last executing test programs: 8m0.815158434s ago: executing program 4 (id=16): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r4, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4085, 0xff5}], 0x1}}], 0x4000000000001a3, 0x140, 0x0) 7m57.213878278s ago: executing program 4 (id=21): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000007c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x72, &(0x7f0000000000)=""/114}, 0x94) syz_open_procfs(0x0, &(0x7f0000000200)='net/mcfilter\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xa, &(0x7f0000000040)=0x8, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) 7m46.874234663s ago: executing program 4 (id=25): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2, 0x3, 0x0, 0x8}}, 0x2e) 7m43.870511407s ago: executing program 4 (id=28): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x14, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18050000080000000000000003000000b7080000000000007b8af8ff00000000b70800000b5900007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000009500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m36.09910698s ago: executing program 4 (id=36): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000180)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@discard_async}, {@usebackuproot}, {@skip_balance}, {@autodefrag}, {@commit={'commit', 0x3d, 0x9}}, {@acl}]}, 0xff, 0x5122, &(0x7f0000006440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x101142, 0xeaff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x5a42, 0x3a}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x1804}, 0x4004084) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0x29f) ioctl$FICLONERANGE(r0, 0x4020940d, 0x0) 7m27.149113615s ago: executing program 4 (id=43): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='2\x00', 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e21, @multicast2}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mbind(&(0x7f0000d47000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x40004, 0x8000100c, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000040)={'\x00', 0x0, 0x5, 0x2, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "00d703500200"]}) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) 7m9.075891874s ago: executing program 32 (id=43): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='2\x00', 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e21, @multicast2}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mbind(&(0x7f0000d47000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x40004, 0x8000100c, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000040)={'\x00', 0x0, 0x5, 0x2, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "00d703500200"]}) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) 6m26.460092064s ago: executing program 1 (id=99): sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$PPPIOCUNBRIDGECHAN(r3, 0x7434) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x3}, [], {}, [], {0x10, 0x5}}, 0x24, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x0) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x6}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4529}]}, 0x38}, 0x1, 0xffffa888}, 0x20000880) 6m23.803304186s ago: executing program 1 (id=100): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='2\x00', 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e21, @multicast2}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000040)={'\x00', 0x0, 0x5, 0x2, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "00d703500200"]}) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) 6m18.540670918s ago: executing program 1 (id=105): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00fedbdf2502000000000000010000000008000b0c00000000000000000000005f000000c4654c598c028a0bddf7bae4cf4455c76620bff7be7d37c9a396b7efefa36b6afa06a5fc70076d39ed59195855ecaa5e4921cd9e6ddb0e73a0ae73313e9c983021bc118a8d032f322f2f3a1ebe99cce455ec62d8bffd0ae64d84f788eaba68196829c1cd1c52a78b8dae37ed2b220d0aa747c4ccf9ad49"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000200)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4014) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac14141500000000000000000000000000000005000000030a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffffffffffffffff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000200000000000000000a0000000000000000000000804000000000000000000001000003000000004400050000deffffff0000000400000000000000000004d23c00000000000000ffffffff0000000000000000000000000000000000030000490000000000000000"], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$kcm(0xa, 0x1, 0x106) socket$inet6(0xa, 0x3, 0x1) r3 = socket$inet(0x2, 0x4000000000000001, 0x100) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0xffffffd7, 0x20000000, &(0x7f0000000180)={0x2, 0x4e22, @loopback}, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'wlc\x00', 0x11, 0x4}, {@loopback, 0x4e23, 0x10000, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010001000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1"], 0x114}, {&(0x7f0000000b40)={0x138, 0x38, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@typed={0x14, 0x15f, 0x0, 0x0, @ipv6=@empty}, @nested={0x2e, 0x49, 0x0, 0x1, [@generic="5b09f1ec97c1", @typed={0x8, 0x14, 0x0, 0x0, @u32=0x3}, @typed={0xb, 0x6, 0x0, 0x0, @str='vxcan1\x00'}, @typed={0x10, 0x165, 0x0, 0x0, @str='/dev/userio\x00'}]}, @typed={0x8, 0xfa, 0x0, 0x0, @pid}, @generic, @nested={0x4, 0x143}, @generic="a0c2a1be90846312e3bed7ee6d8301ec19852ba0d23b5114d536e4d075792b9335d042115d682eacf488620fe3f0d27cbdc802bf9e45937dfee7d846fa91e76e6382ec77332d7130d7da9dd4e7", @typed={0x85, 0xb4, 0x0, 0x0, @binary="2bb1e00882522c18661005e392e9bfda22b58d9f38b09e6c31f8653ea46e31809dac9973c22ad5f368bc654f08d443ad0fd1655bd3cfcec0e493c80b7df6ff58928ab934c080fc46ce3728f812dbd4dd266a257635c858aee953d9cecefcc86bffca10623c64bcecf198db4e9efab5274ca4e6e36d2fcc4330a81920c35cc3d553"}]}, 0x138}, {&(0x7f0000000d80)={0x16c, 0x2f, 0x200, 0x70bd2d, 0x25dfdbfd, "", [@generic="20985fd22dbe9946bc5a66b31f2ac0ffedb991c34992e7a22ce246bc4c7abab952b787f9b58a5f59ecdbab095413c581c31ff818dc09ecd74123f379465a852e786e7e7b38c7fdef187dbbbf272c0dac4776022ad7a2931a88a0dd12ce9c913279c3a5ec896e31750c2a5916f8587bd9bc7cb4e98e167a032b83faae6c7193ecb54debad93404776f52803be0df485b2ea8dc9fd8c7ca36176a6760a6d436e436cde1ef40de3d382ca106011e291b9c1d723e37d8c3f18fb74f98f88a154b6b39edbc423f246b4b824dedaa178", @generic="c140bb2b10040146eb2d202988b9ca31c7c4db372e78fba0912eb918f6336671eb3bd9192ae4213730e991dd88d1b3d24767d37b151c87d1fc2ae01b2e87886cfbcd8ce7353da2891839182eb6dfc905936ab7799c908d78899b46c9a8c3ade72a838e629689728b57c65420326c3322b77ec256a498e2cd770f09da5dd6a0f71ba41f5f83", @typed={0x8, 0x57, 0x0, 0x0, @str='wrr\x00'}]}, 0x16c}], 0x3, 0x0, 0x0, 0x1}, 0x8040) 6m14.947195128s ago: executing program 1 (id=109): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="cd5927a8b2a00ee8cc111509a5dcf0343c2c5b667c514bb3055b96ebda11b4c8308aef587ef82686dc7f027c402a00582f1b338d80160b21beef66b139a7061ff65ea9c6ed4de3c272fcce0b257c322f54ca01000000bb318d29a96c5035fd713f02f959dc5e55bd518d2ce967008eb6db0a89b4129c5b692bff14aeaa783a3cb22eb1004d87c97e8c8c587adeff394c43b74f5ba5ce66df35b3f4e7d9d7cbc36a20ec75e5dc96701ef447ee3160e70ad13117e96c171be8f0ba442afef0d073a33d7eb218dbb9c065f38a22096306c1e1c7a8268d7373f2f6ca476174e543a37052c6e08007c7afd75fabaf6645dfaad713688d9af3e70e752f3698b8cd0d75efd5eb50f5c4ef48aa62b641104abb1ce0e8ebcea9485d77bb9b523a47f1de80c1456f62e1387435d3f41d2d6c9e04c1f51401aa6b5204972b93c5783233a1002a1c0d9680c43f078cb2fac20df2296408b52ac0338cee4c92445b44b8d802184f15b34dcd5be61c6f55f73559343ad384c6d05afae20646676c06b0d4bba9d96bdb045fb0e8b50b7a84489a59bc371e066b4ae38c5cb05035cbe8d2123dd28d85db900da33b1f01dd306558dc437606314814aaf7416b8e1e4ab0d9fc2a220d009edee9d94fd184c52a5c4fbee4197f30986533be2b656535c6621f15d4a700de437afd57cb91c00e692b5b4bcfbac44a33a917c9fce46b308775e1ba4e4d93388a11deda12d7270634704d2e2846caedba24b226247029d706b423a295689289bfa250f45ae88432d5721129c9ad9a5f4c5bdd4d653a024e9b16c0e96b35920fbd236d1566cc2efd366f327b04e508254cea66bd2977e016757f0cd7169706543cfa571b99084098464ab7dba3b313cc17463d3d26dadf42f5327637d67464d3dcf6ec8d88621c51892bf61685f551", 0x290}], 