.976124][ T5795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.993586][ T5797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.995231][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.998298][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.004592][ T5797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.005055][ T5797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.006558][ T5809] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.007427][ T5809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.011254][ T5809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.015234][ T5809] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.015556][ T5795] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.019943][ T5809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.021272][ T5809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.026463][ T5809] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.036383][ T5809] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.121406][ T5809] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.147646][ T5809] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.149174][ T5809] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.153732][ T5809] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.154489][ T5809] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.918219][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 78.981737][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 79.084926][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 79.109055][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 79.162511][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 79.320599][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.321775][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.322446][ T5799] bridge_slave_0: entered allmulticast mode [ 79.325092][ T5799] bridge_slave_0: entered promiscuous mode [ 79.373961][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.374069][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.374376][ T5799] bridge_slave_1: entered allmulticast mode [ 79.375744][ T5799] bridge_slave_1: entered promiscuous mode [ 79.388409][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.388527][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.388683][ T5791] bridge_slave_0: entered allmulticast mode [ 79.391185][ T5791] bridge_slave_0: entered promiscuous mode [ 79.456965][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.457069][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.457171][ T5791] bridge_slave_1: entered allmulticast mode [ 79.458573][ T5791] bridge_slave_1: entered promiscuous mode [ 79.545286][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.545377][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.545627][ T5792] bridge_slave_0: entered allmulticast mode [ 79.547053][ T5792] bridge_slave_0: entered promiscuous mode [ 79.554209][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.555704][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.555818][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.555980][ T5801] bridge_slave_0: entered allmulticast mode [ 79.558372][ T5801] bridge_slave_0: entered promiscuous mode [ 79.616401][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.616494][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.616634][ T5792] bridge_slave_1: entered allmulticast mode [ 79.618108][ T5792] bridge_slave_1: entered promiscuous mode [ 79.620952][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.621145][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.621240][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.621340][ T5801] bridge_slave_1: entered allmulticast mode [ 79.624854][ T5801] bridge_slave_1: entered promiscuous mode [ 79.631721][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.631911][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.632025][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.634725][ T5800] bridge_slave_0: entered allmulticast mode [ 79.637740][ T5800] bridge_slave_0: entered promiscuous mode [ 79.744732][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.744959][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.745050][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.745152][ T5800] bridge_slave_1: entered allmulticast mode [ 79.746525][ T5800] bridge_slave_1: entered promiscuous mode [ 79.823367][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.826363][ T5799] team0: Port device team_slave_0 added [ 79.829299][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.068936][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.070475][ T5799] team0: Port device team_slave_1 added [ 80.073291][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.095489][ T5791] team0: Port device team_slave_0 added [ 80.099180][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.124363][ T5798] Bluetooth: hci2: command tx timeout [ 80.124369][ T5809] Bluetooth: hci0: command tx timeout [ 80.124505][ T5798] Bluetooth: hci1: command tx timeout [ 80.153680][ T5791] team0: Port device team_slave_1 added [ 80.156911][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.212420][ T5112] Bluetooth: hci4: command tx timeout [ 80.212577][ T5112] Bluetooth: hci3: command tx timeout [ 80.236642][ T5792] team0: Port device team_slave_0 added [ 80.237897][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.237911][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.237932][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.262858][ T5801] team0: Port device team_slave_0 added [ 80.304713][ T5792] team0: Port device team_slave_1 added [ 80.305367][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.305378][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.305391][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.307195][ T5801] team0: Port device team_slave_1 added [ 80.307795][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.307811][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.307824][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.309929][ T5800] team0: Port device team_slave_0 added [ 80.360462][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.360479][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.360502][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.365405][ T5800] team0: Port device team_slave_1 added [ 80.439988][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.440004][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.440027][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.444930][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.444946][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.444967][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.448301][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.448315][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.448337][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.506839][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.506857][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.506879][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.508050][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.508061][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.508089][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.570020][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.570038][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.570061][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.582243][ T5799] hsr_slave_0: entered promiscuous mode [ 80.583900][ T5799] hsr_slave_1: entered promiscuous mode [ 80.656533][ T5791] hsr_slave_0: entered promiscuous mode [ 80.657788][ T5791] hsr_slave_1: entered promiscuous mode [ 80.658805][ T5791] debugfs: 'hsr0' already exists in 'hsr' [ 80.658924][ T5791] Cannot create hsr debugfs directory [ 80.736825][ T5792] hsr_slave_0: entered promiscuous mode [ 80.738064][ T5792] hsr_slave_1: entered promiscuous mode [ 80.739046][ T5792] debugfs: 'hsr0' already exists in 'hsr' [ 80.739067][ T5792] Cannot create hsr debugfs directory [ 80.801090][ T5801] hsr_slave_0: entered promiscuous mode [ 80.801870][ T5801] hsr_slave_1: entered promiscuous mode [ 80.813206][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 80.813232][ T5801] Cannot create hsr debugfs directory [ 80.865558][ T5800] hsr_slave_0: entered promiscuous mode [ 80.866326][ T5800] hsr_slave_1: entered promiscuous mode [ 80.866861][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 80.866880][ T5800] Cannot create hsr debugfs directory [ 81.973147][ T5799] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.024795][ T5799] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.077347][ T5799] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.109608][ T5799] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.202720][ T5798] Bluetooth: hci0: command tx timeout [ 82.202749][ T5798] Bluetooth: hci2: command tx timeout [ 82.203707][ T5112] Bluetooth: hci1: command tx timeout [ 82.220657][ T5791] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.269763][ T5791] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.282608][ T5112] Bluetooth: hci3: command tx timeout [ 82.282726][ T5112] Bluetooth: hci4: command tx timeout [ 82.327010][ T5791] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.383431][ T5791] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.517891][ T5801] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.562562][ T5801] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.602250][ T5801] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.654481][ T5801] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.786570][ T5800] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.825904][ T5800] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.860967][ T5800] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.914603][ T5800] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.011507][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.060740][ T5792] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.100829][ T5792] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.119463][ T5792] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.164155][ T5792] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.227059][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.231478][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.274550][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.275325][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.332468][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.332858][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.370146][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.399027][ T167] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.399635][ T167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.439020][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.439141][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.469055][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.539718][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.571905][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.575186][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.576799][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.626753][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.626881][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.695681][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.752792][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.756190][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.756276][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.831247][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.840743][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.930596][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.968040][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.968158][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.014728][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.014865][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.105894][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.141771][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.295287][ T5798] Bluetooth: hci1: command tx timeout [ 84.295322][ T5798] Bluetooth: hci2: command tx timeout [ 84.295342][ T5798] Bluetooth: hci0: command tx timeout [ 84.362974][ T5112] Bluetooth: hci4: command tx timeout [ 84.363005][ T5112] Bluetooth: hci3: command tx timeout [ 84.419061][ T5791] veth0_vlan: entered promiscuous mode [ 84.477640][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.492988][ T5799] veth0_vlan: entered promiscuous mode [ 84.494873][ T5791] veth1_vlan: entered promiscuous mode [ 84.553561][ T5799] veth1_vlan: entered promiscuous mode [ 84.609522][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.683113][ T5791] veth0_macvtap: entered promiscuous mode [ 84.717780][ T5801] veth0_vlan: entered promiscuous mode [ 84.721783][ T5791] veth1_macvtap: entered promiscuous mode [ 84.737677][ T5799] veth0_macvtap: entered promiscuous mode [ 84.759038][ T5799] veth1_macvtap: entered promiscuous mode [ 84.780046][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.791083][ T5801] veth1_vlan: entered promiscuous mode [ 84.851550][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.878879][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.894265][ T5800] veth0_vlan: entered promiscuous mode [ 84.905026][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.917078][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.961315][ T1158] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.969674][ T5800] veth1_vlan: entered promiscuous mode [ 84.988990][ T1158] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.001845][ T1158] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.012297][ T1158] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.018489][ T5801] veth0_macvtap: entered promiscuous mode [ 85.020860][ T1158] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.075229][ T1158] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.079066][ T1158] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.123337][ T1158] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.141890][ T5801] veth1_macvtap: entered promiscuous mode [ 85.405598][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.441546][ T5800] veth0_macvtap: entered promiscuous mode [ 85.476441][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.487589][ T5800] veth1_macvtap: entered promiscuous mode [ 85.500220][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.500244][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.563910][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.567477][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.596736][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.599404][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.599423][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.627315][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.678043][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.678062][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.739064][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.778581][ T5792] veth0_vlan: entered promiscuous mode [ 85.839722][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.844339][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.844360][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.974244][ T5792] veth1_vlan: entered promiscuous mode [ 85.975716][ T167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.977923][ T167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.015713][ T167] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.041091][ T167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.150613][ T167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.150635][ T167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.367613][ T5798] Bluetooth: hci0: command tx timeout [ 86.367649][ T5798] Bluetooth: hci2: command tx timeout [ 86.367668][ T5798] Bluetooth: hci1: command tx timeout [ 86.429238][ T5906] syzkaller0: entered promiscuous mode [ 86.429258][ T5906] syzkaller0: entered allmulticast mode [ 86.443407][ T5112] Bluetooth: hci4: command tx timeout [ 86.443455][ T5809] Bluetooth: hci3: command tx timeout [ 86.456916][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.456935][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.616696][ T5792] veth0_macvtap: entered promiscuous mode [ 86.892222][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 86.892826][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 86.893971][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 86.895082][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 86.896217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 86.897346][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 86.898453][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 86.963271][ T829] cfg80211: failed to load regulatory.db [ 87.052294][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 87.052970][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 87.054140][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 87.215787][ T5792] veth1_macvtap: entered promiscuous mode [ 