last executing test programs: 4m50.948213927s ago: executing program 2 (id=207): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4m50.347855437s ago: executing program 2 (id=211): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) migrate_pages(r2, 0x7, &(0x7f0000000140)=0xc, &(0x7f0000000180)=0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x7fffffff}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x7, 0x197, 0x4, 0x4, 0x0, 0x2}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xa09e88ab5b3a8c48}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0xc010) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 4m49.882835195s ago: executing program 2 (id=213): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}]}}]}, 0x3c}}, 0x20004055) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 4m49.470064523s ago: executing program 2 (id=216): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b0001000010000904cdf100d3"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="183f0000000000000000000003000000950000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x1007, &(0x7f00000005c0)=""/4103, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0xc0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe85, @dev={0xfe, 0x80, '\x00', 0xf}, 0x7ff}}, 0x8000002, 0x2, 0x0, 0x2, 0x42, 0x7fff, 0x6}, 0x9c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, &(0x7f0000000300)=""/245, 0x0, 0xf5, 0x0, 0x100}, 0x28) syz_open_procfs(0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x40402) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) 4m45.550148879s ago: executing program 2 (id=220): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000b00)={0x4, 0x0, [{0x10000, 0xfc, &(0x7f0000000700)=""/252}, {0x100000, 0x80, &(0x7f0000000880)=""/128}, {0x4000, 0x25, &(0x7f0000000900)=""/37}, {0x58000, 0x4a, &(0x7f0000000a80)=""/74}]}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000001540)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 4m44.278761142s ago: executing program 2 (id=221): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) set_mempolicy(0x6006, 0x0, 0x3) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffe3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c}]}}}]}, 0x78}}, 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) lseek(r6, 0xfffffffffffffff9, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x12, 0x0, 0x11, 0x4, 0xffffffff}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x2c}, 0x28) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) syz_open_dev$video4linux(0x0, 0x3, 0x0) r7 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f00000004c0)={0x1, {{0xa, 0x0, 0x100000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1296}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x5}}}, 0x104) r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r8, &(0x7f0000000000)=[{&(0x7f0000000140)=""/131, 0x83}], 0x1, 0x7, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r9, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r9, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[], 0x128}}, {{0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f0000002040)=[{0xc, 0x1, 0xffc}], 0xc}}], 0x2, 0x4000045) 4m28.901028175s ago: executing program 32 (id=221): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) set_mempolicy(0x6006, 0x0, 0x3) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffe3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c}]}}}]}, 0x78}}, 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) lseek(r6, 0xfffffffffffffff9, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x12, 0x0, 0x11, 0x4, 0xffffffff}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x2c}, 0x28) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) syz_open_dev$video4linux(0x0, 0x3, 0x0) r7 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f00000004c0)={0x1, {{0xa, 0x0, 0x100000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1296}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x5}}}, 0x104) r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r8, &(0x7f0000000000)=[{&(0x7f0000000140)=""/131, 0x83}], 0x1, 0x7, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r9, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r9, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[], 0x128}}, {{0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f0000002040)=[{0xc, 0x1, 0xffc}], 0xc}}], 0x2, 0x4000045) 2m46.318886564s ago: executing program 1 (id=473): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000b00)={0x4, 0x0, [{0x10000, 0xfc, &(0x7f0000000700)=""/252}, {0x100000, 0x80, &(0x7f0000000880)=""/128}, {0x4000, 0x25, &(0x7f0000000900)=""/37}, {0x58000, 0x4a, &(0x7f0000000a80)=""/74}]}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000001540)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 2m44.179095694s ago: executing program 1 (id=478): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000b13ff03f", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00068008000600ffffffff"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000005040)=0x1, 0x4) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40087446, &(0x7f0000000400)={0x2, &(0x7f00000003c0)=[{0x53f1, 0x2, 0xb, 0x7}, {0x6, 0x4c, 0x37, 0x40000}]}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, 0x0) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00'}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x58, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x43, 0x11, 0x0, 0x1, [@generic="e796bd6dd42541affac6ff415af85ab494e09d498fc605baa5fe20e0f8a725f9f47392b70f555def59af", @generic="68eb7e22475186e591e23ad38a08862df02baf33ef"]}]}, 0x58}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 2m42.996155021s ago: executing program 1 (id=482): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48095}, 0x4000014) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r1}, 0x0, &(0x7f0000000080)='%+9llu \x00'}, 0x1c) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="5300030002"], 0x8) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1e) connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 2m38.109071195s ago: executing program 1 (id=487): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1000810, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000000000e5787148f84b11dfc652f55be299339711d9ca721391a023ae5d9f38fc4acbdb126a4f36178098f69d09de9d85c682792c62c0b81b4b3cf74eab521cf9a151278eff6d9268151e7b5cd4dad17341a62de10872cff8dd279f246c0f61b8cf2b255255a1df06e629f3c90ea789e68763bdd2185e954bf26c01a6480cd38afe93dd7ec982ba6473309391e3e5c9b8f21cbd2307c29082693f92756522ddd0add4c164d0f23e0d556c6ac9783e17c89d0a8cb4f934ca61a543042c8d14eadc67e3a4ba91d77bcd09d247"]) 2m30.001221053s ago: executing program 1 (id=501): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2m27.380480139s ago: executing program 1 (id=506): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x40) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="0000008a4ae334d22eee8b7dea21b17a6a7aba5a0cac1a6e6eba8c94160a00000000000000000040000000", @ANYRES32=r3, @ANYBLOB="08000500"], 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="500000fd070211000001f402110000000802110000000000000000"], 0x36) syz_80211_inject_frame(&(0x7f00000003c0)=@broadcast, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x330) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000000280)={0x0, "0c31786fced7a4524d96de72ab9e889b"}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x41, 0x3, 0x0, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) r6 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x70bd2a, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_1\x00'}}]}, 0x38}}, 0x4000800) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, 0x0) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) mount(&(0x7f0000000580)=@filename='nodev\x00', &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x1, 0x0) 2m9.707129063s ago: executing program 33 (id=506): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x40) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="0000008a4ae334d22eee8b7dea21b17a6a7aba5a0cac1a6e6eba8c94160a00000000000000000040000000", @ANYRES32=r3, @ANYBLOB="08000500"], 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="500000fd070211000001f402110000000802110000000000000000"], 0x36) syz_80211_inject_frame(&(0x7f00000003c0)=@broadcast, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x330) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000000280)={0x0, "0c31786fced7a4524d96de72ab9e889b"}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x41, 0x3, 0x0, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) r6 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x70bd2a, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_1\x00'}}]}, 0x38}}, 0x4000800) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, 0x0) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) mount(&(0x7f0000000580)=@filename='nodev\x00', &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x1, 0x0) 22.488558182s ago: executing program 0 (id=646): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) migrate_pages(r1, 0x7, &(0x7f0000000140)=0xc, &(0x7f0000000180)=0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x7fffffff}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x7, 0x197, 0x4, 0x4, 0x0, 0x2}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xa09e88ab5b3a8c48}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0xc010) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 16.094141761s ago: executing program 0 (id=652): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) unshare(0x6020400) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20000040) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, &(0x7f0000000000), 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ec) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000003c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/tracing/trace_marker\x00', 0x1, 0x0) write(r5, &(0x7f0000001000)='A', 0x1) 16.093836643s ago: executing program 3 (id=653): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000b00)={0x4, 0x0, [{0x10000, 0xfc, &(0x7f0000000700)=""/252}, {0x100000, 0x80, &(0x7f0000000880)=""/128}, {0x4000, 0x25, &(0x7f0000000900)=""/37}, {0x58000, 0x4a, &(0x7f0000000a80)=""/74}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000001540)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 15.643367451s ago: executing program 5 (id=655): socket$netlink(0x10, 0x3, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) getpid() syz_open_procfs(0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000000), 0x4) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) lseek(0xffffffffffffffff, 0x2000, 0x0) r2 = syz_usbip_server_init(0x5) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x40}}, 0x0) writev(r2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001300050027bd7000fedbdf", @ANYRESHEX=r0, @ANYBLOB="0000000001060400140003007665746830000000000000000089f6001400168053"], 0x48}}, 0x48000) write(0xffffffffffffffff, &(0x7f00000002c0)="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", 0xfc) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 13.395002395s ago: executing program 0 (id=656): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48095}, 0x4000014) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r1}, 0x0, &(0x7f0000000080)='%+9llu \x00'}, 0x1c) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r2, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x8) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1e) connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 12.627968928s ago: executing program 3 (id=657): userfaultfd(0x801) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x17, 0x1, 0x70bd26, 0x25dfdbfd, {0x8}, [@typed={0x8, 0x5, 0x0, 0x0, @u32=0x7}]}, 0xff2e}}, 0x0) 10.607970862s ago: executing program 3 (id=658): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000000)={[{0x81fffffe, 0x4, 0xbd, 0x4f, 0x3, 0xbd, 0x80, 0x6, 0x1, 0x44, 0x8, 0x3, 0x100}, {0xb, 0xa6f2, 0x6, 0x8, 0x9, 0xfb, 0x44, 0x87, 0xa, 0x6, 0x7, 0x6}, {0x1fd, 0x8, 0xd, 0x21, 0x25, 0x9, 0x1, 0x16, 0x3, 0x15, 0x0, 0x7, 0x4}], 0x20000002}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x5, 0x3fe, 0x0, 0x1000, 0x2, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x3, 0x2, 0x4, 0x63, 0x1aa], 0xeeee0000, 0x400}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="0201ff070c000000000000000010000005000500330000000a004e250000b10efc020000000000000000000000000001050000000001000000000000002000000a004e23fffffffc00000000000000c0e7ba00000000000101c66f01d89ec82bd3f64b6ec557d20000000000a27b40f926ff6779e9d6928e109cf9a8a7efa3fa18eecd69f0bf51de6e8f6bbc14b935c8431491d2c95eff7a81"], 0x60}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x2, 0xc5fb, @value=0x3}) r4 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="bc30a071d8bcb8794f5d8e1334b133b0cc64874f1a44052e038135a56412a20d4363f5df408fc6441639e75c7470bb11f031bf8ed23da02f7a291fcc59c4382ecb", 0x41, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe8b, 0x0) 9.971735318s ago: executing program 0 (id=660): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002440)=@security={'security\x00', 0xe, 0x4, 0x2f4, 0xffffffff, 0xd0, 0x1c0, 0xd0, 0xffffffff, 0xffffffff, 0x260, 0x260, 0x260, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0x9c, 0xd0, 0x0, {}, [@common=@addrtype={{0x2c}, {0x924, 0x801, 0x1}}]}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0x1, 0x4, 0x3}, {0x1, 0x2, 0x1}, {0x1, 0x0, 0x1}, 0x6, 0x200}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff000000, 0xffffffff, 'pim6reg1\x00', 'bridge_slave_0\x00', {0xff}, {0x80}, 0x32, 0x2, 0xc}, 0x0, 0x94, 0xf0, 0x0, {}, [@common=@icmp={{0x24}, {0xb9a0790b2ed11657, "028e", 0x1}}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @random="b9d4cc4d7cc6", 0x8c, 0x10, [0x1e, 0x33, 0xe, 0x3c, 0x2a, 0x34, 0x17, 0x24, 0x21, 0x34, 0x1a, 0x39, 0x3a, 0x13, 0x0, 0x29], 0x0, 0x5, 0x9}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x1}, {0x4, 0x1}, 0x8, 0x5}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x350) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000100)=0x90c3ff, 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x5b70, 0x4) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40844) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ff9000/0x4000)=nil) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x2, 0x2, 0x1, 0x80, 0x7}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x2, 0x2, 0x1, 0x96, 0x4}, 0x20) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6002, &(0x7f0000000040)=0xa, 0x7, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x20000023896) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000700)={0x6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1, &(0x7f0000000140)=@raw=[@exit], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000002c0)={0xf0f003}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 9.892214474s ago: executing program 5 (id=661): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) migrate_pages(r1, 0x7, &(0x7f0000000140)=0xc, &(0x7f0000000180)=0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x7fffffff}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x7, 0x197, 0x4, 0x4, 0x0, 0x2}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xa09e88ab5b3a8c48}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0xc010) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 8.645130075s ago: executing program 4 (id=662): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x39) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) 7.897328183s ago: executing program 5 (id=663): mkdir(0x0, 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0xc2) write(r0, &(0x7f0000000400)='dummy_udc.0', 0xb) 7.550269928s ago: executing program 5 (id=664): socket$netlink(0x10, 0x3, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) getpid() syz_open_procfs(0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000000), 0x4) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) lseek(0xffffffffffffffff, 0x2000, 0x0) syz_usbip_server_init(0x5) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x40}}, 0x0) r3 = socket(0x8000000010, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001300050027bd7000fedbdf", @ANYRESHEX=r0, @ANYBLOB="0000000001060400140003007665746830000000000000000089f6001400168053"], 0x48}}, 0x48000) write(r3, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 7.549027925s ago: executing program 4 (id=665): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) unshare(0x6020400) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20000040) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, &(0x7f0000000000), 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ec) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000003c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/tracing/trace_marker\x00', 0x1, 0x0) write(r5, &(0x7f0000001000)='A', 0x1) 4.039485368s ago: executing program 4 (id=666): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0', 0x1) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) 3.764238602s ago: executing program 3 (id=667): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f00000002c0)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1\x00', 0x1ff) 3.592047848s ago: executing program 0 (id=668): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000b00)={0x4, 0x0, [{0x10000, 0xfc, &(0x7f0000000700)=""/252}, {0x100000, 0x80, &(0x7f0000000880)=""/128}, {0x4000, 0x25, &(0x7f0000000900)=""/37}, {0x58000, 0x4a, &(0x7f0000000a80)=""/74}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000001540)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 3.567442066s ago: executing program 4 (id=669): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48095}, 0x4000014) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r1}, 0x0, &(0x7f0000000080)='%+9llu \x00'}, 0x1c) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="530003"], 0x8) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1e) connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 3.563806201s ago: executing program 5 (id=670): socket$netlink(0x10, 0x3, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) getpid() syz_open_procfs(0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000000), 0x4) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) lseek(0xffffffffffffffff, 0x2000, 0x0) r2 = syz_usbip_server_init(0x5) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x40}}, 0x0) writev(r2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001300050027bd7000fedbdf", @ANYRESHEX=r0, @ANYBLOB="0000000001060400140003007665746830000000000000000089f6001400168053"], 0x48}}, 0x48000) write(0xffffffffffffffff, &(0x7f00000002c0)="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", 0xfc) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 3.468090466s ago: executing program 3 (id=671): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0xb, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x80, 0x8, 0x8, 0x8, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}}, 0x44) write(0xffffffffffffffff, &(0x7f0000000240)="14000000140005b7ff", 0x9) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$nci(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)}, 0x0) write$nci(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6, 0x5, 0x80000001}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000540)='.