0x1}}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000002b00)="9bb6070844984ef2b734ee2b740e32647974b7cfb8150605a2c635efcbc832fa56569acc96052ed730ec4473a0af21e1f7881620a9062897d734a7dac3c85d6973f29880e626e5e231b1b4edd98b9363876048487f344b980de2c6f0806915a8bb26e264035f0a378fe6662cfd45296d1cc391c761c06d689dd572f822269ffc2625c6d2a6d4228a91b303f6b9d8b45a6a9f8c7b49ec5bc49acd786101e2308bbaee6d51d8c582fe4bfedd220cae98dc1a86cbe3b3d03636b5c1c2951d9b0f18503ac03e3f52a34b9be308d86ced9df5c42e152849ff5ad87e599f2fd3af561520a835d3222667cb80625d2058ea5dcec77b644cb4927e43838cb632b09b823885e5729f163bdc6ab9725aa575d034c67d1985e0d1ac60f597a2747c3d6d6a366b9ab1f791d0ef4196371671865ad407d3d21586847479d116ebcd97848f0d846b4995eeb5aeed68a3b391c9b3005d6ab1ba83b799a7b1fc0cfbd5f17b87636f1fb152d26fd6e587c346ec7328af785abb3c79900f200031c65c088747256aa4e7375159471d2a1acc15dd6b1ea1ffd7360414542b7a9756ecdfd603447c657c792953f5870ae3459d19713abdb0d87c65c3aadd315f937cdbfdeb424745b4e856fbc6a5d8796cf0fc9ee7825d8fbddf5f781a87a3013e4d6b6d0706b633f96772f094fac96ab13446b4332916986d918ad6b97e87b016aab1e4176aa5fb26f22aa8e6b1c1213b68854ed35873bd8ff7b8dfe29850b8ef803af5ba20b31f8156a1be352c65c5e4f94690fe2042958847db79a25b7ae2c6cda84e07aeb33e332f39a7c43122261e9eec6eb5e9edce83ea6a570bade1332e4e68d7bc60551a2af820b9c3c74fe8996930fb274900aeecdde3d6810be875db884df835b83c5aa9cfb1560910953df8311e0bcfa8376807612dfd58fa5f70b4024f73efa0337b0a73c9ce84fb7a105dc808a1cdaf8fd8dfecddc272d22ad3a3f028630af2a4d35894a34727ae3c3b9722634129e98771b3d0abe8c2286546e209c56f960aa8fc8be305254bc15cc58bd0016e63c0df6a8d6406fe6cdde6242f4c02bf15340c4724277ff728924309ae62a98f0623183ed74179f58b9a81f858f02947e3f1f383d6df32791e22eaf4038a6342ce260d50144584b7e67e2bc09d6353e5bfd1cf99aaa8ef114cc481e1ad472f066e5f98110cfbab9ef379c4a16aa22ba3a16584700709d0ddf722e8bd9de7c1c27d31308ae1a812a59a9474b0dd310ca57764b76ae5587795cd12dcd7b772c06369bc1210627ca2c6dd8e850f0f0e1deba3533844ec72abc2ec0da84dd858b5e13da3a190e6bc2e4c861da32c0d6ac3de934837f247ff9e3094e1a9105a663715d632a11d2d14d11dd736cf3d", 0x3d6}], 0x1}}], 0x3, 0x42054) 6m14.091421871s ago: executing program 1 (id=111): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00fedbdf2502000000000000010000000008000b0c00000000000000000000005f000000c4654c598c028a0bddf7bae4cf4455c76620bff7be7d37c9a396b7efefa36b6afa06a5fc70076d39ed59195855ecaa5e4921cd9e6ddb0e73a0ae73313e9c983021bc118a8d032f322f2f3a1ebe99cce455ec62d8bffd0ae64d84f788eaba68196829c1cd1c52a78b8dae37ed2b220d0aa747c4ccf9ad49"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000200)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4014) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac14141500000000000000000000000000000005000000030a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffffffffffffffff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000200000000000000000a0000000000000000000000804000000000000000000001000003000000004400050000deffffff0000000400000000000000000004d23c00000000000000ffffffff0000000000000000000000000000000000030000490000000000000000"], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$kcm(0xa, 0x1, 0x106) socket$inet6(0xa, 0x3, 0x1) r3 = socket$inet(0x2, 0x4000000000000001, 0x100) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0xffffffd7, 0x20000000, &(0x7f0000000180)={0x2, 0x4e22, @loopback}, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'wlc\x00', 0x11, 0x4}, {@loopback, 0x4e23, 0x10000, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010001000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1"], 0x114}, {&(0x7f0000000b40)={0x138, 0x38, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@typed={0x14, 0x15f, 0x0, 0x0, @ipv6=@empty}, @nested={0x2e, 0x49, 0x0, 0x1, [@generic="5b09f1ec97c1", @typed={0x8, 0x14, 0x0, 0x0, @u32=0x3}, @typed={0xb, 0x6, 0x0, 0x0, @str='vxcan1\x00'}, @typed={0x10, 0x165, 0x0, 0x0, @str='/dev/userio\x00'}]}, @typed={0x8, 0xfa, 0x0, 0x0, @pid}, @generic, @nested={0x4, 0x143}, @generic="a0c2a1be90846312e3bed7ee6d8301ec19852ba0d23b5114d536e4d075792b9335d042115d682eacf488620fe3f0d27cbdc802bf9e45937dfee7d846fa91e76e6382ec77332d7130d7da9dd4e7", @typed={0x85, 0xb4, 0x0, 0x0, @binary="2bb1e00882522c18661005e392e9bfda22b58d9f38b09e6c31f8653ea46e31809dac9973c22ad5f368bc654f08d443ad0fd1655bd3cfcec0e493c80b7df6ff58928ab934c080fc46ce3728f812dbd4dd266a257635c858aee953d9cecefcc86bffca10623c64bcecf198db4e9efab5274ca4e6e36d2fcc4330a81920c35cc3d553"}]}, 0x138}, {&(0x7f0000000d80)={0x16c, 0x2f, 0x200, 0x70bd2d, 0x25dfdbfd, "", [@generic="20985fd22dbe9946bc5a66b31f2ac0ffedb991c34992e7a22ce246bc4c7abab952b787f9b58a5f59ecdbab095413c581c31ff818dc09ecd74123f379465a852e786e7e7b38c7fdef187dbbbf272c0dac4776022ad7a2931a88a0dd12ce9c913279c3a5ec896e31750c2a5916f8587bd9bc7cb4e98e167a032b83faae6c7193ecb54debad93404776f52803be0df485b2ea8dc9fd8c7ca36176a6760a6d436e436cde1ef40de3d382ca106011e291b9c1d723e37d8c3f18fb74f98f88a154b6b39edbc423f246b4b824dedaa178", @generic="c140bb2b10040146eb2d202988b9ca31c7c4db372e78fba0912eb918f6336671eb3bd9192ae4213730e991dd88d1b3d24767d37b151c87d1fc2ae01b2e87886cfbcd8ce7353da2891839182eb6dfc905936ab7799c908d78899b46c9a8c3ade72a838e629689728b57c65420326c3322b77ec256a498e2cd770f09da5dd6a0f71ba41f5f83", @typed={0x8, 0x57, 0x0, 0x0, @str='wrr\x00'}]}, 0x16c}], 0x3, 0x0, 0x0, 0x1}, 0x8040) 6m12.725086584s ago: executing program 1 (id=113): sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$PPPIOCUNBRIDGECHAN(r4, 0x7434) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x3}, [], {}, [], {0x10, 0x5}}, 0x24, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x0) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x6}) syz_open_dev$tty20(0xc, 0x4, 0x0) 5m53.284726031s ago: executing program 33 (id=113): sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$PPPIOCUNBRIDGECHAN(r4, 0x7434) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x3}, [], {}, [], {0x10, 0x5}}, 0x24, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x0) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x6}) syz_open_dev$tty20(0xc, 0x4, 0x0) 5m40.684077654s ago: executing program 3 (id=140): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x3c, r3, 0x1, 0x170bd29, 0x0, {0x1, 0x0, 0x6000}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}}]}]}, 0x3c}, 0x1, 0xff07, 0x0, 0x10044840}, 0x2000000) 5m36.179666163s ago: executing program 3 (id=143): sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x3}, [], {}, [], {0x10, 0x5}}, 0x24, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x0) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x6}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4529}]}, 0x38}, 0x1, 0xffffa888}, 0x20000880) 5m31.532727744s ago: executing program 3 (id=146): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) kexec_load(0xd0ffbf, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0xbfffd000, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 5m25.7446773s ago: executing program 3 (id=149): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kexec_load(0xd0ffbf, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0xbfffd000, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x0) 5m18.520921228s ago: executing program 3 (id=159): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m13.074742031s ago: executing program 3 (id=160): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00fedbdf2502000000000000010000000008000b0c00000000000000000000005f000000c4654c598c028a0bddf7bae4cf4455c76620bff7be7d37c9a396b7efefa36b6afa06a5fc70076d39ed59195855ecaa5e4921cd9e6ddb0e73a0ae73313e9c983021bc118a8d032f322f2f3a1ebe99cce455ec62d8bffd0ae64d84f788eaba68196829c1cd1c52a78b8dae37ed2b220d0aa747c4ccf9ad49"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000200)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4014) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac14141500000000000000000000000000000005000000030a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffffffffffffffff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000200000000000000000a0000000000000000000000804000000000000000000001000003000000004400050000deffffff0000000400000000000000000004d23c00000000000000ffffffff0000000000000000000000000000000000030000490000000000000000"], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$kcm(0xa, 0x1, 0x106) socket$inet6(0xa, 0x3, 0x1) r3 = socket$inet(0x2, 0x4000000000000001, 0x100) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0xffffffd7, 0x20000000, &(0x7f0000000180)={0x2, 0x4e22, @loopback}, 0x10) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'wrr\x00', 0x30, 0x10001, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'wlc\x00', 0x11, 0x4}, {@loopback, 0x4e23, 0x10000, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010001000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1"], 