87.223705][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.223722][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.546347][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.586013][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.586026][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.607855][ T5926] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 87.635666][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.683333][ T1158] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.717904][ T1158] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.719218][ T1158] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.723688][ T1158] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.431299][ T5942] Zero length message leads to an empty skb [ 88.702360][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.702460][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.096633][ T1904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.096652][ T1904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.553582][ T5959] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.619596][ T1866] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.902734][ T1866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.902781][ T1866] usb 4-1: New USB device found, idVendor=056a, idProduct=00e6, bcdDevice= 0.00 [ 89.902801][ T1866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.159737][ T1866] usb 4-1: config 0 descriptor?? [ 90.963385][ T1866] usbhid 4-1:0.0: can't add hid device: -71 [ 90.963491][ T1866] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 91.098194][ T1866] usb 4-1: USB disconnect, device number 2 [ 91.799344][ T37] audit: type=1326 audit(1770790546.531:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5974 comm="syz.4.20" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ca897bf79 code=0x0 [ 92.116674][ C1] sd 0:0:1:0: [sda] tag#1382 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 92.116714][ C1] sd 0:0:1:0: [sda] tag#1382 CDB: Read(6) 08 00 00 00 00 00 00 00 00 00 00 00 [ 92.620440][ T9] IPVS: starting estimator thread 0... [ 92.726945][ T5992] IPVS: using max 11 ests per chain, 26400 per kthread [ 93.422302][ T5876] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.727489][ T5876] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 93.727529][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 93.727550][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 93.727570][ T5876] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 93.727606][ T5876] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.727625][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.764824][ T5876] usb 3-1: config 0 descriptor?? [ 93.882960][ T36] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.051958][ T36] usb 2-1: Using ep0 maxpacket: 8 [ 94.083253][ T36] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 94.083280][ T36] usb 2-1: config 0 has no interface number 0 [ 94.195857][ T36] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 94.195888][ T36] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 94.195911][ T36] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 94.195933][ T36] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 94.195972][ T36] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 94.195991][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.340778][ T6017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.33'. [ 94.340845][ T6017] netlink: 48 bytes leftover after parsing attributes in process `syz.4.33'. [ 94.370664][ T36] usb 2-1: config 0 descriptor?? [ 94.553381][ T5876] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 94.563591][ T5876] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 94.563631][ T5876] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 94.563656][ T5876] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 94.563681][ T5876] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 94.577575][ T36] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 94.699868][ T36] usb 2-1: USB disconnect, device number 2 [ 94.870945][ T36] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 94.988203][ T5876] plantronics 0003:047F:FFFF.0001: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 95.215119][ T6016] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.233763][ T6016] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.221210][ T6016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.273230][ T6016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.564880][ T6017] geneve2: entered promiscuous mode [ 97.564905][ T6017] geneve2: entered allmulticast mode [ 99.732301][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 99.912370][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 99.916724][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 99.916766][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 99.925178][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 99.925205][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.925214][ T9] usb 5-1: Product: syz [ 99.925221][ T9] usb 5-1: Manufacturer: syz [ 99.925228][ T9] usb 5-1: SerialNumber: syz [ 100.005842][ T9] usb 5-1: config 0 descriptor?? [ 100.079225][ T9] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 100.079277][ T9] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 101.764339][ T31] usb 3-1: USB disconnect, device number 2 [ 102.218774][ T6177] warning: `syz.2.92' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.232434][ T1866] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.386821][ T1866] usb 1-1: Using ep0 maxpacket: 16 [ 102.434737][ T1866] usb 1-1: config 1 has an invalid descriptor of length 103, skipping remainder of the config [ 102.434763][ T1866] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 102.434810][ T1866] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 102.777110][ T9] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 102.777740][ T9] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 102.778256][ T9] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 102.778272][ T9] em28xx 5-1:0.0: No AC97 audio processor [ 104.063637][ T1866] usb 1-1: string descriptor 0 read error: -71 [ 104.063735][ T1866] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 104.063747][ T1866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.074780][ T1866] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 104.074802][ T1866] usb 1-1: no configuration chosen from 1 choice [ 104.079605][ T1866] usb 1-1: USB disconnect, device number 2 [ 104.865105][ T1866] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 104.865382][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 105.002522][ T1866] usb 4-1: device descriptor read/64, error -32 [ 105.102338][ T31] usb 5-1: USB disconnect, device number 2 [ 105.103546][ T31] em28xx 5-1:0.0: Disconnecting em28xx [ 105.192916][ T31] em28xx 5-1:0.0: Freeing device [ 105.244809][ T1866] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 105.496426][ T1866] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 105.496457][ T1866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 105.496478][ T1866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 105.496496][ T1866] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 105.496534][ T1866] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 105.496553][ T1866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.524560][ T1866] usb 4-1: config 0 descriptor?? [ 105.818887][ T6245] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 106.009523][ T1866] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 106.009623][ T1866] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 106.009658][ T1866] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 106.009683][ T1866] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 106.009708][ T1866] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 106.200227][ T1866] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 107.533612][ T1238] usb 4-1: reset high-speed USB device number 4 using dummy_hcd [ 108.368800][ T37] audit: type=1326 audit(1770790563.101:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6292 comm="syz.0.129" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f92d52cbf79 code=0x0 [ 108.949919][ T9] usb 4-1: USB disconnect, device number 4 [ 109.436196][ T6320] vivid-002: disconnect [ 110.013090][ T6313] vivid-002: reconnect [ 110.662422][ T31] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 110.812332][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 110.815565][ T31] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 110.815591][ T31] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 110.815602][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.819716][ T31] usb 5-1: config 0 descriptor?? [ 110.829860][ T31] hub 