\x00', 0x850003d1) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) 1.376213129s ago: executing program 0 (id=672): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) migrate_pages(r1, 0x7, &(0x7f0000000140)=0xc, &(0x7f0000000180)=0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x7fffffff}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x7, 0x197, 0x4, 0x4, 0x0, 0x2}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xa09e88ab5b3a8c48}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0xc010) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 701.621011ms ago: executing program 4 (id=673): mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0xc2) write(r0, &(0x7f0000000400)='dummy_udc.0', 0xb) 331.087879ms ago: executing program 4 (id=674): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000002060104000000000000000006000002050005000200000005000400000000001400078008001240001000000800134000005bad050001000700000005000100070000000900020073"], 0x74}}, 0x4000000) r0 = openat$dsp(0xffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000000)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0xf4, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xcd, 0xac, "801cb299adb208a9824aa5eae95d1e76765bf2473e5f236ecede926f04b6ab1ad3d47f1faef5e693a8f6b8d50275c9fc8e9a18b3468651489197120e9aa76a24cd09bd345db2212b9b755952404a0f113c6dd0c839ceb2c94defd14d4b9aaafebc3eab19f6159d24fd4443053a9e5206f5bc3e3d415ca664fcf55c50097f4953aefb1df7299c7c42896461f9513fb178226e86891746290eee3ac361b40abb4fef44357f1204ec6bb84769b623dc20b70c7ef162d94ef5dc63d1ed266b0b733ddeb7317669e94c640a"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x7}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20000080}, 0x44000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x20040000}, 0x1) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e00000000000000f8d654c7150ae5bb", 0x24) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() mkdirat(r3, &(0x7f0000000080)='./sys\x00', 0x1ff) 252.132912ms ago: executing program 3 (id=675): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) unshare(0x6020400) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20000040) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, &(0x7f0000000000), 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ec) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000003c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/tracing/trace_marker\x00', 0x1, 0x0) write(r5, &(0x7f0000001000)='A', 0x1) 0s ago: executing program 5 (id=676): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000000)={[{0x81fffffe, 0x4, 0xbd, 0x4f, 0x3, 0xbd, 0x80, 0x6, 0x1, 0x44, 0x8, 0x3, 0x100}, {0xb, 0xa6f2, 0x6, 0x8, 0x9, 0xfb, 0x44, 0x87, 0xa, 0x6, 0x7, 0x6}, {0x1fd, 0x8, 0xd, 0x21, 0x25, 0x9, 0x1, 0x16, 0x3, 0x15, 0x0, 0x7, 0x4}], 0x20000002}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x5, 0x3fe, 0x0, 0x1000, 0x2, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x3, 0x2, 0x4, 0x63, 0x1aa], 0xeeee0000, 0x400}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="0201ff070c000000000000000010000005000500330000000a004e250000b10efc020000000000000000000000000001050000000001000000000000002000000a004e23fffffffc00000000000000c0e7ba00000000000101c66f01d89ec82bd3f64b6ec557d20000000000a27b40f926ff6779e9d6928e109cf9a8a7efa3fa18eecd69f0bf51de6e8f6bbc14b935c8431491d2c95eff7a81"], 0x60}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x2, 0xc5fb, @value=0x3}) r4 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="bc30a071d8bcb8794f5d8e1334b133b0cc64874f1a44052e038135a56412a20d4363f5df408fc6441639e75c7470bb11f031bf8ed23da02f7a291fcc59c4382ecb", 0x41, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe8b, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.65' (ED25519) to the list of known hosts. [ 92.005289][ T9] cfg80211: failed to load regulatory.db [ 93.151291][ T5586] cgroup: Unknown subsys name 'net' [ 93.394359][ T5586] cgroup: Unknown subsys name 'cpuset' [ 93.447279][ T5586] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 95.405265][ T5586] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 98.245342][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.258604][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.273495][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.283403][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.288432][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.371006][ T5610] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.406453][ T5614] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.432279][ T5614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.445927][ T5614] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.465639][ T5618] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.468407][ T5618] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.468825][ T5618] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.479021][ T5618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.496536][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.500126][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.531665][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.542235][ T4914] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.565342][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.569342][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.604230][ T5606] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.652268][ T5606] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.675189][ T5606] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.684343][ T5606] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.702882][ T5606] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.706703][ T5606] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 100.618126][ T5610] Bluetooth: hci1: command tx timeout [ 100.618542][ T4914] Bluetooth: hci2: command tx timeout [ 100.696719][ T5610] Bluetooth: hci4: command tx timeout [ 100.776745][ T5610] Bluetooth: hci3: command tx timeout [ 100.776755][ T4914] Bluetooth: hci0: command tx timeout [ 101.299654][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.300585][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.300725][ T5604] bridge_slave_0: entered allmulticast mode [ 101.302832][ T5604] bridge_slave_0: entered promiscuous mode [ 101.361980][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.362087][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.362495][ T5602] bridge_slave_0: entered allmulticast mode [ 101.364275][ T5602] bridge_slave_0: entered promiscuous mode [ 101.365729][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.365849][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.366008][ T5604] bridge_slave_1: entered allmulticast mode [ 101.382025][ T5604] bridge_slave_1: entered promiscuous mode [ 101.450906][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.451015][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.451136][ T5602] bridge_slave_1: entered allmulticast mode [ 101.452997][ T5602] bridge_slave_1: entered promiscuous mode [ 101.509884][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.510007][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.510374][ T5605] bridge_slave_0: entered allmulticast mode [ 101.512250][ T5605] bridge_slave_0: entered promiscuous mode [ 101.589082][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.589209][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.589444][ T5605] bridge_slave_1: entered allmulticast mode [ 101.593649][ T5605] bridge_slave_1: entered promiscuous mode [ 101.650008][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.678166][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.678299][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.678509][ T5603] bridge_slave_0: entered allmulticast mode [ 101.680506][ T5603] bridge_slave_0: entered promiscuous mode [ 101.738461][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.741343][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.742060][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.742164][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.742525][ T5603] bridge_slave_1: entered allmulticast mode [ 101.744382][ T5603] bridge_slave_1: entered promiscuous mode [ 101.796080][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.796185][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.797906][ T5601] bridge_slave_0: entered allmulticast mode [ 101.807481][ T5601] bridge_slave_0: entered promiscuous mode [ 101.827357][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.869572][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.870546][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.870652][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.870771][ T5601] bridge_slave_1: entered allmulticast mode [ 101.874568][ T5601] bridge_slave_1: entered promiscuous mode [ 101.959420][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.004890][ T5604] team0: Port device team_slave_0 added [ 102.018645][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.058609][ T5602] team0: Port device team_slave_0 added [ 102.080521][ T5604] team0: Port device team_slave_1 added [ 102.084514][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.122544][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.124775][ T5602] team0: Port device team_slave_1 added [ 102.170768][ T5605] team0: Port device team_slave_0 added [ 102.173558][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.233140][ T5605] team0: Port device team_slave_1 added [ 102.270486][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.270499][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.270518][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.275329][ T5603] team0: Port device team_slave_0 added [ 102.346459][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.346479][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.346508][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.355836][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.355889][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.355957][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.387152][ T5603] team0: Port device team_slave_1 added [ 102.445543][ T5601] team0: Port device team_slave_0 added [ 102.446421][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.446437][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.446466][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.518547][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.518560][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.518586][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.522735][ T5601] team0: Port device team_slave_1 added [ 102.590249][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.590267][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.590295][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.653799][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.653812][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.653831][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.700649][ T5610] Bluetooth: hci2: command tx timeout [ 102.708216][ T5610] Bluetooth: hci1: command tx timeout [ 102.742875][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.742888][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.742908][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.776720][ T5610] Bluetooth: hci4: command tx timeout [ 102.856762][ T5610] Bluetooth: hci3: command tx timeout [ 102.856773][ T4914] Bluetooth: hci0: command tx timeout [ 103.153468][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.153481][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.153501][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.250953][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.250971][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.251000][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.279551][ T5604] hsr_slave_0: entered promiscuous mode [ 103.294456][ T5604] hsr_slave_1: entered promiscuous mode [ 103.336353][ T5602] hsr_slave_0: entered promiscuous mode [ 103.342946][ T5602] hsr_slave_1: entered promiscuous mode [ 103.343964][ T5602] debugfs: 'hsr0' already exists in 'hsr' [ 103.345588][ T5602] Cannot create hsr debugfs directory [ 103.414958][ T5605] hsr_slave_0: entered promiscuous mode [ 103.415939][ T5605] hsr_slave_1: entered promiscuous mode [ 103.428075][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 103.428103][ T5605] Cannot create hsr debugfs directory [ 103.524873][ T5603] hsr_slave_0: entered promiscuous mode [ 103.525814][ T5603] hsr_slave_1: entered promiscuous mode [ 103.526479][ T5603] debugfs: 'hsr0' already exists in 'hsr' [ 103.526496][ T5603] Cannot create hsr debugfs directory [ 103.624109][ T5601] hsr_slave_0: entered promiscuous mode [ 103.625109][ T5601] hsr_slave_1: entered promiscuous mode [ 103.625843][ T5601] debugfs: 'hsr0' already exists in 'hsr' [ 103.625861][ T5601] Cannot create hsr debugfs directory [ 104.600999][ T5604] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.653201][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.661953][ T5604] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.703665][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.714738][ T5604] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.739940][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.772140][ T5604] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.777918][ T5610] Bluetooth: hci2: command tx timeout [ 104.778160][ T4914] Bluetooth: hci1: command tx timeout [ 104.802404][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.866948][ T4914] Bluetooth: hci4: command tx timeout [ 104.938971][ T5610] Bluetooth: hci0: command tx timeout [ 104.939070][ T4914] Bluetooth: hci3: command tx timeout [ 105.003922][ T5602] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.041462][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.044476][ T5602] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.091043][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.093967][ T5602] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.130763][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.181835][ T5602] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.214192][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.396163][ T5601] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.425347][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.440033][ T5601] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.481472][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.485635][ T5601] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.521792][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.558000][ T5601] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.591111][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.775332][ T5605] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.811655][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.835501][ T5605] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.872388][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.881999][ T5605] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.920799][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.960439][ T5605] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.001874][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.049687][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.184635][ T5603] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.239734][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.246206][ T5603] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.282186][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.293116][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.308771][ T5603] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.340602][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.358888][ T5603] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.409704][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.452632][ T991] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.452801][ T991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.503884][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.526334][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.526462][ T3320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.647595][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.723210][ T1033] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.723395][ T1033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.756022][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.793209][ T1033] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.794628][ T1033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.867644][ T5610] Bluetooth: hci2: command tx timeout [ 106.867694][ T4914] Bluetooth: hci1: command tx timeout [ 106.931276][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.944591][ T4914] Bluetooth: hci4: command tx timeout [ 107.004843][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.029987][ T4914] Bluetooth: hci3: command tx timeout [ 107.030023][ T4914] Bluetooth: hci0: command tx timeout [ 107.034562][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.034777][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.135770][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.135992][ T3320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.266427][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.319355][ T1033] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.319493][ T1033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.371628][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.440409][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.440611][ T3320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.649315][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.710032][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.710245][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.804040][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.826077][ T3320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.072551][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.584245][ T5604] veth0_vlan: entered promiscuous mode [ 108.649096][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.722351][ T5604] veth1_vlan: entered promiscuous mode [ 109.022175][ T5604] veth0_macvtap: entered promiscuous mode [ 109.095551][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.116128][ T5604] veth1_macvtap: entered promiscuous mode [ 109.143767][ T5602] veth0_vlan: entered promiscuous mode [ 109.243589][ T5602] veth1_vlan: entered promiscuous mode [ 109.344455][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.389147][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.411226][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.495595][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.634484][ T5601] veth0_vlan: entered promiscuous mode [ 109.721968][ T5602] veth0_macvtap: entered promiscuous mode [ 109.791548][ T5602] veth1_macvtap: entered promiscuous mode [ 109.883543][ T5601] veth1_vlan: entered promiscuous mode [ 110.049411][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.049686][ T5605] veth0_vlan: entered promiscuous mode [ 110.112992][ T991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.113415][ T991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.147586][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.179783][ T5605] veth1_vlan: entered promiscuous mode [ 110.241036][ T5601] veth0_macvtap: entered promiscuous mode [ 110.293024][ T5601] veth1_macvtap: entered promiscuous mode [ 110.385802][ T5603] veth0_vlan: entered promiscuous mode [ 110.402242][ T105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.402264][ T105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.659565][ T5603] veth1_vlan: entered promiscuous mode [ 110.675305][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.707480][ T5605] veth0_macvtap: entered promiscuous mode [ 110.788758][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.812528][ T5605] veth1_macvtap: entered promiscuous mode [ 110.893416][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.893439][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.001433][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.136662][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.137336][ T5603] veth0_macvtap: entered promiscuous mode [ 111.325159][ T1033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.325180][ T1033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.365869][ T5603] veth1_macvtap: entered promiscuous mode [ 111.941167][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.045643][ T1511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.045684][ T1511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.212976][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.143677][ T993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.143699][ T993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.178627][ T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.178643][ T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.971716][ T5808] netlink: 'syz.3.8': attribute type 10 has an invalid length. [ 114.585382][ T5808] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 114.645394][ T5808] team0: Port device netdevsim1 added [ 114.693778][ T5810] syz.1.9 (5810) used greatest stack depth: 17304 bytes left [ 114.882215][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.882237][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.506603][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.820330][ T5820] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 120.189655][ T1511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.189671][ T1511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.688176][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.688750][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.721915][ T3395] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.721981][ T3395] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.722021][ T3395] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.722059][ T3395] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.722098][ T3395] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.722136][ T3395] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.722183][ T3395] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.722220][ T3395] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.722257][ T3395] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.722294][ T3395] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.722332][ T3395] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.722370][ T3395] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.722408][ T3395] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.722445][ T3395] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.722483][ T3395] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.722521][ T3395] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.722558][ T3395] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.722595][ T3395] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.810181][ T3320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.810204][ T3320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.537184][ T5853] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 125.618682][ T5847] syz_tun: entered allmulticast mode [ 125.636224][ T5854] ======================================================= [ 125.636224][ T5854] WARNING: The mand mount option has been deprecated and [ 125.636224][ T5854] and is ignored by this kernel. Remove the mand [ 125.636224][ T5854] option from the mount to silence this warning. [ 125.636224][ T5854] ======================================================= [ 128.705372][ T5844] syz_tun: left allmulticast mode [ 129.500994][ T5610] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 129.501490][ T5610] Bluetooth: hci2: Injecting HCI hardware error event [ 129.503136][ T5610] Bluetooth: hci2: hardware error 0x00 [ 129.958317][ T5875] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 132.778676][ T5610] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 133.333433][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.333508][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.476601][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 139.971479][ T5917] syz_tun: entered allmulticast mode [ 140.184091][ T5916] syz_tun: left allmulticast mode [ 140.254357][ T5920] af_packet: tpacket_rcv: packet too big, clamped from 204 to 4294967272. macoff=96 [ 140.376746][ T5610] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 140.376917][ T5610] Bluetooth: hci0: Injecting HCI hardware error event [ 140.378598][ T4914] Bluetooth: hci0: hardware error 0x00 [ 140.458524][ T5922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.793015][ T5930] Zero length message leads to an empty skb [ 141.122360][ T5931] netlink: 16 bytes leftover after parsing attributes in process `syz.4.36'. [ 141.750390][ T5922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.220120][ T5617] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 142.266646][ T36] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 142.437379][ T5940] syz_tun: entered allmulticast mode [ 142.556764][ T5617] usb 2-1: Using ep0 maxpacket: 32 [ 142.561666][ T5617] usb 2-1: no configurations [ 142.561687][ T5617] usb 2-1: can't read configurations, error -22 [ 142.575492][ T5945] syz_tun: entered allmulticast mode [ 142.638621][ T5946] syz_tun: left allmulticast mode [ 142.678296][ T36] usb 3-1: Using ep0 maxpacket: 8 [ 142.758536][ T5943] syz_tun: left allmulticast mode [ 142.946718][ T5617] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 143.146681][ T5617] usb 2-1: Using ep0 maxpacket: 32 [ 143.147588][ T5617] usb 2-1: no configurations [ 143.147606][ T5617] usb 2-1: can't read configurations, error -22 [ 143.325798][ T5617] usb usb2-port1: attempt power cycle [ 143.740471][ T4914] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 144.546981][ T5617] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 146.484048][ T5617] usb 2-1: device descriptor read/8, error -71 [ 146.621870][ T36] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 146.621916][ T36] usb 3-1: can't read configurations, error -71 [ 147.135683][ T5961] syz_tun: entered allmulticast mode [ 147.413448][ T5961] syz_tun: left allmulticast mode [ 147.624977][ T5973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.807170][ T5970] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 147.808726][ T5978] netlink: 16 bytes leftover after parsing attributes in process `syz.0.49'. [ 147.922933][ T5973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.324806][ T5982] syz_tun: entered allmulticast mode [ 148.634835][ T5982] syz_tun: left allmulticast mode [ 148.866323][ T5992] syz_tun: entered allmulticast mode [ 149.040362][ T5617] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 151.657176][ T5992] syz_tun: left allmulticast mode [ 153.178406][ T5617] usb 2-1: Using ep0 maxpacket: 32 [ 154.295399][ T5617] usb 2-1: device descriptor read/all, error -71 [ 154.979503][ T6019] syz_tun: entered allmulticast mode [ 155.183609][ T6019] syz_tun: left allmulticast mode [ 155.595321][ T6035] netlink: 16 bytes leftover after parsing attributes in process `syz.2.64'. [ 156.999909][ T6047] syz_tun: entered allmulticast mode [ 157.135316][ T6047] syz_tun: left allmulticast mode [ 157.466662][ T31] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 157.624960][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 157.626929][ T31] usb 2-1: no configurations [ 157.626949][ T31] usb 2-1: can't read configurations, error -22 [ 157.827450][ T31] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 157.902502][ T6060] batman_adv: batadv0: Adding interface: dummy0 [ 157.902521][ T6060] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.902557][ T6060] batman_adv: batadv0: Interface activated: dummy0 [ 158.027273][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 158.030356][ T31] usb 2-1: no configurations [ 158.031567][ T31] usb 2-1: can't read configurations, error -22 [ 158.033015][ T31] usb usb2-port1: attempt power cycle [ 158.362492][ T6061] batadv0: mtu less than device minimum [ 158.431726][ T6061] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 158.453052][ T6061] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 158.457196][ T31] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 158.483922][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 158.489774][ T31] usb 2-1: no configurations [ 158.489839][ T31] usb 2-1: can't read configurations, error -22 [ 158.524097][ T6061] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 158.569247][ T6061] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 158.599753][ T6061] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 158.627531][ T6061] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 158.656759][ T31] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 158.658540][ T6061] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 158.685918][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 158.691428][ T31] usb 2-1: no configurations [ 158.691480][ T31] usb 2-1: can't read configurations, error -22 [ 158.693839][ T31] usb usb2-port1: unable to enumerate USB device [ 158.723719][ T6061] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 158.755149][ T6061] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 160.803330][ T6081] syz_tun: entered allmulticast mode [ 160.927714][ T6081] syz_tun: left allmulticast mode [ 160.949057][ T5724] IPVS: starting estimator thread 0... [ 161.076780][ T6086] IPVS: using max 7 ests per chain, 16800 per kthread [ 161.476786][ T4914] Bluetooth: hci3: link tx timeout [ 161.480452][ T4914] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 161.528028][ T5610] Bluetooth: hci3: link tx timeout [ 161.528051][ T5610] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 161.529078][ T5610] Bluetooth: hci3: link tx timeout [ 161.529093][ T5610] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 161.543715][ T5610] Bluetooth: hci3: link tx timeout [ 161.543736][ T5610] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 161.588590][ T5610] Bluetooth: hci3: link tx timeout [ 161.588612][ T5610] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 161.591332][ T5610] Bluetooth: hci3: link tx timeout [ 161.591352][ T5610] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 161.592523][ T5610] Bluetooth: hci3: link tx timeout [ 161.592539][ T5610] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 161.597498][ T5610] Bluetooth: hci3: link tx timeout [ 161.621179][ T5610] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 161.621224][ T5610] Bluetooth: hci3: link tx timeout [ 161.621240][ T5610] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 161.872325][ T5610] Bluetooth: hci3: link tx timeout [ 161.872348][ T5610] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 161.873313][ T5610] Bluetooth: hci3: link tx timeout [ 161.873328][ T5610] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 161.875681][ T5610] Bluetooth: hci3: link tx timeout [ 161.875697][ T5610] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 161.881880][ T5610] Bluetooth: hci3: link tx timeout [ 161.881898][ T5610] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 161.895967][ T5610] Bluetooth: hci3: link tx timeout [ 161.895990][ T5610] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 161.900398][ T5610] Bluetooth: hci3: link tx timeout [ 161.900419][ T5610] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 161.905242][ T5610] Bluetooth: hci3: link tx timeout [ 161.905262][ T5610] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 161.930049][ T5610] Bluetooth: hci3: link tx timeout [ 161.930073][ T5610] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 161.937090][ T5610] Bluetooth: hci3: link tx timeout [ 161.937108][ T5610] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 161.938290][ T5610] Bluetooth: hci3: link tx timeout [ 161.938304][ T5610] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 162.514335][ T5610] Bluetooth: hci3: link tx timeout [ 162.514353][ T5610] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 162.514486][ T5610] Bluetooth: hci3: link tx timeout [ 162.514495][ T5610] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 162.515264][ T5610] Bluetooth: hci3: link tx timeout [ 162.515274][ T5610] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 162.515361][ T5610] Bluetooth: hci3: link tx timeout [ 162.515370][ T5610] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 162.515452][ T5610] Bluetooth: hci3: link tx timeout [ 162.515460][ T5610] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 162.595360][ T5610] Bluetooth: hci3: link tx timeout [ 162.595381][ T5610] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 162.597150][ T5610] Bluetooth: hci3: link tx timeout [ 162.597167][ T5610] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 162.602265][ T5610] Bluetooth: hci3: link tx timeout [ 162.602281][ T5610] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 162.626703][ T5610] Bluetooth: hci3: link tx timeout [ 162.626725][ T5610] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 162.643505][ T5610] Bluetooth: hci3: link tx timeout [ 162.643525][ T5610] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 162.647054][ T5610] Bluetooth: hci3: link tx timeout [ 162.647070][ T5610] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 162.671964][ T5610] Bluetooth: hci3: link tx timeout [ 162.671984][ T5610] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 163.189147][ T6091] netlink: 16 bytes leftover after parsing attributes in process `syz.1.77'. [ 163.578212][ T5610] Bluetooth: hci3: command 0x0406 tx timeout [ 163.889689][ T6102] syz_tun: entered allmulticast mode [ 163.990763][ T6102] syz_tun: left allmulticast mode [ 164.418874][ T6112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.84'. [ 164.566700][ T5617] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 164.646664][ T5620] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 