last executing test programs: 18.301522869s ago: executing program 4 (id=49): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f0000000480)='cpu.pressure\x00', 0x2, 0x0) read(r4, &(0x7f0000000140)=""/252, 0xfc) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) socket$inet6(0xa, 0x1, 0x8010800000000084) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60040, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x172f, 0x501, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0}}]}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r5, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r6], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001240)=@newtfilter={0x2c, 0x10, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x74, r5, {}, {0x7, 0x10}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xc9, 0x8}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0x2000c084) 15.78287933s ago: executing program 4 (id=57): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x9, 0xc, 0x0, 0x6, 0x60, 0x86, 0x2, 0xe7, 0x40, 0x2, 0x7, 0x0, 0x7, 0x4, 0x7, 0x5, 0xff, 0x4, '\x00', 0x8, 0x7ffffffffffffffe}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14.229633719s ago: executing program 1 (id=63): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0xc1000c42) r1 = inotify_init1(0x80000) inotify_add_watch(r1, &(0x7f0000000240)='.\x00', 0x60000726) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x124) fanotify_mark(0xffffffffffffffff, 0x1, 0x4000001a, r2, 0x0) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) 14.030303223s ago: executing program 4 (id=64): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x111, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x1f, 0x3}]}, 0x1, 0x1}, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, r2, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(r3, 0x3516, 0x35cb, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x5, 0xb0331, 0xffffffffffffffff, 0x8000000) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) 13.271903213s ago: executing program 1 (id=67): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f0000000480)='cpu.pressure\x00', 0x2, 0x0) read(r4, &(0x7f0000000140)=""/252, 0xfc) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) socket$inet6(0xa, 0x1, 0x8010800000000084) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60040, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x172f, 0x501, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0}}]}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r5, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r6], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001240)=@newtfilter={0x2c, 0x10, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x74, r5, {}, {0x7, 0x10}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xc9, 0x8}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0x2000c084) 11.86515523s ago: executing program 0 (id=70): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) socket(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r2, &(0x7f0000000280), 0x0}, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) read$ptp(r3, &(0x7f0000000240)=""/133, 0x85) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000000)='./bus\x00', 0x804800, &(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRESOCT=r2], 0xf9, 0x1223, &(0x7f0000001840)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x145042, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x2013, r4, 0x0) write$cgroup_subtree(r4, &(0x7f0000000440)=ANY=[], 0x32600) fsopen(&(0x7f00000001c0)='sockfs\x00', 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x4}}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x48}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}}, 0x0) close(r1) 10.571441731s ago: executing program 2 (id=73): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040098}, 0x0) 9.899479198s ago: executing program 1 (id=74): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5ab40bf85edaca83"], 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="000301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r3 = dup(r2) read$FUSE(r3, &(0x7f00000044c0)={0x2020}, 0x2020) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f0000000000)=0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) 9.455672242s ago: executing program 2 (id=75): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x3}}}, 0x108) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x20000000) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x10000}, 0x28) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x9, 0xbaca, 0x9, 0xa900c, 0x1, 0x7ff, '\x00', 0x0, r3, 0x3, 0x5, 0x4, 0x4, @value=r5}, 0x50) r9 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r9, &(0x7f00000000c0), 0x0, 0x113, 0x2) r10 = syz_io_uring_setup(0x2152, &(0x7f0000000200)={0x0, 0xcfca, 0x1040, 0xfffffffd, 0x8000153}, &(0x7f0000000100), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r10, 0xb, &(0x7f0000000080), 0x0) 8.155481126s ago: executing program 2 (id=76): syz_usb_connect(0x1, 0x3d, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000440)="90e7", 0x2}, {&(0x7f00000002c0)="d6a5a87479c1f4b466100d1c655210006555e3e974fdb971b60fe5960bcd802fe3f7da93acf4e6414158438095dc8ca02f5134d635bfc8e5c5704af7e46dd4506719ff2fc92cc098786865efc9ab3fd66c", 0x51}], 0x2) 7.088410847s ago: executing program 0 (id=79): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fsopen(&(0x7f0000000180)='hfsplus\x00', 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) unshare(0x22020600) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 6.653737915s ago: executing program 2 (id=80): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000280)={0x11, 0x0, r3, 0x1, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x9, 0x4) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x4000007}, 0x4000) 6.342197147s ago: executing program 3 (id=81): r0 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r1 = dup(r0) read$FUSE(r1, &(0x7f00000044c0)={0x2020}, 0x2020) ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000000)=0x3) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, 0x0) 5.7667659s ago: executing program 2 (id=82): r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) poll(0x0, 0x0, 0x7780) syz_usb_disconnect(r0) 5.074892296s ago: executing program 0 (id=83): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.766738857s ago: executing program 1 (id=84): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f0000000480)='cpu.pressure\x00', 0x2, 0x0) read(r4, &(0x7f0000000140)=""/252, 0xfc) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) socket$inet6(0xa, 0x1, 0x8010800000000084) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60040, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x172f, 0x501, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0}}]}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x141900) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r5, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r6], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001240)=@newtfilter={0x2c, 0x10, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x74, r5, {}, {0x7, 