5-1:0.0: bad descriptor, ignoring hub [ 110.829896][ T31] hub 5-1:0.0: probe with driver hub failed with error -5 [ 110.835148][ T31] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 111.181758][ T6364] mmap: syz.4.146 (6364) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 111.373255][ T6364] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 111.672811][ T31] usb 5-1: USB disconnect, device number 3 [ 111.892697][ T31] syz_tun: tun_net_xmit 106 [ 112.314525][ T808] syz_tun: tun_net_xmit 106 [ 112.612943][ T808] syz_tun: tun_net_xmit 106 [ 113.243123][ T31] syz_tun: tun_net_xmit 106 [ 114.112348][ T1238] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 114.247991][ T1238] usb 1-1: device descriptor read/64, error -71 [ 114.592553][ T1238] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 114.708320][ T6429] vivid-004: disconnect [ 114.732318][ T1238] usb 1-1: device descriptor read/64, error -71 [ 114.777525][ T6430] dvmrp6: entered allmulticast mode [ 114.844418][ T1238] usb usb1-port1: attempt power cycle [ 115.264044][ T6417] vivid-004: reconnect [ 115.363563][ T1238] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 115.396093][ T1238] usb 1-1: device descriptor read/8, error -71 [ 115.639046][ T1238] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 115.653203][ T1238] usb 1-1: device descriptor read/8, error -71 [ 115.762828][ T1238] usb usb1-port1: unable to enumerate USB device [ 117.463329][ T31] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 117.613912][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 117.616235][ T31] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 117.616260][ T31] usb 3-1: config 0 has no interface number 0 [ 117.616316][ T31] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 117.616336][ T31] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 117.616357][ T31] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 117.616379][ T31] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 117.616417][ T31] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 117.616437][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.719887][ T31] usb 3-1: config 0 descriptor?? [ 117.738982][ T31] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 118.012799][ C0] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 118.012909][ T1238] usb 3-1: USB disconnect, device number 3 [ 118.031475][ T1238] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 119.556151][ T6499] vivid-002: disconnect [ 119.685966][ T6493] vivid-002: reconnect [ 121.931855][ T6538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.152291][ T5876] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 123.302380][ T5876] usb 5-1: Using ep0 maxpacket: 8 [ 123.306533][ T5876] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 123.306558][ T5876] usb 5-1: config 0 has no interface number 0 [ 123.306604][ T5876] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 123.306624][ T5876] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 123.306646][ T5876] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 123.306669][ T5876] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 123.306707][ T5876] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 123.306726][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.432378][ T5876] usb 5-1: config 0 descriptor?? [ 123.441572][ T5876] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 123.670828][ C0] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 123.670919][ T9] usb 5-1: USB disconnect, device number 4 [ 123.717173][ T9] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 133.039987][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.040075][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.526440][ T6755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.302'. [ 133.980495][ T6761] macvlan2: entered promiscuous mode [ 133.985287][ T6761] macvlan2: entered allmulticast mode [ 134.016999][ T6761] bond1: entered promiscuous mode [ 134.032594][ T6761] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 134.144232][ T6761] bond1: left promiscuous mode [ 136.264939][ T6793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.317'. [ 138.262364][ T5876] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 138.598388][ T5876] usb 3-1: unable to get BOS descriptor or descriptor too short [ 138.623369][ T5876] usb 3-1: config 7 has an invalid interface number: 67 but max is 0 [ 138.623393][ T5876] usb 3-1: config 7 has no interface number 0 [ 138.811505][ T5876] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 138.811523][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.811533][ T5876] usb 3-1: Product: 㯑 [ 144.095413][ T5876] usb 3-1: USB disconnect, device number 4 [ 148.082242][ T829] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 148.254825][ T829] usb 3-1: config 0 has no interfaces? [ 148.254861][ T829] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 148.254882][ T829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.260080][ T829] usb 3-1: config 0 descriptor?? [ 148.422327][ T5876] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 148.572302][ T5876] usb 4-1: Using ep0 maxpacket: 32 [ 148.584453][ T5876] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 148.584506][ T5876] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 148.584527][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.642436][ T5876] usb 4-1: config 0 descriptor?? [ 148.668030][ T5876] hub 4-1:0.0: bad descriptor, ignoring hub [ 148.668053][ T5876] hub 4-1:0.0: probe with driver hub failed with error -5 [ 148.725032][ T5876] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 148.856825][ T829] usb 3-1: USB disconnect, device number 5 [ 149.490098][ T9] usb 4-1: USB disconnect, device number 5 [ 151.233907][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e997000: rx timeout, send abort [ 151.237399][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e997000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 152.049337][ T7039] vivid-001: disconnect [ 152.049530][ T7038] vivid-001: reconnect [ 153.364276][ T7080] vivid-000: disconnect [ 153.364417][ T7079] vivid-000: reconnect [ 153.716446][ T37] audit: type=1326 audit(1770790608.371:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7086 comm="syz.2.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fe66bf79 code=0x7ffc0000 [ 153.716499][ T37] audit: type=1326 audit(1770790608.451:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7086 comm="syz.2.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fe66bf79 code=0x7ffc0000 [ 153.735333][ T37] audit: type=1326 audit(1770790608.471:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7086 comm="syz.2.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fc6fe66bf79 code=0x7ffc0000 [ 153.735381][ T37] audit: type=1326 audit(1770790608.471:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7086 comm="syz.2.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fe66bf79 code=0x7ffc0000 [ 153.735418][ T37] audit: type=1326 audit(1770790608.471:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7086 comm="syz.2.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fe66bf79 code=0x7ffc0000 [ 154.722483][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 154.998121][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 154.998154][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 154.998177][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 154.998196][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 154.998236][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 154.998256][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.026763][ T9] usb 5-1: config 0 descriptor?? [ 155.489841][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 155.489866][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 155.489881][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 155.489896][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 155.489911][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 155.549338][ T9] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 156.853788][ T5807] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 156.992591][ T1866] usb 5-1: reset high-speed USB device number 5 using dummy_hcd [ 157.024509][ T5807] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.024555][ T5807] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 157.026927][ T5807] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 157.026952][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.026970][ T5807] usb 4-1: Product: syz [ 157.026982][ T5807] usb 4-1: Manufacturer: syz [ 157.026994][ T5807] usb 4-1: SerialNumber: syz [ 157.104084][ T5807] cdc_mbim 