0x114}, {&(0x7f0000000b40)={0x138, 0x38, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@typed={0x14, 0x15f, 0x0, 0x0, @ipv6=@empty}, @nested={0x2e, 0x49, 0x0, 0x1, [@generic="5b09f1ec97c1", @typed={0x8, 0x14, 0x0, 0x0, @u32=0x3}, @typed={0xb, 0x6, 0x0, 0x0, @str='vxcan1\x00'}, @typed={0x10, 0x165, 0x0, 0x0, @str='/dev/userio\x00'}]}, @typed={0x8, 0xfa, 0x0, 0x0, @pid}, @generic, @nested={0x4, 0x143}, @generic="a0c2a1be90846312e3bed7ee6d8301ec19852ba0d23b5114d536e4d075792b9335d042115d682eacf488620fe3f0d27cbdc802bf9e45937dfee7d846fa91e76e6382ec77332d7130d7da9dd4e7", @typed={0x85, 0xb4, 0x0, 0x0, @binary="2bb1e00882522c18661005e392e9bfda22b58d9f38b09e6c31f8653ea46e31809dac9973c22ad5f368bc654f08d443ad0fd1655bd3cfcec0e493c80b7df6ff58928ab934c080fc46ce3728f812dbd4dd266a257635c858aee953d9cecefcc86bffca10623c64bcecf198db4e9efab5274ca4e6e36d2fcc4330a81920c35cc3d553"}]}, 0x138}, {&(0x7f0000000d80)={0x16c, 0x2f, 0x200, 0x70bd2d, 0x25dfdbfd, "", [@generic="20985fd22dbe9946bc5a66b31f2ac0ffedb991c34992e7a22ce246bc4c7abab952b787f9b58a5f59ecdbab095413c581c31ff818dc09ecd74123f379465a852e786e7e7b38c7fdef187dbbbf272c0dac4776022ad7a2931a88a0dd12ce9c913279c3a5ec896e31750c2a5916f8587bd9bc7cb4e98e167a032b83faae6c7193ecb54debad93404776f52803be0df485b2ea8dc9fd8c7ca36176a6760a6d436e436cde1ef40de3d382ca106011e291b9c1d723e37d8c3f18fb74f98f88a154b6b39edbc423f246b4b824dedaa178", @generic="c140bb2b10040146eb2d202988b9ca31c7c4db372e78fba0912eb918f6336671eb3bd9192ae4213730e991dd88d1b3d24767d37b151c87d1fc2ae01b2e87886cfbcd8ce7353da2891839182eb6dfc905936ab7799c908d78899b46c9a8c3ade72a838e629689728b57c65420326c3322b77ec256a498e2cd770f09da5dd6a0f71ba41f5f83", @typed={0x8, 0x57, 0x0, 0x0, @str='wrr\x00'}]}, 0x16c}], 0x3, 0x0, 0x0, 0x1}, 0x8040) 4m56.043206447s ago: executing program 34 (id=160): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00fedbdf2502000000000000010000000008000b0c00000000000000000000005f000000c4654c598c028a0bddf7bae4cf4455c76620bff7be7d37c9a396b7efefa36b6afa06a5fc70076d39ed59195855ecaa5e4921cd9e6ddb0e73a0ae73313e9c983021bc118a8d032f322f2f3a1ebe99cce455ec62d8bffd0ae64d84f788eaba68196829c1cd1c52a78b8dae37ed2b220d0aa747c4ccf9ad49"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000200)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4014) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac14141500000000000000000000000000000005000000030a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffffffffffffffff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000200000000000000000a0000000000000000000000804000000000000000000001000003000000004400050000deffffff0000000400000000000000000004d23c00000000000000ffffffff0000000000000000000000000000000000030000490000000000000000"], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$kcm(0xa, 0x1, 0x106) socket$inet6(0xa, 0x3, 0x1) r3 = socket$inet(0x2, 0x4000000000000001, 0x100) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0xffffffd7, 0x20000000, &(0x7f0000000180)={0x2, 0x4e22, @loopback}, 0x10) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'wrr\x00', 0x30, 0x10001, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'wlc\x00', 0x11, 0x4}, {@loopback, 0x4e23, 0x10000, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010001000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1"], 0x114}, {&(0x7f0000000b40)={0x138, 0x38, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@typed={0x14, 0x15f, 0x0, 0x0, @ipv6=@empty}, @nested={0x2e, 0x49, 0x0, 0x1, [@generic="5b09f1ec97c1", @typed={0x8, 0x14, 0x0, 0x0, @u32=0x3}, @typed={0xb, 0x6, 0x0, 0x0, @str='vxcan1\x00'}, @typed={0x10, 0x165, 0x0, 0x0, @str='/dev/userio\x00'}]}, @typed={0x8, 0xfa, 0x0, 0x0, @pid}, @generic, @nested={0x4, 0x143}, @generic="a0c2a1be90846312e3bed7ee6d8301ec19852ba0d23b5114d536e4d075792b9335d042115d682eacf488620fe3f0d27cbdc802bf9e45937dfee7d846fa91e76e6382ec77332d7130d7da9dd4e7", @typed={0x85, 0xb4, 0x0, 0x0, @binary="2bb1e00882522c18661005e392e9bfda22b58d9f38b09e6c31f8653ea46e31809dac9973c22ad5f368bc654f08d443ad0fd1655bd3cfcec0e493c80b7df6ff58928ab934c080fc46ce3728f812dbd4dd266a257635c858aee953d9cecefcc86bffca10623c64bcecf198db4e9efab5274ca4e6e36d2fcc4330a81920c35cc3d553"}]}, 0x138}, {&(0x7f0000000d80)={0x16c, 0x2f, 0x200, 0x70bd2d, 0x25dfdbfd, "", [@generic="20985fd22dbe9946bc5a66b31f2ac0ffedb991c34992e7a22ce246bc4c7abab952b787f9b58a5f59ecdbab095413c581c31ff818dc09ecd74123f379465a852e786e7e7b38c7fdef187dbbbf272c0dac4776022ad7a2931a88a0dd12ce9c913279c3a5ec896e31750c2a5916f8587bd9bc7cb4e98e167a032b83faae6c7193ecb54debad93404776f52803be0df485b2ea8dc9fd8c7ca36176a6760a6d436e436cde1ef40de3d382ca106011e291b9c1d723e37d8c3f18fb74f98f88a154b6b39edbc423f246b4b824dedaa178", @generic="c140bb2b10040146eb2d202988b9ca31c7c4db372e78fba0912eb918f6336671eb3bd9192ae4213730e991dd88d1b3d24767d37b151c87d1fc2ae01b2e87886cfbcd8ce7353da2891839182eb6dfc905936ab7799c908d78899b46c9a8c3ade72a838e629689728b57c65420326c3322b77ec256a498e2cd770f09da5dd6a0f71ba41f5f83", @typed={0x8, 0x57, 0x0, 0x0, @str='wrr\x00'}]}, 0x16c}], 0x3, 0x0, 0x0, 0x1}, 0x8040) 15.980616658s ago: executing program 0 (id=362): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r4}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r6 = syz_open_dev$usbmon(&(0x7f00000010c0), 0x8001, 0xc02) ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f0000001140)={&(0x7f0000001100), 0x0, 0x3}) sendto$inet6(r0, &(0x7f0000000140)='\x00', 0x1, 0x24008084, &(0x7f00000001c0)={0xa, 0x2, 0xdfff, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable', 0x8) 12.848879631s ago: executing program 0 (id=364): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r4}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r6 = syz_open_dev$usbmon(&(0x7f00000010c0), 0x8001, 0xc02) ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f0000001140)={&(0x7f0000001100), 0x0, 0x3}) sendto$inet6(r0, &(0x7f0000000140)='\x00', 0x1, 0x24008084, &(0x7f00000001c0)={0xa, 0x2, 0xdfff, @loopback, 0x2}, 0x1c) shutdown(r0, 0x1) 9.88678452s ago: executing program 0 (id=366): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r5, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x401, 0x4, 0x0, 0x0, 0x2}}, 0x50) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x12e) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lgetxattr(0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f0000000c00)={0x2, [], 0x6, "859ae7f3db0b4f"}) 7.472123096s ago: executing program 2 (id=367): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000280)='veno', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 6.085038206s ago: executing program 0 (id=368): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kexec_load(0xd0ffbf, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xbfffd000, 0x10000}], 0x0) 4.565938128s ago: executing program 2 (id=369): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='2\x00', 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e21, @multicast2}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mbind(&(0x7f0000d47000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x40004, 0x8000100c, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000040)={'\x00', 0x0, 0x5, 0x2, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "00d703500200"]}) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) 3.418215798s ago: executing program 0 (id=370): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000700)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b0102010130020904000000010130000a2401100a00070000000904010000010230000904010101010230000905010920000e00030a2525ffffff7f"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 3.038938178s ago: executing program 2 (id=371): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x5502000000000000}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x44}], 0x1, 0x0) sendmmsg$unix(r2, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001180)="dd9e41", 0x3}], 0x1, 0x0, 0x0, 0x20000041}}], 0x1, 0xc004) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f7, 0xffffffff, 0xffffffffefffff15, 0x3, 0x4, 0x4, 0x4]}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.307589127s ago: executing program 2 (id=372): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="0002"], 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 2.080632469s ago: executing program 2 (id=373): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f"], 0x0, 0x0, 0x0, 0x0}, 0x0) 103.209689ms ago: executing program 2 (id=374): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x5502000000000000}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x44}], 0x1, 0x0) sendmmsg$unix(r2, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001180)="dd9e41", 0x3}], 0x1, 0x0, 0x0, 0x20000041}}], 0x1, 0xc004) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f7, 0xffffffff, 0xffffffffefffff15, 0x3, 0x4, 0x4, 0x4]}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 0 (id=375): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r3, 0x541c, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @empty}}, 0x1e) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xab}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x2b2, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): 123" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f319ce59 code=0x7ffc0000 [ 335.475848][ T29] audit: type=1326 audit(1781349769.005:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6356 comm="syz.0.123" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f319ce59 code=0x7ffc0000 [ 335.618460][ T29] audit: type=1326 audit(1781349769.005:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6356 comm="syz.0.123" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f17f319ce59 code=0x7ffc0000 [ 336.522920][ T48] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 336.534296][ T48] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 336.547433][ T48] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 336.566257][ T48] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 336.579978][ T48] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 337.349160][ T4876] Bluetooth: hci2: command tx timeout [ 337.704138][ T5231] 8021q: adding VLAN 0 to HW filter on device eth2 [ 337.763838][ T14] bridge_slave_1: left allmulticast mode [ 337.923633][ T14] bridge_slave_1: left promiscuous mode [ 337.966739][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.102976][ T14] bridge_slave_0: left allmulticast mode [ 338.165300][ T14] bridge_slave_0: left promiscuous mode [ 338.247140][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.629452][ T4876] Bluetooth: hci6: command tx timeout [ 338.824797][ T14] bond0 (unregistering): Released all slaves [ 339.429733][ T4876] Bluetooth: hci2: command tx timeout [ 340.720964][ T4876] Bluetooth: hci6: command tx timeout [ 341.512511][ T4876] Bluetooth: hci2: command tx timeout [ 342.204740][ T6407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.129'. [ 342.869693][ T4876] Bluetooth: hci6: command tx timeout [ 343.166350][ T6407] bridge0: port 3(macsec1) entered blocking state [ 343.173526][ T6407] bridge0: port 3(macsec1) entered disabled state [ 343.180730][ T6407] macsec1: entered allmulticast mode [ 343.186179][ T6407] bridge0: entered allmulticast mode [ 343.191916][ T6407] bridge0: entered promiscuous mode [ 343.434908][ T6407] macsec1: left allmulticast mode [ 343.440393][ T6407] bridge0: left allmulticast mode [ 343.572152][ T5674] bridge0: left promiscuous mode [ 343.590706][ T4876] Bluetooth: hci2: command tx timeout [ 344.371871][ T4876] Bluetooth: hci0: unexpected event for opcode 0x1004 [ 344.977871][ T4876] Bluetooth: hci6: command tx timeout [ 345.884075][ T6432] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 345.908613][ T29] audit: type=1326 audit(1781349779.545:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.2.135" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5a79ce59 code=0x7ffc0000 [ 345.996387][ T29] audit: type=1326 audit(1781349779.545:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.2.135" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5a79ce59 code=0x7ffc0000 [ 346.146005][ T29] audit: type=1326 audit(1781349779.545:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.2.135" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5a79ce59 code=0x7ffc0000 [ 346.297705][ T29] audit: type=1326 audit(1781349779.585:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.2.135" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fad5a79ce59 code=0x7ffc0000 [ 346.426704][ T29] audit: type=1326 audit(1781349779.585:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.2.135" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5a79ce59 code=0x7ffc0000 [ 346.453156][ T29] audit: type=1326 audit(1781349779.585:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.2.135" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5a79ce59 code=0x7ffc0000 [ 346.479271][ T29] audit: type=1326 audit(1781349779.585:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.2.135" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fad5a79ce59 code=0x7ffc0000 [ 346.504844][ T29] audit: type=1326 audit(1781349779.585:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.2.135" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fad5a79ce59 code=0x7ffc0000 [ 348.499973][ T4876] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 348.508593][ T4876] Bluetooth: hci0: Injecting HCI hardware error event [ 348.517593][ T4876] Bluetooth: hci0: hardware error 0x00 [ 352.487121][ T6468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.142'. [ 352.583735][ T6468] bridge0: port 3(macsec1) entered blocking state [ 352.592282][ T6468] bridge0: port 3(macsec1) entered disabled state [ 352.693435][ T6468] macsec1: entered allmulticast mode [ 352.699263][ T6468] bridge0: entered allmulticast mode [ 352.705145][ T6468] bridge0: entered promiscuous mode [ 353.059275][ T4876] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 353.316798][ T6468] macsec1: left allmulticast mode [ 353.322502][ T6468] bridge0: left allmulticast mode [ 353.344940][ T5691] bridge0: left promiscuous mode [ 356.833091][ T29] audit: type=1326 audit(1781349790.465:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.2.145" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5a79ce59 code=0x7ffc0000 [ 356.954347][ T29] audit: type=1326 audit(1781349790.505:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.2.145" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5a79ce59 code=0x7ffc0000 [ 357.091246][ T29] audit: type=1326 audit(1781349790.505:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.2.145" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5a79ce59 code=0x7ffc0000 [ 357.210949][ T29] audit: type=1326 audit(1781349790.505:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.2.145" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fad5a79ce59 code=0x7ffc0000 [ 358.285454][ T29] audit: type=1326 audit(1781349790.505:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.2.145" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5a79ce59 code=0x7ffc0000 [ 358.316779][ T29] audit: type=1326 audit(1781349790.595:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.2.145" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fad5a75d68e code=0x7ffc0000 [ 359.339866][ T29] audit: type=1326 audit(1781349790.635:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.2.145" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fad5a75d68e code=0x7ffc0000 [ 360.394284][ T29] audit: type=1326 audit(1781349790.635:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.2.145" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fad5a75d68e code=0x7ffc0000 [ 360.424313][ T29] audit: type=1326 audit(1781349790.645:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.2.145" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fad5a75d68e code=0x7ffc0000 [ 360.528443][ T29] audit: type=1326 audit(1781349790.665:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.2.145" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fad5a75d68e code=0x7ffc0000 [ 362.416171][ T5231] 8021q: adding VLAN 0 to HW filter on device eth3 [ 363.963437][ T1009] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.032690][ T6359] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.118422][ T6359] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.154554][ T6359] bridge_slave_0: entered allmulticast mode [ 364.194734][ T6359] bridge_slave_0: entered promiscuous mode [ 364.262992][ T6359] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.281483][ T6359] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.306696][ T6359] bridge_slave_1: entered allmulticast mode [ 364.376067][ T6359] bridge_slave_1: entered promiscuous mode [ 364.946634][ T1009] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.024882][ T6359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.108267][ T6359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.691752][ T1009] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.384625][ T6359] team0: Port device team_slave_0 added [ 367.484831][ T6359] team0: Port device team_slave_1 added [ 367.853682][ T6373] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.869583][ T6373] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.980188][ T6373] bridge_slave_0: entered allmulticast mode [ 368.037185][ T6373] bridge_slave_0: entered promiscuous mode [ 368.171343][ T1009] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.358439][ T4876] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 368.366315][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 368.366379][ T29] audit: type=1326 audit(1781349801.975:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6524 comm="syz.0.156" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f319ce59 code=0x7ffc0000 [ 368.399244][ T29] audit: type=1326 audit(1781349801.995:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6524 comm="syz.0.156" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f319ce59 code=0x7ffc0000 [ 368.497118][ T6359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.550564][ T6359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.651208][ T29] audit: type=1326 audit(1781349801.995:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6524 comm="syz.0.156" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f319ce59 code=0x7ffc0000 [ 368.777124][ T6359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.811561][ T29] audit: type=1326 audit(1781349802.035:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6524 comm="syz.0.156" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f17f319ce59 code=0x7ffc0000 [ 368.873188][ T6373] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.917396][ T6373] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.969787][ T6373] bridge_slave_1: entered allmulticast mode [ 369.006755][ T29] audit: type=1326 audit(1781349802.115:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6524 comm="syz.0.156" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f17f315d68e code=0x7ffc0000 [ 369.073891][ T6373] bridge_slave_1: entered promiscuous mode [ 369.086663][ T29] audit: type=1326 audit(1781349802.125:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6524 comm="syz.0.156" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f17f315d68e code=0x7ffc0000 [ 369.111789][ T29] audit: type=1326 audit(1781349802.135:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6524 comm="syz.0.156" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f17f315d68e code=0x7ffc0000 [ 369.136871][ T29] audit: type=1326 audit(1781349802.155:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6524 comm="syz.0.156" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f17f315d68e code=0x7ffc0000 [ 369.164664][ T29] audit: type=1326 audit(1781349802.165:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6524 comm="syz.0.156" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f17f315d68e code=0x7ffc0000 [ 369.190029][ T29] audit: type=1326 audit(1781349802.175:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6524 comm="syz.0.156" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f17f315d68e code=0x7ffc0000 [ 369.251155][ T6359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.293734][ T6359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.354867][ T6359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.715189][ T6373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.985470][ T6373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.158082][ T6359] hsr_slave_0: entered promiscuous mode [ 374.082621][ T4876] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 374.129994][ T4876] Bluetooth: hci3: Injecting HCI hardware error event [ 374.137509][ T4876] Bluetooth: hci3: hardware error 0x00 [ 375.152309][ T6359] hsr_slave_1: entered promiscuous mode [ 377.093310][ T6359] debugfs: 'hsr0' already exists in 'hsr' [ 377.128148][ T6359] Cannot create hsr debugfs directory [ 377.387477][ T6373] team0: Port device team_slave_0 added [ 377.585648][ T6373] team0: Port device team_slave_1 added [ 378.149825][ T4876] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 381.273756][ T6373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.327741][ T6373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.554148][ T6373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.728332][ T1009] bridge_slave_1: left allmulticast mode [ 381.765746][ T1009] bridge_slave_1: left promiscuous mode [ 381.797051][ T1009] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.878576][ T1009] bridge_slave_0: left allmulticast mode [ 381.902170][ T1009] bridge_slave_0: left promiscuous mode [ 381.927307][ T1009] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.245090][ T6573] loop4: detected capacity change from 0 to 7 [ 382.316671][ T6573] Dev loop4: unable to read RDB block 7 [ 382.352510][ T6573] loop4: AHDI p1 p2 p3 [ 382.363900][ T6573] loop4: partition table partially beyond EOD, truncated [ 382.481527][ T6573] loop4: p1 start 1601398130 is beyond EOD, truncated [ 382.526624][ T6573] loop4: p2 start 1702059890 is beyond EOD, truncated [ 383.477614][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 383.477685][ T29] audit: type=1326 audit(1781349817.115:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.0.166" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f319ce59 code=0x7ffc0000 [ 383.560427][ T29] audit: type=1326 audit(1781349817.155:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.0.166" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f319ce59 code=0x7ffc0000 [ 383.617475][ T29] audit: type=1326 audit(1781349817.155:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.0.166" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f319ce59 code=0x7ffc0000 [ 383.674416][ T29] audit: type=1326 audit(1781349817.155:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.0.166" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f17f319ce59 code=0x7ffc0000 [ 383.728297][ T29] audit: type=1326 audit(1781349817.235:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.0.166" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f17f315d68e code=0x7ffc0000 [ 383.791035][ T1009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.794634][ T29] audit: type=1326 audit(1781349817.235:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.0.166" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f17f315d68e code=0x7ffc0000 [ 383.863824][ T29] audit: type=1326 audit(1781349817.235:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.0.166" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f17f315d68e code=0x7ffc0000 [ 383.926985][ T29] audit: type=1326 audit(1781349817.245:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.0.166" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f17f315d68e code=0x7ffc0000 [ 383.975602][ T29] audit: type=1326 audit(1781349817.245:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.0.166" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f17f315d68e code=0x7ffc0000 [ 384.004297][ T1009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.048667][ T1009] bond0 (unregistering): Released all slaves [ 384.051979][ T29] audit: type=1326 audit(1781349817.255:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.0.166" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f17f315d68e code=0x7ffc0000 [ 384.135835][ T6373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.178622][ T6373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.257871][ T6373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.368000][ T5231] 8021q: adding VLAN 0 to HW filter on device eth4 [ 384.952168][ T6586] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 386.086467][ T6373] hsr_slave_0: entered promiscuous mode [ 386.152812][ T6373] hsr_slave_1: entered promiscuous mode [ 386.208251][ T6373] debugfs: 'hsr0' already exists in 'hsr' [ 386.252548][ T6373] Cannot create hsr debugfs directory [ 387.461416][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 387.471217][ T1009] hsr_slave_0: left promiscuous mode [ 387.485607][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 387.500273][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 387.515286][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 387.524173][ T1009] hsr_slave_1: left promiscuous mode [ 387.542772][ T1009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.551858][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 