164.717196][ T5617] usb 5-1: Using ep0 maxpacket: 8 [ 164.721834][ T5617] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.721871][ T5617] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.721897][ T5617] usb 5-1: config 0 interface 0 has no altsetting 0 [ 164.721933][ T5617] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 164.721958][ T5617] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.800473][ T5620] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 164.800503][ T5620] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.800524][ T5620] usb 2-1: config 0 has no interface number 0 [ 164.800567][ T5620] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 164.800591][ T5620] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 164.800634][ T5620] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 164.800659][ T5620] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.966274][ T6118] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 165.088470][ T6121] syz_tun: entered allmulticast mode [ 165.167443][ T5620] usb 2-1: config 0 descriptor?? [ 165.174323][ T6121] syz_tun: left allmulticast mode [ 165.191651][ T5617] usb 5-1: config 0 descriptor?? [ 165.305437][ T6113] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 165.558716][ T5620] ldusb 2-1:0.55: Interrupt in endpoint not found [ 166.124598][ T5617] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 166.124642][ T5617] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 166.124670][ T5617] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 166.124698][ T5617] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 166.124725][ T5617] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 166.150423][ T5617] mcp2221 0003:04D8:00DD.0001: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 166.929404][ T6124] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 166.929426][ T6124] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 167.027490][ T6124] vhci_hcd vhci_hcd.0: Device attached [ 167.095996][ T5617] usb 5-1: USB disconnect, device number 2 [ 167.342681][ T6139] netlink: 16 bytes leftover after parsing attributes in process `syz.3.91'. [ 167.472927][ T6132] vhci_hcd: connection closed [ 167.927358][ T3320] vhci_hcd vhci_hcd.0: stop threads [ 167.928133][ T3320] vhci_hcd vhci_hcd.0: release socket [ 168.160216][ T5724] usb 2-1: USB disconnect, device number 12 [ 168.167739][ T3320] vhci_hcd vhci_hcd.0: disconnect device [ 169.085291][ T37] audit: type=1326 audit(1785712690.545:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6140 comm="syz.3.92" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc01094e019 code=0x0 [ 169.676932][ T5617] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 169.685386][ T6165] syz_tun: entered allmulticast mode [ 169.768803][ T6165] syz_tun: left allmulticast mode [ 169.864533][ T6168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.865189][ T6168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.887424][ T5617] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 169.887458][ T5617] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 169.887485][ T5617] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 169.887508][ T5617] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 169.887554][ T5617] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 169.887578][ T5617] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.038387][ T5617] usb 5-1: config 0 descriptor?? [ 170.268172][ T6175] netlink: 16 bytes leftover after parsing attributes in process `syz.1.102'. [ 171.287389][ T5617] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 171.492583][ T5724] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 171.636668][ T5724] usb 3-1: Using ep0 maxpacket: 8 [ 171.640523][ T5724] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.640558][ T5724] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.640583][ T5724] usb 3-1: config 0 interface 0 has no altsetting 0 [ 171.640619][ T5724] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 171.640643][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.830408][ T5724] usb 3-1: config 0 descriptor?? [ 172.418746][ T5724] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 172.418786][ T5724] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 172.418813][ T5724] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 172.418839][ T5724] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 172.418865][ T5724] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 172.419963][ T5724] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 172.963640][ T5724] usb 3-1: USB disconnect, device number 4 [ 173.236881][ T6191] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 173.236915][ T6191] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 173.257063][ T36] usb 5-1: reset high-speed USB device number 3 using dummy_hcd [ 173.284731][ T6191] vhci_hcd vhci_hcd.0: Device attached [ 173.342845][ T6215] syz_tun: entered allmulticast mode [ 173.363684][ T6215] syz_tun: left allmulticast mode [ 173.538119][ T6220] netlink: 16 bytes leftover after parsing attributes in process `syz.0.114'. [ 174.409994][ T6213] vhci_hcd: connection closed [ 174.441758][ T1482] vhci_hcd vhci_hcd.1: stop threads [ 174.441784][ T1482] vhci_hcd vhci_hcd.1: release socket [ 174.443136][ T1482] vhci_hcd vhci_hcd.1: disconnect device [ 175.343531][ T5843] usb 5-1: USB disconnect, device number 3 [ 175.991723][ T6248] CIFS: Attempting to mount //127.0.0.1/share [ 176.386501][ T6259] syz_tun: entered allmulticast mode [ 176.398341][ T6259] syz_tun: left allmulticast mode [ 176.802389][ T6265] netlink: 16 bytes leftover after parsing attributes in process `syz.3.127'. [ 177.520135][ T6248] CIFS: VFS: cifs_mount failed w/return code = -112 [ 177.985451][ T6276] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 177.985480][ T6276] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 177.985585][ T6276] vhci_hcd vhci_hcd.0: Device attached [ 178.161431][ T6282] Bluetooth: MGMT ver 1.23 [ 178.182894][ T6282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.133'. [ 178.316927][ T5609] usb 40-1: SetAddress Request (2) to port 0 [ 178.317009][ T5609] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 179.488784][ T6280] vhci_hcd: connection reset by peer [ 179.493614][ T13] vhci_hcd vhci_hcd.3: stop threads [ 179.493641][ T13] vhci_hcd vhci_hcd.3: release socket [ 179.493717][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 179.932947][ T6303] Invalid ELF header magic: != ELF [ 180.531517][ T6312] netlink: 16 bytes leftover after parsing attributes in process `syz.1.140'. [ 181.296579][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 181.600780][ T6308] vivid-004: kernel_thread() failed [ 182.637654][ T6330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.146'. [ 183.502107][ T5609] usb 40-1: device descriptor read/8, error -110 [ 183.610797][ T6338] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 183.803270][ T6345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.803296][ T6345] net_ratelimit: 10 callbacks suppressed [ 183.803310][ T6345] batadv0: mtu less than device minimum [ 183.910945][ T5609] usb usb40-port1: attempt power cycle [ 184.109288][ T6356] netlink: 16 bytes leftover after parsing attributes in process `syz.0.153'. [ 184.479948][ T5609] usb usb40-port1: unable to enumerate USB device [ 184.751835][ T6359] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 184.751857][ T6359] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 184.751966][ T6359] vhci_hcd vhci_hcd.0: Device attached [ 184.761929][ T6345] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 184.801775][ T6345] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 184.863489][ T6345] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 184.892042][ T6345] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 184.957948][ T6345] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 184.980047][ T6345] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 184.999659][ T6345] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 185.000572][ T6361] vhci_hcd: connection closed [ 185.001680][ T3320] vhci_hcd vhci_hcd.2: stop threads [ 185.001706][ T3320] vhci_hcd vhci_hcd.2: release socket [ 185.001774][ T3320] vhci_hcd vhci_hcd.2: disconnect device [ 185.073098][ T6345] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 185.093920][ T6345] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 185.397251][ T6345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.740578][ T6371] netlink: 12 bytes leftover after parsing attributes in process `syz.3.159'. [ 186.577158][ T6377] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 187.058220][ T6386] syz_tun: entered allmulticast mode [ 187.412987][ T6394] netlink: 16 bytes leftover after parsing attributes in process `syz.2.167'. [ 187.968432][ T6392] syz_tun: left allmulticast mode [ 188.265503][ T6396] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 188.265525][ T6396] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 188.269317][ T6396] vhci_hcd vhci_hcd.0: Device attached [ 188.325362][ T6401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.343810][ T6398] vhci_hcd: connection closed [ 188.355937][ T1482] vhci_hcd vhci_hcd.1: stop threads [ 188.355959][ T1482] vhci_hcd vhci_hcd.1: release socket [ 188.355987][ T1482] vhci_hcd vhci_hcd.1: disconnect device [ 188.541233][ T6401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.847248][ T6437] syz_tun: entered allmulticast mode [ 190.919268][ T6434] syz_tun: left allmulticast mode [ 191.394474][ T6451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.505915][ T6451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.387526][ T6463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.189'. [ 192.613508][ T6467] misc userio: No port type given on /dev/userio [ 192.887448][ T6471] syz_tun: entered allmulticast mode [ 193.015846][ T6471] syz_tun: left allmulticast mode [ 194.387269][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.387342][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.735131][ T6530] syz_tun: entered allmulticast mode [ 199.867699][ T6530] syz_tun: left allmulticast mode [ 199.933617][ T6532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.209'. [ 199.933647][ T6532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.209'. [ 200.132408][ T6536] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 200.550535][ T5620] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 200.700006][ T5620] usb 2-1: Using ep0 maxpacket: 32 [ 200.704346][ T5620] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 200.704376][ T5620] usb 2-1: config 0 has no interface number 0 [ 200.751958][ T5620] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 200.751992][ T5620] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.752014][ T5620] usb 2-1: Product: syz [ 200.752029][ T5620] usb 2-1: Manufacturer: syz [ 200.752045][ T5620] usb 2-1: SerialNumber: syz [ 200.810066][ T5620] usb 2-1: config 0 descriptor?? [ 202.319507][ T5620] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 202.787232][ T5620] usb 2-1: selecting invalid altsetting 1 [ 202.787259][ T5620] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 203.784630][ T31] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 203.895678][ T5620] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 203.913849][ T5620] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 203.914000][ T5620] usb 2-1: media controller created [ 203.963263][ T31] usb 3-1: config 0 has an invalid interface number: 205 but max is 0 [ 203.963293][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.963311][ T31] usb 3-1: config 0 has no interface number 0 [ 203.963339][ T31] usb 3-1: config 0 interface 205 has no altsetting 0 [ 204.029555][ T5620] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 204.118878][ T31] usb 3-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 204.118907][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.118926][ T31] usb 3-1: Product: syz [ 204.118940][ T31] usb 3-1: Manufacturer: syz [ 204.118954][ T31] usb 3-1: SerialNumber: syz [ 204.201343][ T5620] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 204.201419][ T5620] zl10353_read_register: readreg error (reg=127, ret==-71) [ 204.232350][ T5620] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 204.270024][ T31] usb 3-1: config 0 descriptor?? [ 204.473321][ T31] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 204.499511][ T31] dvb-usb: bulk message failed: -22 (3/0) [ 204.728760][ T31] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 204.741095][ T31] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 204.741256][ T31] usb 3-1: media controller created [ 204.782565][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 205.144540][ T5620] usb 2-1: USB disconnect, device number 13 [ 205.711225][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 205.711344][ T31] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 205.787978][ T31] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input10 [ 206.068258][ T31] dvb-usb: schedule remote query interval to 150 msecs. [ 206.068318][ T31] dvb-usb: bulk message failed: -22 (3/0) [ 206.092762][ T31] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 206.119690][ T31] usb 3-1: USB disconnect, device number 5 [ 206.522831][ T31] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 207.261796][ T6584] syz_tun: entered allmulticast mode [ 207.263658][ T6592] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 207.517582][ T6587] syz_tun: left allmulticast mode [ 208.656602][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 208.676593][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 210.816573][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 215.436411][ T6666] binder: 6665:6666 ioctl 40046205 0 returned -22 [ 220.770456][ T37] audit: type=1326 audit(1785712742.235:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6708 comm="syz.1.248" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ac424e019 code=0x0 [ 221.132462][ T6716] file system registered [ 221.135468][ T6719] ffs_data_put(): freeing [ 221.292513][ T6731] binder: 6730:6731 ioctl 40046205 0 returned -22 [ 221.502759][ T5617] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 221.647480][ T5617] usb 4-1: Using ep0 maxpacket: 8 [ 221.652337][ T5617] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 221.652369][ T5617] usb 4-1: config 0 has no interface number 0 [ 221.652417][ T5617] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 221.652443][ T5617] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 221.652470][ T5617] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 221.652499][ T5617] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 112, changing to 10 [ 221.652528][ T5617] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 10229, setting to 1024 [ 221.652558][ T5617] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 221.656169][ T5617] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 221.656200][ T5617] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.656222][ T5617] usb 4-1: Product: syz [ 221.656237][ T5617] usb 4-1: Manufacturer: syz [ 221.656262][ T5617] usb 4-1: SerialNumber: syz [ 221.881707][ T5617] usb 4-1: config 0 descriptor?? [ 221.882924][ T6729] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 222.057230][ T5606] Bluetooth: hci4: command 0x0406 tx timeout [ 222.057297][ T5615] Bluetooth: hci1: command 0x0406 tx timeout [ 222.505822][ T5610] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 222.644363][ T5610] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 222.655984][ T5610] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 222.674689][ T5610] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 222.689031][ T5610] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 223.018070][ T5617] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 223.813489][ T6778] Invalid ELF header magic: != ELF [ 223.897550][ T5609] usb 4-1: USB disconnect, device number 2 [ 224.742701][ T37] audit: type=1326 audit(1785712746.175:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6790 comm="syz.1.264" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ac424e019 code=0x0 [ 224.783246][ T4914] Bluetooth: hci5: command tx timeout [ 225.709879][ T6817] binder: 6816:6817 ioctl 40046205 0 returned -22 [ 225.774730][ T3395] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.255688][ T37] audit: type=1326 audit(1785712747.715:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6831 comm="syz.1.270" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ac424e019 code=0x0 [ 226.856754][ T4914] Bluetooth: hci5: command tx timeout [ 226.947982][ T31] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 227.385770][ T31] usb 5-1: not running at top speed; connect to a high speed hub [ 227.450413][ T6851] Invalid ELF header magic: != ELF [ 227.472557][ T31] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 227.472595][ T31] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 227.698050][ T31] usb 5-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 227.698083][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.698105][ T31] usb 5-1: Product: syz [ 227.698119][ T31] usb 5-1: Manufacturer: syz [ 227.698135][ T31] usb 5-1: SerialNumber: syz [ 227.803278][ T3395] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.394209][ T31] oti6858 5-1:1.0: oti6858 converter detected [ 228.497260][ T31] usb 5-1: oti6858 converter now attached to ttyUSB0 [ 228.889478][ T6830] capability: warning: `syz.4.268' uses deprecated v2 capabilities in a way that may be insecure [ 228.936927][ T4914] Bluetooth: hci5: command tx timeout [ 229.151487][ T37] audit: type=1326 audit(1785712750.615:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6862 comm="syz.0.278" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc51215e019 