4-1:1.0: skipping garbage [ 157.365332][ T7121] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 157.987721][ T7121] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 158.002990][ T5807] cdc_mbim 4-1:1.0: dwNtbInMaxSize=9 is too small. Using 2048 [ 158.003017][ T5807] cdc_mbim 4-1:1.0: setting rx_max = 2048 [ 158.199066][ T5807] cdc_mbim 4-1:1.0: setting tx_max = 28 [ 158.215750][ T5807] cdc_mbim 4-1:1.0: cdc-wdm1: USB WDM device [ 158.373584][ T5807] wwan wwan0: port wwan0mbim0 attached [ 158.918477][ T5807] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, fa:99:e5:0e:06:74 [ 158.972046][ T5807] usb 4-1: USB disconnect, device number 6 [ 158.980537][ T5807] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 159.216212][ T5807] wwan wwan0: port wwan0mbim0 disconnected [ 159.675214][ T36] usb 5-1: USB disconnect, device number 5 [ 160.972416][ T1866] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 161.564800][ T1866] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.564817][ T1866] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 161.564846][ T1866] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 161.564857][ T1866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.600994][ T1866] usb 3-1: config 0 descriptor?? [ 161.660649][ T1866] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 161.660922][ T1866] dvb-usb: bulk message failed: -22 (3/0) [ 161.865403][ T1866] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 161.871238][ T1866] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 161.871342][ T1866] usb 3-1: media controller created [ 161.941561][ T1866] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 162.074983][ T1866] dvb-usb: bulk message failed: -22 (6/0) [ 162.075125][ T1866] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 162.105732][ T1866] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 162.159075][ T1866] dvb-usb: schedule remote query interval to 150 msecs. [ 162.159111][ T1866] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 162.315446][ T1866] dvb-usb: bulk message failed: -22 (1/0) [ 162.315498][ T1866] dvb-usb: error while querying for an remote control event. [ 162.474139][ T1866] dvb-usb: bulk message failed: -22 (1/0) [ 162.474171][ T1866] dvb-usb: error while querying for an remote control event. [ 162.555264][ T31] usb 3-1: USB disconnect, device number 6 [ 163.178083][ T31] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 163.451051][ T7217] input: syz0 as /devices/virtual/input/input6 [ 164.035117][ T7242] process 'syz.0.489' launched './file2' with NULL argv: empty string added [ 164.048417][ T37] audit: type=1326 audit(1770790618.761:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7227 comm="syz.0.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d52cbf79 code=0x7ffc0000 [ 164.048468][ T37] audit: type=1326 audit(1770790618.761:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7227 comm="syz.0.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f92d52cbf79 code=0x7ffc0000 [ 164.048506][ T37] audit: type=1326 audit(1770790618.761:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7227 comm="syz.0.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d52cbf79 code=0x7ffc0000 [ 164.048543][ T37] audit: type=1326 audit(1770790618.761:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7227 comm="syz.0.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d52cbf79 code=0x7ffc0000 [ 164.048579][ T37] audit: type=1326 audit(1770790618.761:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7227 comm="syz.0.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f92d52cbf79 code=0x7ffc0000 [ 164.048616][ T37] audit: type=1326 audit(1770790618.761:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7227 comm="syz.0.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d52cbf79 code=0x7ffc0000 [ 164.048652][ T37] audit: type=1326 audit(1770790618.771:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7227 comm="syz.0.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d52cbf79 code=0x7ffc0000 [ 164.048688][ T37] audit: type=1326 audit(1770790618.771:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7227 comm="syz.0.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f92d52cbf79 code=0x7ffc0000 [ 164.048725][ T37] audit: type=1326 audit(1770790618.771:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7227 comm="syz.0.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d52cbf79 code=0x7ffc0000 [ 164.048761][ T37] audit: type=1326 audit(1770790618.771:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7227 comm="syz.0.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d52cbf79 code=0x7ffc0000 [ 164.529008][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 164.797328][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 164.825907][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.825939][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.825973][ T10] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 164.825994][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.831214][ T10] usb 1-1: config 0 descriptor?? [ 169.835489][ T7298] program syz.2.512 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.456457][ T10] usbhid 1-1:0.0: can't add hid device: -110 [ 170.456536][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -110 [ 170.570530][ T1866] usb 1-1: USB disconnect, device number 7 [ 172.645282][ T7343] vivid-000: disconnect [ 173.261557][ T7351] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 173.380602][ T7338] vivid-000: reconnect [ 174.607554][ T7371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.543'. [ 174.745001][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 174.929447][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 174.934557][ T10] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 174.934581][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.934597][ T10] usb 5-1: config 0 has no interface number 0 [ 174.934639][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 174.934658][ T10] usb 5-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 174.934694][ T10] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 174.934714][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.997189][ T10] usb 5-1: config 0 descriptor?? [ 175.004926][ T10] ldusb 5-1:0.55: Interrupt in endpoint not found [ 175.250465][ T5807] usb 5-1: USB disconnect, device number 6 [ 177.572325][ T5807] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 177.972656][ T5807] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 177.972684][ T5807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.972700][ T5807] usb 5-1: Product: syz [ 177.972712][ T5807] usb 5-1: Manufacturer: syz [ 177.972724][ T5807] usb 5-1: SerialNumber: syz [ 178.325399][ T5807] usb 5-1: config 0 descriptor?? [ 178.964067][ T7461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.966371][ T7461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.402708][ T5807] airspy 5-1:0.0: usb_control_msg() failed -110 request 09 [ 179.402733][ T5807] airspy 5-1:0.0: Could not detect board [ 179.402850][ T5807] airspy 5-1:0.0: probe with driver airspy failed with error -110 [ 180.588304][ T5807] usb 5-1: USB disconnect, device number 7 [ 182.371103][ T36] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 182.527429][ T36] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 182.527458][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.527476][ T36] usb 4-1: Product: syz [ 182.527489][ T36] usb 4-1: Manufacturer: syz [ 182.527502][ T36] usb 4-1: SerialNumber: syz [ 182.543635][ T36] usb 4-1: config 0 descriptor?? [ 182.975824][ T7532] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 182.995642][ T7518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.996170][ T7518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.569704][ T36] airspy 4-1:0.0: usb_control_msg() failed -110 request 09 [ 183.569730][ T36] airspy 4-1:0.0: Could not detect board [ 183.569834][ T36] airspy 4-1:0.0: probe with driver airspy failed with error -110 [ 183.672311][ T37] kauditd_printk_skb: 34 callbacks suppressed [ 183.672328][ T37] audit: type=1326 audit(1770790638.401:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7539 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fe66bf79 code=0x7ffc0000 [ 183.672425][ T37] audit: type=1326 audit(1770790638.401:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7539 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc6fe66bf79 code=0x7ffc0000 [ 183.672455][ T37] audit: type=1326 audit(1770790638.401:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7539 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fe66bf79 code=0x7ffc0000 [ 183.672475][ T37] audit: type=1326 audit(1770790638.401:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7539 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fc6fe66bf79 code=0x7ffc0000 [ 183.672495][ T37] audit: type=1326 audit(1770790638.401:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7539 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fe66bf79 code=0x7ffc0000 [ 183.672514][ T37] audit: type=1326 audit(1770790638.401:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7539 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc6fe66bf79 code=0x7ffc0000 [ 183.682410][ T37] audit: type=1326 audit(1770790638.411:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7539 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fe66bf79 code=0x7ffc0000 [ 183.682470][ T37] audit: type=1326 audit(1770790638.411:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7539 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc6fe66bf79 code=0x7ffc0000 [ 183.682506][ T37] audit: type=1326 audit(1770790638.411:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7539 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fe66bf79 code=0x7ffc0000 [ 183.682540][ T37] audit: type=1326 audit(1770790638.411:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7539 comm="syz.2.