0x10}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xc9, 0x8}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0x2000c084) 4.355762957s ago: executing program 3 (id=85): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040098}, 0x0) 3.892116886s ago: executing program 0 (id=86): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x3}}}, 0x108) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x20000000) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x10000}, 0x28) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x9, 0xbaca, 0x9, 0xa900c, 0x1, 0x7ff, '\x00', 0x0, r3, 0x3, 0x5, 0x4, 0x4, @value=r5}, 0x50) r9 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r9, &(0x7f00000000c0), 0x0, 0x113, 0x2) r10 = syz_io_uring_setup(0x2152, &(0x7f0000000200)={0x0, 0xcfca, 0x1040, 0xfffffffd, 0x8000153}, &(0x7f0000000100), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r10, 0xb, &(0x7f0000000080), 0x0) 3.268361485s ago: executing program 4 (id=87): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f0000000480)='cpu.pressure\x00', 0x2, 0x0) read(r4, &(0x7f0000000140)=""/252, 0xfc) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) socket$inet6(0xa, 0x1, 0x8010800000000084) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60040, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x172f, 0x501, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0}}]}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r5, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r6], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001240)=@newtfilter={0x2c, 0x10, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x74, r5, {}, {0x7, 0x10}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xc9, 0x8}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0x2000c084) 3.108917158s ago: executing program 3 (id=88): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x4000) 2.618806822s ago: executing program 0 (id=89): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000200)="00004305", 0x4, 0x0, &(0x7f0000000080)={0x11, 0x8100, r2, 0x1, 0x3, 0x6, @broadcast}, 0x14) 1.993360857s ago: executing program 2 (id=90): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) write(r2, &(0x7f0000000040)="05000000", 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000001103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb"], &(0x7f0000000100)='GPL\x00'}, 0x94) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) 1.733568554s ago: executing program 0 (id=91): syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000440)="90e7", 0x2}, {&(0x7f00000002c0)="d6a5a87479c1f4b466100d1c655210006555e3e974fdb971b60fe5960bcd802fe3f7da93acf4e6414158438095dc8ca02f5134d635bfc8e5c5704af7e46dd4506719ff2fc92cc098786865efc9ab3fd66c", 0x51}], 0x2) 1.639680036s ago: executing program 1 (id=92): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000280)={0x11, 0x0, r3, 0x1, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x9, 0x4) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x4000007}, 0x4000) 1.325919921s ago: executing program 3 (id=93): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fsopen(&(0x7f0000000180)='hfsplus\x00', 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) unshare(0x22020600) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 938.888552ms ago: executing program 1 (id=94): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, 0x0, 0x0) 902.243619ms ago: executing program 3 (id=95): r0 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r1 = dup(r0) read$FUSE(r1, &(0x7f00000044c0)={0x2020}, 0x2020) ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000000)=0x3) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, 0x0) 616.659867ms ago: executing program 4 (id=96): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 287.740313ms ago: executing program 3 (id=97): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0x6, 0x3, &(0x7f00000000c0)={0x11, "cc9efc7ddb01702fa900"}}) 0s ago: executing program 4 (id=98): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.172' (ED25519) to the list of known hosts. [ 188.348251][ T5753] cgroup: Unknown subsys name 'net' [ 188.480509][ T5753] cgroup: Unknown subsys name 'cpuset' [ 188.496241][ T5753] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 194.911214][ T5753] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 199.589094][ T5771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 199.608303][ T5771] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 199.617694][ T5771] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 199.637596][ T5771] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 199.649143][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 199.659489][ T49] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 199.670940][ T49] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 199.680746][ T49] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 199.700388][ T49] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 199.711713][ T49] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 199.773814][ T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 199.797945][ T49] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 199.810767][ T5071] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 199.823199][ T5776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 199.833101][ T5775] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 199.847356][ T5775] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 199.867870][ T5775] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 199.888294][ T5771] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 199.899254][ T5771] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 199.925431][ T5775] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 199.935002][ T5775] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 199.952007][ T5771] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 199.960281][ T5771] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 199.972680][ T5775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 199.987970][ T5771] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 201.450938][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 201.580652][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 201.816138][ T5071] Bluetooth: hci1: command tx timeout [ 201.822347][ T5771] Bluetooth: hci0: command tx timeout [ 201.922720][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 201.975981][ T5771] Bluetooth: hci2: command tx timeout [ 202.056659][ T5771] Bluetooth: hci3: command tx timeout [ 202.062289][ T5771] Bluetooth: hci4: command tx timeout [ 202.187417][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 202.232322][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 202.795955][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.813848][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.836858][ T5773] bridge_slave_0: entered allmulticast mode [ 202.857068][ T5773] bridge_slave_0: entered promiscuous mode [ 202.956154][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.983744][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.992412][ T5772] bridge_slave_0: entered allmulticast mode [ 203.007788][ T5772] bridge_slave_0: entered promiscuous mode [ 203.023464][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.051857][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.066786][ T5773] bridge_slave_1: entered allmulticast mode [ 203.098192][ T5773] bridge_slave_1: entered promiscuous mode [ 203.199371][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.216574][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.224259][ T5772] bridge_slave_1: entered allmulticast mode [ 203.249469][ T5772] bridge_slave_1: entered promiscuous mode [ 203.559205][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.652632][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.660514][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.668316][ T5779] bridge_slave_0: entered allmulticast mode [ 203.677494][ T5779] bridge_slave_0: entered promiscuous mode [ 203.698039][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.717927][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.756594][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.764318][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.772101][ T5778] bridge_slave_0: entered allmulticast mode [ 203.781048][ T5778] bridge_slave_0: entered promiscuous mode [ 203.792813][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.800888][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.808784][ T5779] bridge_slave_1: entered allmulticast mode [ 203.818222][ T5779] bridge_slave_1: entered promiscuous mode [ 203.863875][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.896183][ T5771] Bluetooth: hci0: command tx timeout [ 203.896243][ T5071] Bluetooth: hci1: command tx timeout [ 203.909386][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.917123][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.924839][ T5769] bridge_slave_0: entered allmulticast mode [ 203.934140][ T5769] bridge_slave_0: entered promiscuous mode [ 203.945431][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.953534][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.961456][ T5778] bridge_slave_1: entered allmulticast mode [ 203.970312][ T5778] bridge_slave_1: entered promiscuous mode [ 204.015650][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.022573][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.056233][ T5771] Bluetooth: hci2: command tx timeout [ 204.109638][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.117446][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.126356][ T5769] bridge_slave_1: entered allmulticast mode [ 204.135125][ T5769] bridge_slave_1: entered promiscuous mode [ 204.141588][ T5771] Bluetooth: hci4: command tx timeout [ 204.141641][ T5071] Bluetooth: hci3: command tx timeout [ 204.247925][ T5773] team0: Port device team_slave_0 added [ 204.262436][ T5772] team0: Port device team_slave_0 added [ 204.335492][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.353880][ T5773] team0: Port device team_slave_1 added [ 204.367889][ T5772] team0: Port device team_slave_1 added [ 204.387587][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.406864][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.427742][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.445275][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.517970][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.741742][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.749586][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.775995][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.790401][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.798287][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.824933][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.873675][ T5778] team0: Port device team_slave_0 added [ 204.894538][ T5779] team0: Port device team_slave_0 added [ 204.906639][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.914637][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.943093][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.957444][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.964545][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.992733][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.012360][ T5769] team0: Port device team_slave_0 added [ 205.028004][ T5778] team0: Port device team_slave_1 added [ 205.041330][ T5779] team0: Port device team_slave_1 added [ 205.090848][ T5769] team0: Port device team_slave_1 added [ 205.279091][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.286700][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.313586][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.357351][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.364441][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.391175][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.432012][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.439256][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.465971][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.480488][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.487922][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.514582][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.559398][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.567164][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.593693][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.649132][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.657068][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.684285][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.730107][ T5773] hsr_slave_0: entered promiscuous mode [ 205.739366][ T5773] hsr_slave_1: entered promiscuous mode [ 205.769348][ T5772] hsr_slave_0: entered promiscuous mode [ 205.778806][ T5772] hsr_slave_1: entered promiscuous mode [ 205.787293][ T5772] debugfs: 'hsr0' already exists in 'hsr' [ 205.793219][ T5772] Cannot create hsr debugfs directory [ 205.976181][ T5771] Bluetooth: hci0: command tx timeout [ 205.976232][ T5071] Bluetooth: hci1: command tx timeout [ 206.131086][ T5779] hsr_slave_0: entered promiscuous mode [ 206.136883][ T5771] Bluetooth: hci2: command tx timeout [ 206.147179][ T5779] hsr_slave_1: entered promiscuous mode [ 206.155224][ T5779] debugfs: 'hsr0' already exists in 'hsr' [ 206.161510][ T5779] Cannot create hsr debugfs directory [ 206.200950][ T5769] hsr_slave_0: entered promiscuous mode [ 206.209904][ T5769] hsr_slave_1: entered promiscuous mode [ 206.216848][ T5771] Bluetooth: hci3: command tx timeout [ 206.216904][ T5071] Bluetooth: hci4: command tx timeout [ 206.222497][ T5769] debugfs: 'hsr0' already exists in 'hsr' [ 206.233868][ T5769] Cannot create hsr debugfs directory [ 206.254013][ T5778] hsr_slave_0: entered promiscuous mode [ 206.263067][ T5778] hsr_slave_1: entered promiscuous mode [ 206.271474][ T5778] debugfs: 'hsr0' already exists in 'hsr' [ 206.277510][ T5778] Cannot create hsr debugfs directory [ 207.680765][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 207.712283][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 207.732826][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 