last executing test programs: 13m8.90003176s ago: executing program 3 (id=9): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000, &(0x7f00000000c0)={0xa, 0x4e22, 0x80, @private2={0xfc, 0x2, '\x00', 0x10}, 0x20}, 0x1c) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x3ff, 0x6, 0x5, 0x10, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x8008, 0x6, 0x0, 0x0, 0x5, 0x0, 0x6f, 0x400], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13m6.47835284s ago: executing program 3 (id=13): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40c00, 0x0) epoll_create1(0x0) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x8000, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 13m4.399005087s ago: executing program 3 (id=17): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80002, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="8c0000000002050000000000000000000a000000240001801400018008000100acbdc8c2c82cb6b6fdcff3e25234f5f0ac14140600000000ac1414aa0c00028005000100980000003c0003800c00028005000100890000002c00018014000300fe80000000000000000000000000002a14000400fe880000000000000000000000000101180002800600034094a55bba7d30be212450b6e65a26bfa28f6a78a18d5aacabf879ac3a9011da668da368399db6546f32d33291b55e6363ab011d50d3a0fdbf7d31c010cc"], 0x8c}, 0x1, 0x0, 0x0, 0x20008004}, 0x20000004) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x7) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000003}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0400f9f407000904018020", 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'}) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x4) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x3) ioctl$UI_DEV_CREATE(r2, 0x5501) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="201100000000d9f6b5798ccdf2da7f9bb15d27b8791a311d12294c1487"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) preadv(r4, &(0x7f0000000240)=[{0x0}, {&(0x7f00000002c0)=""/187, 0xbb}, {0x0}], 0x3, 0x3, 0x75) ioctl$UI_DEV_DESTROY(r2, 0x5502) 13m2.590970697s ago: executing program 3 (id=22): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f00000000c0), 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) dup(0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000019340)='net/snmp6\x00') pread64(r4, &(0x7f0000000300)=""/102383, 0x18fef, 0xffffffffe) 12m58.386244226s ago: executing program 3 (id=32): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000300)={0xf0f009, 0x1}) 12m57.562756871s ago: executing program 3 (id=35): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$TIOCCBRK(r2, 0x5428) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8924, &(0x7f0000000c00)={'nr0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x18, 0x31, 0x501, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) io_setup(0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r3) getsockopt$EBT_SO_GET_INIT_ENTRIES(r5, 0x0, 0x83, &(0x7f00000005c0)={'filter\x00', 0x0, 0x3, 0x4d, [0x1ff, 0x0, 0x1ff, 0x1ff, 0x190f, 0x1], 0x2, &(0x7f0000000100)=[{}, {}], &(0x7f0000000540)=""/77}, &(0x7f0000000140)=0x78) io_submit(0x0, 0x1, &(0x7f0000000640)=[0x0]) syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000001100)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 12m41.726941223s ago: executing program 32 (id=35): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$TIOCCBRK(r2, 0x5428) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8924, &(0x7f0000000c00)={'nr0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x18, 0x31, 0x501, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) io_setup(0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r3) getsockopt$EBT_SO_GET_INIT_ENTRIES(r5, 0x0, 0x83, &(0x7f00000005c0)={'filter\x00', 0x0, 0x3, 0x4d, [0x1ff, 0x0, 0x1ff, 0x1ff, 0x190f, 0x1], 0x2, &(0x7f0000000100)=[{}, {}], &(0x7f0000000540)=""/77}, &(0x7f0000000140)=0x78) io_submit(0x0, 0x1, &(0x7f0000000640)=[0x0]) syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000001100)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 7m3.636846628s ago: executing program 2 (id=800): bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) socket(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) 6m59.356312894s ago: executing program 2 (id=808): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000500)={0x0, 0x7, 0x1, 'r'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 6m53.162200882s ago: executing program 2 (id=820): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) unshare(0x2c060000) unshare(0x2c020400) listen(r0, 0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16], 0x44}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)="89", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)=ANY=[], 0x8397de475a1b5b02) 6m52.736667913s ago: executing program 2 (id=822): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) r1 = syz_open_procfs(0x0, 0x0) pread64(r1, &(0x7f0000001480)=""/4122, 0x101a, 0x99) 6m52.319213911s ago: executing program 2 (id=823): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a3", 0x68}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8", 0x94}, {&(0x7f0000001400)="9af390e2aadb61017e08249a2485ad46a590a90910858e1ceefc66db2ed8f32bf6be0e2f94e7e4db6454393a128402ed26580c7c5ebc85db639da17c927c23dbde640ab030889e8b61f26d270bc73b21c9ac8ba542e6b4ad2cd147059128ba038e4b9ebb20537f437b23b46ec790720e1fb74cef3c677e9978662a84cf2fcf73c73a5e763358496737af6284226bad34fb9083f87d853ab78c816cf32c90bd5c40ff6446214552d29745d34e0c4bfa623d00e5cbb393972371503122a0f44135db5654ace67cddb85a12df91fcf994fc680afe5d34268b23447589ef3f5383d152bf6dd104984297180f896ec8b1ba50952c5ab76e144f5636692d7cf17922c9b447ed6d59553ec6085e07413034875c1ae0947280e1a6f0d5e7f23b32e56ead8590d3269fdcb624cc870968b2f100bf3bc3d2ab105a5f61456d4969181fbd207b6f4d6d9ca0a1920daabec06d0c5e276d18f2571e88373dd41af9080d72aa88b10f8900b48acb61a61007dd4dd0e9240af5382a26f68bd706a83d8df76a4a5d02b39d07f97c4f86dad9e14eb957cc4be52b027a462262589929e3d035188dd9f0561e3ba2de6bafe743d9ae397e9aa423644fba8b2d6425ac1cd78c76e52e04d3a29e74075625fb5e674bab02843991ce804e0d04961f2978f3749c5ad83f355ae5da936fd6e0178d2bd12aacbe0205aa9a15579fd61d738f8d36412e814ba500edaf28ea68b0e96fb1839acf8416d8f5df7fad3b663f68e2ee5784fd01c7021130a490e629b1348acf3479e0392ecabbeeb18ec421c26e76f6f5c480e7decc85a0583a56180f199d26090b10ee5057ec4c1e04be948a5960acda014d646cf91bfdfb9d327f8ab545f8b41e8dbab94f195b189a8642a6b95e0ceb36b640fbdfe21925cc110bd2ef2c3fe24f12f95771b60e2ffbc47e58b2237b5574cadc32aab0f0db3202e4adc44a0651ef97703957857cfb6022578c97802f486bd7f48129f0c120700d0b70e048618a9f1de9f34dbb1f92dadc86f09e6288eb1bdbd1f700cc2df781654dfd57d9da779607080d3bc6dede5818aa8d6c99fa1ffdbb6a1a43040fe1379cf2a8b4b862db428c29e388a6e6b863bc818c2139a0d4238f10baf22f498b6629181f997ac280547e92fe300d0f8dd8b6724df5aa14be73cd630b808a29bfb52707b8db7d0065bd753b3773f8df58c74ea56f4582caa2fa8532b8049fd9ba775afc5b92b767ed0b35d4c086d9af6f7b7ed96f5f9d3734e703fc683fe0ed82b7763c67734067759e27b60036a3b4c53526716c175d75a9fa6ed019d3e1047bcb9c6510665de23cc2802804a0c3a347faba392282df430e5e6141f9eb660f7cb0eaedb832a7880c953bc0188c1f28eb466799e2768886ef81096847f50159278b572b0cca7744d6a572a81ddd2bcea73da3c8a59680bcaaadaf95e1fe91e41a8036835975b072a9587c560e3da854c96c64011755d08fef5228bb2db62a445bc0b9e17dea88854cd6a7c8a288727d5690fc4941978dee5eda2dbdc85915e7a2fdae978adb217b3f6b31cf69b51b9f805f8b447a4868b442933fc0e03860a7084230ff8fdff70665717f9c0bade31f87f5de99643e800feceb0dfdd6d1b67d4056a52f0efa2ed2b1142132c6242d917b46d939aade6a362bf586058385d7fcef1b4e358a09", 0x4a8}], 0x3}}], 0x1, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) 6m51.290071811s ago: executing program 2 (id=826): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) io_setup(0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x1, 0x8004) accept4(r3, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000180)=@multiplanar_userptr={0x7, 0xa, 0x4, 0x0, 0x89, {0x0, 0xea60}, {0x5, 0x8, 0xc1, 0x6a, 0x9, 0x5, "a8ed9837"}, 0xfff, 0x2, {0x0}, 0x5}) syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') socket$packet(0x11, 0x3, 0x300) 6m36.170789178s ago: executing program 33 (id=826): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) io_setup(0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x1, 0x8004) accept4(r3, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000180)=@multiplanar_userptr={0x7, 0xa, 0x4, 0x0, 0x89, {0x0, 0xea60}, {0x5, 0x8, 0xc1, 0x6a, 0x9, 0x5, "a8ed9837"}, 0xfff, 0x2, {0x0}, 0x5}) syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') socket$packet(0x11, 0x3, 0x300) 38.849667731s ago: executing program 0 (id=1516): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0xc080) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$tmpfs(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socket$kcm(0xa, 0x5, 0x0) 34.659894793s ago: executing program 0 (id=1525): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) close(0xffffffffffffffff) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) 32.610738794s ago: executing program 0 (id=1529): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) 31.714085636s ago: executing program 1 (id=1532): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setfsgid(0xee00) r1 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) syz_open_procfs(r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 30.914933954s ago: executing program 0 (id=1534): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0xc080) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$tmpfs(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socket$kcm(0xa, 0x5, 0x0) 30.100386889s ago: executing program 1 (id=1535): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000481000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f00002b0000/0x4000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x0, 0x0, &(0x7f0000000a80)}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0xf400000000000000) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) futex_waitv(&(0x7f0000001b00)=[{0x3, &(0x7f0000000180)=0x80000000000806, 0x6}], 0x1, 0x0, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002400010325bd70003868df252000000008000300"], 0x1c}, 0x1, 0x0, 0x0, 0x449d7}, 0x0) 25.981475977s ago: executing program 1 (id=1540): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 25.961628976s ago: executing program 5 (id=1541): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f00000000c0)="510003000000", 0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340), &(0x7f0000000280)) 25.358912119s ago: executing program 5 (id=1542): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) ioprio_set$pid(0x2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) chdir(&(0x7f0000000440)='./bus\x00') r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1000000000003, 0x3, 0x8000000000007, 0xaa, 0x3, 0x80001, {0x0, 0x180, 0x20fe, 0x0, 0x87, 0xd615, 0x9, 0x9, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 24.769911435s ago: executing program 1 (id=1543): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, 0x0, 0x0) 24.737666026s ago: executing program 0 (id=1544): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x80000001, 0x6, &(0x7f00000000c0)=""/6, 0x1f00, 0x50, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0xd, 0x935, 0xfffffffd}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000180)=[r0, r0], &(0x7f00000001c0)=[{0x3, 0x2, 0x10, 0x4}, {0x4, 0x3, 0x7, 0xb}, {0x4, 0x9, 0x8}], 0x10, 0x2}, 0x94) io_uring_setup(0x73c2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x17, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592e66e6229bc5ce1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b330600000000000000fd6700"}, 0xd8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f0000000380), &(0x7f00000002c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f000000040000000400000022"], 0x50) r7 = socket$inet(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f00000001c0), &(0x7f0000000600)=@buf="796aaf4a56e69e5f9bc84721e05ce228d398a6199df5dd3122af799e02be0ba1e1f4181fbab825b91ad560867129bdf038e403fd737c56840a9d5abe53989304db607c833e53893f2c879994041ca84b8fe2ff0834e0ae9309c7f128dd90ab5235531b7f7bea18d6b38366aa5a21a47b8651032dcaa256fb8dc7cf5e1c98afaa9c10d4b5b3b6a2db929f922e10522f33b5c22890eb7dd69dac28e6de35fb0444e3729243f28ffeffd72b54ae3a3fd0d3370adfbb0669bdeb254873af4aa3eb5d22deb5f0e0c86cd42611e95b", 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r6, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r7, 0x1}, 0x20) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x200}, 0x1c) r9 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r9, 0x40086603, &(0x7f0000000040)) 24.610827046s ago: executing program 4 (id=1545): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setfsgid(0xee00) r1 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) syz_open_procfs(r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001f000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000014010000033800001d13f8ff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 23.861829844s ago: executing program 5 (id=1546): openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000140)=ANY=[@ANYBLOB="6e725f696e6f6465733d702c00e8498dc2d6a8ee981c0a7ac5bbc4281b5612082cf8f4652de9646a44"]) 23.626929936s ago: executing program 4 (id=1547): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') pread64(r4, &(0x7f0000000200)=""/102390, 0x18ff6, 0x1000000000) getgroups(0x0, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x3, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendto$inet(r0, 0x0, 0x0, 0x20000080, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) 22.480881476s ago: executing program 5 (id=1548): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x8b, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a100000"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x100010, r2, 0x1000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg2\x00'}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}}, 0x3) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r3, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='7', 0x1, 0x4}]) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0), 0x4) syz_open_dev$hidraw(&(0x7f0000000140), 0x0, 0x14a040) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$inet(0x2, 0x3, 0x4) setuid(0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) sendfile(r4, r4, 0x0, 0x200000) 22.24420947s ago: executing program 4 (id=1549): r0 = socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000440)={0x0, 0x7, 0x16d6, 0xa, 0x9, 0xffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) pipe(0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) mkdir(&(0x7f0000000140)='./control\x00', 0x5) rmdir(&(0x7f0000000100)='./control\x00') 21.83797338s ago: executing program 4 (id=1550): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000481000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f00002b0000/0x4000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x0, 0x0, &(0x7f0000000a80)}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0xf400000000000000) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) futex_waitv(&(0x7f0000001b00)=[{0x3, &(0x7f0000000180)=0x80000000000806, 0x6}], 0x1, 0x0, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r3}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) 21.606863452s ago: executing program 1 (id=1551): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f00000000c0)="510003000000", 0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340), &(0x7f0000000280)) 21.036801187s ago: executing program 1 (id=1552): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x1ff, 0xe, 0x7fffffff, 0xa7, 0x2, 0x2, 0xb3, 0xfffffffc, 0x5, 0x1ff, 0xfff5, 0x1}}, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 18.154356435s ago: executing program 4 (id=1553): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0xc080) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$tmpfs(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socket$kcm(0xa, 0x5, 0x0) 17.923247139s ago: executing program 5 (id=1554): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a7b33da90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002868000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b3a400000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000075000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r5, &(0x7f00000008c0)=[{&(0x7f0000000580)}, {&(0x7f0000000600)="d1bc1884", 0x4}], 0x2) dup3(r3, r5, 0x6700000000000000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 16.998637518s ago: executing program 0 (id=1555): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r2, &(0x7f0000000100)=ANY=[], 0x408100) 15.733286416s ago: executing program 4 (id=1556): setfsgid(0xee00) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x300, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e77, 0x20000000, 0x94a, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r4, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000240), 