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fc6fe66bf79 code=0x7ffc0000 [ 184.941387][ T36] usb 4-1: USB disconnect, device number 7 [ 187.072301][ T5876] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 187.276849][ T5876] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 187.276876][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 187.276891][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 187.276901][ T5876] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 187.276926][ T5876] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 187.276937][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.283566][ T5876] usb 4-1: config 0 descriptor?? [ 187.884543][ T5876] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 187.884579][ T5876] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 187.884605][ T5876] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 187.884631][ T5876] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 187.884657][ T5876] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 187.929808][ T5876] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 188.742294][ T31] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 188.865470][ T7636] syzkaller0: entered promiscuous mode [ 188.865486][ T7636] syzkaller0: entered allmulticast mode [ 188.910950][ T31] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 188.910979][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.910996][ T31] usb 3-1: Product: syz [ 188.911008][ T31] usb 3-1: Manufacturer: syz [ 188.911020][ T31] usb 3-1: SerialNumber: syz [ 188.916835][ T31] usb 3-1: config 0 descriptor?? [ 189.283738][ T5807] usb 4-1: reset high-speed USB device number 8 using dummy_hcd [ 189.392657][ T7627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.394363][ T7627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.396397][ T31] airspy 3-1:0.0: usb_control_msg() failed -71 request 09 [ 189.396417][ T31] airspy 3-1:0.0: Could not detect board [ 189.396523][ T31] airspy 3-1:0.0: probe with driver airspy failed with error -71 [ 189.410615][ T31] usb 3-1: USB disconnect, device number 7 [ 189.926503][ T5971] IPVS: starting estimator thread 0... [ 190.013503][ T7653] IPVS: using max 10 ests per chain, 24000 per kthread [ 190.272553][ T7662] fuse: Unknown parameter 'grou00000000000000000000' [ 190.382100][ T7660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.663'. [ 190.957748][ T7690] netlink: 68 bytes leftover after parsing attributes in process `syz.4.674'. [ 191.027794][ T9] usb 4-1: USB disconnect, device number 8 [ 191.182383][ T36] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 191.364449][ T7694] fuse: Unknown parameter 'grou00000000000000000000' [ 191.438713][ T36] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 191.438739][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.438755][ T36] usb 1-1: Product: syz [ 191.438766][ T36] usb 1-1: Manufacturer: syz [ 191.438777][ T36] usb 1-1: SerialNumber: syz [ 191.444214][ T36] usb 1-1: config 0 descriptor?? [ 191.874020][ T7686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.874515][ T7686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.915764][ T36] airspy 1-1:0.0: usb_control_msg() failed -71 request 09 [ 191.915787][ T36] airspy 1-1:0.0: Could not detect board [ 191.915849][ T36] airspy 1-1:0.0: probe with driver airspy failed with error -71 [ 191.952757][ T36] usb 1-1: USB disconnect, device number 8 [ 192.348599][ T7716] netlink: 'syz.4.682': attribute type 5 has an invalid length. [ 193.752265][ T5876] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 193.964103][ T5876] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 193.964136][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 193.964158][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 193.964177][ T5876] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 193.964225][ T5876] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 193.964245][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.055023][ T5876] usb 1-1: config 0 descriptor?? [ 194.462397][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.466811][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.569081][ T5876] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 194.569119][ T5876] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 194.569144][ T5876] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 194.569168][ T5876] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 194.569191][ T5876] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 194.712499][ T5876] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 195.155608][ T7752] netlink: 56 bytes leftover after parsing attributes in process `syz.3.694'. [ 196.222587][ T5876] usb 1-1: reset high-speed USB device number 9 using dummy_hcd [ 197.958613][ T31] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 198.112338][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 198.116482][ T31] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 198.116524][ T31] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 198.116564][ T31] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 198.116587][ T31] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 198.116605][ T31] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 198.116629][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 198.120808][ T31] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 198.120836][ T31] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 198.120853][ T31] usb 5-1: Product: syz [ 198.120865][ T31] usb 5-1: Manufacturer: syz [ 198.120877][ T31] usb 5-1: SerialNumber: syz [ 198.129575][ T31] usb 5-1: config 0 descriptor?? [ 198.135051][ T31] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 198.140776][ T31] ldusb 5-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 198.276421][ T36] usb 1-1: USB disconnect, device number 9 [ 198.416894][ T5876] usb 5-1: USB disconnect, device number 8 [ 198.424072][ T5876] ldusb 5-1:0.0: LD USB Device #1 now disconnected [ 198.548928][ T7784] netlink: 28 bytes leftover after parsing attributes in process `syz.0.708'. [ 198.549046][ T7784] netlink: 28 bytes leftover after parsing attributes in process `syz.0.708'. [ 199.409285][ T7827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.725'. [ 200.517745][ C1] vcan0: j1939_tp_rxtimer: 0xffff888027f76400: rx timeout, send abort [ 200.517905][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888027f76400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 201.654603][ T5797] Bluetooth: hci2: command 0x0406 tx timeout [ 201.654644][ T5797] Bluetooth: hci1: command 0x0406 tx timeout [ 201.654695][ T5797] Bluetooth: hci3: command 0x0406 tx timeout [ 201.654716][ T5797] Bluetooth: hci4: command 0x0406 tx timeout [ 201.654736][ T5797] Bluetooth: hci0: command 0x0406 tx timeout [ 201.816204][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e44c800: rx timeout, send abort [ 201.816786][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e44c800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 203.453826][ T5807] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 203.622346][ T5807] usb 5-1: Using ep0 maxpacket: 8 [ 203.626600][ T5807] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 203.626617][ T5807] usb 5-1: config 0 has no interface number 0 [ 203.626654][ T5807] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 