code=0x0 [ 229.363574][ T3395] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.119397][ T3395] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.326644][ T5609] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 230.479521][ T5609] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 230.484936][ T5609] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.484996][ T5609] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.485127][ T5609] usb 2-1: config 0 interface 0 has no altsetting 0 [ 230.501380][ T5609] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.501440][ T5609] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.501468][ T5609] usb 2-1: config 0 interface 0 has no altsetting 0 [ 230.546660][ T5609] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.546716][ T5609] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.546761][ T5609] usb 2-1: config 0 interface 0 has no altsetting 0 [ 230.585731][ T5609] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.585784][ T5609] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.585808][ T5609] usb 2-1: config 0 interface 0 has no altsetting 0 [ 230.614843][ T5609] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.614915][ T5609] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.614945][ T5609] usb 2-1: config 0 interface 0 has no altsetting 0 [ 230.655053][ T5609] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.655115][ T5609] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.655143][ T5609] usb 2-1: config 0 interface 0 has no altsetting 0 [ 230.690304][ T5609] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.691182][ T5609] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.691217][ T5609] usb 2-1: config 0 interface 0 has no altsetting 0 [ 230.692754][ T5609] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.692811][ T5609] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.692840][ T5609] usb 2-1: config 0 interface 0 has no altsetting 0 [ 230.773598][ T5609] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 230.773629][ T5609] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 230.773652][ T5609] usb 2-1: Product: syz [ 230.773667][ T5609] usb 2-1: Manufacturer: syz [ 230.773681][ T5609] usb 2-1: SerialNumber: syz [ 230.823450][ T5609] usb 2-1: config 0 descriptor?? [ 230.944256][ T5609] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 231.026697][ T5610] Bluetooth: hci5: command tx timeout [ 231.083685][ T5609] usb 2-1: USB disconnect, device number 14 [ 231.179961][ T5609] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 231.442351][ T37] audit: type=1326 audit(1785712752.905:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6886 comm="syz.3.284" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc01094e019 code=0x0 [ 231.756477][ T6895] Invalid ELF header magic: != ELF [ 232.087893][ T6749] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.088044][ T6749] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.088284][ T6749] bridge_slave_0: entered allmulticast mode [ 232.094755][ T6749] bridge_slave_0: entered promiscuous mode [ 232.278461][ T6749] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.279143][ T6749] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.279319][ T6749] bridge_slave_1: entered allmulticast mode [ 232.331081][ T6749] bridge_slave_1: entered promiscuous mode [ 233.096273][ T5609] usb 5-1: USB disconnect, device number 4 [ 233.809336][ T6749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.873362][ T5609] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 233.874516][ T5609] oti6858 5-1:1.0: device disconnected [ 234.048951][ T6749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.158059][ T37] audit: type=1326 audit(1785712755.625:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6920 comm="syz.1.291" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ac424e019 code=0x0 [ 234.534131][ T3395] bridge_slave_1: left allmulticast mode [ 234.534318][ T3395] bridge_slave_1: left promiscuous mode [ 234.609808][ T3395] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.930306][ T3395] bridge_slave_0: left allmulticast mode [ 234.930343][ T3395] bridge_slave_0: left promiscuous mode [ 234.930722][ T3395] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.950293][ T6960] Invalid ELF header magic: != ELF [ 237.052789][ T37] audit: type=1326 audit(1785712758.515:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6961 comm="syz.1.298" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ac424e019 code=0x0 [ 237.557613][ T3395] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.759838][ T3395] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.806012][ T3395] bond0 (unregistering): Released all slaves [ 238.092022][ T5260] 8021q: adding VLAN 0 to HW filter on device eth1 [ 238.122775][ T6749] team0: Port device team_slave_0 added [ 238.149089][ T6749] team0: Port device team_slave_1 added [ 239.600150][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.300'. [ 240.526589][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 241.046928][ T6973] macsec1: entered promiscuous mode [ 241.046973][ T6973] dummy0: entered promiscuous mode [ 241.050234][ T6973] macsec1: entered allmulticast mode [ 241.050253][ T6973] dummy0: entered allmulticast mode [ 241.222730][ T6749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.222743][ T6749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.222763][ T6749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.300964][ T6749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.300982][ T6749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.301027][ T6749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.523251][ T6749] hsr_slave_0: entered promiscuous mode [ 243.534367][ T6749] hsr_slave_1: entered promiscuous mode [ 243.535231][ T37] audit: type=1326 audit(1785712764.995:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7001 comm="syz.1.307" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ac424e019 code=0x0 [ 243.548967][ T6749] debugfs: 'hsr0' already exists in 'hsr' [ 243.548996][ T6749] Cannot create hsr debugfs directory [ 243.609533][ T7012] Invalid ELF header magic: != ELF [ 244.277991][ T5260] 8021q: adding VLAN 0 to HW filter on device eth2 [ 244.745395][ T7027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.855287][ T7040] dlm: no local IP address has been set [ 245.855353][ T7040] dlm: cannot start dlm midcomms -107 [ 248.716523][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 248.816523][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 248.996518][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 249.906918][ T7066] Invalid ELF header magic: != ELF [ 249.992871][ T3395] hsr_slave_0: left promiscuous mode [ 250.050402][ T3395] hsr_slave_1: left promiscuous mode [ 250.051838][ T3395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.085047][ T3395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.375320][ T37] audit: type=1326 audit(1785712771.835:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7082 comm="syz.4.323" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4412e4e019 code=0x0 [ 250.415660][ T3395] veth1_macvtap: left promiscuous mode [ 250.435748][ T3395] veth0_macvtap: left promiscuous mode [ 250.441007][ T3395] veth1_vlan: left promiscuous mode [ 250.468238][ T3395] veth0_vlan: left promiscuous mode [ 250.921863][ T37] audit: type=1800 audit(1785712772.345:12): pid=7090 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.325" name="idVendor" dev="configfs" ino=13826 res=0 errno=0 [ 251.949367][ T3395] team0 (unregistering): Port device team_slave_1 removed [ 252.008654][ T3395] team0 (unregistering): Port device team_slave_0 removed [ 252.319725][ T5260] 8021q: adding VLAN 0 to HW filter on device eth3 [ 252.321317][ T7098] netlink: 'syz.0.326': attribute type 1 has an invalid length. [ 255.848922][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.849967][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.880552][ T7127] Invalid ELF header magic: != ELF [ 256.970094][ T6749] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 257.105294][ T6749] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 257.119787][ T6749] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 257.194346][ T6749] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 257.215975][ T6749] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 257.539144][ T6749] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 257.558347][ T6749] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 257.715124][ T6749] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 257.715728][ T7146] syz_tun: entered allmulticast mode [ 257.722227][ T7147] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 257.816946][ T37] audit: type=1326 audit(1785712779.275:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7149 comm="syz.1.337" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ac424e019 code=0x0 [ 257.912905][ T7146] syz_tun: left allmulticast mode [ 258.632870][ T5260] 8021q: adding VLAN 0 to HW filter on device eth4 [ 260.449214][ T6749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.641269][ T6749] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.735584][ T1511] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.744150][ T1511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.143985][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.144108][ T3320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.123696][ T3395] IPVS: stop unused estimator thread 0... [ 262.538589][ T7197] Invalid ELF header magic: != ELF [ 263.582303][ T7217] syz_tun: entered allmulticast mode [ 263.600368][ T7216] syz_tun: left allmulticast mode [ 266.758191][ T6749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.809886][ T7236] overlayfs: failed to resolve './file1': -2 [ 267.115653][ T37] audit: type=1326 audit(1785712788.575:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7246 comm="syz.3.354" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc01094e019 code=0x0 [ 267.171083][ T7247] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 269.266606][ T6749] veth0_vlan: entered promiscuous mode [ 269.354770][ T6749] veth1_vlan: entered promiscuous mode [ 269.529653][ T6749] veth0_macvtap: entered promiscuous mode [ 269.550508][ T6749] veth1_macvtap: entered promiscuous mode [ 269.704522][ T6749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.777537][ T6749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.979963][ T3320] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.980266][ T3320] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.980306][ T3320] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.992593][ T5825] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.062725][ T197] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 270.277478][ T197] usb 5-1: Using ep0 maxpacket: 8 [ 270.293928][ T197] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 270.293958][ T197] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 270.294012][ T197] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 270.294036][ T197] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.767974][ T3320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.767997][ T3320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.601666][ T7303] overlayfs: failed to resolve './file1': -2 [ 272.618344][ T3395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.618365][ T3395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.927585][ T5704] usb 5-1: USB disconnect, device number 5 [ 275.705070][ T7336] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 276.552903][ T37] audit: type=1326 audit(1785712798.015:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7342 comm="syz.1.370" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ac424e019 code=0x0 [ 277.483231][ T7371] overlayfs: failed to resolve './file1': -2 [ 284.366408][ T37] audit: type=1326 audit(1785712805.825:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7420 comm="syz.0.388" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc51215e019 code=0x0 [ 287.894488][ T5610] Bluetooth: hci5: link tx timeout [ 287.894914][ T5610] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 288.568626][ T5610] Bluetooth: hci5: link tx timeout [ 288.568648][ T5610] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 288.616702][ T5610] Bluetooth: hci3: command 0x0406 tx timeout [ 289.869363][ T5704] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 289.976752][ T4914] Bluetooth: hci5: command 0x0406 tx timeout [ 293.706633][ T5704] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 293.916579][ T5704] usb 4-1: Using ep0 maxpacket: 8 [ 293.918759][ T5704] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 293.918794][ T5704] usb 4-1: config 0 has no interface number 0 [ 293.918840][ T5704] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 293.918865][ T5704] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 293.918891][ T5704] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 293.918918][ T5704] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 112, changing to 10 [ 293.918951][ T5704] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 10229, setting to 1024 [ 293.918980][ T5704] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 293.921563][ T5704] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 293.921593][ T5704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.921614][ T5704] usb 4-1: Product: syz [ 293.921629][ T5704] usb 4-1: Manufacturer: syz [ 293.921644][ T5704] usb 4-1: SerialNumber: syz [ 293.946287][ T5704] usb 4-1: config 0 descriptor?? [ 294.010894][ T7537] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 294.367100][ T5704] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 294.595812][ T7537] read descriptors [ 294.595849][ T7537] bcdVersion must be 0x0100, stored in Little Endian order. Userspace driver should be fixed, accepting 0x0001 for compatibility. [ 294.644811][ T5704] usb 4-1: USB disconnect, device number 4 [ 296.254420][ T5604] ffs_data_put(): freeing [ 301.062547][ T7612] netlink: 40 bytes leftover after parsing attributes in process `syz.4.427'. [ 301.062837][ T7612] netlink: 'syz.4.427': attribute type 12 has an invalid length. [ 301.255438][ T7610] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 301.255535][ T7610] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 301.256702][ T7610] vhci_hcd vhci_hcd.0: Device attached [ 302.387047][ T36] usb 42-1: SetAddress Request (2) to port 0 [ 302.427333][ T36] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 302.615196][ T7618] No control pipe specified [ 303.904312][ T7613] vhci_hcd: connection reset by peer [ 303.926720][ T5825] vhci_hcd vhci_hcd.4: stop threads [ 303.926747][ T5825] vhci_hcd vhci_hcd.4: release socket [ 303.926816][ T5825] vhci_hcd vhci_hcd.4: disconnect device [ 307.061371][ T7654] faux_driver vgem: [drm] Unknown color mode 55545; guessing buffer size. [ 307.065080][ T7653] netlink: 12 bytes leftover after parsing attributes in process `syz.5.439'. [ 307.579302][ T36] usb 42-1: device descriptor read/8, error -110 [ 308.713420][ T36] usb usb42-port1: attempt power cycle [ 309.053253][ T7676] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 309.053337][ T7676] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 309.066197][ T7676] vhci_hcd vhci_hcd.0: Device attached [ 309.144720][ T7676] netlink: 40 bytes leftover after parsing attributes in process `syz.4.446'. [ 309.148118][ T7676] netlink: 'syz.4.446': attribute type 12 has an invalid length. [ 309.475752][ T36] usb 42-1: SetAddress Request (4) to port 0 [ 309.502367][ T36] usb 42-1: new SuperSpeed USB device number 4 using vhci_hcd [ 310.469941][ T7677] vhci_hcd: connection reset by peer [ 310.472778][ T991] vhci_hcd vhci_hcd.4: stop threads [ 310.472853][ T991] vhci_hcd vhci_hcd.4: release socket [ 311.439693][ T991] vhci_hcd vhci_hcd.4: disconnect device [ 311.847519][ T7687] netlink: 12 bytes leftover after parsing attributes in process `syz.3.450'. [ 315.312576][ T7696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.452'. [ 315.429488][ T36] usb 42-1: device descriptor read/8, error -110 [ 316.344030][ T36] usb usb42-port1: unable to enumerate USB device [ 317.291712][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.291790][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.366701][ T36] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 320.011728][ T36] usb 4-1: config 0 has no interfaces? [ 320.011858][ T36] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 320.012010][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.481480][ T36] usb 4-1: config 0 descriptor?? [ 320.496754][ T7749] syz_tun: entered allmulticast mode [ 320.501638][ T7749] syz_tun: left allmulticast mode [ 320.752695][ T5704] usb 4-1: USB disconnect, device number 5 [ 321.058596][ T7762] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 321.058672][ T7762] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 321.094839][ T7762] vhci_hcd vhci_hcd.0: Device attached [ 321.145895][ T7762] netlink: 40 bytes leftover after parsing attributes in process `syz.4.470'. [ 321.194287][ T6009] IPVS: starting estimator thread 0... [ 321.313062][ T7770] IPVS: using max 7 ests per chain, 16800 per kthread [ 322.347317][ T5788] usb 42-1: SetAddress Request (6) to port 0 [ 322.347649][ T5788] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 322.939539][ T7775] netlink: 12 bytes leftover after parsing attributes in process `syz.5.472'. [ 323.159947][ T7766] vhci_hcd: connection reset by peer [ 323.186395][ T3404] vhci_hcd vhci_hcd.4: stop threads [ 323.186822][ T3404] vhci_hcd vhci_hcd.4: release socket [ 323.312420][ T3404] vhci_hcd vhci_hcd.4: disconnect device [ 323.857781][ T7769] netlink: 'syz.4.470': attribute type 12 has