207.779917][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 207.924657][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 207.962150][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 207.991005][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 208.058003][ T5071] Bluetooth: hci0: command tx timeout [ 208.063791][ T5771] Bluetooth: hci1: command tx timeout [ 208.069760][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 208.202689][ T5769] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 208.216037][ T5771] Bluetooth: hci2: command tx timeout [ 208.277974][ T5769] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 208.296228][ T5771] Bluetooth: hci4: command tx timeout [ 208.301887][ T5071] Bluetooth: hci3: command tx timeout [ 208.343402][ T5769] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 208.370826][ T5769] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 208.690074][ T5778] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 208.743733][ T5778] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 208.772564][ T5778] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 208.844243][ T5778] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 209.049632][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.192621][ T5779] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 209.256624][ T5779] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 209.285412][ T5779] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 209.308871][ T5779] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 209.433616][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.515651][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.630060][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.637542][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.659626][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.667207][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.700137][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.793761][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.843521][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.850963][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.952193][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.959656][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.072768][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.195980][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.220636][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.228144][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.392321][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.400008][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.502549][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.679856][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.687505][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.845568][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.853216][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.054187][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.481107][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.605854][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.613391][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.681479][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.750750][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.758440][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.260758][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.665579][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.684259][ T5772] veth0_vlan: entered promiscuous mode [ 212.740546][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.912456][ T5772] veth1_vlan: entered promiscuous mode [ 212.982984][ T5773] veth0_vlan: entered promiscuous mode [ 213.182764][ T5773] veth1_vlan: entered promiscuous mode [ 213.496925][ T5772] veth0_macvtap: entered promiscuous mode [ 213.593052][ T5769] veth0_vlan: entered promiscuous mode [ 213.639546][ T5772] veth1_macvtap: entered promiscuous mode [ 213.670580][ T5773] veth0_macvtap: entered promiscuous mode [ 213.764168][ T5769] veth1_vlan: entered promiscuous mode [ 213.782987][ T5773] veth1_macvtap: entered promiscuous mode [ 213.838740][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.947815][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.015348][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.091063][ T4413] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.102794][ T4413] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.128168][ T4413] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.139546][ T4413] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.157025][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.238752][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.402070][ T5769] veth0_macvtap: entered promiscuous mode [ 214.430336][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.442372][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.515159][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.532276][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.621543][ T5779] veth0_vlan: entered promiscuous mode [ 214.669423][ T5769] veth1_macvtap: entered promiscuous mode [ 214.865091][ T5778] veth0_vlan: entered promiscuous mode [ 214.964030][ T5779] veth1_vlan: entered promiscuous mode [ 215.043889][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.158686][ T5778] veth1_vlan: entered promiscuous mode [ 215.222396][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.381238][ T34] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.427447][ T34] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.437909][ T34] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.499699][ T34] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.635373][ T5779] veth0_macvtap: entered promiscuous mode [ 215.724848][ T5779] veth1_macvtap: entered promiscuous mode [ 215.875000][ T5778] veth0_macvtap: entered promiscuous mode [ 215.992912][ T5778] veth1_macvtap: entered promiscuous mode [ 216.023606][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.162987][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.337556][ T34] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.364468][ T34] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.437499][ T34] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.480545][ T141] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.539293][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.662931][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.790879][ T56] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.826422][ T56] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.835513][ T56] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.899291][ T56] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.691917][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.750666][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.030813][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.077122][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.569383][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.585470][ T5772] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 220.619761][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.965094][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.018229][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.362135][ T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.401985][ T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.074498][ T5962] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 223.096547][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.104604][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.812468][ T5969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7'. [ 223.976847][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 224.090532][ T4413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.117091][ T4413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.592613][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.630518][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.938679][ T4413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.996534][ T4413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.149583][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.171979][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.456158][ T3080] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 225.700687][ T3080] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.748514][ T3080] usb 1-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 225.800642][ T3080] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.818413][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 225.851933][ T3080] usb 1-1: config 0 descriptor?? [ 225.894988][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 225.951851][ T3080] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 226.180310][ T3080] usb 1-1: USB disconnect, device number 2 [ 226.217886][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 226.510544][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 227.376987][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 227.967586][ T5835] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 228.160090][ T5835] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 228.212271][ T5835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 228.266241][ T5835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 228.276947][ T5833] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 228.298863][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 228.317032][ T5835] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 228.346310][ T5835] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 228.412329][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.469388][ T5835] usb 3-1: config 0 descriptor?? [ 228.518543][ T5833] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 228.605941][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 228.666047][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 228.716409][ T5833] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 228.808051][ T5833] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 228.856487][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.997941][ T5833] usb 1-1: config 0 descriptor?? [ 229.105191][ T5835] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 229.560457][ T5833] plantronics 0003:047F:FFFF.0002: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 230.795178][ T5985] loop4: detected capacity change from 0 to 8192 [ 230.797800][ T5833] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 230.974368][ T5985] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 231.346566][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 231.944121][ T5831] usb 1-1: USB disconnect, device number 3 [ 232.187875][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 232.890828][ T9] usb 3-1: USB disconnect, device number 2 [ 232.933439][ T5998] mmap: syz.4.12 (5998) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 232.960244][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 233.533319][ T5998] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 233.614151][ T5998] CIFS mount error: No usable UNC path provided in device string! [ 233.614151][ T5998] [ 233.811321][ T5998] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 235.266467][ T5835] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 235.491452][ T5835] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 235.536231][ T5835] usb 3-1: config 0 has no interface number 0 [ 235.542596][ T5835] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 235.592722][ T5835] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 235.617578][ T6015] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 235.646434][ T5835] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 235.681354][ T5835] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 235.716097][ T3080] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 235.745597][ T5835] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 235.786336][ T5835] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 235.858239][ T5835] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 235.887581][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.917703][ T3080] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.968400][ T5835] usb 3-1: config 0 descriptor?? [ 235.978433][ T6008] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 236.006843][ T6008] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 236.023801][ T3080] usb 4-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 236.058449][ T3080] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.124388][ T3080] usb 4-1: config 0 descriptor?? [ 236.145442][ T5835] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 236.176255][ T3080] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 236.364689][ T3080] usb 3-1: USB disconnect, device number 3 [ 236.419062][ T6014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19'. [ 236.423072][ T3080] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 236.517352][ T6014] ip6gre0: entered promiscuous mode [ 236.522882][ T6014] ip6gre0: entered allmulticast mode [ 236.670020][ T5835] usb 4-1: USB disconnect, device number 2 [ 237.144439][ T6018] loop0: detected capacity change from 0 to 8192 [ 237.220352][ T6018] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 237.966173][ T5835] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 238.218726][ T5835] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 238.262164][ T5835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 238.336532][ T5835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 238.416440][ T5835] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 238.549878][ T5835] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 238.586336][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.636355][ T5833] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 238.698471][ T5835] usb 3-1: config 0 descriptor?? [ 238.838457][ T5833] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 238.921010][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 239.024197][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 239.108090][ T5833] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 239.208439][ T5833] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 239.278333][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.362867][ T5833] usb 1-1: config 0 descriptor?? [ 239.372696][ T5835] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 240.018063][ T5833] plantronics 0003:047F:FFFF.0004: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 240.187746][ T5835] usb 3-1: USB disconnect, device number 4 [ 241.656326][ T5835] usb 1-1: USB disconnect, device number 4 [ 242.395344][ T3080] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 242.430910][ T5833] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 242.627869][ T3080] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.698146][ T3080] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 242.714473][ T5833] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 242.736230][ T5833] usb 1-1: config 0 has no interface number 0 [ 242.742656][ T5833] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 242.747338][ T3080] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 242.835249][ T3080] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.844299][ T5833] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 242.899679][ T3080] usb 2-1: config 0 descriptor?? [ 242.919840][ T5833] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 243.005324][ T5833] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 243.022425][ T6053] netlink: 28 bytes leftover after parsing attributes in process `syz.3.34'. [ 243.060633][ T6053] loop2: detected capacity change from 0 to 7 [ 243.070783][ T5833] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 243.099495][ T5833] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 243.138543][ T6053] Dev loop2: unable to read RDB block 7 [ 243.166688][ T5833] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 243.191139][ T6053] loop2: AHDI p1 p2 p3 [ 243.206611][ T6053] loop2: partition table partially beyond EOD, truncated [ 243.225629][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.264089][ T6053] loop2: p1 start 1601398130 is beyond EOD, truncated [ 243.286842][ T5833] usb 1-1: config 0 descriptor?? [ 243.291379][ T6053] loop2: p2 start 1702059890 is beyond EOD, truncated [ 243.317285][ T6051] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 243.374678][ T6051] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 243.430597][ T5833] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 243.596593][ T5831] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 243.673349][ T6051] ldusb 1-1:0.55: Write buffer overflow, 1 bytes dropped [ 243.775400][ T5833] usb 1-1: USB disconnect, device number 5 [ 243.792942][ T5831] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.854704][ T5833] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 243.884533][ T5831] usb 3-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 243.959564][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.029708][ T5831] usb 3-1: config 0 descriptor?? [ 244.233748][ T5831] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 244.347989][ T6056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.35'. [ 244.383657][ T6059] netlink: 24 bytes leftover after parsing attributes in process `syz.4.36'. [ 244.396729][ T6056] vxcan0: entered promiscuous mode [ 244.413250][ T6056] vxcan0: entered allmulticast mode [ 244.522520][ T5831] usb 3-1: USB disconnect, device number 5 [ 244.865255][ T5835] usb 2-1: USB disconnect, device number 2 [ 246.846706][ T5833] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 247.094842][ T5833] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 247.143607][ T5833] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 247.175906][ T5833] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 247.177640][ T6094] netlink: 28 bytes leftover after parsing attributes in process `syz.3.47'. [ 247.255252][ T6095] loop2: detected capacity change from 0 to 7 [ 247.280090][ T5833] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 247.322229][ T5833] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 247.347151][ T6095] Dev loop2: unable to read RDB block 7 [ 247.365150][ T5833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.421298][ T6095] loop2: AHDI p1 p2 p3 [ 247.438836][ T5833] usb 2-1: config 0 descriptor?? [ 247.475422][ T6095] loop2: partition table partially beyond EOD, truncated [ 247.538713][ T6095] loop2: p1 start 1601398130 is beyond EOD, truncated [ 247.573845][ T6095] loop2: p2 start 1702059890 is beyond EOD, truncated [ 247.966107][ T5831] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 247.999669][ T5833] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 248.279951][ T5831] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.318919][ T5831] usb 5-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 248.337439][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.378233][ T5831] usb 5-1: config 0 descriptor?? [ 248.448339][ T5831] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 248.644076][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.49'. [ 248.674474][ T6100] veth0: entered promiscuous mode [ 248.704022][ T6100] veth0: entered allmulticast mode [ 248.839803][ T5831] usb 5-1: USB disconnect, device number 2 [ 249.046198][ T5833] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 249.245042][ T5833] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.273041][ T5833] usb 3-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 249.295616][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.335116][ T5833] usb 3-1: config 0 descriptor?? [ 249.441860][ T5833] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 249.620732][ T6108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.52'. [ 249.671939][ T6108] bond_slave_0: entered promiscuous mode [ 249.693502][ T6108] bond_slave_0: entered allmulticast mode [ 249.706030][ T5833] usb 2-1: reset high-speed USB device number 3 using dummy_hcd [ 249.829773][ T5835] usb 3-1: USB disconnect, device number 6 [ 250.784383][ T5831] usb 2-1: USB disconnect, device number 3 [ 251.116900][ T9] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 251.165201][ T6133] netlink: 28 bytes leftover after parsing attributes in process `syz.2.61'. [ 251.224322][ T6135] loop2: detected capacity change from 0 to 7 [ 251.257786][ T5974] Dev loop2: unable to read RDB block 7 [ 251.264164][ T5974] loop2: AHDI p1 p2 p3 [ 251.270032][ T5974] loop2: partition table partially beyond EOD, truncated [ 251.297115][ T5974] loop2: p1 start 1601398130 is beyond EOD, truncated [ 251.332977][ T5974] loop2: p2 start 1702059890 is beyond EOD, truncated [ 251.395963][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 251.398404][ T6135] Dev loop2: unable to read RDB block 7 [ 251.404268][ T9] usb 4-1: config 0 has no interface number 0 [ 251.404401][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 251.444220][ T6135] loop2: AHDI p1 p2 p3 [ 251.464860][ T6135] loop2: partition table partially beyond EOD, truncated [ 251.486527][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 251.517470][ T6135] loop2: p1 