203.626666][ T5807] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 203.626677][ T5807] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 203.626690][ T5807] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 203.626712][ T5807] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 203.626722][ T5807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.638596][ T5807] usb 5-1: config 0 descriptor?? [ 203.872478][ T5807] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 203.902539][ T5807] usb 5-1: USB disconnect, device number 9 [ 203.930828][ T5807] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 205.384722][ T7936] fuse: Bad value for 'fd' [ 206.266223][ T7950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.773'. [ 206.711873][ T7963] fuse: Bad value for 'fd' [ 206.974564][ T5807] IPVS: starting estimator thread 0... [ 207.072379][ T7971] IPVS: using max 9 ests per chain, 21600 per kthread [ 207.413693][ C1] vcan0: j1939_tp_rxtimer: 0xffff888026620c00: rx timeout, send abort [ 207.413932][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888026620c00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 207.942403][ T5807] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 208.152314][ T5807] usb 5-1: Using ep0 maxpacket: 8 [ 208.154352][ T5807] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 208.154377][ T5807] usb 5-1: config 0 has no interface number 0 [ 208.154422][ T5807] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 208.154443][ T5807] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 208.154464][ T5807] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 208.154487][ T5807] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 208.154524][ T5807] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 208.154543][ T5807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.159362][ T5807] usb 5-1: config 0 descriptor?? [ 208.181719][ T5807] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 208.464348][ T31] usb 5-1: USB disconnect, device number 10 [ 208.484383][ T31] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 208.714372][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b3db800: rx timeout, send abort [ 208.714593][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805b3db800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 209.446934][ T8011] openvswitch: netlink: Message has 4 unknown bytes. [ 209.446968][ T8011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.890702][ T5876] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 210.069386][ T5876] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 210.069418][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 210.069441][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 210.069460][ T5876] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 210.069513][ T5876] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 210.069525][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.151739][ T5876] usb 3-1: config 0 descriptor?? [ 210.586746][ T5876] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 210.586783][ T5876] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 210.586809][ T5876] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 210.586834][ T5876] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 210.586859][ T5876] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 210.694775][ T5876] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 211.335898][ T8033] fuse: Bad value for 'fd' [ 212.012384][ T829] usb 3-1: reset high-speed USB device number 8 using dummy_hcd [ 212.102455][ T31] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 212.248391][ T8067] fuse: Bad value for 'fd' [ 212.264141][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 212.266646][ T31] usb 4-1: config 7 has an invalid interface number: 67 but max is 0 [ 212.266672][ T31] usb 4-1: config 7 has no interface number 0 [ 212.290983][ T31] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 212.291011][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.291029][ T31] usb 4-1: Product: 㯑 [ 212.787233][ T8080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.819'. [ 213.014871][ T5807] usb 3-1: USB disconnect, device number 8 [ 216.411630][ T8111] fuse: Bad value for 'fd' [ 217.422974][ T5807] usb 4-1: USB disconnect, device number 9 [ 218.122386][ T5807] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 218.288837][ T5807] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 218.288866][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.288884][ T5807] usb 4-1: Product: syz [ 218.288903][ T5807] usb 4-1: Manufacturer: syz [ 218.288916][ T5807] usb 4-1: SerialNumber: syz [ 218.312686][ T5807] usb 4-1: config 0 descriptor?? [ 218.868990][ T8131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.871943][ T8131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.875368][ T5807] airspy 4-1:0.0: usb_control_msg() failed -71 request 09 [ 218.875386][ T5807] airspy 4-1:0.0: Could not detect board [ 218.875447][ T5807] airspy 4-1:0.0: probe with driver airspy failed with error -71 [ 218.877593][ T5807] usb 4-1: USB disconnect, device number 10 [ 219.143287][ T8154] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 221.592415][ T1866] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 221.762747][ T1866] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 221.762778][ T1866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 221.762800][ T1866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 221.762819][ T1866] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 221.762858][ T1866] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 221.763001][ T1866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.861986][ T1866] usb 4-1: config 0 descriptor?? [ 222.289186][ T1866] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 222.289213][ T1866] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 222.289228][ T1866] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 222.289243][ T1866] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 222.289258][ T1866] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 222.398529][ T1866] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 222.632327][ T5807] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 222.797452][ T5807] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 222.797481][ T5807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.797490][ T5807] usb 5-1: Product: syz [ 222.797498][ T5807] usb 5-1: Manufacturer: syz [ 222.797504][ T5807] usb 5-1: SerialNumber: syz [ 222.811347][ T5807] usb 5-1: config 0 descriptor?? [ 223.248725][ T8229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.254177][ T8229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.276024][ T5807] airspy 5-1:0.0: usb_control_msg() failed -71 request 09 [ 223.276043][ T5807] airspy 5-1:0.0: Could not detect board [ 223.276104][ T5807] airspy 5-1:0.0: probe with driver airspy failed with error -71 [ 223.330809][ T5807] usb 5-1: USB disconnect, device number 11 [ 223.733901][ T5807] usb 4-1: reset high-speed USB device number 11 using dummy_hcd [ 223.982533][ T10] syz_tun: tun_net_xmit 106 [ 224.044255][ T10] syz_tun: tun_net_xmit 106 [ 224.515116][ T829] usb 4-1: USB disconnect, device number 11 [ 224.712565][ T31] syz_tun: tun_net_xmit 106 [ 225.133120][ T31] syz_tun: tun_net_xmit 106 [ 226.043316][ T829] IPVS: starting estimator thread 0... [ 226.232438][ T8310] IPVS: using max 15 ests per chain, 36000 per kthread [ 228.160551][ T8330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.915'. [ 231.192315][ T829] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 231.374853][ T8346] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 231.390807][ T829] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.390877][ T829] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.396144][ T829] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 231.396171][ T829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.396188][ T829] usb 1-1: Product: syz [ 231.396200][ T829] usb 1-1: Manufacturer: syz [ 231.396211][ T829] usb 1-1: SerialNumber: syz [ 232.470100][ T8368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.927'. [ 232.611122][ T829] cdc_ncm 1-1:1.0: bind() failure [ 232.749809][ T829] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 232.816755][ T829] usb 1-1: USB disconnect, device number 10 [ 234.654059][ T8406] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 234.812891][ T808] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 236.036298][ T808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.036348][ T808] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 236.036369][ T808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.103099][ T808] usb 5-1: config 0 descriptor?? [ 236.241709][ T8412] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.242583][ T8412] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.701910][ T8412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.707094][ T8412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.768348][ T808] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 236.877187][ T808] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0008/input/input8 [ 237.507844][ T1111] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.520743][ T1111] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.520793][ T1111] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.520826][ T1111] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.686499][ T808] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 237.735432][ T808] usb 5-1: USB disconnect, device number 12 [ 238.649991][ T8435] fido_id[8435]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 243.022395][ T5904] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 243.184636][ T5904] usb 1-1: config 0 has no interfaces? [ 243.186266][ T5904] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 243.186292][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 243.186309][ T5904] usb 1-1: SerialNumber: syz [ 243.191617][ T5904] usb 1-1: config 0 descriptor?? [ 243.544794][ T829] usb 1-1: USB disconnect, device number 11 [ 243.764252][ T808] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 243.939305][ T808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.939337][ T808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.939370][ T808] usb 5-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.00 [ 243.939389][ T808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.995432][ T808] usb 5-1: config 0 descriptor?? [ 244.746061][ T808] usb 5-1: USB disconnect, device number 13 [ 247.968226][ T8539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.994'. [ 247.972015][ T8539] netlink: 16 bytes leftover after parsing attributes in process `syz.2.994'. [ 250.375984][ T5904] ------------[ cut here ]------------ [ 250.375997][ T5904] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 250.376016][ T5904] WARNING: drivers/gpu/drm/drm_vblank.c:1318 at drm_wait_one_vblank+0x3b5/0x5d0, CPU#1: kworker/1:6/5904 [ 250.376058][ T5904] Modules linked in: [ 250.376087][ T5904] CPU: 1 UID: 0 PID: 5904 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 250.376101][ T5904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 250.376109][ T5904] Workqueue: events drm_fb_helper_damage_work [ 250.376136][ T5904] RIP: 0010:drm_wait_one_vblank+0x5a2/0x5d0 [ 250.376154][ T5904] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 af 2b dc fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 e3 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 250.376165][ T5904] RSP: 0018:ffffc900051878e0 EFLAGS: 00010246 [ 250.376175][ T5904] RAX: 1ffff110283e2200 RBX: ffffffff8f53c2c0 RCX: 0000000000000000 [ 250.376185][ T5904] RDX: ffffffff8b9eef60 RSI: ffffffff8ba0acc0 RDI: ffffffff8f53c2c0 [ 250.376193][ T5904] RBP: ffffc900051879c8 R08: 0000000000000000 R09: 0000000000000000 [ 250.376209][ T5904] R10: dffffc0000000000 R11: fffffbfff1e91eef R12: ffffffff8ba0acc0 [ 250.376218][ T5904] R13: ffff888141f11000 R14: 1ffff92000a30f20 R15: ffffffff8b9eef60 [ 250.376227][ T5904] FS: 0000000000000000(0000) GS:ffff88812669c000(0000) knlGS:0000000000000000 [ 250.376238][ T5904] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 250.376246][ T5904] CR2: 00007f92d53196c0 CR3: 000000004166a000 CR4: 00000000003526f0 [ 250.376282][ T5904] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 250.376290][ T5904] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 250.376299][ T5904] Call Trace: [ 250.376309][ T5904] [ 250.376319][ T5904] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 250.376337][ T5904] ? rt_spin_unlock+0x14f/0x200 [ 250.376354][ T5904] ? __pfx_autoremove_wake_function+0x10/0x10 [ 250.376372][ T5904] ? rt_spin_unlock+0x160/0x200 [ 250.376389][ T5904] ? drm_vblank_get+0x147/0x260 [ 250.376408][ T5904] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 250.376427][ T5904] drm_fb_helper_damage_work+0x131/0x6f0 [ 250.376449][ T5904] ? process_scheduled_works+0xa0f/0x17a0 [ 250.376469][ T5904] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 250.376490][ T5904] ? process_scheduled_works+0xa0f/0x17a0 [ 250.376503][ T5904] ? process_scheduled_works+0xa0f/0x17a0 [ 250.376519][ T5904] process_scheduled_works+0xaec/0x17a0 [ 250.376555][ T5904] ? __pfx_process_scheduled_works+0x10/0x10 [ 250.376568][ T5904] ? do_raw_spin_lock+0x12b/0x2f0 [ 250.376586][ T5904] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 250.376608][ T5904] worker_thread+0xda6/0x1360 [ 250.376636][ T5904] ? __kthread_parkme+0x19c/0x1f0 [ 250.376659][ T5904] kthread+0x388/0x470 [ 250.376680][ T5904] ? __pfx_worker_thread+0x10/0x10 [ 250.376722][ T5904] ? __pfx_kthread+0x10/0x10 [ 250.376741][ T5904] ret_from_fork+0x51e/0xb90 [ 250.376759][ T5904] ? __pfx_ret_from_fork+0x10/0x10 [ 250.376774][ T5904] ? __switch_to+0xc82/0x1410 [ 250.376793][ T5904] ? __pfx_kthread+0x10/0x10 [ 250.376815][ T5904] ret_from_fork_asm+0x1a/0x30 [ 250.376858][ T5904] [ 250.376866][ T5904] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 250.376877][ T5904] CPU: 1 UID: 0 PID: 5904 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 250.376896][ T5904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 250.376905][ T5904] Workqueue: events drm_fb_helper_damage_work [ 250.376927][ T5904] Call Trace: [ 250.376933][ T5904] [ 250.376939][ T5904] vpanic+0x1e0/0x670 [ 250.376962][ T5904] panic+0xc5/0xd0 [ 250.376979][ T5904] ? __pfx_panic+0x10/0x10 [ 250.377005][ T5904] ? ret_from_fork_asm+0x1a/0x30 [ 250.377031][ T5904] __warn+0x315/0x4a0 [ 250.377046][ T5904] ? drm_wait_one_vblank+0x3b5/0x5d0 [ 250.377068][ T5904] ? drm_wait_one_vblank+0x3b5/0x5d0 [ 250.377089][ T5904] __report_bug+0x29a/0x540 [ 250.377118][ T5904] ? drm_wait_one_vblank+0x3b5/0x5d0 [ 250.377140][ T5904] ? __pfx___report_bug+0x10/0x10 [ 250.377180][ T5904] report_bug_entry+0x19a/0x290 [ 250.377210][ T5904] ? drm_wait_one_vblank+0x5a2/0x5d0 [ 250.377230][ T5904] ? drm_wait_one_vblank+0x5a7/0x5d0 [ 250.377250][ T5904] handle_bug+0xca/0x200 [ 250.377270][ T5904] exc_invalid_op+0x1a/0x50 [ 250.377287][ T5904] asm_exc_invalid_op+0x1a/0x20 [ 250.377302][ T5904] RIP: 0010:drm_wait_one_vblank+0x5a2/0x5d0 [ 250.377322][ T5904] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 af 2b dc fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 e3 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 250.377332][ T5904] RSP: 0018:ffffc900051878e0 EFLAGS: 00010246 [ 250.377343][ T5904] RAX: 1ffff110283e2200 RBX: ffffffff8f53c2c0 RCX: 0000000000000000 [ 250.377353][ T5904] RDX: ffffffff8b9eef60 RSI: ffffffff8ba0acc0 RDI: ffffffff8f53c2c0 [ 250.377362][ T5904] RBP: ffffc900051879c8 R08: 0000000000000000 R09: 0000000000000000 [ 250.377370][ T5904] R10: dffffc0000000000 R11: fffffbfff1e91eef R12: ffffffff8ba0acc0 [ 250.377378][ T5904] R13: ffff888141f11000 R14: 1ffff92000a30f20 R15: ffffffff8b9eef60 [ 250.377403][ T5904] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 250.377420][ T5904] ? rt_spin_unlock+0x14f/0x200 [ 250.377436][ T5904] ? __pfx_autoremove_wake_function+0x10/0x10 [ 250.377454][ T5904] ? rt_spin_unlock+0x160/0x200 [ 250.377473][ T5904] ? drm_vblank_get+0x147/0x260 [ 250.377492][ T5904] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 250.377511][ T5904] drm_fb_helper_damage_work+0x131/0x6f0 [ 250.377533][ T5904] ? process_scheduled_works+0xa0f/0x17a0 [ 250.377552][ T5904] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 250.377576][ T5904] ? process_scheduled_works+0xa0f/0x17a0 [ 250.377591][ T5904] ? process_scheduled_works+0xa0f/0x17a0 [ 250.377607][ T5904] process_scheduled_works+0xaec/0x17a0 [ 250.377645][ T5904] ? __pfx_process_scheduled_works+0x10/0x10 [ 250.377660][ T5904] ? do_raw_spin_lock+0x12b/0x2f0 [ 250.377679][ T5904] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 250.377704][ T5904] worker_thread+0xda6/0x1360 [ 250.377735][ T5904] ? __kthread_parkme+0x19c/0x1f0 [ 250.377755][ T5904] kthread+0x388/0x470 [ 250.377772][ T5904] ? __pfx_worker_thread+0x10/0x10 [ 250.377785][ T5904] ? __pfx_kthread+0x10/0x10 [ 250.377802][ T5904] ret_from_fork+0x51e/0xb90 [ 250.377820][ T5904] ? __pfx_ret_from_fork+0x10/0x10 [ 250.377833][ T5904] ? __switch_to+0xc82/0x1410 [ 250.377850][ T5904] ? __pfx_kthread+0x10/0x10 [ 250.377868][ T5904] ret_from_fork_asm+0x1a/0x30 [ 250.377899][ T5904] [ 250.379208][ T5904] Kernel Offset: disabled