0x3) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "f7539c4784660740", "c23dcb069d2fcac23d0f11001145753debfbc4f1a3942a0efa49e8340f462803", "74df9eed", "1e25dff4d9ab52fc"}, 0x38) setsockopt$inet6_tcp_int(r6, 0x11a, 0x4, &(0x7f0000000040)=0xfff7fffc, 0x1) keyctl$set_timeout(0xf, 0x0, 0x1) sendmsg$nl_route(r5, 0x0, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@my=0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in=@remote, @in6=@private0}}, {{@in=@broadcast}}}, &(0x7f00000004c0)=0xe4) getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)) 15.498667571s ago: executing program 5 (id=1557): openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000140)=ANY=[@ANYBLOB="6e725f696e6f6465733d702c00e8498dc2d6a8ee981c0a7ac5bbc4281b5612082cf8f4652de9646a44"]) 5.613538098s ago: executing program 34 (id=1552): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x1ff, 0xe, 0x7fffffff, 0xa7, 0x2, 0x2, 0xb3, 0xfffffffc, 0x5, 0x1ff, 0xfff5, 0x1}}, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 1.157860917s ago: executing program 35 (id=1555): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r2, &(0x7f0000000100)=ANY=[], 0x408100) 74.312368ms ago: executing program 36 (id=1557): openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000140)=ANY=[@ANYBLOB="6e725f696e6f6465733d702c00e8498dc2d6a8ee981c0a7ac5bbc4281b5612082cf8f4652de9646a44"]) 0s ago: executing program 37 (id=1556): setfsgid(0xee00) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x300, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e77, 0x20000000, 0x94a, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r4, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000240), 0x3) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "f7539c4784660740", "c23dcb069d2fcac23d0f11001145753debfbc4f1a3942a0efa49e8340f462803", "74df9eed", "1e25dff4d9ab52fc"}, 0x38) setsockopt$inet6_tcp_int(r6, 0x11a, 0x4, &(0x7f0000000040)=0xfff7fffc, 0x1) keyctl$set_timeout(0xf, 0x0, 0x1) sendmsg$nl_route(r5, 0x0, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@my=0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in=@remote, @in6=@private0}}, {{@in=@broadcast}}}, &(0x7f00000004c0)=0xe4) getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)) kernel console output (not intermixed with test programs): 2 [ 256.244257][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.349202][ C0] vkms_vblank_simulate: vblank timer overrun [ 258.354690][ T7193] netlink: 'syz.2.318': attribute type 1 has an invalid length. [ 259.268053][ T7204] futex_wake_op: syz.0.323 tries to shift op by 36; fix this program [ 263.205858][ T7192] syz.2.318 (7192): drop_caches: 2 [ 263.813868][ T5816] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 266.448489][ T7245] netlink: 4 bytes leftover after parsing attributes in process `syz.5.335'. [ 267.034064][ T7252] fuse: Unknown parameter '0x0000000000000003' [ 267.050769][ T5810] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 267.180765][ T5810] usb 1-1: device descriptor read/64, error -71 [ 267.512738][ T5810] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 267.519174][ T7259] netlink: 'syz.1.339': attribute type 1 has an invalid length. [ 267.740894][ T5810] usb 1-1: device descriptor read/64, error -71 [ 267.876088][ T5810] usb usb1-port1: attempt power cycle [ 268.381195][ T5810] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 268.796175][ T7258] syz.1.339 (7258): drop_caches: 2 [ 268.804979][ T5810] usb 1-1: device descriptor read/8, error -71 [ 269.251953][ T7274] futex_wake_op: syz.2.344 tries to shift op by 36; fix this program [ 272.280753][ T5957] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 272.352654][ T7296] fuse: Unknown parameter '0x0000000000000003' [ 272.430904][ T5957] usb 1-1: Using ep0 maxpacket: 16 [ 272.475563][ T5957] usb 1-1: config 0 interface 0 altsetting 91 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.475592][ T5957] usb 1-1: config 0 interface 0 altsetting 91 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.475609][ T5957] usb 1-1: config 0 interface 0 has no altsetting 0 [ 272.475637][ T5957] usb 1-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 272.475656][ T5957] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.524191][ T5957] usb 1-1: config 0 descriptor?? [ 272.680954][ T5810] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 272.873380][ T5810] usb 6-1: Using ep0 maxpacket: 8 [ 272.875740][ T5810] usb 6-1: no configurations [ 272.875758][ T5810] usb 6-1: can't read configurations, error -22 [ 273.018814][ T5957] usbhid 1-1:0.0: can't add hid device: -71 [ 273.018949][ T5957] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 273.108467][ T5810] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 273.210539][ T5957] usb 1-1: USB disconnect, device number 11 [ 273.324493][ T5810] usb 6-1: Using ep0 maxpacket: 8 [ 273.325363][ T5810] usb 6-1: no configurations [ 273.325378][ T5810] usb 6-1: can't read configurations, error -22 [ 273.325982][ T5810] usb usb6-port1: attempt power cycle [ 273.469743][ T7304] tmpfs: Unsupported parameter 'huge' [ 273.700759][ T5810] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 273.722244][ T5810] usb 6-1: Using ep0 maxpacket: 8 [ 273.722739][ T5810] usb 6-1: no configurations [ 273.722748][ T5810] usb 6-1: can't read configurations, error -22 [ 273.850792][ T5810] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 273.900814][ T5810] usb 6-1: Using ep0 maxpacket: 8 [ 273.901609][ T5810] usb 6-1: no configurations [ 273.901619][ T5810] usb 6-1: can't read configurations, error -22 [ 273.903374][ T5810] usb usb6-port1: unable to enumerate USB device [ 274.051062][ T5957] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 274.482937][ T5957] usb 1-1: device descriptor read/64, error -71 [ 274.884427][ T7310] Process accounting resumed [ 274.963784][ T5957] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 275.053588][ T7315] loop2: detected capacity change from 0 to 7 [ 275.100765][ T5957] usb 1-1: device descriptor read/64, error -71 [ 275.106381][ T7129] Dev loop2: unable to read RDB block 7 [ 275.106412][ T7129] loop2: AHDI p1 p2 p3 [ 275.106440][ T7129] loop2: partition table partially beyond EOD, truncated [ 275.140309][ T7129] loop2: p1 start 1601398130 is beyond EOD, truncated [ 275.140336][ T7129] loop2: p2 start 1702059890 is beyond EOD, truncated [ 275.147828][ T7315] Dev loop2: unable to read RDB block 7 [ 275.147860][ T7315] loop2: AHDI p1 p2 p3 [ 275.147888][ T7315] loop2: partition table partially beyond EOD, truncated [ 275.148141][ T7315] loop2: p1 start 1601398130 is beyond EOD, truncated [ 275.148158][ T7315] loop2: p2 start 1702059890 is beyond EOD, truncated [ 275.214030][ T5957] usb usb1-port1: attempt power cycle [ 275.580753][ T5957] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 275.612173][ T5957] usb 1-1: device descriptor read/8, error -71 [ 275.870765][ T5957] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 280.914701][ T5957] usb 1-1: device descriptor read/8, error -110 [ 281.030931][ T5957] usb usb1-port1: unable to enumerate USB device [ 285.750758][ T5810] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 285.910870][ T5810] usb 3-1: Using ep0 maxpacket: 8 [ 285.913018][ T5810] usb 3-1: no configurations [ 285.913035][ T5810] usb 3-1: can't read configurations, error -22 [ 286.321816][ C1] vkms_vblank_simulate: vblank timer overrun [ 286.323111][ T5810] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 286.677201][ T5810] usb 3-1: Using ep0 maxpacket: 8 [ 286.724976][ T5810] usb 3-1: no configurations [ 286.725424][ T5810] usb 3-1: can't read configurations, error -22 [ 286.832324][ T5810] usb usb3-port1: attempt power cycle [ 287.276447][ C1] vkms_vblank_simulate: vblank timer overrun [ 287.337946][ T5810] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 287.351517][ T5810] usb 3-1: Using ep0 maxpacket: 8 [ 287.352192][ T5810] usb 3-1: no configurations [ 287.352202][ T5810] usb 3-1: can't read configurations, error -22 [ 287.520862][ T5810] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 287.589985][ T5810] usb 3-1: device descriptor read/8, error -71 [ 287.721574][ C1] vkms_vblank_simulate: vblank timer overrun [ 287.722478][ T5810] usb usb3-port1: unable to enumerate USB device [ 288.460433][ C1] vkms_vblank_simulate: vblank timer overrun [ 288.698585][ C1] vkms_vblank_simulate: vblank timer overrun [ 289.654640][ C1] vkms_vblank_simulate: vblank timer overrun [ 289.740340][ T5957] hid_parser_main: 73 callbacks suppressed [ 289.740362][ T5957] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 289.740391][ T5957] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 289.740415][ T5957] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 289.740440][ T5957] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 289.740464][ T5957] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 289.740489][ T5957] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 289.740513][ T5957] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 289.740536][ T5957] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 289.740559][ T5957] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 289.740582][ T5957] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 289.759216][ T5957] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.03 Device [syz1] on syz1 [ 289.859495][ C1] vkms_vblank_simulate: vblank timer overrun [ 289.861747][ T5816] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 290.443142][ T5957] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 290.603397][ T5957] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 290.603424][ T5957] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.603442][ T5957] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 290.603494][ T5957] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 290.607078][ T5957] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 290.607105][ T5957] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 290.607123][ T5957] usb 5-1: Product: syz [ 290.607136][ T5957] usb 5-1: Manufacturer: syz [ 290.661529][ T5957] cdc_wdm 5-1:1.0: skipping garbage [ 290.661580][ T5957] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 290.720775][ T5810] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 290.741193][ T7397] fido_id[7397]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 291.020712][ T5810] usb 3-1: Using ep0 maxpacket: 8 [ 291.021603][ T5810] usb 3-1: no configurations [ 291.021619][ T5810] usb 3-1: can't read configurations, error -22 [ 291.449298][ T5810] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 291.861973][ T5810] usb 3-1: Using ep0 maxpacket: 8 [ 291.862862][ T5810] usb 3-1: no configurations [ 291.862878][ T5810] usb 3-1: can't read configurations, error -22 [ 291.863275][ T5810] usb usb3-port1: attempt power cycle [ 292.443250][ T5810] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 292.464013][ T5810] usb 3-1: Using ep0 maxpacket: 8 [ 292.465225][ T5810] usb 3-1: no configurations [ 292.465241][ T5810] usb 3-1: can't read configurations, error -22 [ 292.590802][ T5810] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 292.612322][ T5810] usb 3-1: Using ep0 maxpacket: 8 [ 292.613350][ T5810] usb 3-1: no configurations [ 292.613365][ T5810] usb 3-1: can't read configurations, error -22 [ 292.613765][ T5810] usb usb3-port1: unable to enumerate USB device [ 292.801570][ T5889] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 293.230741][ T5889] usb 6-1: Using ep0 maxpacket: 8 [ 293.233044][ T5889] usb 6-1: config 0 has no interfaces? [ 293.233079][ T5889] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 293.233101][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.274496][ T5889] usb 6-1: config 0 descriptor?? [ 293.396548][ T7424] loop2: detected capacity change from 0 to 7 [ 293.404361][ T7424] Dev loop2: unable to read RDB block 7 [ 293.404404][ T7424] loop2: unable to read partition table [ 293.404748][ T7424] loop2: partition table beyond EOD, truncated [ 293.406106][ T7424] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 293.563663][ T7418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.569039][ T7418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.577924][ T10] usb 6-1: USB disconnect, device number 7 [ 293.637130][ T5957] usb 5-1: USB disconnect, device number 7 [ 294.920791][ T5957] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 295.057566][ T5957] usb 5-1: device descriptor read/64, error -71 [ 295.570814][ T5957] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 295.700957][ T5957] usb 5-1: device descriptor read/64, error -71 [ 295.821430][ T5957] usb usb5-port1: attempt power cycle [ 296.161342][ T7446] misc userio: No port type given on /dev/userio [ 296.510970][ T5957] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 296.531769][ T5957] usb 5-1: device descriptor read/8, error -71 [ 296.770789][ T5957] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 297.393161][ T5957] usb 5-1: device descriptor read/8, error -71 [ 297.501334][ T5957] usb usb5-port1: unable to enumerate USB device [ 297.850771][ T5888] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 297.940891][ T5810] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 298.004625][ T5888] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 298.004653][ T5888] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.004670][ T5888] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 298.004719][ T5888] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 298.036235][ T5888] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 298.036263][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 298.036281][ T5888] usb 1-1: Product: syz [ 298.036294][ T5888] usb 1-1: Manufacturer: syz [ 298.109712][ T5888] cdc_wdm 1-1:1.0: skipping garbage [ 298.109754][ T5888] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 298.160905][ T5810] usb 5-1: Using ep0 maxpacket: 8 [ 298.165740][ T5810] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.165766][ T5810] usb 5-1: config 0 has no interfaces? [ 298.165795][ T5810] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 298.165815][ T5810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.246758][ T5810] usb 5-1: config 0 descriptor?? [ 299.042939][ C0] vkms_vblank_simulate: vblank timer overrun [ 299.396151][ T7484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.415'. [ 300.744606][ T995] usb 5-1: USB disconnect, device number 12 [ 300.883200][ T5962] usb 1-1: USB disconnect, device number 16 [ 301.407082][ C0] vkms_vblank_simulate: vblank timer overrun [ 303.865955][ C1] vkms_vblank_simulate: vblank timer overrun [ 304.417080][ C1] vkms_vblank_simulate: vblank timer overrun [ 305.054690][ C1] vkms_vblank_simulate: vblank timer overrun [ 305.357179][ C1] vkms_vblank_simulate: vblank timer overrun [ 305.612500][ T7548] Process accounting resumed [ 306.535909][ C1] vkms_vblank_simulate: vblank timer overrun [ 306.752596][ C1] vkms_vblank_simulate: vblank timer overrun [ 307.004576][ C1] vkms_vblank_simulate: vblank timer overrun [ 307.589258][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.334076][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.301289][ T7586] Process accounting resumed [ 309.838099][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.946806][ C1] vkms_vblank_simulate: vblank timer overrun [ 310.384376][ C1] vkms_vblank_simulate: vblank timer overrun [ 311.060744][ C1] vkms_vblank_simulate: vblank timer overrun [ 311.536025][ C1] vkms_vblank_simulate: vblank timer overrun [ 312.355623][ T5816] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 315.152091][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 317.305953][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.306027][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.631570][ T7673] fuse: Unknown parameter 'fd0x0000000000000003' [ 321.381141][ T5816] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 325.075758][ T7723] wg1: entered promiscuous mode [ 325.075782][ T7723] wg1: entered allmulticast mode [ 330.148929][ T7758] syz.5.496 (7758): /proc/7754/oom_adj is deprecated, please use /proc/7754/oom_score_adj instead. [ 330.911249][ T7759] loop2: detected capacity change from 0 to 7 [ 330.935921][ T7759] Dev loop2: unable to read RDB block 7 [ 330.935968][ T7759] loop2: unable to read partition table [ 330.936214][ T7759] loop2: partition table beyond EOD, truncated [ 330.936232][ T7759] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 331.973851][ T7767] ======================================================= [ 331.973851][ T7767] WARNING: The mand mount option has been deprecated and [ 331.973851][ T7767] and is ignored by this kernel. Remove the mand [ 331.973851][ T7767] option from the mount to silence this warning. [ 331.973851][ T7767] ======================================================= [ 