start 1601398130 is beyond EOD, truncated [ 251.524619][ T6135] loop2: p2 start 1702059890 is beyond EOD, truncated [ 251.546041][ T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 251.566070][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.631061][ T9] usb 4-1: config 0 descriptor?? [ 251.658028][ T6130] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 251.738620][ T9] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 252.070446][ T9] usb 4-1: USB disconnect, device number 3 [ 252.070490][ C1] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 253.427025][ T5835] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 253.627547][ T5835] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.681624][ T5835] usb 2-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 253.728228][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.811746][ T5835] usb 2-1: config 0 descriptor?? [ 253.925616][ T5835] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 254.137575][ T6149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.67'. [ 254.208097][ T6149] team_slave_0: entered promiscuous mode [ 254.214010][ T6149] team_slave_0: entered allmulticast mode [ 254.497415][ T9] usb 2-1: USB disconnect, device number 4 [ 255.057882][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 255.219206][ T6156] loop0: detected capacity change from 0 to 8192 [ 255.298828][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.333744][ T6156] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 255.366371][ T9] usb 4-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 255.404163][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.443726][ T29] audit: type=1800 audit(1772797964.722:2): pid=6155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.70" name="file2" dev="loop0" ino=1048605 res=0 errno=0 [ 255.464526][ T9] usb 4-1: config 0 descriptor?? [ 255.474861][ T6155] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 255.585349][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 255.629245][ T6155] FAT-fs (loop0): Filesystem has been set read-only [ 255.710577][ T6161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.72'. [ 255.731122][ T6155] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 255.752481][ T6155] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 255.803330][ T6161] veth1_to_hsr: entered promiscuous mode [ 255.806799][ T6155] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 255.865687][ T6161] veth1_to_hsr: entered allmulticast mode [ 255.874161][ T6155] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 255.925019][ T6155] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 255.962884][ T6155] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 256.023385][ T6155] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 256.086122][ T6155] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 256.187057][ T6155] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 256.219028][ T9] usb 4-1: USB disconnect, device number 4 [ 256.571374][ T5831] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 256.625473][ T6170] netlink: 28 bytes leftover after parsing attributes in process `syz.2.75'. [ 256.642794][ T6170] loop2: detected capacity change from 0 to 7 [ 256.681064][ T6170] Dev loop2: unable to read RDB block 7 [ 256.701884][ T6170] loop2: AHDI p1 p2 p3 [ 256.710503][ T6170] loop2: partition table partially beyond EOD, truncated [ 256.741200][ T6170] loop2: p1 start 1601398130 is beyond EOD, truncated [ 256.757596][ T6170] loop2: p2 start 1702059890 is beyond EOD, truncated [ 256.783056][ T5831] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 256.844903][ T5831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 256.916416][ T5831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 257.005990][ T5831] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 257.066209][ T5831] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 257.118987][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.212737][ T5831] usb 2-1: config 0 descriptor?? [ 257.828890][ T5831] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 259.189099][ T5835] usb 2-1: reset high-speed USB device number 5 using dummy_hcd [ 260.429039][ T5831] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 260.614773][ T5831] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 260.650804][ T5831] usb 3-1: config 0 has no interface number 0 [ 260.678789][ T5831] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 260.749700][ T5831] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 260.825357][ T5831] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 260.875978][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.946670][ T5831] usb 3-1: config 0 descriptor?? [ 260.988787][ T6192] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 261.075253][ T5831] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 261.392000][ T5837] usb 3-1: USB disconnect, device number 7 [ 261.503531][ T3080] usb 2-1: USB disconnect, device number 5 [ 262.079231][ T6202] netlink: 28 bytes leftover after parsing attributes in process `syz.0.86'. [ 262.086793][ T3080] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 262.115395][ T6202] loop2: detected capacity change from 0 to 7 [ 262.153852][ T6202] Dev loop2: unable to read RDB block 7 [ 262.174522][ T6202] loop2: AHDI p1 p2 p3 [ 262.214239][ T6202] loop2: partition table partially beyond EOD, truncated [ 262.307057][ T6202] loop2: p1 start 1601398130 is beyond EOD, truncated [ 262.321883][ T3080] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.366167][ T6202] loop2: p2 start 1702059890 is beyond EOD, truncated [ 262.379743][ T3080] usb 2-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 262.396286][ T3080] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.428171][ T3080] usb 2-1: config 0 descriptor?? [ 262.516349][ T3080] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 262.695043][ T6197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.84'. [ 262.766399][ T6197] xfrm0: entered promiscuous mode [ 262.771718][ T6197] xfrm0: entered allmulticast mode [ 262.936506][ T3080] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 262.989894][ T5831] usb 2-1: USB disconnect, device number 6 [ 263.152290][ T3080] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.216642][ T3080] usb 5-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 263.245986][ T3080] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.299541][ T3080] usb 5-1: config 0 descriptor?? [ 263.365379][ T3080] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 263.568804][ T6206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.87'. [ 263.690038][ T6206] veth1_to_team: entered promiscuous mode [ 263.709789][ T6206] veth1_to_team: entered allmulticast mode [ 263.956861][ T5831] usb 5-1: USB disconnect, device number 3 [ 264.386420][ T3080] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 264.581644][ T3080] usb 1-1: device descriptor read/64, error -71 [ 264.866580][ T3080] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 264.988541][ T6227] tipc: Started in network mode [ 265.024942][ T6227] tipc: Node identity 