387.560385][ T1009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.628751][ T1009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.636454][ T1009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.705507][ T1009] veth1_macvtap: left promiscuous mode [ 387.733090][ T1009] veth0_macvtap: left promiscuous mode [ 387.787891][ T1009] veth1_vlan: left promiscuous mode [ 387.856228][ T1009] veth0_vlan: left promiscuous mode [ 388.429098][ T5688] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 388.600915][ T5688] usb 1-1: Using ep0 maxpacket: 32 [ 388.625926][ T5688] usb 1-1: unable to get BOS descriptor or descriptor too short [ 388.648520][ T5688] usb 1-1: config 7 has an invalid interface number: 223 but max is 0 [ 388.677639][ T5688] usb 1-1: config 7 has no interface number 0 [ 388.699321][ T5688] usb 1-1: config 7 interface 223 altsetting 177 endpoint 0xF has invalid wMaxPacketSize 0 [ 388.725759][ T5688] usb 1-1: config 7 interface 223 altsetting 177 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 388.765117][ T5688] usb 1-1: config 7 interface 223 has no altsetting 0 [ 388.800372][ T5688] usb 1-1: New USB device found, idVendor=185b, idProduct=2870, bcdDevice=af.8a [ 388.815103][ T5688] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.839457][ T5688] usb 1-1: Product: syz [ 388.846339][ T5688] usb 1-1: Manufacturer: syz [ 388.855696][ T5688] usb 1-1: SerialNumber: syz [ 389.154547][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.174394][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.669049][ T48] Bluetooth: hci4: command tx timeout [ 391.749605][ T48] Bluetooth: hci4: command tx timeout [ 392.384644][ T1009] team0 (unregistering): Port device team_slave_1 removed [ 392.530780][ T1009] team0 (unregistering): Port device team_slave_0 removed [ 392.721881][ T5208] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 392.944798][ T5208] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 392.974711][ T5208] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 393.038035][ T5208] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 393.075296][ T5208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.212314][ T5688] usb 1-1: USB disconnect, device number 2 [ 393.400133][ T5208] usb 3-1: GET_CAPABILITIES returned 2f [ 393.437773][ T5208] usbtmc 3-1:16.0: can't read capabilities [ 393.444558][ T4876] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 393.464542][ T4876] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 393.474796][ T4876] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 393.494654][ T4876] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 393.508330][ T4876] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 393.676443][ T5208] usb 3-1: USB disconnect, device number 5 [ 393.839336][ T48] Bluetooth: hci4: command tx timeout [ 394.951278][ T1009] IPVS: stop unused estimator thread 0... [ 395.670935][ T48] Bluetooth: hci2: command tx timeout [ 395.909955][ T48] Bluetooth: hci4: command tx timeout [ 396.566893][ T1009] bridge_slave_1: left allmulticast mode [ 397.110459][ T5691] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 397.343810][ T5691] usb 1-1: Using ep0 maxpacket: 32 [ 397.409805][ T5691] usb 1-1: unable to get BOS descriptor or descriptor too short [ 397.472626][ T5691] usb 1-1: config 7 has an invalid interface number: 223 but max is 0 [ 397.518210][ T5691] usb 1-1: config 7 has no interface number 0 [ 397.528998][ T1009] bridge_slave_1: left promiscuous mode [ 397.540072][ T1009] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.569858][ T1009] bridge_slave_0: left allmulticast mode [ 397.591454][ T1009] bridge_slave_0: left promiscuous mode [ 397.614529][ T5691] usb 1-1: config 7 interface 223 altsetting 177 endpoint 0xF has invalid wMaxPacketSize 0 [ 397.656287][ T1009] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.765455][ T48] Bluetooth: hci2: command tx timeout [ 397.768609][ T5691] usb 1-1: config 7 interface 223 altsetting 177 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 397.877812][ T5691] usb 1-1: config 7 interface 223 has no altsetting 0 [ 397.981764][ T5691] usb 1-1: New USB device found, idVendor=185b, idProduct=2870, bcdDevice=af.8a [ 398.026616][ T5691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.062120][ T5691] usb 1-1: Product: syz [ 398.101669][ T5691] usb 1-1: Manufacturer: syz [ 398.131261][ T5691] usb 1-1: SerialNumber: syz [ 398.723370][ T4876] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 398.735431][ T4876] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 398.746474][ T4876] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 398.790798][ T4876] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 398.812499][ T4876] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 398.830439][ T6643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.178'. [ 399.185805][ T1009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.316325][ T1009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.437421][ T1009] bond0 (unregistering): Released all slaves [ 399.807690][ T6643] bridge0: port 3(macsec1) entered blocking state [ 399.814940][ T6643] bridge0: port 3(macsec1) entered disabled state [ 399.822416][ T6643] macsec1: entered allmulticast mode [ 399.827980][ T6643] bridge0: entered allmulticast mode [ 399.829137][ T4876] Bluetooth: hci2: command tx timeout [ 399.833705][ T6643] bridge0: entered promiscuous mode [ 399.894111][ T6643] macsec1: left allmulticast mode [ 399.899618][ T6643] bridge0: left allmulticast mode [ 400.089891][ T5674] bridge0: left promiscuous mode [ 400.423034][ T1009] hsr_slave_0: left promiscuous mode [ 400.556039][ T1009] hsr_slave_1: left promiscuous mode [ 400.680747][ T1009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.854907][ T1009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.924597][ T5691] usb 1-1: USB disconnect, device number 3 [ 401.829496][ T48] Bluetooth: hci5: command tx timeout [ 402.159184][ T48] Bluetooth: hci2: command tx timeout [ 403.431957][ T5691] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 403.632987][ T5691] usb 1-1: Using ep0 maxpacket: 16 [ 403.671133][ T5691] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.700435][ T5691] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 403.715902][ T1009] team0 (unregistering): Port device team_slave_1 removed [ 403.725569][ T5691] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 403.788706][ T5691] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 403.816097][ T5691] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 403.858587][ T1009] team0 (unregistering): Port device team_slave_0 removed [ 403.867587][ T5691] usb 1-1: Manufacturer: syz [ 404.009512][ T48] Bluetooth: hci5: command tx timeout [ 404.824452][ T5691] usb 1-1: config 0 descriptor?? [ 406.071798][ T48] Bluetooth: hci5: command tx timeout [ 406.409115][ T5691] usb 1-1: USB disconnect, device number 4 [ 406.629930][ T40] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 406.838390][ T40] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 406.895205][ T40] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 406.919093][ T40] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 406.949536][ T40] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.060677][ T1009] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.194772][ T40] usb 3-1: GET_CAPABILITIES returned 2f [ 407.219829][ T40] usbtmc 3-1:16.0: can't read capabilities [ 407.326720][ T1009] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.434586][ T5688] usb 3-1: USB disconnect, device number 6 [ 408.240511][ T6695] virtio-fs: tag not found [ 408.491206][ T6694] tmpfs: Unknown parameter 'grpquota_block_hardlim' [ 410.348897][ T48] Bluetooth: hci5: command tx timeout [ 410.364218][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 410.364290][ T29] audit: type=1326 audit(1781349842.065:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6692 comm="syz.0.184" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f319ce59 code=0x7ffc0000 [ 412.401019][ T29] audit: type=1326 audit(1781349842.065:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6692 comm="syz.0.184" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f319ce59 code=0x7ffc0000 [ 412.483109][ T29] audit: type=1326 audit(1781349842.095:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6692 comm="syz.0.184" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f17f319ce59 