333.321797][ T5889] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 333.471540][ T5889] usb 1-1: Using ep0 maxpacket: 16 [ 333.475848][ T5889] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 333.475879][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 333.479105][ T5889] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 333.479134][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.479152][ T5889] usb 1-1: Product: syz [ 333.479165][ T5889] usb 1-1: Manufacturer: syz [ 333.479178][ T5889] usb 1-1: SerialNumber: syz [ 333.668240][ T5889] usb 1-1: config 0 descriptor?? [ 333.732518][ T5889] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 333.733075][ T5889] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 335.189887][ T5889] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 335.190829][ T5889] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 335.423943][ T5889] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 335.423965][ T5889] em28xx 1-1:0.0: No AC97 audio processor [ 335.462993][ T5889] usb 1-1: USB disconnect, device number 17 [ 335.473965][ T7796] futex_wake_op: syz.5.509 tries to shift op by 36; fix this program [ 335.495742][ T5889] em28xx 1-1:0.0: Disconnecting em28xx [ 335.512808][ T5889] em28xx 1-1:0.0: Freeing device [ 340.421399][ T7834] vxcan0: tx address claim with dest, not broadcast [ 341.000687][ T5889] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 341.170739][ T5889] usb 5-1: Using ep0 maxpacket: 16 [ 341.174108][ T5889] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 341.174236][ T5889] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.174261][ T5889] usb 5-1: config 0 has no interface number 0 [ 341.230275][ T5889] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 341.230307][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.230326][ T5889] usb 5-1: Product: syz [ 341.230340][ T5889] usb 5-1: Manufacturer: syz [ 341.230354][ T5889] usb 5-1: SerialNumber: syz [ 341.343836][ T5889] usb 5-1: config 0 descriptor?? [ 341.572723][ T5889] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 341.572764][ T5889] uvcvideo 5-1:0.105: No valid video chain found. [ 341.610532][ T5889] usb 5-1: USB disconnect, device number 13 [ 342.613736][ T7854] futex_wake_op: syz.5.526 tries to shift op by 36; fix this program [ 352.133247][ T7892] syz.1.537 (7892): drop_caches: 2 [ 354.155862][ T7933] futex_wake_op: syz.2.548 tries to shift op by 36; fix this program [ 358.044957][ T7975] binder: BINDER_SET_CONTEXT_MGR already set [ 358.044971][ T7975] binder: 7973:7975 ioctl 4018620d 200000004a80 returned -16 [ 359.130169][ C1] vkms_vblank_simulate: vblank timer overrun [ 361.316278][ T7998] Process accounting resumed [ 361.594353][ T8015] binder: BINDER_SET_CONTEXT_MGR already set [ 361.594369][ T8015] binder: 8012:8015 ioctl 4018620d 200000004a80 returned -16 [ 361.611560][ T5816] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 362.275670][ C1] vkms_vblank_simulate: vblank timer overrun [ 362.525392][ C1] vkms_vblank_simulate: vblank timer overrun [ 363.092954][ C1] vkms_vblank_simulate: vblank timer overrun [ 363.390177][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.230065][ T8037] Process accounting resumed [ 364.981007][ T8062] binder: BINDER_SET_CONTEXT_MGR already set [ 364.981023][ T8062] binder: 8060:8062 ioctl 4018620d 200000004a80 returned -16 [ 365.336243][ T8066] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan1, syncid = 0, id = 0 [ 365.393071][ T8067] IPVS: stopping backup sync thread 8066 ... [ 369.267138][ T8090] Process accounting resumed [ 369.285940][ T8096] binder: 8095:8096 ioctl c0306201 0 returned -14 [ 370.549938][ T8106] vxcan0: tx address claim with dest, not broadcast [ 370.910756][ T976] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 370.959286][ T8112] loop2: detected capacity change from 0 to 7 [ 370.973522][ T7129] Dev loop2: unable to read RDB block 7 [ 370.973569][ T7129] loop2: unable to read partition table [ 370.973850][ T7129] loop2: partition table beyond EOD, truncated [ 371.025122][ T8112] Dev loop2: unable to read RDB block 7 [ 371.025166][ T8112] loop2: unable to read partition table [ 371.025393][ T8112] loop2: partition table beyond EOD, truncated [ 371.033705][ T8112] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 371.060703][ T976] usb 1-1: Using ep0 maxpacket: 16 [ 371.063354][ T976] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.063376][ T976] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 371.066430][ T976] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 371.066457][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.066476][ T976] usb 1-1: Product: syz [ 371.066488][ T976] usb 1-1: Manufacturer: syz [ 371.066501][ T976] usb 1-1: SerialNumber: syz [ 371.127114][ T976] usb 1-1: config 0 descriptor?? [ 371.250768][ T5869] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 371.407106][ T5869] usb 2-1: Using ep0 maxpacket: 8 [ 371.427716][ T5869] usb 2-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 371.427759][ T5869] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 371.427780][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.645367][ T8123] tty tty2: ldisc open failed (-12), clearing slot 1 [ 373.390786][ C1] sd 0:0:1:0: [sda] tag#2370 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 373.390858][ C1] sd 0:0:1:0: [sda] tag#2370 CDB: Read(6) 08 00 00 00 00 00 00 00 8b 00 00 01 [ 373.490452][ T8127] syz.4.607 (8127): drop_caches: 2 [ 373.593882][ T8127] syz.4.607 (8127): drop_caches: 2 [ 373.630765][ T8136] Process accounting resumed [ 373.726689][ T8141] netlink: 4 bytes leftover after parsing attributes in process `syz.5.610'. [ 373.842017][ T976] usb 1-1: USB disconnect, device number 18 [ 374.754145][ T5931] usb 2-1: USB disconnect, device number 14 [ 375.791305][ T8155] binder: 8150:8155 ioctl c0306201 0 returned -14 [ 377.490747][ T976] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 377.643607][ T976] usb 1-1: Using ep0 maxpacket: 16 [ 377.668477][ T976] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 377.668507][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.668525][ T976] usb 1-1: Product: syz [ 377.668539][ T976] usb 1-1: Manufacturer: syz [ 377.668552][ T976] usb 1-1: SerialNumber: syz [ 377.805641][ T976] usb 1-1: config 0 descriptor?? [ 378.680743][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.680815][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.785230][ T8189] blktrace: Concurrent blktraces are not allowed on sg0 [ 381.013402][ T5931] usb 1-1: USB disconnect, device number 19 [ 384.950936][ C0] vkms_vblank_simulate: vblank timer overrun [ 385.275647][ C0] vkms_vblank_simulate: vblank timer overrun [ 385.462068][ C0] vkms_vblank_simulate: vblank timer overrun [ 385.739857][ C0] vkms_vblank_simulate: vblank timer overrun [ 386.106736][ C0] vkms_vblank_simulate: vblank timer overrun [ 386.988775][ C0] vkms_vblank_simulate: vblank timer overrun [ 387.152536][ C0] vkms_vblank_simulate: vblank timer overrun [ 387.217558][ C0] vkms_vblank_simulate: vblank timer overrun [ 387.279990][ C0] vkms_vblank_simulate: vblank timer overrun [ 387.414189][ C0] vkms_vblank_simulate: vblank timer overrun [ 387.462474][ C0] vkms_vblank_simulate: vblank timer overrun [ 387.780837][ T5888] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 387.988948][ C0] vkms_vblank_simulate: vblank timer overrun [ 388.254427][ T8262] EXT4-fs (nbd4): unable to read superblock [ 388.931199][ C0] vkms_vblank_simulate: vblank timer overrun [ 388.969552][ T5888] usb 3-1: Using ep0 maxpacket: 16 [ 389.063842][ T5888] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 389.063872][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.063890][ T5888] usb 3-1: Product: syz [ 389.063903][ T5888] usb 3-1: Manufacturer: syz [ 389.063916][ T5888] usb 3-1: SerialNumber: syz [ 389.116628][ T5888] usb 3-1: config 0 descriptor?? [ 389.321052][ T8268] futex_wake_op: syz.4.645 tries to shift op by 36; fix this program [ 389.536192][ T976] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 389.684278][ T976] usb 6-1: config index 0 descriptor too short (expected 36, got 15) [ 389.684304][ T976] usb 6-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 389.684321][ T976] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 389.684356][ T976] usb 6-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 389.684377][ T976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.743606][ T976] usb 6-1: config 0 descriptor?? [ 395.431022][ T5931] usb 6-1: USB disconnect, device number 8 [ 395.570770][ T995] usb 3-1: USB disconnect, device number 15 [ 398.111730][ T8299] blktrace: Concurrent blktraces are not allowed on sg0 [ 399.283239][ T8320] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 400.292757][ T995] hid_parser_main: 73 callbacks suppressed [ 400.292780][ T995] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 400.292810][ T995] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 400.292834][ T995] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 400.292857][ T995] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 400.292881][ T995] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 400.292905][ T995] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 400.292927][ T995] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 400.295374][ T995] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 400.295411][ T995] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 400.295437][ T995] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 400.749135][ T995] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.03 Device [syz1] on syz1 [ 402.145838][ T8334] fido_id[8334]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 402.189729][ T8339] futex_wake_op: syz.4.665 tries to shift op by 36; fix this program [ 404.029951][ T976] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 404.934036][ T976] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 404.934053][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.934063][ T976] usb 1-1: Product: syz [ 404.934070][ T976] usb 1-1: Manufacturer: syz [ 404.934077][ T976] usb 1-1: SerialNumber: syz [ 405.512103][ T976] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 405.512157][ T976] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 405.512747][ T976] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 405.678208][ T976] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 405.724723][ T8357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.668'. [ 406.519796][ T8372] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 406.519837][ T8372] F2FS-fs (loop11): Can't find valid F2FS filesystem in 1th superblock [ 406.520132][ T8372] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 406.520226][ T8372] F2FS-fs (loop11): Can't find valid F2FS filesystem in 2th superblock [ 406.637247][ T5931] usb 1-1: USB disconnect, device number 20 [ 408.920343][ T8387] kernel profiling enabled (shift: 12) [ 409.732516][ T8404] netlink: 12 bytes leftover after parsing attributes in process `syz.0.682'. [ 409.774087][ C0] vkms_vblank_simulate: vblank timer overrun [ 410.727307][ T8403] Process accounting resumed [ 411.560684][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 411.735395][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 411.735412][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.735422][ T10] usb 3-1: Product: syz [ 411.735429][ T10] usb 3-1: Manufacturer: syz [ 411.735436][ T10] usb 3-1: SerialNumber: syz [ 412.334724][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 412.334790][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 412.335942][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 413.387268][ T10] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 415.088400][ T10] usb 3-1: USB disconnect, device number 16 [ 415.990825][ T8437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.692'. [ 415.990849][ T8437] netlink: 20 bytes leftover after parsing attributes in process `syz.0.692'. [ 416.584477][ T8451] netlink: 12 bytes leftover after parsing attributes in process `syz.4.696'. [ 417.210738][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 417.406336][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 417.406366][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.406384][ T10] usb 3-1: Product: syz [ 417.406397][ T10] usb 3-1: Manufacturer: syz [ 417.406411][ T10] usb 3-1: SerialNumber: syz [ 417.440681][ T995] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 417.590709][ T995] usb 1-1: Using ep0 maxpacket: 8 [ 417.597436][ T995] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 417.597462][ T995] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.597481][ T995] usb 1-1: config 0 has no interface number 0 [ 417.597585][ T995] usb 1-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 417.597608][ T995] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 417.597628][ T995] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 417.643111][ T995] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 417.643141][ T995] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 417.643160][ T995] usb 1-1: SerialNumber: syz [ 417.699359][ T995] usb 1-1: config 0 descriptor?? [ 417.725468][ T995] hso 1-1:0.1: Failed to find BULK IN ep [ 418.608738][ T995] usb 1-1: USB disconnect, device number 21 [ 419.013724][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 419.013758][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 419.014271][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 419.086355][ T10] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 420.048222][ T995] usb 3-1: USB disconnect, device number 17 [ 421.082388][ T8511] Process accounting resumed [ 424.756891][ T8542] blktrace: Concurrent blktraces are not allowed on sg0 [ 424.880784][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 425.565134][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 425.565195][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.565244][ T10] usb 1-1: Product: syz [ 425.565258][ T10] usb 1-1: Manufacturer: syz [ 425.565311][ T10] usb 1-1: SerialNumber: syz [ 425.727939][ T8545] Process accounting resumed [ 426.847405][ T995] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 427.091077][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 427.091191][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 427.096475][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 427.177820][ T10] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 427.276018][ T995] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.276072][ T995] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 427.276094][ T995] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.310479][ T995] usb 2-1: config 0 descriptor?? [ 427.355445][ T995] pwc: Askey VC010 type 2 USB webcam detected. [ 428.472989][ T995] pwc: recv_control_msg error -32 req 02 val 2b00 [ 428.712241][ T995] pwc: recv_control_msg error -71 req 02 val 2c00 [ 428.712629][ T995] pwc: recv_control_msg error -71 req 04 val 1000 [ 428.713001][ T995] pwc: recv_control_msg error -71 req 04 val 1300 [ 428.713425][ T995] pwc: recv_control_msg error -71 req 04 val 1400 [ 428.713786][ T995] pwc: recv_control_msg error -71 req 02 val 2000 [ 428.714163][ T995] pwc: recv_control_msg error -71 req 02 val 2100 [ 428.714567][ T995] pwc: recv_control_msg error -71 req 04 val 1500 [ 428.714973][ T995] pwc: recv_control_msg error -71 req 02 val 2500 [ 428.715328][ T995] pwc: recv_control_msg error -71 req 02 val 2400 [ 428.715688][ T995] pwc: recv_control_msg error -71 req 02 val 2600 [ 428.716131][ T995] pwc: recv_control_msg error -71 req 02 val 2900 [ 428.716502][ T995] pwc: recv_control_msg error -71 req 02 val 2800 [ 428.716982][ T995] pwc: recv_control_msg error -71 req 04 val 1100 [ 428.717335][ T995] pwc: recv_control_msg error -71 req 04 val 1200 [ 428.786666][ T976] usb 1-1: USB disconnect, device number 22 [ 428.879953][ T995] pwc: Registered as video103. [ 428.923729][ T995] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input15 [ 428.951629][ T995] usb 2-1: USB disconnect, device number 15 [ 429.907921][ T8574] Process accounting resumed [ 431.746647][ C0] vkms_vblank_simulate: vblank timer overrun [ 431.830300][ C0] vkms_vblank_simulate: vblank timer overrun [ 431.838936][ T8586] blktrace: Concurrent blktraces are not allowed on sg0 [ 432.190666][ C0] vkms_vblank_simulate: vblank timer overrun [ 432.233537][ C0] vkms_vblank_simulate: vblank timer overrun [ 432.599515][ C0] vkms_vblank_simulate: vblank timer overrun [ 433.260743][ T995] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 433.418623][ T995] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 433.418652][ T995] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.418670][ T995] usb 1-1: Product: syz [ 433.418683][ T995] usb 1-1: Manufacturer: syz [ 433.418696][ T995] usb 1-1: SerialNumber: syz [ 434.298415][ C0] vkms_vblank_simulate: vblank timer overrun [ 434.516653][ T8609] binder: 8608:8609 ioctl 4018620d 0 returned -22 [ 435.008084][ C0] vkms_vblank_simulate: vblank timer overrun [ 435.351472][ C0] vkms_vblank_simulate: vblank timer overrun [ 435.355641][ T995] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 435.355694][ T995] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 435.356479][ T995] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 435.583404][ C0] vkms_vblank_simulate: vblank timer overrun [ 435.690071][ C0] vkms_vblank_simulate: vblank timer overrun [ 435.844074][ C0] vkms_vblank_simulate: vblank timer overrun [ 436.073561][ C0] vkms_vblank_simulate: vblank timer overrun [ 436.222895][ T995] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 436.788151][ T5889] usb 1-1: USB disconnect, device number 23 [ 437.738178][ C0] vkms_vblank_simulate: vblank timer overrun [ 437.754124][ T8634] blktrace: Concurrent blktraces are not allowed on sg0 [ 438.036521][ T8642] binder: 8640:8642 ioctl 4018620d 0 returned -22 [ 438.801329][ C0] vkms_vblank_simulate: vblank timer overrun [ 439.080693][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 439.251284][ C0] vkms_vblank_simulate: vblank timer overrun [ 439.289783][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 439.289801][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.289811][ T10] usb 5-1: Product: syz [ 439.289818][ T10] usb 5-1: Manufacturer: syz [ 439.289825][ T10] usb 5-1: SerialNumber: syz [ 440.120230][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.120301][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.217938][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 440.218088][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 440.218934][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 440.264483][ T10] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 442.223921][ T5889] usb 5-1: USB disconnect, device number 14 [ 442.629268][ C0] vkms_vblank_simulate: vblank timer overrun [ 443.582078][ C0] vkms_vblank_simulate: vblank timer overrun [ 444.827249][ C0] vkms_vblank_simulate: vblank timer overrun [ 445.768550][ T8685] blktrace: Concurrent blktraces are not allowed on sg0 [ 446.061450][ T8690] binder: 8689:8690 ioctl 4018620d 0 returned -22 [ 446.475354][ C0] vkms_vblank_simulate: vblank timer overrun [ 457.039314][ T8719] Process accounting resumed [ 460.105568][ T8755] netlink: 72 bytes leftover after parsing attributes in process `syz.4.786'. [ 462.316062][ T8762] blktrace: Concurrent blktraces are not allowed on sg0 [ 466.987827][ T5802] IPVS: starting estimator thread 0... [ 467.101184][ T8797] IPVS: using max 8 ests per chain, 19200 per kthread [ 467.134536][ T8799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.798'. [ 471.730783][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 471.915086][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 471.918619][ T10] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 471.918649][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.924799][ T10] usb 3-1: config 0 descriptor?? [ 472.208024][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 472.232048][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 472.233292][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 472.233352][ T10] usb 3-1: media controller created [ 472.432317][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 473.460651][ T10] stb0899_attach: Driver disabled by Kconfig [ 473.460667][ T10] az6027: no front-end attached [ 473.460667][ T10] [ 473.461107][ T10] az6027: usb out operation failed. (-71) [ 473.461123][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 473.465670][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input16 [ 474.380936][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 474.380974][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 474.440461][ T10] usb 3-1: USB disconnect, device number 18 [ 477.705258][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 482.158902][ T8902] Process accounting resumed [ 494.484073][ T8945] Process accounting resumed [ 499.797711][ T8989] Process accounting resumed [ 500.529342][ T9006] trusted_key: syz.5.857 sent an empty control message without MSG_MORE. [ 500.601846][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 500.614908][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 500.620033][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 500.622223][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 500.631810][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 502.239100][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.239146][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.061542][ T5816] Bluetooth: hci2: command tx timeout [ 507.903752][ T61] Bluetooth: hci2: command tx timeout [ 510.323353][ T61] Bluetooth: hci2: command tx timeout [ 513.008283][ T61] Bluetooth: hci2: command tx timeout [ 513.107610][ T3622] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.062664][ T9055] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 514.062708][ T9055] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 514.062737][ T9055] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 514.266330][ T9043] Process accounting resumed [ 517.598716][ T3622] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.534898][ T9108] Process accounting resumed [ 522.080279][ T3622] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.129434][ T9134] futex_wake_op: syz.4.891 tries to shift op by 36; fix this program [ 524.973784][ T3622] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.620030][ T9002] chnl_net:caif_netlink_parms(): no params data found [ 531.209619][ T9002] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.209750][ T9002] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.209986][ T9002] bridge_slave_0: entered allmulticast mode [ 531.242386][ T9002] bridge_slave_0: entered promiscuous mode [ 531.412478][ T9002] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.412563][ T9002] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.420900][ T9002] bridge_slave_1: entered allmulticast mode [ 531.422590][ T9002] bridge_slave_1: entered promiscuous mode [ 532.002029][ T5931] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 532.792672][ T9206] futex_wake_op: syz.4.907 tries to shift op by 36; fix this program [ 532.820646][ T5931] usb 1-1: Using ep0 maxpacket: 16 [ 532.822630][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 532.831256][ T5931] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 532.831283][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.831301][ T5931] usb 1-1: Product: syz [ 532.831314][ T5931] usb 1-1: Manufacturer: syz [ 532.831327][ T5931] usb 1-1: SerialNumber: syz [ 533.110746][ T5931] usb 1-1: config 0 descriptor?? [ 533.174965][ T5931] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 533.174999][ T5931] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 533.241455][ T9002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.262162][ T9002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.480096][ T5931] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 538.514919][ T5931] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 538.514955][ T5931] em28xx 1-1:0.0: board has no eeprom [ 538.688474][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 538.751042][ T5931] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 538.751070][ T5931] em28xx 1-1:0.0: dvb set to bulk mode. [ 538.757310][ T5802] em28xx 1-1:0.0: Binding DVB extension [ 538.800743][ T5931] usb 1-1: USB disconnect, device number 24 [ 538.803095][ T5931] em28xx 1-1:0.0: Disconnecting em28xx [ 538.955615][ T5802] em28xx 1-1:0.0: Registering input extension [ 538.956134][ T5931] em28xx 1-1:0.0: Closing input extension [ 538.978972][ T5931] em28xx 1-1:0.0: Freeing device [ 539.795877][ T9235] netlink: 28 bytes leftover after parsing attributes in process `syz.4.915'. [ 539.795899][ T9235] netlink: 24 bytes leftover after parsing attributes in process `syz.4.915'. [ 540.388000][ C1] vkms_vblank_simulate: vblank timer overrun [ 540.441922][ T9002] team0: Port device team_slave_0 added [ 540.459894][ T9002] team0: Port device team_slave_1 added [ 540.570113][ C1] vkms_vblank_simulate: vblank timer overrun [ 540.704625][ T3622] bridge_slave_1: left allmulticast mode [ 540.704652][ T3622] bridge_slave_1: left promiscuous mode [ 540.704890][ T3622] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.927408][ C1] vkms_vblank_simulate: vblank timer overrun [ 540.953414][ T3622] bridge_slave_0: left allmulticast mode [ 540.953441][ T3622] bridge_slave_0: left promiscuous mode [ 540.953707][ T3622] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.733233][ C1] vkms_vblank_simulate: vblank timer overrun [ 542.136573][ C1] vkms_vblank_simulate: vblank timer overrun [ 542.295789][ C1] vkms_vblank_simulate: vblank timer overrun [ 542.466214][ C1] vkms_vblank_simulate: vblank timer overrun [ 542.920158][ C1] vkms_vblank_simulate: vblank timer overrun [ 542.959016][ T5802] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 543.088495][ C1] vkms_vblank_simulate: vblank timer overrun [ 543.110644][ T5802] usb 6-1: Using ep0 maxpacket: 16 [ 543.113094][ T5802] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 543.137638][ T5802] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 543.137665][ T5802] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.137683][ T5802] usb 6-1: Product: syz [ 543.137696][ T5802] usb 6-1: Manufacturer: syz [ 543.137710][ T5802] usb 6-1: SerialNumber: syz [ 543.519148][ T5802] usb 6-1: config 0 descriptor?? [ 543.546896][ T5802] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 543.546930][ T5802] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 543.662856][ C1] vkms_vblank_simulate: vblank timer overrun [ 543.940800][ C1] vkms_vblank_simulate: vblank timer overrun [ 543.971752][ T9260] Process accounting resumed [ 544.317088][ T5802] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 544.721550][ C1] vkms_vblank_simulate: vblank timer overrun [ 544.770365][ C1] vkms_vblank_simulate: vblank timer overrun [ 544.924397][ C1] vkms_vblank_simulate: vblank timer overrun [ 545.142621][ C1] vkms_vblank_simulate: vblank timer overrun [ 545.189366][ T5802] em28xx 6-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 545.189385][ T5802] em28xx 6-1:0.0: board has no eeprom [ 545.296752][ C1] vkms_vblank_simulate: vblank timer overrun [ 546.030775][ T5802] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 546.030813][ T5802] em28xx 6-1:0.0: dvb set to bulk mode. [ 546.046541][ T5962] em28xx 6-1:0.0: Binding DVB extension [ 546.052353][ T5802] usb 6-1: USB disconnect, device number 9 [ 546.054590][ T5802] em28xx 6-1:0.0: Disconnecting em28xx [ 546.213172][ T5962] em28xx 6-1:0.0: Registering input extension [ 546.214224][ T5802] em28xx 6-1:0.0: Closing input extension [ 549.210352][ T5802] em28xx 6-1:0.0: Freeing device [ 549.261381][ T3622] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 549.321419][ T3622] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.374072][ T3622] bond0 (unregistering): Released all slaves [ 549.408506][ T9257] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 549.408549][ T9257] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 549.408568][ T9257] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 549.844566][ T9002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.844578][ T9002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.844591][ T9002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.879508][ T9002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.879524][ T9002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.879549][ T9002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.550705][ T5931] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 550.646845][ T9002] hsr_slave_0: entered promiscuous mode [ 550.671047][ T9002] hsr_slave_1: entered promiscuous mode [ 550.672276][ T9002] debugfs: 'hsr0' already exists in 'hsr' [ 550.672309][ T9002] Cannot create hsr debugfs directory [ 550.710706][ T5931] usb 5-1: Using ep0 maxpacket: 32 [ 550.713298][ T5931] usb 5-1: config 0 has an invalid interface number: 235 but max is 0 [ 550.713323][ T5931] usb 5-1: config 0 has no interface number 0 [ 550.716015][ T5931] usb 5-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 550.716040][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.716058][ T5931] usb 5-1: Product: syz [ 550.716070][ T5931] usb 5-1: Manufacturer: syz [ 550.716083][ T5931] usb 5-1: SerialNumber: syz [ 550.829271][ T5931] usb 5-1: config 0 descriptor?? [ 551.363144][ T5931] kaweth 5-1:0.235: Firmware present in device. [ 551.382515][ T5931] kaweth 5-1:0.235: Error reading configuration (-71), no net device created [ 551.382782][ T5931] kaweth 5-1:0.235: probe with driver kaweth failed with error -5 [ 551.421083][ T5931] usb 5-1: USB disconnect, device number 15 [ 551.880685][ T5888] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 552.412036][ T9315] wg1: entered promiscuous mode [ 552.412061][ T9315] wg1: entered allmulticast mode [ 552.470628][ T5888] usb 6-1: Using ep0 maxpacket: 16 [ 552.570252][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 552.581078][ T5888] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 552.581107][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.581124][ T5888] usb 6-1: Product: syz [ 552.581137][ T5888] usb 6-1: Manufacturer: syz [ 552.581150][ T5888] usb 6-1: SerialNumber: syz [ 552.620771][ T5888] usb 6-1: config 0 descriptor?? [ 552.627904][ T5888] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 552.627937][ T5888] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 553.224588][ T5810] hid_parser_main: 73 callbacks suppressed [ 553.224612][ T5810] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 553.224643][ T5810] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 553.224668][ T5810] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 553.224692][ T5810] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 553.224715][ T5810] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 553.224740][ T5810] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 553.224763][ T5810] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 553.224787][ T5810] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 553.224810][ T5810] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 553.224834][ T5810] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 553.395173][ T5888] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 553.445833][ T9329] netlink: 532 bytes leftover after parsing attributes in process `syz.4.942'. [ 553.966506][ T5810] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.03 Device [syz1] on syz1 [ 554.251240][ T5888] em28xx 6-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 554.251270][ T5888] em28xx 6-1:0.0: board has no eeprom [ 554.359899][ T9330] fido_id[9330]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 554.360651][ T5888] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 554.360677][ T5888] em28xx 6-1:0.0: dvb set to bulk mode. [ 554.392148][ T5869] em28xx 6-1:0.0: Binding DVB extension [ 554.426998][ T5888] usb 6-1: USB disconnect, device number 10 [ 554.429306][ T5888] em28xx 6-1:0.0: Disconnecting em28xx [ 554.485794][ T5869] em28xx 6-1:0.0: Registering input extension [ 554.486034][ T5888] em28xx 6-1:0.0: Closing input extension [ 554.635496][ T5888] em28xx 6-1:0.0: Freeing device [ 555.377140][ T9333] Process accounting resumed [ 557.351765][ T9364] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.655036][ T3622] hsr_slave_0: left promiscuous mode [ 557.908802][ T3622] hsr_slave_1: left promiscuous mode [ 557.909768][ T3622] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 557.909793][ T3622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.978461][ T3622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 557.978490][ T3622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 558.000651][ T5888] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 558.153586][ T5888] usb 5-1: Using ep0 maxpacket: 16 [ 558.156141][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 558.158562][ T5888] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 558.158578][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.158588][ T5888] usb 5-1: Product: syz [ 558.158595][ T5888] usb 5-1: Manufacturer: syz [ 558.158602][ T5888] usb 5-1: SerialNumber: syz [ 558.250450][ T5888] usb 5-1: config 0 descriptor?? [ 558.302747][ T5888] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 558.302782][ T5888] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 558.445742][ T3622] veth1_macvtap: left promiscuous mode [ 558.447128][ T3622] veth0_macvtap: left promiscuous mode [ 558.469477][ T3622] veth1_vlan: left promiscuous mode [ 558.477839][ T3622] veth0_vlan: left promiscuous mode [ 558.548632][ T5931] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.03 Device [syz1] on syz1 [ 558.705174][ T9389] fido_id[9389]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/0000:0000:0000.0006/report_descriptor': No such device [ 558.783016][ T9390] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 558.804814][ T9390] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 558.807213][ T9390] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 558.827070][ T9390] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 558.830459][ T9390] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 558.867991][ T5888] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 559.114768][ T9384] Process accounting resumed [ 559.477908][ T5888] em28xx 5-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 559.477926][ T5888] em28xx 5-1:0.0: board has no eeprom [ 559.550798][ T5888] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 559.550824][ T5888] em28xx 5-1:0.0: dvb set to bulk mode. [ 559.575781][ T5889] em28xx 5-1:0.0: Binding DVB extension [ 559.592017][ T5888] usb 5-1: USB disconnect, device number 16 [ 559.594202][ T5888] em28xx 5-1:0.0: Disconnecting em28xx [ 559.973274][ T5889] em28xx 5-1:0.0: Registering input extension [ 559.978931][ T5888] em28xx 5-1:0.0: Closing input extension [ 560.035482][ T5888] em28xx 5-1:0.0: Freeing device [ 560.981457][ T9413] ieee802154 phy0 wpan0: encryption failed: -22 [ 561.397769][ T9390] Bluetooth: hci2: command tx timeout [ 563.002302][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.002370][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.710908][ T9390] Bluetooth: hci2: command tx timeout [ 564.495595][ T5931] hid_parser_main: 156 callbacks suppressed [ 564.495617][ T5931] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 564.495646][ T5931] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 564.495671][ T5931] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 564.495696][ T5931] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 564.495721][ T5931] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 564.495746][ T5931] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 564.495771][ T5931] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 564.495804][ T5931] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 564.495829][ T5931] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 564.495854][ T5931] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 564.604445][ T5931] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.03 Device [syz1] on syz1 [ 564.758498][ T9444] fido_id[9444]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 564.991267][ T3622] team0 (unregistering): Port device team_slave_1 removed [ 565.230439][ T9446] futex_wake_op: syz.4.970 tries to shift op by 36; fix this program [ 565.253048][ T3622] team0 (unregistering): Port device team_slave_0 removed [ 565.790886][ T9390] Bluetooth: hci2: command tx timeout [ 567.870814][ T9390] Bluetooth: hci2: command tx timeout [ 567.930222][ T9457] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.602204][ T9461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.975'. [ 569.827051][ T9471] nvme_fabrics: unknown parameter or missing value ':syz1:E:00000000000000000009:' in ctrl creation request [ 570.131814][ T9481] futex_wake_op: syz.4.981 tries to shift op by 36; fix this program [ 571.198803][ T9385] chnl_net:caif_netlink_parms(): no params data found [ 572.321947][ T9385] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.322088][ T9385] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.322337][ T9385] bridge_slave_0: entered allmulticast mode [ 572.325159][ T9385] bridge_slave_0: entered promiscuous mode [ 572.364507][ T9385] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.364652][ T9385] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.365746][ T9385] bridge_slave_1: entered allmulticast mode [ 572.369056][ T9385] bridge_slave_1: entered promiscuous mode [ 574.682388][ T9527] nvme_fabrics: unknown parameter or missing value ':syz1:E:00000000000000000009:' in ctrl creation request [ 574.876563][ T9385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.726638][ T9385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 577.262899][ T3622] bridge_slave_1: left allmulticast mode [ 577.262928][ T3622] bridge_slave_1: left promiscuous mode [ 577.263166][ T3622] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.522487][ T3622] bridge_slave_0: left allmulticast mode [ 577.522517][ T3622] bridge_slave_0: left promiscuous mode [ 577.522907][ T3622] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.671476][ T3622] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 579.676419][ T9577] futex_wake_op: syz.1.1002 tries to shift op by 36; fix this program [ 579.783982][ T3622] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 579.823462][ T3622] bond0 (unregistering): Released all slaves [ 581.520252][ T9385] team0: Port device team_slave_0 added [ 581.558400][ T9385] team0: Port device team_slave_1 added [ 581.837904][ T9598] netlink: 'syz.1.1008': attribute type 8 has an invalid length. [ 583.623959][ T3622] hsr_slave_0: left promiscuous mode [ 583.671176][ T3622] hsr_slave_1: left promiscuous mode [ 583.675396][ T3622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 583.794079][ T3622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 586.792063][ T3622] team0 (unregistering): Port device team_slave_1 removed [ 587.025690][ T3622] team0 (unregistering): Port device team_slave_0 removed [ 589.255260][ T9385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 589.255279][ T9385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 589.255305][ T9385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.267454][ T9385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 589.267470][ T9385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 589.267495][ T9385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 589.411402][ T9612] Process accounting resumed [ 590.361771][ T9648] netlink: 'syz.4.1020': attribute type 8 has an invalid length. [ 590.981455][ T9663] futex_wake_op: syz.5.1024 tries to shift op by 36; fix this program [ 591.511833][ T9385] hsr_slave_0: entered promiscuous mode [ 591.528311][ T9385] hsr_slave_1: entered promiscuous mode [ 591.529469][ T9385] debugfs: 'hsr0' already exists in 'hsr' [ 591.529495][ T9385] Cannot create hsr debugfs directory [ 593.378002][ T9685] Process accounting resumed [ 594.257815][ T9703] netlink: 'syz.1.1035': attribute type 8 has an invalid length. [ 597.777905][ C1] vkms_vblank_simulate: vblank timer overrun [ 597.888652][ C1] vkms_vblank_simulate: vblank timer overrun [ 598.599303][ C1] vkms_vblank_simulate: vblank timer overrun [ 598.817970][ C1] vkms_vblank_simulate: vblank timer overrun [ 599.816311][ T9747] blktrace: Concurrent blktraces are not allowed on sg0 [ 600.191821][ T9745] Process accounting resumed [ 600.471835][ C1] vkms_vblank_simulate: vblank timer overrun [ 600.658470][ C1] vkms_vblank_simulate: vblank timer overrun [ 600.714152][ T9385] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 601.090484][ C0] hrtimer: interrupt took 32081 ns [ 601.623337][ C1] vkms_vblank_simulate: vblank timer overrun [ 601.790903][ C1] vkms_vblank_simulate: vblank timer overrun [ 601.913664][ T9385] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 602.039392][ T9385] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 602.185466][ T9385] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 602.681210][ C1] vkms_vblank_simulate: vblank timer overrun [ 603.006399][ T9385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.172580][ T9385] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.201402][ T3622] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.201493][ T3622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.236339][ T3622] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.236421][ T3622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.551511][ T9807] Process accounting resumed [ 608.961797][ T9385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 609.089994][ T9845] blktrace: Concurrent blktraces are not allowed on sg0 [ 611.216844][ T9385] veth0_vlan: entered promiscuous mode [ 611.236883][ T9385] veth1_vlan: entered promiscuous mode [ 611.345342][ T9385] veth0_macvtap: entered promiscuous mode [ 611.385881][ T9385] veth1_macvtap: entered promiscuous mode [ 611.462313][ T9385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.467101][ T9385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 611.536124][ T6552] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.575335][ T6901] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.575685][ T6901] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.601846][ T6901] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.624336][ T9896] netlink: 'syz.5.1074': attribute type 8 has an invalid length. [ 615.500712][ T3622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.500731][ T3622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.018602][ T9909] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1077'. [ 619.793317][ T9933] blktrace: Concurrent blktraces are not allowed on sg0 [ 620.963945][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 620.968895][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 620.970170][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 620.975804][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 620.977042][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 621.553927][ T9958] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1087'. [ 621.553948][ T9958] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1087'. [ 622.351327][ C1] vkms_vblank_simulate: vblank timer overrun [ 623.071324][ T9390] Bluetooth: hci2: command tx timeout [ 624.438079][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.438123][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.711454][ C1] vkms_vblank_simulate: vblank timer overrun [ 625.017278][ C1] vkms_vblank_simulate: vblank timer overrun [ 625.152416][ T9390] Bluetooth: hci2: command tx timeout [ 625.789749][ C1] vkms_vblank_simulate: vblank timer overrun [ 626.650806][ C1] vkms_vblank_simulate: vblank timer overrun [ 627.145697][ C1] vkms_vblank_simulate: vblank timer overrun [ 627.376844][ T6311] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.576306][T10013] ubi31: attaching mtd0 [ 627.582148][T10013] ubi31: scanning is finished [ 627.582173][T10013] ubi31: empty MTD device detected [ 627.618954][ T9390] Bluetooth: hci2: command tx timeout [ 628.311964][T10005] tipc: Started in network mode [ 628.311983][T10005] tipc: Node identity eeedc224e34c, cluster identity 4711 [ 628.312541][T10005] tipc: Enabled bearer , priority 0 [ 628.313347][T10003] syzkaller0: entered promiscuous mode [ 628.313362][T10003] syzkaller0: entered allmulticast mode [ 628.495386][T10013] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 628.495404][T10013] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 628.495413][T10013] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 628.495422][T10013] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 628.495430][T10013] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 628.495438][T10013] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 628.495447][T10013] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 34713836 [ 628.495457][T10013] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 628.498168][T10018] ubi31: background thread "ubi_bgt31d" started, PID 10018 [ 628.822942][ T6311] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.960987][T10003] tipc: Resetting bearer [ 629.103730][T10003] tipc: Disabling bearer [ 629.632899][ T9390] Bluetooth: hci2: command tx timeout [ 630.445893][ T6311] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.534430][ T6311] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.114340][ T9946] chnl_net:caif_netlink_parms(): no params data found [ 632.220619][ T31] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 632.430804][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 632.434771][ T31] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 632.434803][ T31] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 632.434825][ T31] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 632.434847][ T31] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 632.434888][ T31] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 632.434909][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.768975][ T31] usb 2-1: GET_CAPABILITIES returned 0 [ 632.769024][ T31] usbtmc 2-1:16.0: can't read capabilities [ 633.075604][ T5869] kernel read not supported for file /vcs (pid: 5869 comm: kworker/1:4) [ 633.103336][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 633.203072][ T5869] usb 2-1: USB disconnect, device number 16 [ 633.577745][ T6311] bridge_slave_1: left allmulticast mode [ 633.577765][ T6311] bridge_slave_1: left promiscuous mode [ 633.577916][ T6311] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.674344][ T6311] bridge_slave_0: left allmulticast mode [ 633.674375][ T6311] bridge_slave_0: left promiscuous mode [ 633.674658][ T6311] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.709254][T10146] futex_wake_op: syz.5.1120 tries to shift op by 36; fix this program [ 638.241315][ T6311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 638.292056][ T6311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 638.316394][ T6311] bond0 (unregistering): Released all slaves [ 638.453937][ T9946] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.454020][ T9946] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.454198][ T9946] bridge_slave_0: entered allmulticast mode [ 638.462183][ T9946] bridge_slave_0: entered promiscuous mode [ 638.562718][ T9946] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.562855][ T9946] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.563104][ T9946] bridge_slave_1: entered allmulticast mode [ 638.623879][ T9946] bridge_slave_1: entered promiscuous mode [ 640.414920][T10160] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 641.148730][ T9946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 641.243944][ T9946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 643.874087][ T9946] team0: Port device team_slave_0 added [ 643.922454][ T9946] team0: Port device team_slave_1 added [ 645.166378][ T6311] hsr_slave_0: left promiscuous mode [ 645.210661][ T6311] hsr_slave_1: left promiscuous mode [ 645.211971][ T6311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 645.211994][ T6311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 645.264867][ T6311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 645.264892][ T6311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 645.491136][ T6311] veth1_macvtap: left promiscuous mode [ 645.491249][ T6311] veth0_macvtap: left promiscuous mode [ 645.491524][ T6311] veth1_vlan: left promiscuous mode [ 645.491707][ T6311] veth0_vlan: left promiscuous mode [ 650.161284][ T6311] team0 (unregistering): Port device team_slave_1 removed [ 650.401619][ T6311] team0 (unregistering): Port device team_slave_0 removed [ 650.560663][ T5889] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 650.724060][ T5889] usb 1-1: Using ep0 maxpacket: 16 [ 650.726200][ T5889] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 650.726231][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 650.729113][ T5889] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 650.729140][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.729160][ T5889] usb 1-1: Product: syz [ 650.729172][ T5889] usb 1-1: Manufacturer: syz [ 650.729186][ T5889] usb 1-1: SerialNumber: syz [ 650.753295][ T5889] usb 1-1: config 0 descriptor?? [ 650.760377][ T5889] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 650.760408][ T5889] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 651.431701][ T5889] em28xx 1-1:0.0: unknown em28xx chip ID (98) [ 651.632801][ T5889] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 652.039663][ T5889] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 652.039686][ T5889] em28xx 1-1:0.0: No AC97 audio processor [ 652.095439][ T5889] usb 1-1: USB disconnect, device number 25 [ 652.101048][ T5889] em28xx 1-1:0.0: Disconnecting em28xx [ 652.152459][ T5889] em28xx 1-1:0.0: Freeing device [ 653.293448][ T9946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.293465][ T9946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 653.293490][ T9946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 653.321918][ T9946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 653.321934][ T9946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 653.321960][ T9946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.627758][ T9946] hsr_slave_0: entered promiscuous mode [ 654.636791][ T9946] hsr_slave_1: entered promiscuous mode [ 654.646916][ T9946] debugfs: 'hsr0' already exists in 'hsr' [ 654.646950][ T9946] Cannot create hsr debugfs directory [ 655.029949][T10272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1155'. [ 655.930394][ C1] vkms_vblank_simulate: vblank timer overrun [ 656.264284][ C1] vkms_vblank_simulate: vblank timer overrun [ 656.445426][ C1] vkms_vblank_simulate: vblank timer overrun [ 656.637400][ C1] vkms_vblank_simulate: vblank timer overrun [ 656.946657][ C1] vkms_vblank_simulate: vblank timer overrun [ 657.004307][ C1] vkms_vblank_simulate: vblank timer overrun [ 657.199304][T10293] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 657.296403][ C1] vkms_vblank_simulate: vblank timer overrun [ 657.609970][ C1] vkms_vblank_simulate: vblank timer overrun [ 657.780929][ C1] vkms_vblank_simulate: vblank timer overrun [ 657.900238][ C1] vkms_vblank_simulate: vblank timer overrun [ 659.537106][T10317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1166'. [ 659.605380][ C1] vkms_vblank_simulate: vblank timer overrun [ 659.856095][ C1] vkms_vblank_simulate: vblank timer overrun [ 663.298986][T10343] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 668.482386][ T9946] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 669.001368][ C1] vkms_vblank_simulate: vblank timer overrun [ 669.138728][ C1] vkms_vblank_simulate: vblank timer overrun [ 669.244273][ C1] vkms_vblank_simulate: vblank timer overrun [ 669.354450][ T9946] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 669.495886][ T9946] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 669.539535][ T9946] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 670.960856][ T9946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 671.098834][ T9946] 8021q: adding VLAN 0 to HW filter on device team0 [ 671.175478][T10422] ubi: mtd0 is already attached to ubi31 [ 671.263308][ T1021] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.263522][ T1021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 671.391772][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.391919][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 671.689509][ C1] vkms_vblank_simulate: vblank timer overrun [ 672.791404][ C1] vkms_vblank_simulate: vblank timer overrun [ 672.933574][ C1] vkms_vblank_simulate: vblank timer overrun [ 673.325946][ C1] vkms_vblank_simulate: vblank timer overrun [ 673.505986][ C1] vkms_vblank_simulate: vblank timer overrun [ 674.010203][ C1] vkms_vblank_simulate: vblank timer overrun [ 674.583587][ T9946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 674.975761][ T9946] veth0_vlan: entered promiscuous mode [ 675.004259][ T9946] veth1_vlan: entered promiscuous mode [ 675.084481][ T9946] veth0_macvtap: entered promiscuous mode [ 675.119759][ T9946] veth1_macvtap: entered promiscuous mode [ 675.181771][ T9946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 675.207590][ T9946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 675.237320][ T68] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.237608][ T68] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.237646][ T68] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.237681][ T68] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.382574][ T6357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.382592][ T6357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.527511][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.527526][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.300895][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 681.304700][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 681.307542][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 681.309222][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 681.310021][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 683.138660][T10528] netlink: 'syz.4.1202': attribute type 8 has an invalid length. [ 683.975703][ T9390] Bluetooth: hci3: command tx timeout [ 686.051045][ T9390] Bluetooth: hci3: command tx timeout [ 686.579887][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.579957][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.190793][ T9390] Bluetooth: hci3: command tx timeout [ 690.280581][ T9390] Bluetooth: hci3: command tx timeout [ 695.662498][T10569] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1213'. [ 695.662514][T10569] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1213'. [ 695.764027][ T68] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.933626][T10575] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 697.620176][ C1] vkms_vblank_simulate: vblank timer overrun [ 697.731239][ T68] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.116149][T10591] netlink: 'syz.0.1219': attribute type 8 has an invalid length. [ 699.195743][ C1] vkms_vblank_simulate: vblank timer overrun [ 699.619852][ C1] vkms_vblank_simulate: vblank timer overrun [ 700.521461][ C1] vkms_vblank_simulate: vblank timer overrun [ 700.669026][T10607] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1223'. [ 700.669050][T10607] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1223'. [ 700.761648][ T68] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.908139][T10502] chnl_net:caif_netlink_parms(): no params data found [ 701.125860][ T976] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 701.272926][ T68] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.320703][ T976] usb 1-1: Using ep0 maxpacket: 32 [ 701.324779][ T976] usb 1-1: unable to get BOS descriptor or descriptor too short [ 701.327118][ T976] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 701.329703][ T976] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 701.329731][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.329750][ T976] usb 1-1: Product: syz [ 701.329763][ T976] usb 1-1: Manufacturer: syz [ 701.329777][ T976] usb 1-1: SerialNumber: syz [ 701.625707][ T976] usb 1-1: Not enough endpoints found in device, aborting! [ 701.679409][ C1] vkms_vblank_simulate: vblank timer overrun [ 701.831632][ T976] usb 1-1: USB disconnect, device number 26 [ 702.709581][ C1] vkms_vblank_simulate: vblank timer overrun [ 702.830038][T10636] netlink: 'syz.1.1230': attribute type 8 has an invalid length. [ 703.712583][ C1] vkms_vblank_simulate: vblank timer overrun [ 703.741854][T10502] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.741988][T10502] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.742207][T10502] bridge_slave_0: entered allmulticast mode [ 703.750123][T10502] bridge_slave_0: entered promiscuous mode [ 703.783918][T10502] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.784048][T10502] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.784312][T10502] bridge_slave_1: entered allmulticast mode [ 703.840207][T10502] bridge_slave_1: entered promiscuous mode [ 703.917673][ C1] vkms_vblank_simulate: vblank timer overrun [ 704.320542][T10646] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1234'. [ 704.320563][T10646] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1234'. [ 704.719924][T10502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 705.539541][ C1] vkms_vblank_simulate: vblank timer overrun [ 705.561410][T10502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 706.026607][ C1] vkms_vblank_simulate: vblank timer overrun [ 706.502039][ C1] vkms_vblank_simulate: vblank timer overrun [ 706.547649][ C1] vkms_vblank_simulate: vblank timer overrun [ 706.672234][ C1] vkms_vblank_simulate: vblank timer overrun [ 706.987324][ C1] vkms_vblank_simulate: vblank timer overrun [ 707.254325][ C1] vkms_vblank_simulate: vblank timer overrun [ 707.862052][ T68] bridge_slave_1: left allmulticast mode [ 707.862081][ T68] bridge_slave_1: left promiscuous mode [ 707.862327][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.968910][ T68] bridge_slave_0: left allmulticast mode [ 707.968938][ T68] bridge_slave_0: left promiscuous mode [ 707.969201][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.170629][ T995] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 709.072519][ T995] usb 1-1: Using ep0 maxpacket: 8 [ 709.074304][ T995] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 709.074327][ T995] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 709.074341][ T995] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 709.074353][ T995] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 709.074376][ T995] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 709.074388][ T995] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.495274][ C1] vkms_vblank_simulate: vblank timer overrun [ 709.605092][ T995] usb 1-1: GET_CAPABILITIES returned 0 [ 709.605138][ T995] usbtmc 1-1:16.0: can't read capabilities [ 709.607597][T10682] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1244'. [ 709.607617][T10682] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1244'. [ 709.932194][T10684] 9pnet_fd: Insufficient options for proto=fd [ 710.974657][ C1] vkms_vblank_simulate: vblank timer overrun [ 712.494488][ C1] vkms_vblank_simulate: vblank timer overrun [ 713.293426][ C1] vkms_vblank_simulate: vblank timer overrun [ 713.923395][T10715] fuse: Bad value for 'fd' [ 713.928470][ C1] vkms_vblank_simulate: vblank timer overrun [ 714.660362][ C1] vkms_vblank_simulate: vblank timer overrun [ 714.693913][ C1] vkms_vblank_simulate: vblank timer overrun [ 714.825388][ C1] vkms_vblank_simulate: vblank timer overrun [ 715.586645][ C0] vkms_vblank_simulate: vblank timer overrun [ 715.939946][ C0] vkms_vblank_simulate: vblank timer overrun [ 716.240265][ C0] vkms_vblank_simulate: vblank timer overrun [ 716.280945][ C0] vkms_vblank_simulate: vblank timer overrun [ 716.429536][ C0] vkms_vblank_simulate: vblank timer overrun [ 716.626295][ C0] vkms_vblank_simulate: vblank timer overrun [ 717.357675][ C0] vkms_vblank_simulate: vblank timer overrun [ 717.761276][ C0] vkms_vblank_simulate: vblank timer overrun [ 718.476071][ C0] vkms_vblank_simulate: vblank timer overrun [ 718.674716][ C0] vkms_vblank_simulate: vblank timer overrun [ 718.871256][ C0] vkms_vblank_simulate: vblank timer overrun [ 719.009085][T10750] fuse: Bad value for 'fd' [ 719.828725][ C0] vkms_vblank_simulate: vblank timer overrun [ 721.162222][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 721.226328][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 721.243211][ T68] bond0 (unregistering): Released all slaves [ 721.287854][T10502] team0: Port device team_slave_0 added [ 721.423689][T10507] usb 1-1: USB disconnect, device number 27 [ 721.435818][T10502] team0: Port device team_slave_1 added [ 722.024452][ C0] vkms_vblank_simulate: vblank timer overrun [ 722.305328][ C0] vkms_vblank_simulate: vblank timer overrun [ 723.332452][T10773] mmap: syz.1.1266 (10773) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 723.959875][T10791] netlink: 532 bytes leftover after parsing attributes in process `syz.5.1272'. [ 724.869207][T10502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 724.869218][T10502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 724.869233][T10502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 724.933693][T10502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 724.933710][T10502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 724.933736][T10502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 728.682271][T10502] hsr_slave_0: entered promiscuous mode [ 728.685379][T10502] hsr_slave_1: entered promiscuous mode [ 728.691819][T10502] debugfs: 'hsr0' already exists in 'hsr' [ 728.691848][T10502] Cannot create hsr debugfs directory [ 728.720638][ T5931] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 728.880593][ T5931] usb 5-1: Using ep0 maxpacket: 8 [ 728.883917][ T5931] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 728.883950][ T5931] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 728.883974][ T5931] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 728.883997][ T5931] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 728.884039][ T5931] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 728.884061][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.179824][ T5931] usb 5-1: GET_CAPABILITIES returned 0 [ 729.179873][ T5931] usbtmc 5-1:16.0: can't read capabilities [ 729.246642][ T68] hsr_slave_0: left promiscuous mode [ 729.729028][T10823] 9pnet_fd: Insufficient options for proto=fd [ 730.150681][ T68] hsr_slave_1: left promiscuous mode [ 730.151918][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 730.151943][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 730.169073][ T10] usb 5-1: USB disconnect, device number 17 [ 730.231530][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 730.231563][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 730.539069][ T68] veth1_macvtap: left promiscuous mode [ 730.539176][ T68] veth0_macvtap: left promiscuous mode [ 730.539418][ T68] veth1_vlan: left promiscuous mode [ 730.539591][ T68] veth0_vlan: left promiscuous mode [ 733.481185][T10867] netlink: 532 bytes leftover after parsing attributes in process `syz.4.1290'. [ 735.629930][ C1] vkms_vblank_simulate: vblank timer overrun [ 736.069898][ C1] vkms_vblank_simulate: vblank timer overrun [ 736.119271][ T5802] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 736.189622][T10883] netlink: 'syz.0.1293': attribute type 8 has an invalid length. [ 736.995467][ C1] vkms_vblank_simulate: vblank timer overrun [ 737.047455][ C1] vkms_vblank_simulate: vblank timer overrun [ 737.100689][ T5802] usb 5-1: Using ep0 maxpacket: 8 [ 737.102804][ T5802] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 737.102836][ T5802] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 737.102859][ T5802] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 737.102872][ T5802] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 737.102902][ T5802] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 737.102914][ T5802] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.163005][ C1] vkms_vblank_simulate: vblank timer overrun [ 737.242151][ C1] vkms_vblank_simulate: vblank timer overrun [ 737.321274][ C1] vkms_vblank_simulate: vblank timer overrun [ 737.371988][ T5802] usb 5-1: GET_CAPABILITIES returned 0 [ 737.372035][ T5802] usbtmc 5-1:16.0: can't read capabilities [ 737.509553][ C1] vkms_vblank_simulate: vblank timer overrun [ 737.557295][ C1] vkms_vblank_simulate: vblank timer overrun [ 737.605889][ C1] vkms_vblank_simulate: vblank timer overrun [ 737.630195][T10884] 9pnet_fd: Insufficient options for proto=fd [ 737.769153][ C1] vkms_vblank_simulate: vblank timer overrun [ 737.823998][ C1] vkms_vblank_simulate: vblank timer overrun [ 737.875735][ C1] vkms_vblank_simulate: vblank timer overrun [ 737.924311][ C1] vkms_vblank_simulate: vblank timer overrun [ 737.975709][ C1] vkms_vblank_simulate: vblank timer overrun [ 738.023004][ C1] vkms_vblank_simulate: vblank timer overrun [ 738.080178][ C1] vkms_vblank_simulate: vblank timer overrun [ 738.123932][ C1] vkms_vblank_simulate: vblank timer overrun [ 738.188116][ C1] vkms_vblank_simulate: vblank timer overrun [ 738.239455][ C1] vkms_vblank_simulate: vblank timer overrun [ 738.282087][ C1] vkms_vblank_simulate: vblank timer overrun [ 738.329565][ C1] vkms_vblank_simulate: vblank timer overrun [ 738.371798][ C1] vkms_vblank_simulate: vblank timer overrun [ 738.428406][ C1] vkms_vblank_simulate: vblank timer overrun [ 738.501396][ T68] team0 (unregistering): Port device team_slave_1 removed [ 738.533284][ C1] vkms_vblank_simulate: vblank timer overrun [ 738.547918][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 738.553556][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 738.554891][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 738.559116][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 738.566457][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 738.637990][ C1] vkms_vblank_simulate: vblank timer overrun [ 738.695681][ C1] vkms_vblank_simulate: vblank timer overrun [ 738.781052][ T68] team0 (unregistering): Port device team_slave_0 removed [ 738.809721][ C1] vkms_vblank_simulate: vblank timer overrun [ 738.875278][ C1] vkms_vblank_simulate: vblank timer overrun [ 738.931066][ C1] vkms_vblank_simulate: vblank timer overrun [ 739.459944][ C1] vkms_vblank_simulate: vblank timer overrun [ 739.505314][ C1] vkms_vblank_simulate: vblank timer overrun [ 739.543350][ C1] vkms_vblank_simulate: vblank timer overrun [ 739.920348][ C1] vkms_vblank_simulate: vblank timer overrun [ 740.020759][ C1] vkms_vblank_simulate: vblank timer overrun [ 740.574107][ C1] vkms_vblank_simulate: vblank timer overrun [ 740.680588][ T61] Bluetooth: hci2: command tx timeout [ 741.497315][T10507] usb 5-1: USB disconnect, device number 18 [ 742.760537][ T61] Bluetooth: hci2: command tx timeout [ 744.189630][T10925] netlink: 532 bytes