an invalid length. [ 325.683444][ T7794] netlink: 72 bytes leftover after parsing attributes in process `syz.4.476'. [ 327.319589][ T7808] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.347649][ T7808] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.502879][ T5788] usb 42-1: device descriptor read/8, error -110 [ 329.002967][ T7834] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 329.003749][ T7834] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 329.202864][ T7836] netlink: 40 bytes leftover after parsing attributes in process `syz.0.484'. [ 331.004733][ T7834] vhci_hcd vhci_hcd.0: Device attached [ 331.753597][ T7837] netlink: 'syz.0.484': attribute type 12 has an invalid length. [ 331.775455][ T7835] vhci_hcd: connection closed [ 331.819176][ T56] vhci_hcd vhci_hcd.0: stop threads [ 331.819204][ T56] vhci_hcd vhci_hcd.0: release socket [ 331.819284][ T56] vhci_hcd vhci_hcd.0: disconnect device [ 331.822164][ T5788] usb usb42-port1: attempt power cycle [ 331.846674][ T31] usb 34-1: enqueue for inactive port 0 [ 332.235533][ T7848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.486'. [ 332.433162][ T5788] usb usb42-port1: unable to enumerate USB device [ 332.468363][ T31] usb usb34-port1: attempt power cycle [ 333.948096][ T7866] netlink: 12 bytes leftover after parsing attributes in process `syz.0.489'. [ 334.423380][ T31] usb usb34-port1: unable to enumerate USB device [ 335.947735][ T7879] UDC core: g1: couldn't find an available UDC or it's busy [ 338.724924][ T7904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.778977][ T7904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.390943][ T7904] netlink: 44 bytes leftover after parsing attributes in process `syz.0.498'. [ 339.599817][ T7912] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 339.599960][ T7912] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 339.604896][ T7912] vhci_hcd vhci_hcd.0: Device attached [ 339.637858][ T7912] netlink: 40 bytes leftover after parsing attributes in process `syz.5.499'. [ 339.641335][ T7912] netlink: 'syz.5.499': attribute type 12 has an invalid length. [ 340.406761][ T31] usb 44-1: SetAddress Request (2) to port 0 [ 340.412285][ T31] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 341.635421][ T7913] vhci_hcd: connection reset by peer [ 341.677253][ T991] vhci_hcd vhci_hcd.5: stop threads [ 341.677315][ T991] vhci_hcd vhci_hcd.5: release socket [ 341.677508][ T991] vhci_hcd vhci_hcd.5: disconnect device [ 342.348748][ T7918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.502'. [ 342.757229][ T6009] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 343.143529][ T6009] usb 5-1: config 0 has an invalid interface number: 205 but max is 0 [ 343.144026][ T6009] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.144101][ T6009] usb 5-1: config 0 has no interface number 0 [ 343.144217][ T6009] usb 5-1: config 0 interface 205 has no altsetting 0 [ 343.317303][ T6009] usb 5-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 343.317371][ T6009] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.317429][ T6009] usb 5-1: Product: syz [ 343.317491][ T6009] usb 5-1: Manufacturer: syz [ 343.317558][ T6009] usb 5-1: SerialNumber: syz [ 343.659999][ T7928] netlink: 12 bytes leftover after parsing attributes in process `syz.5.505'. [ 345.496932][ T31] usb 44-1: device descriptor read/8, error -110 [ 345.530002][ T6009] usb 5-1: config 0 descriptor?? [ 345.839098][ T7934] netlink: 'syz.1.506': attribute type 10 has an invalid length. [ 345.839769][ T6009] usb 5-1: can't set config #0, error -71 [ 345.869023][ T7932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.946142][ T6009] usb 5-1: USB disconnect, device number 6 [ 345.978873][ T7934] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.995501][ T7934] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.009521][ T7934] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.009631][ T7934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.010664][ T7934] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.010787][ T7934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.014883][ T7934] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 346.065002][ T31] usb usb44-port1: attempt power cycle [ 346.320431][ T7944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.337471][ T7944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.395789][ T7944] read descriptors [ 346.395802][ T7944] bcdVersion must be 0x0100, stored in Little Endian order. Userspace driver should be fixed, accepting 0x0001 for compatibility. [ 346.515000][ T7932] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:f4bd:b9ff:fe1c:e129 error=-28 [ 348.439466][ T31] usb usb44-port1: unable to enumerate USB device [ 349.113768][ T5605] ffs_data_put(): freeing [ 349.358790][ T7966] syz_tun: entered allmulticast mode [ 351.953480][ T7970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.517'. [ 354.755468][ T7992] netlink: 12 bytes leftover after parsing attributes in process `syz.3.521'. [ 354.866846][ T5609] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 354.875228][ T7994] netlink: 24 bytes leftover after parsing attributes in process `syz.4.524'. [ 355.462765][ T7932] infiniband syz1: set active [ 355.462792][ T7932] infiniband syz1: added bridge_slave_1 [ 356.243602][ T7932] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 356.625952][ T7932] infiniband syz1: Couldn't open port 1 [ 356.784439][ T7932] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 356.784470][ T7932] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 356.784503][ T7932] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 356.836959][ T5609] usb 6-1: config 0 has an invalid interface number: 205 but max is 0 [ 356.836988][ T5609] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.837008][ T5609] usb 6-1: config 0 has no interface number 0 [ 356.837040][ T5609] usb 6-1: config 0 interface 205 has no altsetting 0 [ 356.886952][ T5609] usb 6-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 356.886984][ T5609] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.887007][ T5609] usb 6-1: Product: syz [ 356.887023][ T5609] usb 6-1: Manufacturer: syz [ 356.887039][ T5609] usb 6-1: SerialNumber: syz [ 356.965098][ T5609] usb 6-1: config 0 descriptor?? [ 357.138890][ T5609] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 357.138944][ T5609] dvb-usb: bulk message failed: -22 (3/0) [ 357.970451][ T5609] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 358.128252][ T5609] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 358.128604][ T5609] usb 6-1: media controller created [ 358.498626][ T5609] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 361.799012][ T5609] dvb-usb: bulk message failed: -22 (6/0) [ 361.799108][ T5609] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 361.835793][ T5609] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input11 [ 361.887311][ T5609] dvb-usb: schedule remote query interval to 150 msecs. [ 361.887353][ T5609] dvb-usb: bulk message failed: -22 (3/0) [ 361.926679][ T5609] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 362.050430][ T5620] dvb-usb: bulk message failed: -22 (1/0) [ 362.050472][ T5620] dvb-usb: error while querying for an remote control event. [ 362.206745][ T5620] dvb-usb: bulk message failed: -22 (1/0) [ 362.206779][ T5620] dvb-usb: error while querying for an remote control event. [ 362.267017][ T8024] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 362.267276][ T8024] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 362.287813][ T8024] vhci_hcd vhci_hcd.0: Device attached [ 362.309440][ T8024] netlink: 40 bytes leftover after parsing attributes in process `syz.5.531'. [ 362.312857][ T8024] netlink: 'syz.5.531': attribute type 12 has an invalid length. [ 362.448810][ T6009] dvb-usb: bulk message failed: -22 (1/0) [ 362.449068][ T6009] dvb-usb: error while querying for an remote control event. [ 363.449936][ T5620] dvb-usb: bulk message failed: -22 (1/0) [ 363.889186][ T5620] dvb-usb: error while querying for an remote control event. [ 364.092315][ T5331] dvb-usb: bulk message failed: -22 (1/0) [ 364.092458][ T5331] dvb-usb: error while querying for an remote control event. [ 364.256725][ T5331] dvb-usb: bulk message failed: -22 (1/0) [ 364.256772][ T5331] dvb-usb: error while querying for an remote control event. [ 364.276969][ T6009] usb 44-1: SetAddress Request (6) to port 0 [ 364.335948][ T6009] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 364.530904][ T5617] dvb-usb: bulk message failed: -22 (1/0) [ 364.530988][ T5617] dvb-usb: error while querying for an remote control event. [ 364.686743][ T5617] dvb-usb: bulk message failed: -22 (1/0) [ 364.686904][ T5617] dvb-usb: error while querying for an remote control event. [ 364.864496][ T5617] dvb-usb: bulk message failed: -22 (1/0) [ 364.864709][ T5617] dvb-usb: error while querying for an remote control event. [ 365.017036][ T5617] dvb-usb: bulk message failed: -22 (1/0) [ 365.017072][ T5617] dvb-usb: error while querying for an remote control event. [ 365.176953][ T5617] dvb-usb: bulk message failed: -22 (1/0) [ 365.176986][ T5617] dvb-usb: error while querying for an remote control event. [ 365.338089][ T5617] dvb-usb: bulk message failed: -22 (1/0) [ 365.338127][ T5617] dvb-usb: error while querying for an remote control event. [ 365.618308][ T5609] usb 6-1: USB disconnect, device number 2 [ 365.646697][ T5331] dvb-usb: bulk message failed: -22 (1/0) [ 365.646732][ T5331] dvb-usb: error while querying for an remote control event. [ 365.652649][ T8025] vhci_hcd: connection reset by peer [ 365.654500][ T3425] vhci_hcd vhci_hcd.5: stop threads [ 365.654526][ T3425] vhci_hcd vhci_hcd.5: release socket [ 365.707258][ T3425] vhci_hcd vhci_hcd.5: disconnect device [ 365.763654][ T4914] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 365.794817][ T4914] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 365.822012][ T4914] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 365.845521][ T7932] RDS/IB: syz1: added [ 365.877874][ T4914] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 365.917011][ T4914] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 365.948170][ T7932] smc: adding ib device syz1 with port count 1 [ 365.948395][ T7932] smc: ib device syz1 port 1 has no pnetid [ 367.292613][ T5609] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 368.314423][ T5606] Bluetooth: hci0: command tx timeout [ 369.417021][ T6009] usb 44-1: device descriptor read/8, error -110 [ 370.377578][ T4914] Bluetooth: hci0: command tx timeout [ 370.774791][ T6009] usb usb44-port1: attempt power cycle [ 371.398169][ T6009] usb usb44-port1: unable to enumerate USB device [ 371.515834][ T8076] netlink: 40 bytes leftover after parsing attributes in process `syz.5.540'. [ 371.806994][ T8073] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 371.812372][ T8073] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 371.837099][ T8073] vhci_hcd vhci_hcd.0: Device attached [ 372.458586][ T5606] Bluetooth: hci0: command tx timeout [ 373.786185][ T8080] netlink: 12 bytes leftover after parsing attributes in process `syz.0.537'. [ 374.165900][ T8074] vhci_hcd: connection closed [ 374.254942][ T3404] vhci_hcd vhci_hcd.5: stop threads [ 374.255024][ T3404] vhci_hcd vhci_hcd.5: release socket [ 374.366817][ T3404] vhci_hcd vhci_hcd.5: disconnect device [ 374.536639][ T5606] Bluetooth: hci0: command tx timeout [ 374.800605][ T37] audit: type=1800 audit(1785712896.135:17): pid=8081 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.538" name="local" dev="configfs" ino=17887 res=0 errno=0 [ 376.876575][ T8105] netlink: 40 bytes leftover after parsing attributes in process `syz.0.544'. [ 376.882427][ T8105] netlink: 'syz.0.544': attribute type 12 has an invalid length. [ 376.890769][ T8101] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 376.890835][ T8101] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 376.904578][ T8101] vhci_hcd vhci_hcd.0: Device attached [ 377.848340][ T36] usb 34-1: SetAddress Request (7) to port 0 [ 377.848567][ T36] usb 34-1: new SuperSpeed USB device number 7 using vhci_hcd [ 379.389844][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.389928][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.982325][ T8102] vhci_hcd: connection reset by peer [ 381.994668][ T5827] vhci_hcd vhci_hcd.0: stop threads [ 381.994689][ T5827] vhci_hcd vhci_hcd.0: release socket [ 381.994745][ T5827] vhci_hcd vhci_hcd.0: disconnect device [ 383.188272][ T36] usb 34-1: device descriptor read/8, error -110 [ 383.866937][ T5724] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 384.018810][ T36] usb usb34-port1: attempt power cycle [ 385.750666][ T5724] usb 4-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 385.750700][ T5724] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 4 [ 385.750729][ T5724] usb 4-1: config 0 interface 0 has no altsetting 0 [ 386.799198][ T36] usb usb34-port1: unable to enumerate USB device [ 387.801038][ T8136] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 387.801107][ T8136] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 387.801881][ T8136] vhci_hcd vhci_hcd.0: Device attached [ 387.914218][ T8138] netlink: 'syz.0.551': attribute type 12 has an invalid length. [ 389.127538][ T8137] vhci_hcd: connection closed [ 389.131073][ T5827] vhci_hcd vhci_hcd.0: stop threads [ 389.131117][ T5827] vhci_hcd vhci_hcd.0: release socket [ 389.131168][ T5827] vhci_hcd vhci_hcd.0: disconnect device [ 389.199493][ T5724] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 389.199524][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 389.199544][ T5724] usb 4-1: Product: syz [ 389.199558][ T5724] usb 4-1: Manufacturer: syz [ 389.203887][ T5724] usb 4-1: config 0 descriptor?? [ 389.308063][ T5724] usb 4-1: can't set config #0, error -71 [ 389.476209][ T5724] usb 4-1: USB disconnect, device number 6 [ 389.511273][ T8144] netlink: 12 bytes leftover after parsing attributes in process `syz.4.553'. [ 389.700824][ T8144] netlink: 12 bytes leftover after parsing attributes in process `syz.4.553'. [ 391.274638][ T37] audit: type=1800 audit(1785712912.705:18): pid=8150 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.555" name="local" dev="configfs" ino=18862 res=0 errno=0 [ 392.014270][ T5724] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 392.215791][ T5724] usb 6-1: Using ep0 maxpacket: 8 [ 392.315915][ T5724] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.315984][ T5724] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.316043][ T5724] usb 6-1: config 0 interface 0 has no altsetting 0 [ 392.316170][ T5724] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 392.316229][ T5724] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.246706][ T5724] usb 6-1: config 0 descriptor?? [ 395.773865][ T5724] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 395.773907][ T5724] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 395.773933][ T5724] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 395.773959][ T5724] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 395.773985][ T5724] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 395.774904][ T5724] mcp2221 0003:04D8:00DD.0004: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 396.601005][ T8186] netlink: 'syz.0.563': attribute type 12 has an invalid length. [ 396.874083][ T8183] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 396.874113][ T8183] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 396.887034][ T8183] vhci_hcd vhci_hcd.0: Device attached [ 397.557189][ T6009] usb 34-1: SetAddress Request (11) to port 0 [ 397.557738][ T6009] usb 34-1: new SuperSpeed USB device number 11 using vhci_hcd [ 397.798268][ T8185] vhci_hcd: connection reset by peer [ 397.798894][ T12] vhci_hcd vhci_hcd.0: stop threads [ 397.798917][ T12] vhci_hcd vhci_hcd.0: release socket [ 397.798988][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 401.480532][ T5724] usb 6-1: USB disconnect, device number 3 [ 402.070822][ T8206] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 402.616790][ T6009] usb 34-1: device descriptor read/8, error -110 [ 403.688785][ T6009] usb usb34-port1: attempt power cycle [ 403.745767][ T8221] 9p: Bad value for 'wfdno' [ 406.211327][ T8229] process 'syz.4.574' launched './file2' with NULL argv: empty string added [ 407.114212][ T6009] usb usb34-port1: unable to enumerate USB device [ 408.806487][ T8245] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 408.806688][ T8245] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 408.807172][ T8245] vhci_hcd vhci_hcd.0: Device attached [ 409.246666][ T5620] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 409.654672][ T8245] netlink: 'syz.3.578': attribute type 12 has an invalid length. [ 409.829315][ T5620] usb 6-1: Using ep0 maxpacket: 8 [ 409.964219][ T5620] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.964289][ T5620] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.964314][ T5620] usb 6-1: config 0 interface 0 has no altsetting 0 [ 409.964351][ T5620] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 409.964410][ T5620] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.977415][ T5331] usb 40-1: SetAddress Request (6) to port 0 [ 409.977708][ T5331] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 410.310556][ T5620] usb 6-1: config 0 descriptor?? [ 410.452799][ T8246] vhci_hcd: connection reset by peer [ 410.482332][ T5825] vhci_hcd vhci_hcd.3: stop threads [ 410.482411][ T5825] vhci_hcd vhci_hcd.3: release socket [ 410.678263][ T5825] vhci_hcd vhci_hcd.3: disconnect device [ 412.604401][ T5620] usbhid 6-1:0.0: can't add hid device: -71 [ 412.604512][ T5620] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 412.988632][ T5620] usb 6-1: USB disconnect, device number 4 [ 413.672012][ T8263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.697479][ T8263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.675537][ T8267] 9p: Bad value for 'wfdno' [ 414.815576][ T31] IPVS: starting estimator thread 0... [ 414.940663][ T8269] IPVS: using max 11 ests per chain, 26400 per kthread [ 415.026770][ T5331] usb 40-1: device descriptor read/8, error -110 [ 415.514275][ T5331] usb usb40-port1: attempt power cycle [ 416.559345][ T5331] usb usb40-port1: unable to enumerate USB device [ 423.734037][ T8302] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 423.734076][ T8302] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 423.734555][ T8302] vhci_hcd vhci_hcd.0: Device attached [ 424.265912][ T5620] usb 34-1: SetAddress Request (15) to port 0 [ 424.280584][ T5620] usb 34-1: new SuperSpeed USB device number 15 using vhci_hcd [ 425.515772][ T5610] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 425.949466][ T5610] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 425.969894][ T5610] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 426.244749][ T5610] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 426.298400][ T5610] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 426.867829][ T5610] Bluetooth: hci5: command 0x0406 tx timeout [ 427.452718][ T8302] netlink: 'syz.0.591': attribute type 12 has an invalid length. [ 428.233128][ T8303] vhci_hcd: connection reset by peer [ 428.234375][ T12] vhci_hcd vhci_hcd.0: stop threads [ 428.234396][ T12] vhci_hcd vhci_hcd.0: release socket [ 428.234468][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 428.628797][ T8318] 9p: Bad value for 'wfdno' [ 429.346689][ T5620] usb 34-1: device descriptor read/8, error -110 [ 429.428746][ T31] IPVS: starting estimator thread 0... [ 429.567194][ T8323] IPVS: using max 8 ests per chain, 19200 per kthread [ 429.743228][ T5620] usb usb34-port1: attempt power cycle [ 430.384181][ T5606] Bluetooth: hci6: command tx timeout [ 431.690638][ T5620] usb usb34-port1: unable to enumerate USB device [ 432.456640][ T5606] Bluetooth: hci6: command tx timeout [ 433.506779][ T5788] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 433.726785][ T5788] usb 4-1: Using ep0 maxpacket: 8 [ 433.735584][ T5788] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.735640][ T5788] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.735697][ T5788] usb 4-1: config 0 interface 0 has no altsetting 0 [ 433.735934][ T5788] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 433.736005][ T5788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.240601][ T5788] usb 4-1: config 0 descriptor?? [ 434.587960][ T5606] Bluetooth: hci6: command tx timeout [ 434.786935][ T31] IPVS: starting estimator thread 0... [ 435.195797][ T5788] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 435.195831][ T5788] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 435.195854][ T5788] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 435.195875][ T5788] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 435.195896][ T5788] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 435.197468][ T5788] mcp2221 0003:04D8:00DD.0005: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 435.411181][ T8348] IPVS: using max 8 ests per chain, 19200 per kthread [ 435.694141][ T5788] usb 4-1: USB disconnect, device number 7 [ 436.467953][ T5606] Bluetooth: hci5: unexpected event for opcode 0x0c57 [ 436.640099][ T5606] Bluetooth: hci6: command tx timeout [ 440.144193][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.144277][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.536810][ T5606] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 440.537140][ T5606] Bluetooth: hci5: Injecting HCI hardware error event [ 440.568094][ T4914] Bluetooth: hci5: hardware error 0x00 [ 441.286904][ T1575] bond0 (unregistering): Released all slaves [ 443.178787][ T4914] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 443.555921][ T8414] netlink: 'syz.4.615': attribute type 1 has an invalid length. [ 443.783741][ T8414] 8021q: adding VLAN 0 to HW filter on device bond1 [ 443.951897][ T8417] bond1: (slave geneve2): making interface the new active one [ 443.974645][ T8417] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 444.812099][ T5724] IPVS: starting estimator thread 0... [ 444.896702][ T8428] IPVS: using max 7 ests per chain, 16800 per kthread [ 446.868972][ T4914] Bluetooth: hci1: unexpected event for opcode 0x4ad0 [ 450.336542][ T5724] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 450.490344][ T5724] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 450.490365][ T5724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.490377][ T5724] usb 5-1: Product: syz [ 450.490387][ T5724] usb 5-1: Manufacturer: syz [ 450.490410][ T5724] usb 5-1: SerialNumber: syz [ 451.398817][ T8451] netlink: 44 bytes leftover after parsing attributes in process `syz.4.624'. [ 451.475643][ T8451] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.751844][ T5724] rtl8150 5-1:1.0: couldn't reset the device [ 452.956756][ T5724] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 453.374345][ T5724] usb 5-1: USB disconnect, device number 7 [ 454.079091][ T8484] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 454.079167][ T8484] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 454.086663][ T8484] vhci_hcd vhci_hcd.0: Device attached [ 454.681577][ T8484] netlink: 'syz.0.628': attribute type 12 has an invalid length. [ 454.760255][ T5788] usb 34-1: SetAddress Request (19) to port 0 [ 454.760459][ T5788] usb 34-1: new SuperSpeed USB device number 19 using vhci_hcd [ 456.925377][ T8485] vhci_hcd: connection reset by peer [ 456.925944][ T1511] vhci_hcd vhci_hcd.0: stop threads [ 456.925965][ T1511] vhci_hcd vhci_hcd.0: release socket [ 456.926028][ T1511] vhci_hcd vhci_hcd.0: disconnect device [ 457.311131][ T8306] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.311345][ T8306] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.311571][ T8306] bridge_slave_0: entered allmulticast mode [ 457.334473][ T8306] bridge_slave_0: entered promiscuous mode [ 457.353398][ T8306] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.355157][ T8306] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.355356][ T8306] bridge_slave_1: entered allmulticast mode [ 457.400192][ T8306] bridge_slave_1: entered promiscuous mode [ 458.534424][ T8505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.631'. [ 459.018632][ T8306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.020140][ T8517] syz_tun: entered allmulticast mode [ 459.025903][ T8306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.672608][ T8517] syz_tun: left allmulticast mode [ 459.826689][ T5788] usb 34-1: device descriptor read/8, error -110 [ 459.918054][ T8526] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 459.918081][ T8526] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 459.918192][ T8526] vhci_hcd vhci_hcd.0: Device attached [ 460.880221][ T5788] usb 34-1: SetAddress Request (20) to port 0 [ 460.880318][ T5788] usb 34-1: new SuperSpeed USB device number 20 using vhci_hcd [ 462.589641][ T8527] vhci_hcd: connection reset by peer [ 462.617336][ T1575] vhci_hcd vhci_hcd.0: stop threads [ 462.617370][ T1575] vhci_hcd vhci_hcd.0: release socket [ 462.709473][ T1575] vhci_hcd vhci_hcd.0: disconnect device [ 462.967878][ T8306] team0: Port device team_slave_0 added [ 462.968086][ T8525] netlink: 'syz.0.636': attribute type 12 has an invalid length. [ 463.121028][ T8306] team0: Port device team_slave_1 added [ 464.226667][ T8306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.226679][ T8306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.226716][ T8306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.231134][ T8306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.231146][ T8306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.231164][ T8306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.320716][ T8547] netlink: 40 bytes leftover after parsing attributes in process `syz.0.640'. [ 464.347624][ T8546] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 464.347643][ T8546] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 464.347743][ T8546] vhci_hcd vhci_hcd.0: Device attached [ 465.302618][ T8548] vhci_hcd: connection closed [ 465.451367][ T991] vhci_hcd vhci_hcd.0: stop threads [ 465.451516][ T991] vhci_hcd vhci_hcd.0: release socket [ 465.451762][ T991] vhci_hcd vhci_hcd.0: disconnect device [ 465.978431][ T5788] usb 34-1: device descriptor read/8, error -110 [ 466.090313][ T5788] usb usb34-port1: attempt power cycle [ 466.761893][ T5788] usb usb34-port1: unable to enumerate USB device [ 467.391556][ T8306] hsr_slave_0: entered promiscuous mode [ 467.409282][ T8306] hsr_slave_1: entered promiscuous mode [ 467.416069][ T8306] debugfs: 'hsr0' already exists in 'hsr' [ 467.416098][ T8306] Cannot create hsr debugfs directory [ 467.944123][ T8569] dlm: Using TCP for communications [ 469.933289][ T8576] syz_tun: entered allmulticast mode [ 470.815301][ T8576] syz_tun: left allmulticast mode [ 471.256504][ T8588] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 471.263852][ T8588] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 471.264574][ T8588] vhci_hcd vhci_hcd.0: Device attached [ 471.706930][ T31] usb 44-1: SetAddress Request (11) to port 0 [ 471.707376][ T31] usb 44-1: new SuperSpeed USB device number 11 using vhci_hcd [ 473.028153][ T8588] netlink: 'syz.5.649': attribute type 12 has an invalid length. [ 473.397931][ T8589] vhci_hcd: connection reset by peer [ 473.447918][ T3395] vhci_hcd vhci_hcd.5: stop threads [ 473.447941][ T3395] vhci_hcd vhci_hcd.5: release socket [ 473.447998][ T3395] vhci_hcd vhci_hcd.5: disconnect device [ 474.427696][ T8606] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 476.777494][ T31] usb 44-1: device descriptor read/8, error -110 [ 476.874693][ T8614] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 476.874775][ T8614] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 476.877323][ T8614] vhci_hcd vhci_hcd.0: Device attached [ 476.906964][ T8614] netlink: 40 bytes leftover after parsing attributes in process `syz.5.655'. [ 477.206353][ T31] usb 44-1: SetAddress Request (12) to port 0 [ 477.206663][ T31] usb 44-1: new SuperSpeed USB device number 12 using vhci_hcd [ 478.964621][ T8306] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 479.929572][ T8615] vhci_hcd: connection reset by peer [ 479.945928][ T3379] vhci_hcd vhci_hcd.5: stop threads [ 479.945952][ T3379] vhci_hcd vhci_hcd.5: release socket [ 479.946020][ T3379] vhci_hcd vhci_hcd.5: disconnect device [ 480.263217][ T8306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 480.351166][ T8306] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 480.390928][ T8306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 480.393736][ T8306] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 480.585969][ T8306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 480.611425][ T8306] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 481.128364][ T8306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 482.377147][ T31] usb 44-1: device descriptor read/8, error -110 [ 482.487566][ T31] usb usb44-port1: attempt power cycle [ 482.942172][ T8663] netlink: 'syz.5.664': attribute type 12 has an invalid length. [ 483.587028][ T8660] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 483.587388][ T8660] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 483.606095][ T8660] vhci_hcd vhci_hcd.0: Device attached [ 483.792253][ T31] usb usb44-port1: unable to enumerate USB device [ 484.078645][ T8662] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 484.775862][ T31] usb 44-1: SetAddress Request (15) to port 0 [ 484.776169][ T31] usb 44-1: new SuperSpeed USB device number 15 using vhci_hcd [ 485.624492][ T8661] vhci_hcd: connection reset by peer [ 485.625540][ T1482] vhci_hcd vhci_hcd.5: stop threads [ 485.625558][ T1482] vhci_hcd vhci_hcd.5: release socket [ 485.625615][ T1482] vhci_hcd vhci_hcd.5: disconnect device [ 486.705041][ T5606] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 486.764532][ T5606] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 486.793026][ T5606] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 486.903266][ T5606] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 486.924284][ T5606] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 487.014049][ T8679] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 487.014192][ T8679] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 487.024221][ T8679] vhci_hcd vhci_hcd.0: Device attached [ 487.054982][ T8679] netlink: 40 bytes leftover after parsing attributes in process `syz.5.670'. [ 488.519154][ T8680] vhci_hcd: connection closed [ 488.572528][ T3395] vhci_hcd vhci_hcd.5: stop threads [ 488.572600][ T3395] vhci_hcd vhci_hcd.5: release socket [ 488.572839][ T3395] vhci_hcd vhci_hcd.5: disconnect device [ 489.816784][ T31] usb 44-1: device descriptor read/8, error -110 [ 489.979825][ T4914] Bluetooth: hci0: command tx timeout [ 490.339210][ T8712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.674'. [ 490.397802][ T31] usb usb44-port1: attempt power cycle [ 492.056773][ T4914] Bluetooth: hci0: command tx timeout [ 494.136622][ T4914] Bluetooth: hci0: command tx timeout [ 496.226852][ T4914] Bluetooth: hci0: command tx timeout [ 501.579787][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.579877][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.022738][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.022827][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 596.076379][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 596.076397][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P991/3:b..l P3379/2:b..l P31/1:b..l P5825/2:b..l P1511/2:b..l P6749/4:b..l P993/1:b..l [ 596.076509][ C0] rcu: (detected by 0, t=10502 jiffies, g=28105, q=1506 ncpus=2) [ 596.076532][ C0] task:kworker/u8:8 state:R running task stack:21216 pid:993 tgid:993 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 596.076602][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 596.076813][ C0] Call Trace: [ 596.076853][ C0] [ 596.076918][ C0] __schedule+0x16dc/0x5500 [ 596.077063][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 596.077138][ C0] ? rt_spin_lock+0x1e0/0x400 [ 596.077175][ C0] ? rt_spin_unlock+0x157/0x200 [ 596.077198][ C0] ? __pfx___schedule+0x10/0x10 [ 596.077272][ C0] preempt_schedule_irq+0x4d/0xa0 [ 596.077302][ C0] irqentry_exit+0x14f/0x8f0 [ 596.077354][ C0] ? trace_irq_disable+0x3b/0x140 [ 596.077451][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 596.077507][ C0] RIP: 0010:nsim_dev_trap_report_work+0x3cc/0xcb0 [ 596.077566][ C0] Code: 03 4c 8d 73 06 be 06 00 00 00 4c 89 f7 e8 5c 57 96 fe 4c 89 f0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 4b 05 00 00 0f b6 43 06 <24> fc 0c 02 88 43 06 4c 8d 73 0c 4c 89 f0 48 c1 e8 03 42 0f b6 04 [ 596.077605][ C0] RSP: 0018:ffffc90005ff7a40 EFLAGS: 00000246 [ 596.077694][ C0] RAX: 000000000000000a RBX: ffff8880257d8000 RCX: 0000000000000000 [ 596.077710][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90005ff7960 [ 596.077724][ C0] RBP: ffff88803cfb6780 R08: ffffc90005ff795f R09: 0000000000000000 [ 596.077739][ C0] R10: ffffc90005ff7920 R11: fffff52000bfef2c R12: 0000000000000068 [ 596.077755][ C0] R13: dffffc0000000000 R14: ffff8880257d8006 R15: 00000000fffffffa [ 596.077804][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 596.077900][ C0] process_scheduled_works+0xa8e/0x14e0 [ 596.077957][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 596.077992][ C0] ? assign_work+0x3cf/0x5d0 [ 596.078024][ C0] worker_thread+0xa47/0xfb0 [ 596.078068][ C0] ? __kthread_parkme+0x71/0x1f0 [ 596.078133][ C0] kthread+0x388/0x470 [ 596.078168][ C0] ? __pfx_worker_thread+0x10/0x10 [ 596.078194][ C0] ? __pfx_kthread+0x10/0x10 [ 596.078230][ C0] ret_from_fork+0x514/0xb70 [ 596.078308][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 596.078343][ C0] ? __switch_to+0xc89/0x1420 [ 596.078402][ C0] ? __pfx_kthread+0x10/0x10 [ 596.078437][ C0] ret_from_fork_asm+0x1a/0x30 [ 596.078519][ C0] [ 596.078528][ C0] task:syz-executor state:R running task stack:21784 pid:6749 tgid:6749 ppid:6732 task_flags:0x400140 flags:0x00080000 [ 596.078612][ C0] Call Trace: [ 596.078619][ C0] [ 596.078631][ C0] __schedule+0x16dc/0x5500 [ 596.078678][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 596.078715][ C0] ? __pfx___schedule+0x10/0x10 [ 596.078758][ C0] preempt_schedule_irq+0x4d/0xa0 [ 596.078787][ C0] irqentry_exit+0x14f/0x8f0 [ 596.078823][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 596.078847][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x2c/0x80 [ 596.078934][ C0] Code: 1e fa 48 8b 04 24 65 48 8b 0d 48 44 d8 10 65 8b 35 69 44 d8 10 81 e6 00 00 ff 00 ba 00 01 00 00 23 91 f4 0b 00 00 89 d7 09 f7 <74> 11 85 f6 75 39 85 d2 74 35 83 b9 0c 17 00 00 00 74 2c 8b 91 e0 [ 596.078952][ C0] RSP: 0000:ffffc90007147338 EFLAGS: 00000246 [ 596.078970][ C0] RAX: ffffffff8217d846 RBX: 00007f9749806000 RCX: ffff8880362e5d00 [ 596.078986][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 596.078999][ C0] RBP: ffffc900071475f0 R08: 0000000000000000 R09: 0000000000000000 [ 596.079013][ C0] R10: dffffc0000000000 R11: ffffed1003b0e4a2 R12: ffff888025f30030 [ 596.079029][ C0] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff88804bf8b030 [ 596.079054][ C0] ? copy_pmd_range+0x1846/0x53e0 [ 596.079141][ C0] copy_pmd_range+0x1846/0x53e0 [ 596.079205][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 596.079236][ C0] ? __lock_acquire+0x683/0x2ce0 [ 596.079312][ C0] copy_page_range+0xb34/0x1160 [ 596.079386][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 596.079421][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 596.079452][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 596.079482][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 