6684fdbb619f, cluster identity 4711 [ 265.044430][ T3080] usb 1-1: device descriptor read/64, error -71 [ 265.070412][ T6227] tipc: Enabled bearer , priority 0 [ 265.186267][ T3080] usb usb1-port1: attempt power cycle [ 265.449775][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.456780][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.586028][ T3080] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 265.629251][ T3080] usb 1-1: device descriptor read/8, error -71 [ 265.644892][ T6230] syzkaller0: entered promiscuous mode [ 265.696043][ T6230] syzkaller0: entered allmulticast mode [ 265.705210][ T6230] tipc: Resetting bearer [ 265.762912][ T6226] tipc: Resetting bearer [ 265.796867][ T5831] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 265.887505][ T3080] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 265.939840][ T3080] usb 1-1: device descriptor read/8, error -71 [ 265.967125][ T5831] usb 4-1: Using ep0 maxpacket: 32 [ 266.002367][ T5831] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 266.035605][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.058510][ T3080] usb usb1-port1: unable to enumerate USB device [ 266.084666][ T5831] usb 4-1: config 0 descriptor?? [ 266.193445][ T6242] Zero length message leads to an empty skb [ 266.271675][ T6226] tipc: Disabling bearer [ 266.424075][ T5831] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 266.469480][ T3080] tipc: Node number set to 119274939 [ 266.503335][ T5831] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 266.582024][ T5831] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 266.611522][ T5831] usb 4-1: media controller created [ 266.660020][ T6234] ===================================================== [ 266.667781][ T6234] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 266.675321][ T6234] _copy_to_user+0xcc/0x120 [ 266.680377][ T6234] i2cdev_ioctl_smbus+0x586/0x660 [ 266.685844][ T6234] compat_i2cdev_ioctl+0x48f/0xb40 [ 266.691158][ T6234] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 266.698121][ T6234] ia32_sys_call+0x2854/0x4360 [ 266.703172][ T6234] __do_fast_syscall_32+0x17f/0x3f0 [ 266.708845][ T6234] do_fast_syscall_32+0x37/0x80 [ 266.715172][ T6234] do_SYSENTER_32+0x1f/0x30 [ 266.720853][ T6234] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 266.727574][ T6234] [ 266.730001][ T6234] Uninit was stored to memory at: [ 266.735374][ T6234] __i2c_smbus_xfer+0x25a0/0x3120 [ 266.740875][ T6234] i2c_smbus_xfer+0x2d8/0x480 [ 266.746041][ T6234] i2cdev_ioctl_smbus+0x4a1/0x660 [ 266.754956][ T6234] compat_i2cdev_ioctl+0x48f/0xb40 [ 266.762975][ T6234] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 266.769274][ T6234] ia32_sys_call+0x2854/0x4360 [ 266.774236][ T6234] __do_fast_syscall_32+0x17f/0x3f0 [ 266.779847][ T6234] do_fast_syscall_32+0x37/0x80 [ 266.784979][ T6234] do_SYSENTER_32+0x1f/0x30 [ 266.790030][ T6234] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 266.796807][ T6234] [ 266.799272][ T6234] Local variable msgbuf1.i created at: [ 266.804900][ T6234] __i2c_smbus_xfer+0x853/0x3120 [ 266.810683][ T6234] i2c_smbus_xfer+0x2d8/0x480 [ 266.815592][ T6234] [ 266.818323][ T6234] Bytes 0-1 of 2 are uninitialized [ 266.823561][ T6234] Memory access of size 2 starts at ffff8880548abc76 [ 266.830566][ T6234] Data copied to user address 00000000800000c0 [ 266.837176][ T6234] [ 266.839659][ T6234] CPU: 0 UID: 0 PID: 6234 Comm: syz.3.97 Not tainted syzkaller #0 PREEMPT(full) [ 266.849131][ T6234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 266.862439][ T6234] ===================================================== [ 266.870842][ T6234] Disabling lock debugging due to kernel taint [ 267.006797][ T6234] Kernel panic - not syncing: kmsan.panic set ... [ 267.013445][ T6234] CPU: 1 UID: 0 PID: 6234 Comm: syz.3.97 Tainted: G B syzkaller #0 PREEMPT(full) [ 267.024354][ T6234] Tainted: [B]=BAD_PAGE [ 267.028635][ T6234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 267.038875][ T6234] Call Trace: [ 267.042282][ T6234] [ 267.045336][ T6234] __dump_stack+0x26/0x30 [ 267.049886][ T6234] dump_stack_lvl+0x50/0x1c0 [ 267.054701][ T6234] ? dump_stack+0x12/0x25 [ 267.059246][ T6234] dump_stack+0x1e/0x25 [ 267.063611][ T6234] vpanic+0x7b4/0x1430 [ 267.067936][ T6234] panic+0x15d/0x160 [ 267.072141][ T6234] kmsan_report+0x31a/0x320 [ 267.076884][ T6234] ? kmsan_internal_check_memory+0x1e8/0x240 [ 267.083117][ T6234] ? kmsan_copy_to_user+0xef/0x190 [ 267.088442][ T6234] ? _copy_to_user+0xcc/0x120 [ 267.093294][ T6234] ? i2cdev_ioctl_smbus+0x586/0x660 [ 267.098672][ T6234] ? compat_i2cdev_ioctl+0x48f/0xb40 [ 267.104134][ T6234] ? __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 267.110064][ T6234] ? ia32_sys_call+0x2854/0x4360 [ 267.115169][ T6234] ? __do_fast_syscall_32+0x17f/0x3f0 [ 267.120721][ T6234] ? do_fast_syscall_32+0x37/0x80 [ 267.125923][ T6234] ? do_SYSENTER_32+0x1f/0x30 [ 267.130784][ T6234] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 267.137490][ T6234] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 267.142970][ T6234] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 267.148428][ T6234] ? __i2c_transfer+0x1179/0x3280 [ 267.153623][ T6234] ? kmsan_get_metadata+0xf1/0x160 [ 267.158968][ T6234] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 267.165634][ T6234] ? kmsan_get_metadata+0xf1/0x160 [ 267.171039][ T6234] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 267.177101][ T6234] ? __i2c_smbus_xfer+0x1f6c/0x3120 [ 267.182536][ T6234] ? kmsan_get_metadata+0xf1/0x160 [ 267.187885][ T6234] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 267.193944][ T6234] kmsan_internal_check_memory+0x1e8/0x240 [ 267.200076][ T6234] kmsan_copy_to_user+0xef/0x190 [ 267.205228][ T6234] _copy_to_user+0xcc/0x120 [ 267.209916][ T6234] i2cdev_ioctl_smbus+0x586/0x660 [ 267.215150][ T6234] compat_i2cdev_ioctl+0x48f/0xb40 [ 267.220468][ T6234] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 267.226286][ T6234] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 267.232065][ T6234] ? fpregs_restore_userregs+0x213/0x3e0 [ 267.237937][ T6234] ? kmsan_get_metadata+0xf1/0x160 [ 267.243267][ T6234] ? kmsan_get_metadata+0xf1/0x160 [ 267.248619][ T6234] ia32_sys_call+0x2854/0x4360 [ 267.253554][ T6234] __do_fast_syscall_32+0x17f/0x3f0 [ 267.258949][ T6234] do_fast_syscall_32+0x37/0x80 [ 267.263975][ T6234] do_SYSENTER_32+0x1f/0x30 [ 267.268682][ T6234] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 267.275262][ T6234] RIP: 0023:0xf701ef6c [ 267.279471][ T6234] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 267.299524][ T6234] RSP: 002b:00000000f540d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 267.308117][ T6234] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000720 [ 267.316221][ T6234] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 267.324322][ T6234] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 267.332428][ T6234] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 267.340558][ T6234] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 267.348767][ T6234] [ 267.352532][ T6234] Kernel Offset: disabled [ 267.356940][ T6234] Rebooting in 86400 seconds..