leftover after parsing attributes in process `syz.1.1301'. [ 744.943191][ T9390] Bluetooth: hci2: command tx timeout [ 746.990792][ T9390] Bluetooth: hci2: command tx timeout [ 747.304117][ C0] vkms_vblank_simulate: vblank timer overrun [ 747.329088][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.329161][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.623865][T10886] chnl_net:caif_netlink_parms(): no params data found [ 747.670560][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 747.823348][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 747.825861][ T10] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 747.825888][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.859158][ T10] usb 2-1: config 0 descriptor?? [ 748.076290][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 748.122060][ T10] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 748.142349][ T10] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 748.784136][ C0] vkms_vblank_simulate: vblank timer overrun [ 748.820891][ C0] vkms_vblank_simulate: vblank timer overrun [ 749.714616][T10886] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.714730][T10886] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.714898][T10886] bridge_slave_0: entered allmulticast mode [ 749.726021][T10886] bridge_slave_0: entered promiscuous mode [ 749.788823][T10886] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.788973][T10886] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.811367][T10886] bridge_slave_1: entered allmulticast mode [ 749.815279][T10886] bridge_slave_1: entered promiscuous mode [ 750.423309][T10886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 750.443249][T10886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 750.958116][ T1453] bridge_slave_1: left allmulticast mode [ 750.958143][ T1453] bridge_slave_1: left promiscuous mode [ 750.958409][ T1453] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.138109][ T1453] bridge_slave_0: left allmulticast mode [ 751.138139][ T1453] bridge_slave_0: left promiscuous mode [ 751.138407][ T1453] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.745482][ T1453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 755.193045][T11045] netlink: 532 bytes leftover after parsing attributes in process `syz.4.1327'. [ 755.264795][ T1453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 755.570827][ T1453] bond0 (unregistering): Released all slaves [ 755.613483][T10886] team0: Port device team_slave_0 added [ 755.652674][T10886] team0: Port device team_slave_1 added [ 757.280714][ T1453] hsr_slave_0: left promiscuous mode [ 757.506089][ T1453] hsr_slave_1: left promiscuous mode [ 757.507067][ T1453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 758.509941][ T1453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 759.824782][ C1] vkms_vblank_simulate: vblank timer overrun [ 759.936313][ C1] vkms_vblank_simulate: vblank timer overrun [ 760.820640][ C1] vkms_vblank_simulate: vblank timer overrun [ 761.647798][ C1] vkms_vblank_simulate: vblank timer overrun [ 762.180107][T11125] ubi: mtd0 is already attached to ubi31 [ 762.329172][ T1453] team0 (unregistering): Port device team_slave_1 removed [ 762.350671][ T976] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 762.490612][ T5931] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 762.540630][ T976] usb 1-1: Using ep0 maxpacket: 32 [ 762.543935][ T976] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 762.543963][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.700102][ T976] usb 1-1: config 0 descriptor?? [ 762.771041][ T5931] usb 6-1: Using ep0 maxpacket: 8 [ 763.016263][ T5931] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 763.016346][ T5931] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 763.016395][ T5931] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 763.016444][ T5931] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 763.017193][ T5931] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 763.017244][ T5931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.456071][ C1] vkms_vblank_simulate: vblank timer overrun [ 763.495620][ T976] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 763.574084][ T1453] team0 (unregistering): Port device team_slave_0 removed [ 763.657907][ C1] vkms_vblank_simulate: vblank timer overrun [ 763.810764][ T5931] usb 6-1: GET_CAPABILITIES returned 0 [ 763.810882][ T5931] usbtmc 6-1:16.0: can't read capabilities [ 764.325025][ T5888] kernel read not supported for file /vcs (pid: 5888 comm: kworker/1:5) [ 764.381017][ C1] vkms_vblank_simulate: vblank timer overrun [ 765.662588][T10886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 765.662606][T10886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 765.662632][T10886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 765.667808][T10886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 765.667823][T10886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 765.667846][T10886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 767.002006][ T5962] usb 6-1: USB disconnect, device number 11 [ 768.287961][T10886] hsr_slave_0: entered promiscuous mode [ 768.288733][T10886] hsr_slave_1: entered promiscuous mode [ 768.289245][T10886] debugfs: 'hsr0' already exists in 'hsr' [ 768.289260][T10886] Cannot create hsr debugfs directory [ 775.720523][T11280] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 781.177153][ C0] vkms_vblank_simulate: vblank timer overrun [ 782.111395][ C0] vkms_vblank_simulate: vblank timer overrun [ 783.297147][T10886] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 783.389692][T10886] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 783.571222][T10886] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 784.059666][T10886] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 785.662380][ C0] vkms_vblank_simulate: vblank timer overrun [ 785.944206][ C0] vkms_vblank_simulate: vblank timer overrun [ 787.149406][T10886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 787.193941][T10886] 8021q: adding VLAN 0 to HW filter on device team0 [ 787.216071][ T6901] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.217064][ T6901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 787.247325][ T6901] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.247538][ T6901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 787.946234][T11384] debugfs: 'ttyS3' already exists in 'caif_serial' [ 790.661966][T10886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 794.338019][ T5889] kernel read not supported for file /vcs (pid: 5889 comm: kworker/1:6) [ 794.476270][T10886] veth0_vlan: entered promiscuous mode [ 794.545921][T10886] veth1_vlan: entered promiscuous mode [ 795.241901][T10886] veth0_macvtap: entered promiscuous mode [ 795.263870][T10886] veth1_macvtap: entered promiscuous mode [ 795.569678][T10886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 795.629518][T10886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 795.900005][ T1278] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.965588][ T1278] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.967612][ T1278] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.968320][ T1278] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.024068][T11480] overlayfs: failed to resolve './file1': -2 [ 798.555603][ T3622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.555616][ T3622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 799.771194][ T5869] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 800.250497][ T5869] usb 6-1: Using ep0 maxpacket: 8 [ 800.254475][ T5869] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 800.254509][ T5869] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 800.254527][ T5869] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 800.254539][ T5869] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 800.254563][ T5869] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 800.254575][ T5869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.578752][ T5869] usb 6-1: GET_CAPABILITIES returned 0 [ 800.578804][ T5869] usbtmc 6-1:16.0: can't read capabilities [ 800.823621][ T5962] kernel read not supported for file /vcs (pid: 5962 comm: kworker/0:6) [ 800.897837][ T5869] libceph: connect (1)[c::]:6789 error -101 [ 800.956581][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 800.957800][ T5962] usb 6-1: USB disconnect, device number 12 [ 801.041275][ T5869] libceph: connect (1)[c::]:6789 error -101 [ 801.047974][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 801.117425][T11526] ceph: No mds server is up or the cluster is laggy [ 801.354610][ C1] vkms_vblank_simulate: vblank timer overrun [ 801.399194][ T31] libceph: connect (1)[c::]:6789 error -101 [ 801.399387][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 801.452296][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 801.496573][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 801.499161][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 801.517700][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 801.519425][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 801.740489][ C1] vkms_vblank_simulate: vblank timer overrun [ 801.955567][ C1] vkms_vblank_simulate: vblank timer overrun [ 801.965007][ T31] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 802.253899][ C1] vkms_vblank_simulate: vblank timer overrun [ 803.337041][ C1] vkms_vblank_simulate: vblank timer overrun [ 803.856696][T11552] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 804.520633][ T61] Bluetooth: hci2: command tx timeout [ 804.576225][ T3622] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.008690][ T3622] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.590496][ T61] Bluetooth: hci2: command tx timeout [ 806.867893][ C1] vkms_vblank_simulate: vblank timer overrun [ 807.246495][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 807.273586][ T31] usb 5-1: unable to read config index 0 descriptor/start: -32 [ 807.273637][ T31] usb 5-1: chopping to 0 config(s) [ 807.273800][ T31] usb 5-1: can't read configurations, error -32 [ 807.459565][ C1] vkms_vblank_simulate: vblank timer overrun [ 807.466669][ T31] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 807.590596][ T31] usb 5-1: device descriptor read/64, error -32 [ 807.722701][ C1] vkms_vblank_simulate: vblank timer overrun [ 807.726921][ T31] usb usb5-port1: attempt power cycle [ 807.916462][ T3622] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.019266][T11573] block nbd0: server does not support multiple connections per device. [ 808.046901][T11573] block nbd0: shutting down sockets [ 808.355517][ C1] vkms_vblank_simulate: vblank timer overrun [ 808.676176][ T61] Bluetooth: hci2: command tx timeout [ 808.838623][ T10] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 808.838713][ T10] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 808.874220][ T10] usb 2-1: USB disconnect, device number 17 [ 809.040755][ T976] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 809.040834][ T976] dvb_usb_az6027 1-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 809.050294][ C1] vkms_vblank_simulate: vblank timer overrun [ 809.052372][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.052438][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.058873][ T976] usb 1-1: USB disconnect, device number 28 [ 809.401267][ C1] vkms_vblank_simulate: vblank timer overrun [ 810.189851][ C1] vkms_vblank_simulate: vblank timer overrun [ 810.349157][ T3622] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.864658][ T61] Bluetooth: hci2: command tx timeout [ 811.589280][ C1] vkms_vblank_simulate: vblank timer overrun [ 812.129938][T11534] chnl_net:caif_netlink_parms(): no params data found [ 814.692422][T11644] fuse: Bad value for 'group_id' [ 814.692443][T11644] fuse: Bad value for 'group_id' [ 815.792310][ T3622] bridge_slave_1: left allmulticast mode [ 815.792330][ T3622] bridge_slave_1: left promiscuous mode [ 815.792500][ T3622] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.137022][ T3622] bridge_slave_0: left allmulticast mode [ 817.137050][ T3622] bridge_slave_0: left promiscuous mode [ 817.137338][ T3622] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.025876][ C0] vkms_vblank_simulate: vblank timer overrun [ 820.892159][ C0] vkms_vblank_simulate: vblank timer overrun [ 821.478308][ C0] vkms_vblank_simulate: vblank timer overrun [ 822.140226][ C0] vkms_vblank_simulate: vblank timer overrun [ 822.206458][ C0] vkms_vblank_simulate: vblank timer overrun [ 822.291998][ C0] vkms_vblank_simulate: vblank timer overrun [ 823.185305][ C0] vkms_vblank_simulate: vblank timer overrun [ 823.326801][T11717] netlink: 'syz.4.1465': attribute type 8 has an invalid length. [ 824.506804][ T3622] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 824.571322][ T3622] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 824.633487][ T3622] bond0 (unregistering): Released all slaves [ 824.803045][ C0] vkms_vblank_simulate: vblank timer overrun [ 826.530067][T11534] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.530197][T11534] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.547815][T11534] bridge_slave_0: entered allmulticast mode [ 826.564442][T11534] bridge_slave_0: entered promiscuous mode [ 826.790543][ T5810] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 826.825467][T11534] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.825544][T11534] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.825708][T11534] bridge_slave_1: entered allmulticast mode [ 826.851722][T11534] bridge_slave_1: entered promiscuous mode [ 826.999922][ T5810] usb 2-1: Using ep0 maxpacket: 8 [ 827.023673][ T5810] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 827.023706][ T5810] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 827.023730][ T5810] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 827.023752][ T5810] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 827.023793][ T5810] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 827.023814][ T5810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.431939][ T5810] usb 2-1: GET_CAPABILITIES returned 0 [ 827.431988][ T5810] usbtmc 2-1:16.0: can't read capabilities [ 827.886620][ T5962] kernel read not supported for file /vcs (pid: 5962 comm: kworker/0:6) [ 828.413794][ T5962] usb 2-1: USB disconnect, device number 18 [ 828.527480][T11764] netlink: 'syz.5.1478': attribute type 8 has an invalid length. [ 829.483075][T11534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 829.545222][T11534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 830.006713][ T3622] hsr_slave_0: left promiscuous mode [ 830.051377][ T3622] hsr_slave_1: left promiscuous mode [ 830.052459][ T3622] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 830.052485][ T3622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 830.137177][ T3622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 830.137206][ T3622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 830.354542][T11786] netlink: 532 bytes leftover after parsing attributes in process `syz.1.1483'. [ 831.629840][ T3622] veth1_macvtap: left promiscuous mode [ 831.629952][ T3622] veth0_macvtap: left promiscuous mode [ 831.630236][ T3622] veth1_vlan: left promiscuous mode [ 831.664790][ T3622] veth0_vlan: left promiscuous mode [ 832.945459][ C1] vkms_vblank_simulate: vblank timer overrun [ 832.998356][ C1] vkms_vblank_simulate: vblank timer overrun [ 833.077152][ C1] vkms_vblank_simulate: vblank timer overrun [ 833.167245][ C1] vkms_vblank_simulate: vblank timer overrun [ 833.210824][ C1] vkms_vblank_simulate: vblank timer overrun [ 833.379823][ C1] vkms_vblank_simulate: vblank timer overrun [ 833.593713][ C1] vkms_vblank_simulate: vblank timer overrun [ 833.643375][ C1] vkms_vblank_simulate: vblank timer overrun [ 833.703669][ C1] vkms_vblank_simulate: vblank timer overrun [ 833.832016][ C1] vkms_vblank_simulate: vblank timer overrun [ 833.949860][ C1] vkms_vblank_simulate: vblank timer overrun [ 833.996055][ C1] vkms_vblank_simulate: vblank timer overrun [ 834.050531][ C1] vkms_vblank_simulate: vblank timer overrun [ 834.121455][ C1] vkms_vblank_simulate: vblank timer overrun [ 834.221521][ C1] vkms_vblank_simulate: vblank timer overrun [ 834.275688][ C1] vkms_vblank_simulate: vblank timer overrun [ 834.328863][ C1] vkms_vblank_simulate: vblank timer overrun [ 834.440458][ C1] vkms_vblank_simulate: vblank timer overrun [ 834.495214][ C1] vkms_vblank_simulate: vblank timer overrun [ 834.555226][ C1] vkms_vblank_simulate: vblank timer overrun [ 834.659175][ C1] vkms_vblank_simulate: vblank timer overrun [ 834.971536][ C1] vkms_vblank_simulate: vblank timer overrun [ 835.081967][ T3622] team0 (unregistering): Port device team_slave_1 removed [ 835.311191][ T3622] team0 (unregistering): Port device team_slave_0 removed [ 839.146294][ C0] vkms_vblank_simulate: vblank timer overrun [ 839.150572][ T31] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 839.199777][T11534] team0: Port device team_slave_0 added [ 839.228045][T11534] team0: Port device team_slave_1 added [ 839.453223][ C0] vkms_vblank_simulate: vblank timer overrun [ 839.500500][ T31] usb 6-1: Using ep0 maxpacket: 8 [ 840.259335][ C0] vkms_vblank_simulate: vblank timer overrun [ 840.278687][ T31] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 840.278719][ T31] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 840.278741][ T31] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 840.278762][ T31] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 840.278801][ T31] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 840.278822][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.590128][ T31] usb 6-1: GET_CAPABILITIES returned 0 [ 840.590159][ T31] usbtmc 6-1:16.0: can't read capabilities [ 840.669477][T11853] netlink: 532 bytes leftover after parsing attributes in process `syz.4.1494'. [ 841.134059][ C0] vkms_vblank_simulate: vblank timer overrun [ 841.275366][ T31] kernel read not supported for file /vcs (pid: 31 comm: kworker/1:0) [ 841.389302][T11534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 841.389319][T11534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 841.389340][T11534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 841.445355][T11534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 841.445368][T11534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 841.445383][T11534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 841.678988][ C0] vkms_vblank_simulate: vblank timer overrun [ 841.726019][ T5931] usb 6-1: USB disconnect, device number 13 [ 841.913829][ C0] vkms_vblank_simulate: vblank timer overrun [ 842.211751][ C0] vkms_vblank_simulate: vblank timer overrun [ 842.386162][ C0] vkms_vblank_simulate: vblank timer overrun [ 842.938494][ C0] vkms_vblank_simulate: vblank timer overrun [ 843.022462][T11534] hsr_slave_0: entered promiscuous mode [ 843.023775][T11534] hsr_slave_1: entered promiscuous mode [ 843.179235][ C0] vkms_vblank_simulate: vblank timer overrun [ 843.229776][T11534] debugfs: 'hsr0' already exists in 'hsr' [ 843.229804][T11534] Cannot create hsr debugfs directory [ 843.426547][ C0] vkms_vblank_simulate: vblank timer overrun [ 843.450541][ C0] vkms_vblank_simulate: vblank timer overrun [ 846.883656][T11900] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1505'. [ 846.883679][T11900] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1505'. [ 847.008534][T11902] netlink: 532 bytes leftover after parsing attributes in process `syz.4.1506'. [ 848.550068][ C0] vkms_vblank_simulate: vblank timer overrun [ 848.600527][ T976] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 848.739864][ C0] vkms_vblank_simulate: vblank timer overrun [ 849.682146][ T976] usb 6-1: Using ep0 maxpacket: 8 [ 849.698991][ T976] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 849.699025][ T976] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 849.699047][ T976] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 849.699068][ T976] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 849.699106][ T976] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 849.699126][ T976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.007657][ T976] usb 6-1: GET_CAPABILITIES returned 0 [ 850.007706][ T976] usbtmc 6-1:16.0: can't read capabilities [ 850.215090][ T5931] kernel read not supported for file /vcs (pid: 5931 comm: kworker/0:4) [ 850.253783][ T5931] usb 6-1: USB disconnect, device number 14 [ 851.051710][ C0] vkms_vblank_simulate: vblank timer overrun [ 851.812292][ C0] vkms_vblank_simulate: vblank timer overrun [ 851.936897][ C0] vkms_vblank_simulate: vblank timer overrun [ 852.471472][T11964] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1517'. [ 852.471495][T11964] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1517'. [ 852.665662][T11534] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 852.716652][T11534] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 852.780622][T11534] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 852.820185][T11534] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 853.560586][ C1] vkms_vblank_simulate: vblank timer overrun [ 854.535325][ C1] vkms_vblank_simulate: vblank timer overrun [ 855.008536][T11993] fuse: Bad value for 'fd' [ 855.253978][T11534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 855.423634][T11534] 8021q: adding VLAN 0 to HW filter on device team0 [ 855.532892][ T6311] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.532976][ T6311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 855.713755][ T1021] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.733092][ T1021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 857.434520][ C1] vkms_vblank_simulate: vblank timer overrun [ 857.441126][T11018] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 857.610590][T11018] usb 5-1: Using ep0 maxpacket: 8 [ 857.613100][T11018] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 857.613132][T11018] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 857.613156][T11018] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 857.613179][T11018] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 857.613220][T11018] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 857.613242][T11018] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.622772][ C1] vkms_vblank_simulate: vblank timer overrun [ 857.938357][T11018] usb 5-1: GET_CAPABILITIES returned 0 [ 857.939182][T11018] usbtmc 5-1:16.0: can't read capabilities [ 858.176727][T11534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 858.365135][ C1] vkms_vblank_simulate: vblank timer overrun [ 858.408314][T11018] kernel read not supported for file /vcs (pid: 11018 comm: kworker/0:0) [ 858.459945][ T5810] usb 5-1: USB disconnect, device number 22 [ 865.009099][ T9390] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 865.034533][ T9390] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 865.035949][ T9390] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 865.037240][ T9390] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 865.299469][ T9390] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 867.400560][ T61] Bluetooth: hci2: command tx timeout [ 869.590526][ T61] Bluetooth: hci2: command tx timeout [ 870.140537][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 870.195804][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.195847][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.313955][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 870.316552][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 870.316583][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 870.316607][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 870.316630][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 870.316671][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 870.316692][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.872127][ T10] usb 2-1: GET_CAPABILITIES returned 0 [ 870.872178][ T10] usbtmc 2-1:16.0: can't read capabilities [ 871.091662][T11018] kernel read not supported for file /vcs (pid: 11018 comm: kworker/0:0) [ 871.630537][ T61] Bluetooth: hci2: command tx timeout [ 873.711389][ T61] Bluetooth: hci2: command tx timeout [ 885.681766][ T9390] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 885.686902][ T9390] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 885.688983][ T9390] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 885.690713][ T9390] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 885.691446][ T9390] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 887.710876][ T9390] Bluetooth: hci3: command tx timeout [ 889.801016][ T9390] Bluetooth: hci3: command tx timeout [ 890.012393][ T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 890.034269][ T61] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 890.035930][ T61] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 890.039993][ T61] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 890.051484][ T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 891.164634][ T9390] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 891.175252][ T9390] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 891.176543][ T9390] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 891.178134][ T9390] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 891.178896][ T9390] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 891.529060][ T61] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 891.542367][ T61] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 891.543784][ T61] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 891.545044][ T61] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 891.548640][ T61] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 891.870794][ T61] Bluetooth: hci3: command tx timeout [ 892.110560][ T61] Bluetooth: hci6: command tx timeout [ 893.400763][ T61] Bluetooth: hci7: command tx timeout [ 893.630519][ T61] Bluetooth: hci8: command tx timeout [ 893.951022][ T61] Bluetooth: hci3: command tx timeout [ 894.191570][ T61] Bluetooth: hci6: command tx timeout [ 895.470716][ T61] Bluetooth: hci7: command tx timeout [ 895.710683][ T61] Bluetooth: hci8: command tx timeout [ 896.275036][ T61] Bluetooth: hci6: command tx timeout [ 897.550729][ T61] Bluetooth: hci7: command tx timeout [ 897.795642][ T61] Bluetooth: hci8: command tx timeout [ 898.350499][ T9390] Bluetooth: hci6: command tx timeout [ 899.630655][ T61] Bluetooth: hci7: command tx timeout [ 899.870606][ T61] Bluetooth: hci8: command tx timeout [ 922.392591][ T9390] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 922.399740][ T9390] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 922.407869][ T9390] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 922.409001][ T9390] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 922.411104][ T9390] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 924.510569][ T9390] Bluetooth: hci9: command tx timeout [ 926.590582][ T9390] Bluetooth: hci9: command tx timeout [ 928.673754][ T9390] Bluetooth: hci9: command tx timeout [ 930.750667][ T9390] Bluetooth: hci9: command tx timeout [ 946.711821][ T61] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 946.728917][ T61] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 946.738262][ T61] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 946.756371][ T61] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 946.757225][ T61] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 948.830596][ T9390] Bluetooth: hci10: command tx timeout [ 950.555123][ T61] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 950.578176][ T61] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 950.579502][ T61] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 950.595466][ T61] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 950.596261][ T61] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 950.910538][ T9390] Bluetooth: hci10: command tx timeout [ 951.998788][ T61] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 952.018421][ T61] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 952.034391][ T61] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 952.035537][ T61] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 952.036286][ T61] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 952.116097][ T61] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 952.139813][ T61] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 952.150742][ T61] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 952.154697][ T61] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 952.155541][ T61] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 952.670638][ T61] Bluetooth: hci11: command tx timeout [ 953.000713][ T61] Bluetooth: hci10: command tx timeout [ 954.110669][ T61] Bluetooth: hci12: command tx timeout [ 954.197254][ T61] Bluetooth: hci13: command tx timeout [ 954.750587][ T61] Bluetooth: hci11: command tx timeout [ 955.071039][ T61] Bluetooth: hci10: command tx timeout [ 956.190464][ T61] Bluetooth: hci12: command tx timeout [ 956.270556][ T61] Bluetooth: hci13: command tx timeout [ 956.830669][ T61] Bluetooth: hci11: command tx timeout [ 958.280434][ T61] Bluetooth: hci12: command tx timeout [ 958.350575][ T61] Bluetooth: hci13: command tx timeout [ 958.910653][ T61] Bluetooth: hci11: command tx timeout [ 960.350499][ T61] Bluetooth: hci12: command tx timeout [ 960.430647][ T61] Bluetooth: hci13: command tx timeout [ 975.190334][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 975.190352][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P1323 [ 975.190379][ C1] rcu: (detected by 1, t=10502 jiffies, g=41353, q=6420 ncpus=2) [ 975.190401][ C1] task:aoe_tx0 state:R running task stack:25672 pid:1323 tgid:1323 ppid:2 task_flags:0x208040 flags:0x00080000 [ 975.190490][ C1] Call Trace: [ 975.190499][ C1] [ 975.190504][ C1] sched_show_task+0x49d/0x630 [ 975.190526][ C1] ? __pfx_sched_show_task+0x10/0x10 [ 975.190538][ C1] ? rcu_dump_cpu_stacks+0x79/0x4e0 [ 975.190551][ C1] ? wq_watchdog_touch+0xf6/0x180 [ 975.190567][ C1] print_other_cpu_stall+0xf78/0x1340 [ 975.190584][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 975.190593][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 975.190608][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 975.190630][ C1] rcu_sched_clock_irq+0xa47/0x11b0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 975.190646][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 975.190661][ C1] ? acct_account_cputime+0x20d/0x210 [ 975.190673][ C1] update_process_times+0x235/0x2d0 [ 975.190690][ C1] tick_nohz_handler+0x39a/0x520 [ 975.190706][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 975.190719][ C1] __hrtimer_run_queues+0x506/0xd40 [ 975.190741][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 975.190751][ C1] ? read_tsc+0x9/0x20 [ 975.190769][ C1] hrtimer_interrupt+0x45d/0xa90 [ 975.190794][ C1] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 975.190807][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 975.190822][ C1] [ 975.190826][ C1] [ 975.190830][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 975.190841][ C1] RIP: 0010:handle_tx+0x3b5/0x610 [ 975.190918][ C1] Code: 0f b6 04 28 84 c0 0f 85 9b 00 00 00 48 8b 44 24 18 8b 18 31 ff 89 de e8 99 39 ea fb 85 db 4c 8b 64 24 50 74 07 e8 db 34 ea fb 1f 4c 89 e7 e8 21 22 d1 02 4c 39 f0 75 46 e8 c7 34 ea fb 4c 89 [ 975.190927][ C1] RSP: 0018:ffffc9000543f778 EFLAGS: 00000293 [ 975.190936][ C1] RAX: ffffffff85d4b855 RBX: 0000000000000020 RCX: ffff8880272dbc00 [ 975.190944][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 975.190950][ C1] RBP: ffff888035184238 R08: 0000000000000000 R09: 0000000000000000 [ 975.190956][ C1] R10: dffffc0000000000 R11: ffffed1028468251 R12: ffff888035184f30 [ 975.190963][ C1] R13: dffffc0000000000 R14: ffff88802fab9140 R15: ffff888035184fc8 [ 975.190975][ C1] ? handle_tx+0x3b5/0x610 [ 975.190988][ C1] ? handle_tx+0x3b5/0x610 [ 975.191004][ C1] dev_hard_start_xmit+0x2f0/0x870 [ 975.191024][ C1] __dev_queue_xmit+0x1b50/0x3b70 [ 975.191039][ C1] ? __dev_queue_xmit+0x26f/0x3b70 [ 975.191052][ C1] ? do_raw_spin_lock+0x121/0x290 [ 975.191071][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 975.191080][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 975.191095][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 975.191110][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 975.191124][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 975.191139][ C1] ? __lock_acquire+0xab9/0xd20 [ 975.191152][ C1] ? rt_mutex_slowunlock+0x493/0x8a0 [ 975.191163][ C1] ? reacquire_held_locks+0x127/0x1d0 [ 975.191174][ C1] ? rt_spin_lock+0x1c1/0x3e0 [ 975.191188][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 975.191201][ C1] ? rt_spin_unlock+0x150/0x200 [ 975.191215][ C1] ? rt_spin_unlock+0x161/0x200 [ 975.191228][ C1] tx+0x6b/0x190 [ 975.191273][ C1] ? __pfx_tx+0x10/0x10 [ 975.191286][ C1] kthread+0x1d0/0x3e0 [ 975.191304][ C1] ? __pfx_kthread+0x10/0x10 [ 975.191317][ C1] ? __pfx_default_wake_function+0x10/0x10 [ 975.191330][ C1] ? __kthread_parkme+0x7b/0x200 [ 975.191340][ C1] ? __kthread_parkme+0x1a1/0x200 [ 975.191353][ C1] kthread+0x711/0x8a0 [ 975.191366][ C1] ? __pfx_kthread+0x10/0x10 [ 975.191378][ C1] ? __pfx_kthread+0x10/0x10 [ 975.191387][ C1] ? rt_spin_unlock+0x150/0x200 [ 975.191401][ C1] ? rt_spin_unlock+0x161/0x200 [ 975.191412][ C1] ? __pfx_kthread+0x10/0x10 [ 975.191423][ C1] ret_from_fork+0x4bc/0x870 [ 975.191439][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 975.191462][ C1] ? __switch_to_asm+0x39/0x70 [ 975.191475][ C1] ? __switch_to_asm+0x33/0x70 [ 975.191487][ C1] ? __pfx_kthread+0x10/0x10 [ 975.191498][ C1] ret_from_fork_asm+0x1a/0x30 [ 975.191520][ C1]