596.079512][ C0] ? up_write+0x5a/0x190 [ 596.079569][ C0] dup_mmap+0xf2d/0x1d40 [ 596.079643][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 596.079683][ C0] ? rt_spin_lock+0x1e0/0x400 [ 596.079721][ C0] ? copy_mm+0x10f/0x480 [ 596.079802][ C0] ? copy_mm+0x10f/0x480 [ 596.079847][ C0] copy_mm+0x11a/0x480 [ 596.079876][ C0] ? copy_process+0xd3c/0x4390 [ 596.079913][ C0] copy_process+0x1e46/0x4390 [ 596.079957][ C0] ? copy_process+0xd3c/0x4390 [ 596.080006][ C0] ? __pfx_copy_process+0x10/0x10 [ 596.080044][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 596.080089][ C0] kernel_clone+0x2d2/0x8d0 [ 596.080132][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 596.080191][ C0] __x64_sys_clone+0x1b6/0x230 [ 596.080232][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 596.080284][ C0] ? do_user_addr_fault+0xc4a/0x1340 [ 596.080355][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.080381][ C0] do_syscall_64+0x174/0x580 [ 596.080439][ C0] ? trace_irq_disable+0x3b/0x140 [ 596.080462][ C0] ? clear_bhb_loop+0x40/0x90 [ 596.080491][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.080514][ C0] RIP: 0033:0x7f974a6f6a92 [ 596.080541][ C0] RSP: 002b:00007ffea05a9ec0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 596.080563][ C0] RAX: ffffffffffffffda RBX: 00007ffea05a9ec0 RCX: 00007f974a6f6a92 [ 596.080588][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 596.080601][ C0] RBP: 00007ffea05aa04c R08: 0000000000000000 R09: 0000000000000001 [ 596.080616][ C0] R10: 0000555592c417d0 R11: 0000000000000246 R12: 0000000000000001 [ 596.080630][ C0] R13: 0000000000000038 R14: 00000000000774ac R15: 00007ffea05aa0a0 [ 596.080664][ C0] [ 596.080673][ C0] task:kworker/u8:11 state:R running task stack:20304 pid:1511 tgid:1511 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 596.080738][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 596.080771][ C0] Call Trace: [ 596.080778][ C0] [ 596.080791][ C0] __schedule+0x16dc/0x5500 [ 596.080833][ C0] ? trace_sched_exit_tp+0x3a/0x130 [ 596.080905][ C0] ? __pfx___schedule+0x10/0x10 [ 596.080952][ C0] preempt_schedule_irq+0x4d/0xa0 [ 596.080982][ C0] irqentry_exit+0x14f/0x8f0 [ 596.081011][ C0] ? trace_irq_disable+0x3b/0x140 [ 596.081040][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 596.081064][ C0] RIP: 0010:preempt_schedule_thunk+0x22/0x40 [ 596.081118][ C0] Code: 90 90 90 90 90 90 90 90 55 48 89 e5 57 56 52 51 50 41 50 41 51 41 52 41 53 e8 ba 27 12 0a 41 5b 41 5a 41 59 41 58 58 59 5a 5e <5f> 5d c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 596.081136][ C0] RSP: 0018:ffffc90007047748 EFLAGS: 00000246 [ 596.081155][ C0] RAX: 0000000000000000 RBX: ffff88801d2b3e00 RCX: 0000000000000000 [ 596.081169][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8bca7820 [ 596.081184][ C0] RBP: ffffc90007047750 R08: ffff88801d2b3e2b R09: 1ffff11003a567c5 [ 596.081201][ C0] R10: dffffc0000000000 R11: ffffed1003a567c6 R12: dffffc0000000000 [ 596.081217][ C0] R13: 1ffff92000e08ef4 R14: ffff88801d2b3e28 R15: ffffc900070477c0 [ 596.081255][ C0] rt_mutex_slowunlock+0x6d1/0xa20 [ 596.081288][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 596.081311][ C0] ? rt_spin_lock+0x1e0/0x400 [ 596.081343][ C0] ? crng_make_state+0x22f/0x5d0 [ 596.081420][ C0] rt_spin_unlock+0x10d/0x200 [ 596.081447][ C0] crng_make_state+0x22f/0x5d0 [ 596.081477][ C0] _get_random_bytes+0xff/0x260 [ 596.081512][ C0] ? __pfx__get_random_bytes+0x10/0x10 [ 596.081583][ C0] nsim_dev_trap_report_work+0x702/0xcb0 [ 596.081633][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 596.081661][ C0] process_scheduled_works+0xa8e/0x14e0 [ 596.081719][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 596.081756][ C0] ? assign_work+0x3cf/0x5d0 [ 596.081789][ C0] worker_thread+0xa47/0xfb0 [ 596.081847][ C0] kthread+0x388/0x470 [ 596.081883][ C0] ? __pfx_worker_thread+0x10/0x10 [ 596.081911][ C0] ? __pfx_kthread+0x10/0x10 [ 596.081947][ C0] ret_from_fork+0x514/0xb70 [ 596.081987][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 596.082024][ C0] ? __switch_to+0xc89/0x1420 [ 596.082058][ C0] ? __pfx_kthread+0x10/0x10 [ 596.082095][ C0] ret_from_fork_asm+0x1a/0x30 [ 596.082135][ C0] [ 596.082143][ C0] task:kworker/u8:18 state:R running task stack:20440 pid:5825 tgid:5825 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 596.082209][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 596.082241][ C0] Call Trace: [ 596.082248][ C0] [ 596.082260][ C0] __schedule+0x16dc/0x5500 [ 596.082292][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 596.082388][ C0] ? irqentry_exit+0x218/0x8f0 [ 596.082422][ C0] ? irqentry_exit+0x218/0x8f0 [ 596.082451][ C0] ? trace_irq_disable+0x3b/0x140 [ 596.082476][ C0] ? __pfx___schedule+0x10/0x10 [ 596.082522][ C0] preempt_schedule_irq+0x4d/0xa0 [ 596.082552][ C0] irqentry_exit+0x14f/0x8f0 [ 596.082588][ C0] ? trace_irq_disable+0x3b/0x140 [ 596.082617][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 596.082642][ C0] RIP: 0010:unwind_next_frame+0x48e/0x2550 [ 596.082692][ C0] Code: d8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 b4 19 00 00 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 bf 19 00 00 0f b6 43 01 <83> e0 07 0f 84 7c 16 00 00 83 f8 01 4c 8b 6c 24 50 49 bc 00 00 00 [ 596.082710][ C0] RSP: 0000:ffffc90005aef580 EFLAGS: 00000246 [ 596.082729][ C0] RAX: 0000000000000001 RBX: ffffffff903a25da RCX: ffffffff8fc41c2c [ 596.082745][ C0] RDX: ffffffff903a25d6 RSI: ffffffff903a25d6 RDI: ffffffff8bca7820 [ 596.082762][ C0] RBP: ffffffff8132b019 R08: 0000000000000007 R09: 0000000000000000 [ 596.082776][ C0] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: dffffc0000000000 [ 596.082792][ C0] R13: ffffffff903a25db R14: ffffc90005aef628 R15: ffffffff8fc41c2c [ 596.082813][ C0] ? ret_from_fork_asm+0x19/0x30 [ 596.082855][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 596.082877][ C0] ? unwind_next_frame+0x8f/0x2550 [ 596.082907][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 596.082961][ C0] arch_stack_walk+0x11b/0x150 [ 596.083038][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 596.083067][ C0] stack_trace_save+0xa9/0x100 [ 596.083128][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 596.083162][ C0] ? kfree+0x1c5/0x6c0 [ 596.083214][ C0] ? __lock_acquire+0x683/0x2ce0 [ 596.083250][ C0] kasan_save_track+0x3e/0x80 [ 596.083334][ C0] ? kasan_save_track+0x3e/0x80 [ 596.083356][ C0] ? kasan_save_free_info+0x40/0x50 [ 596.083387][ C0] ? __kasan_slab_free+0x5c/0x80 [ 596.083410][ C0] ? kmem_cache_free+0x187/0x6c0 [ 596.083434][ C0] ? nsim_dev_trap_report_work+0x879/0xcb0 [ 596.083465][ C0] ? process_scheduled_works+0xa8e/0x14e0 [ 596.083491][ C0] ? worker_thread+0xa47/0xfb0 [ 596.083519][ C0] ? kthread+0x388/0x470 [ 596.083551][ C0] ? ret_from_fork+0x514/0xb70 [ 596.083593][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 596.083663][ C0] ? nsim_dev_trap_report_work+0x879/0xcb0 [ 596.083696][ C0] kasan_save_free_info+0x40/0x50 [ 596.083728][ C0] __kasan_slab_free+0x5c/0x80 [ 596.083754][ C0] kmem_cache_free+0x187/0x6c0 [ 596.083781][ C0] ? nsim_dev_trap_report_work+0x879/0xcb0 [ 596.083814][ C0] ? nsim_dev_trap_report_work+0x79d/0xcb0 [ 596.083849][ C0] nsim_dev_trap_report_work+0x879/0xcb0 [ 596.083897][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 596.083926][ C0] process_scheduled_works+0xa8e/0x14e0 [ 596.083984][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 596.084021][ C0] ? assign_work+0x3cf/0x5d0 [ 596.084055][ C0] worker_thread+0xa47/0xfb0 [ 596.084099][ C0] ? __kthread_parkme+0x71/0x1f0 [ 596.084141][ C0] kthread+0x388/0x470 [ 596.084177][ C0] ? __pfx_worker_thread+0x10/0x10 [ 596.084204][ C0] ? __pfx_kthread+0x10/0x10 [ 596.084240][ C0] ret_from_fork+0x514/0xb70 [ 596.084279][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 596.084315][ C0] ? __switch_to+0xc89/0x1420 [ 596.084349][ C0] ? __pfx_kthread+0x10/0x10 [ 596.084386][ C0] ret_from_fork_asm+0x1a/0x30 [ 596.084426][ C0] [ 596.084434][ C0] task:kworker/1:0 state:R running task stack:19968 pid:31 tgid:31 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 596.084499][ C0] Workqueue: usb_hub_wq hub_event [ 596.084555][ C0] Call Trace: [ 596.084562][ C0] [ 596.084581][ C0] __schedule+0x16dc/0x5500 [ 596.084630][ C0] ? trace_sched_exit_tp+0x3a/0x130 [ 596.084656][ C0] ? __schedule+0x16f2/0x5500 [ 596.084686][ C0] ? __pfx___schedule+0x10/0x10 [ 596.084732][ C0] preempt_schedule_irq+0x4d/0xa0 [ 596.084762][ C0] irqentry_exit+0x14f/0x8f0 [ 596.084792][ C0] ? trace_irq_disable+0x3b/0x140 [ 596.084820][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 596.084846][ C0] RIP: 0010:preempt_schedule_thunk+0x18/0x40 [ 596.084874][ C0] Code: cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 48 89 e5 57 56 52 51 50 41 50 41 51 41 52 41 53 e8 ba 27 12 0a 41 5b <41> 5a 41 59 41 58 58 59 5a 5e 5f 5d c3 cc cc cc cc 90 90 90 90 90 [ 596.084894][ C0] RSP: 0018:ffffc90000a5f268 EFLAGS: 00000246 [ 596.084912][ C0] RAX: 1ffff11003a56000 RBX: ffff88813ffb1400 RCX: 0000000080000002 [ 596.084930][ C0] RDX: 0000000000000000 RSI: ffffffff8bca7860 RDI: ffffffff8bca7820 [ 596.084945][ C0] RBP: ffffc90000a5f2a8 R08: ffffffff8fafa337 R09: 1ffffffff1f5f466 [ 596.084963][ C0] R10: dffffc0000000000 R11: fffffbfff1f5f467 R12: 1ffff11003a56098 [ 596.084980][ C0] R13: ffff88801d2b0000 R14: ffff8880b873c750 R15: dffffc0000000000 [ 596.085024][ C0] rt_spin_unlock+0xf0/0x200 [ 596.085053][ C0] __refill_objects_node+0x534/0x5b0 [ 596.085138][ C0] refill_objects+0x56/0x350 [ 596.085184][ C0] __pcs_replace_empty_main+0x330/0x690 [ 596.085219][ C0] ? rt_spin_trylock+0x13a/0x2b0 [ 596.085249][ C0] __kmalloc_cache_noprof+0x468/0x6b0 [ 596.085276][ C0] ? usb_control_msg+0x73/0x3e0 [ 596.085323][ C0] ? usb_control_msg+0x73/0x3e0 [ 596.085353][ C0] usb_control_msg+0x73/0x3e0 [ 596.085375][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 596.085413][ C0] hub_ext_port_status+0x114/0x810 [ 596.085489][ C0] hub_port_reset+0x73f/0x1800 [ 596.085540][ C0] hub_port_init+0x2a1/0x28b0 [ 596.085595][ C0] hub_event+0x24e2/0x4cf0 [ 596.085676][ C0] ? __pfx_hub_event+0x10/0x10 [ 596.085703][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 596.085738][ C0] ? rcu_is_watching+0x15/0xb0 [ 596.085821][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 596.085850][ C0] process_scheduled_works+0xa8e/0x14e0 [ 596.085909][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 596.085946][ C0] ? assign_work+0x3cf/0x5d0 [ 596.085980][ C0] worker_thread+0xa47/0xfb0 [ 596.086039][ C0] kthread+0x388/0x470 [ 596.086075][ C0] ? __pfx_worker_thread+0x10/0x10 [ 596.086103][ C0] ? __pfx_kthread+0x10/0x10 [ 596.086140][ C0] ret_from_fork+0x514/0xb70 [ 596.086179][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 596.086216][ C0] ? __switch_to+0xc89/0x1420 [ 596.086249][ C0] ? __pfx_kthread+0x10/0x10 [ 596.086287][ C0] ret_from_fork_asm+0x1a/0x30 [ 596.086327][ C0] [ 596.086335][ C0] task:kworker/u8:14 state:R running task stack:23200 pid:3379 tgid:3379 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 596.086415][ C0] Workqueue: netns cleanup_net [ 596.086504][ C0] Call Trace: [ 596.086511][ C0] [ 596.086523][ C0] __schedule+0x16dc/0x5500 [ 596.086554][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 596.086607][ C0] ? irqentry_exit+0x218/0x8f0 [ 596.086639][ C0] ? irqentry_exit+0x218/0x8f0 [ 596.086667][ C0] ? trace_irq_disable+0x3b/0x140 [ 596.086691][ C0] ? __pfx___schedule+0x10/0x10 [ 596.086736][ C0] preempt_schedule_irq+0x4d/0xa0 [ 596.086765][ C0] irqentry_exit+0x14f/0x8f0 [ 596.086794][ C0] ? trace_irq_disable+0x3b/0x140 [ 596.086822][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 596.086846][ C0] RIP: 0010:lock_release+0x2d7/0x3c0 [ 596.086870][ C0] Code: cb fc 10 00 00 00 00 eb b5 e8 65 6a a2 09 f7 c3 00 02 00 00 74 b9 65 48 8b 05 35 85 fc 10 48 3b 44 24 28 75 44 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 5a 35 a6 09 cc 48 8d 3d d2 68 11 [ 596.086888][ C0] RSP: 0018:ffffc9000fb670c8 EFLAGS: 00000282 [ 596.086906][ C0] RAX: 5aa28e156c9e9500 RBX: 0000000000000202 RCX: 0000000000000046 [ 596.086921][ C0] RDX: 0000000000000007 RSI: ffffffff8daf6ba4 RDI: ffffffff8bca7880 [ 596.086937][ C0] RBP: ffff88803309ac20 R08: ffffc9000fb675f8 R09: 0000000000000000 [ 596.086953][ C0] R10: ffffc9000fb671f8 R11: fffff52001f6ce41 R12: 0000000000000007 [ 596.086967][ C0] R13: 0000000000000007 R14: ffffffff8e1c3000 R15: ffff888033099f00 [ 596.087003][ C0] ? unwind_next_frame+0x8f/0x2550 [ 596.087030][ C0] unwind_next_frame+0x1baa/0x2550 [ 596.087061][ C0] ? dentry_kill+0x4d3/0x880 [ 596.087129][ C0] ? unwind_next_frame+0x8f/0x2550 [ 596.087157][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 596.087180][ C0] arch_stack_walk+0x11b/0x150 [ 596.087212][ C0] ? finish_dput+0x1a/0x260 [ 596.087256][ C0] stack_trace_save+0xa9/0x100 [ 596.087293][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 596.087331][ C0] ? __lock_acquire+0x683/0x2ce0 [ 596.087374][ C0] kasan_save_stack+0x3e/0x60 [ 596.087396][ C0] ? kasan_save_stack+0x3e/0x60 [ 596.087416][ C0] ? kasan_record_aux_stack+0xbd/0xd0 [ 596.087446][ C0] ? call_rcu+0xee/0x8b0 [ 596.087472][ C0] ? dentry_kill+0x4d3/0x880 [ 596.087555][ C0] kasan_record_aux_stack+0xbd/0xd0 [ 596.087594][ C0] ? __pfx___d_free+0x10/0x10 [ 596.087624][ C0] call_rcu+0xee/0x8b0 [ 596.087651][ C0] ? rt_spin_unlock+0x157/0x200 [ 596.087679][ C0] ? rt_spin_unlock+0x163/0x200 [ 596.087706][ C0] dentry_kill+0x4d3/0x880 [ 596.087742][ C0] finish_dput+0x1a/0x260 [ 596.087769][ C0] debugfs_remove+0x5b/0x70 [ 596.087852][ C0] nsim_destroy+0x8e/0x800 [ 596.087893][ C0] __nsim_dev_port_del+0x14e/0x200 [ 596.087925][ C0] nsim_dev_reload_destroy+0x288/0x490 [ 596.087952][ C0] ? xa_get_mark+0x67/0x7a0 [ 596.087976][ C0] nsim_dev_reload_down+0x8a/0xc0 [ 596.088006][ C0] devlink_reload+0x1c5/0x890 [ 596.088113][ C0] ? __pfx_devlink_reload+0x10/0x10 [ 596.088162][ C0] devlink_pernet_pre_exit+0x1ff/0x420 [ 596.088206][ C0] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 596.088248][ C0] ? iput+0xb84/0xf00 [ 596.088322][ C0] ops_undo_list+0x17d/0x8d0 [ 596.088357][ C0] ? __pfx_ops_undo_list+0x10/0x10 [ 596.088382][ C0] ? rt_spin_unlock+0x157/0x200 [ 596.088409][ C0] ? idr_destroy+0x21b/0x2a0 [ 596.088465][ C0] ? rt_spin_unlock+0x163/0x200 [ 596.088492][ C0] cleanup_net+0x575/0x810 [ 596.088522][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 596.088555][ C0] ? rcu_is_watching+0x15/0xb0 [ 596.088595][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 596.088623][ C0] process_scheduled_works+0xa8e/0x14e0 [ 596.088682][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 596.088719][ C0] ? assign_work+0x3cf/0x5d0 [ 596.088753][ C0] worker_thread+0xa47/0xfb0 [ 596.088812][ C0] kthread+0x388/0x470 [ 596.088848][ C0] ? __pfx_worker_thread+0x10/0x10 [ 596.088876][ C0] ? __pfx_kthread+0x10/0x10 [ 596.088924][ C0] ret_from_fork+0x514/0xb70 [ 596.088962][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 596.088997][ C0] ? __switch_to+0xc89/0x1420 [ 596.089031][ C0] ? __pfx_kthread+0x10/0x10 [ 596.089066][ C0] ret_from_fork_asm+0x1a/0x30 [ 596.089106][ C0] [ 596.089114][ C0] task:kworker/u8:7 state:S stack:20408 pid:991 tgid:991 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 596.089173][ C0] Workqueue: events_unbound call_usermodehelper_exec_work [ 596.089226][ C0] Call Trace: [ 596.089233][ C0] [ 596.089245][ C0] __schedule+0x16dc/0x5500 [ 596.089297][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 596.089324][ C0] ? __pfx___schedule+0x10/0x10 [ 596.089351][ C0] ? __pfx___schedule+0x10/0x10 [ 596.089394][ C0] preempt_schedule_irq+0x4d/0xa0 [ 596.089423][ C0] irqentry_exit+0x14f/0x8f0 [ 596.089461][ C0] ? trace_irq_disable+0x3b/0x140 [ 596.089487][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 596.089510][ C0] RIP: 0010:__change_pid+0xb8/0x3d0 [ 596.089541][ C0] Code: ed 74 6d 49 8d 9c 24 b0 09 00 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 f1 2d 9f 00 41 bf f0 01 00 00 4c 03 3b <89> eb bf 05 00 00 00 89 ee e8 fa be 35 00 83 fd 04 0f 87 a0 02 00 [ 596.089559][ C0] RSP: 0018:ffffc90005eff590 EFLAGS: 00000286 [ 596.089582][ C0] RAX: 1ffff11005d58516 RBX: ffff88802eac28b0 RCX: ffff8880252e3e00 [ 596.089598][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 596.089611][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 596.089623][ C0] R10: dffffc0000000000 R11: fffffbfff1f5f467 R12: ffff88802eac1f00 [ 596.089638][ C0] R13: dffffc0000000000 R14: ffffc90005eff6c0 R15: ffff888032a2bdf0 [ 596.089677][ C0] release_task+0xcad/0x16c0 [ 596.089740][ C0] ? wait_consider_task+0x197d/0x2df0 [ 596.089769][ C0] ? __pfx_release_task+0x10/0x10 [ 596.089798][ C0] ? rcu_preempt_deferred_qs_irqrestore+0x7b7/0xb90 [ 596.089840][ C0] wait_consider_task+0x197d/0x2df0 [ 596.089882][ C0] ? __do_wait+0x527/0x720 [ 596.089903][ C0] ? __pfx_wait_consider_task+0x10/0x10 [ 596.089941][ C0] __do_wait+0x527/0x720 [ 596.089962][ C0] ? wq_worker_running+0x9f/0x210 [ 596.089991][ C0] do_wait+0x1e7/0x510 [ 596.090012][ C0] ? do_wait+0x17d/0x510 [ 596.090037][ C0] kernel_wait+0xd6/0x1c0 [ 596.090062][ C0] ? __pfx_kernel_wait+0x10/0x10 [ 596.090087][ C0] ? __pfx_child_wait_callback+0x10/0x10 [ 596.090118][ C0] ? rt_spin_unlock+0x163/0x200 [ 596.090143][ C0] call_usermodehelper_exec_work+0xbe/0x230 [ 596.090170][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 596.090195][ C0] process_scheduled_works+0xa8e/0x14e0 [ 596.090248][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 596.090280][ C0] ? assign_work+0x3cf/0x5d0 [ 596.090311][ C0] worker_thread+0xa47/0xfb0 [ 596.090363][ C0] kthread+0x388/0x470 [ 596.090395][ C0] ? __pfx_worker_thread+0x10/0x10 [ 596.090420][ C0] ? __pfx_kthread+0x10/0x10 [ 596.090453][ C0] ret_from_fork+0x514/0xb70 [ 596.090488][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 596.090521][ C0] ? __switch_to+0xc89/0x1420 [ 596.090551][ C0] ? __pfx_kthread+0x10/0x10 [ 596.090590][ C0] ret_from_fork_asm+0x1a/0x30 [ 596.090626][ C0]