code=0x7ffc0000 [ 412.523215][ T1009] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.618281][ T29] audit: type=1326 audit(1781349842.095:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6692 comm="syz.0.184" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f319ce59 code=0x7ffc0000 [ 412.621503][ T5231] 8021q: adding VLAN 0 to HW filter on device eth5 [ 412.755342][ T29] audit: type=1326 audit(1781349842.095:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6692 comm="syz.0.184" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f319ce59 code=0x7ffc0000 [ 412.829293][ T29] audit: type=1326 audit(1781349842.095:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6692 comm="syz.0.184" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f17f319ce59 code=0x7ffc0000 [ 412.858456][ T1009] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.879295][ T29] audit: type=1326 audit(1781349842.095:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6692 comm="syz.0.184" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f319ce59 code=0x7ffc0000 [ 412.929331][ T29] audit: type=1326 audit(1781349842.095:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6692 comm="syz.0.184" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f319ce59 code=0x7ffc0000 [ 413.050537][ T29] audit: type=1326 audit(1781349842.135:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6692 comm="syz.0.184" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f17f319ce59 code=0x7ffc0000 [ 413.207948][ T29] audit: type=1326 audit(1781349842.135:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6692 comm="syz.0.184" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f319ce59 code=0x7ffc0000 [ 416.496509][ T1009] bridge_slave_1: left allmulticast mode [ 416.536226][ T1009] bridge_slave_1: left promiscuous mode [ 416.574404][ T1009] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.614958][ T1009] bridge_slave_0: left allmulticast mode [ 416.634916][ T1009] bridge_slave_0: left promiscuous mode [ 416.652834][ T1009] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.686195][ T1009] bridge_slave_1: left allmulticast mode [ 416.692321][ T1009] bridge_slave_1: left promiscuous mode [ 416.725104][ T1009] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.781400][ T1009] bridge_slave_0: left allmulticast mode [ 416.787341][ T1009] bridge_slave_0: left promiscuous mode [ 416.801676][ T1009] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.061420][ T1009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.136548][ T1009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.196921][ T1009] bond0 (unregistering): Released all slaves [ 418.748270][ T1009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.797647][ T1009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.845780][ T1009] bond0 (unregistering): Released all slaves [ 426.483604][ T5231] 8021q: adding VLAN 0 to HW filter on device eth6 [ 426.545756][ T6616] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.597555][ T6616] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.652170][ T6616] bridge_slave_0: entered allmulticast mode [ 426.693733][ T6616] bridge_slave_0: entered promiscuous mode [ 426.893827][ T6616] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.943955][ T6616] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.991904][ T6616] bridge_slave_1: entered allmulticast mode [ 427.049355][ T6616] bridge_slave_1: entered promiscuous mode [ 427.304917][ T6598] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.322631][ T6598] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.341817][ T6598] bridge_slave_0: entered allmulticast mode [ 427.357337][ T6598] bridge_slave_0: entered promiscuous mode [ 427.583412][ T1009] hsr_slave_0: left promiscuous mode [ 427.671183][ T1009] hsr_slave_1: left promiscuous mode [ 427.709668][ T1009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.736528][ T1009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.808304][ T1009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.834460][ T1009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.793275][ T1009] hsr_slave_0: left promiscuous mode [ 428.819795][ T1009] hsr_slave_1: left promiscuous mode [ 428.841128][ T1009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.872238][ T1009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.365892][ T1009] veth1_macvtap: left promiscuous mode [ 429.376752][ T1009] veth0_macvtap: left promiscuous mode [ 429.395698][ T1009] veth1_vlan: left promiscuous mode [ 429.402368][ T1009] veth0_vlan: left promiscuous mode [ 430.231444][ T5688] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 430.372502][ T1009] team0 (unregistering): Port device team_slave_1 removed [ 430.429372][ T5688] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 430.461963][ T5688] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 430.476224][ T1009] team0 (unregistering): Port device team_slave_0 removed [ 430.501234][ T5688] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 430.545610][ T5688] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.976837][ T5688] usb 1-1: GET_CAPABILITIES returned 2f [ 430.998357][ T5688] usbtmc 1-1:16.0: can't read capabilities [ 431.193288][ T5688] usb 1-1: USB disconnect, device number 5 [ 432.039378][ T1009] team0 (unregistering): Port device team_slave_1 removed [ 432.171361][ T1009] team0 (unregistering): Port device team_slave_0 removed [ 436.587332][ T6598] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.616871][ T6598] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.647588][ T6598] bridge_slave_1: entered allmulticast mode [ 436.692751][ T6598] bridge_slave_1: entered promiscuous mode [ 439.721976][ T6616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.378740][ T6598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.410925][ T6616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.658467][ T6598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.768266][ T6598] team0: Port device team_slave_0 added [ 440.789018][ T6616] team0: Port device team_slave_0 added [ 441.179457][ T6598] team0: Port device team_slave_1 added [ 441.666745][ T6616] team0: Port device team_slave_1 added [ 441.971589][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.200'. [ 442.000697][ T6598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.012078][ T1009] IPVS: stop unused estimator thread 0... [ 442.037447][ T6598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.106121][ T6598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.145661][ T6616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.184461][ T6616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.256947][ T6616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.284807][ T6616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.294443][ T6616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.322037][ T6616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.336450][ T6598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.343990][ T6598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.380705][ T6598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.690605][ T6647] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.708676][ T6647] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.730224][ T6647] bridge_slave_0: entered allmulticast mode [ 442.753486][ T6811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.203'. [ 442.762956][ T6647] bridge_slave_0: entered promiscuous mode [ 442.884235][ T6647] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.897044][ T6647] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.905042][ T6647] bridge_slave_1: entered allmulticast mode [ 442.916440][ T6647] bridge_slave_1: entered promiscuous mode [ 442.946463][ T5688] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 443.124517][ T5688] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 443.150291][ T5688] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 443.195227][ T5688] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 443.224065][ T5688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.356616][ T6598] hsr_slave_0: entered promiscuous mode [ 443.372109][ T6598] hsr_slave_1: entered promiscuous mode [ 443.489028][ T5688] usb 3-1: usb_control_msg returned -71 [ 443.523463][ T5688] usbtmc 3-1:16.0: can't read capabilities [ 443.608394][ T5688] usb 3-1: USB disconnect, device number 7 [ 443.976936][ T6822] netlink: 80 bytes leftover after parsing attributes in process `syz.0.204'. [ 444.545330][ T6616] hsr_slave_0: entered promiscuous mode [ 444.590519][ T6616] hsr_slave_1: entered promiscuous mode [ 444.623146][ T6616] debugfs: 'hsr0' already exists in 'hsr' [ 444.648404][ T6616] Cannot create hsr debugfs directory [ 445.651706][ T4876] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 445.668737][ T4876] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 445.680639][ T4876] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 445.696811][ T4876] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 445.707171][ T4876] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 446.066145][ T6647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.547323][ T6647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.728051][ T6838] loop4: detected capacity change from 0 to 7 [ 446.760607][ T6838] Dev loop4: unable to read RDB block 7 [ 446.783884][ T6838] loop4: AHDI p1 p2 p3 [ 446.792533][ T6838] loop4: partition table partially beyond EOD, truncated [ 446.827685][ T6838] loop4: p1 start 1601398130 is beyond EOD, truncated [ 446.835564][ T6838] loop4: p2 start 1702059890 is beyond EOD, truncated [ 447.123593][ T6647] team0: Port device team_slave_0 added [ 447.324056][ T6647] team0: Port device team_slave_1 added [ 447.693029][ T5231] 8021q: adding VLAN 0 to HW filter on device eth7 [ 447.829502][ T48] Bluetooth: hci1: command tx timeout [ 448.013817][ T6647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.030145][ T6647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.203444][ T6647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.445126][ T6647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.473873][ T6647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.692174][ T6647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.909080][ T48] Bluetooth: hci1: command tx timeout [ 450.663975][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.677042][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.948964][ T6647] hsr_slave_0: entered promiscuous mode [ 450.968226][ T6647] hsr_slave_1: entered promiscuous mode [ 450.979496][ T6647] debugfs: 'hsr0' already exists in 'hsr' [ 450.987153][ T6647] Cannot create hsr debugfs directory [ 451.100183][ T55] bridge_slave_1: left allmulticast mode [ 451.106146][ T55] bridge_slave_1: left promiscuous mode [ 451.116845][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.145563][ T55] bridge_slave_0: left allmulticast mode [ 451.154475][ T55] bridge_slave_0: left promiscuous mode [ 451.172153][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.492694][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.529614][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.557823][ T55] bond0 (unregistering): Released all slaves [ 451.854676][ T55] hsr_slave_0: left promiscuous mode [ 451.863386][ T55] hsr_slave_1: left promiscuous mode [ 451.898944][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.910680][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.002407][ T48] Bluetooth: hci1: command tx timeout [ 452.071506][ T5688] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 452.229951][ T55] team0 (unregistering): Port device team_slave_1 removed [ 452.273126][ T55] team0 (unregistering): Port device team_slave_0 removed [ 452.282465][ T5688] usb 3-1: Using ep0 maxpacket: 16 [ 452.296639][ T5688] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.331168][ T5688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 452.368982][ T5688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 452.399077][ T5688] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 452.431549][ T5688] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 452.500174][ T5688] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 452.532155][ T5688] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 452.557026][ T5688] usb 3-1: Manufacturer: syz [ 452.604424][ T5688] usb 3-1: config 0 descriptor?? [ 452.665662][ T6873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.214'. [ 453.120503][ T5688] rc_core: IR keymap rc-hauppauge not found [ 453.141675][ T5688] Registered IR keymap rc-empty [ 453.155146][ T5688] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 453.181376][ T5688] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 453.213420][ T4876] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 453.233493][ T4876] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 453.239854][ T5688] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 453.256920][ T4876] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 453.325915][ T4876] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 453.347411][ T4876] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 453.354290][ T5688] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input6 [ 453.445539][ T5688] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 453.493823][ T5688] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 453.531421][ T5688] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 453.584282][ T5688] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 453.649775][ T5688] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 453.731113][ T5688] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 453.783555][ T5688] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 453.831009][ T5688] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 453.882916][ T5688] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 453.932309][ T5688] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 454.005646][ T5688] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 454.040387][ T5688] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 454.083664][ T4876] Bluetooth: hci1: command tx timeout [ 454.099812][ T5688] usb 3-1: USB disconnect, device number 8 [ 455.273532][ T6647] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 455.375061][ T6647] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 455.429634][ T4876] Bluetooth: hci4: command tx timeout [ 455.533183][ T6647] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 455.625480][ T6647] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 455.683237][ T6647] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 456.090975][ T6647] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 456.356564][ T6647] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 457.509496][ T4876] Bluetooth: hci4: command tx timeout [ 458.336532][ T6647] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 459.589313][ T4876] Bluetooth: hci4: command tx timeout [ 460.451151][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 460.464795][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 460.477566][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 460.493017][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 460.504966][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 464.965643][ T48] Bluetooth: hci4: command tx timeout [ 464.976103][ T4876] Bluetooth: hci2: command tx timeout [ 467.956680][ T48] Bluetooth: hci2: command tx timeout [ 469.993901][ T48] Bluetooth: hci2: command tx timeout [ 470.035732][ T5231] 8021q: adding VLAN 0 to HW filter on device eth8 [ 470.101263][ T6831] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.158674][ T6831] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.182596][ T6831] bridge_slave_0: entered allmulticast mode [ 470.220049][ T6831] bridge_slave_0: entered promiscuous mode [ 470.394666][ T6831] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.449789][ T6831] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.499267][ T6831] bridge_slave_1: entered allmulticast mode [ 470.569098][ T5208] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 470.607048][ T6831] bridge_slave_1: entered promiscuous mode [ 470.730554][ T5208] usb 3-1: Using ep0 maxpacket: 16 [ 470.754051][ T5208] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 470.774688][ T5208] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 470.795682][ T5208] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 470.813120][ T5208] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 470.856736][ T5208] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 470.902622][ T5208] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 470.921176][ T5208] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 470.944516][ T5208] usb 3-1: Manufacturer: syz [ 470.974722][ T5208] usb 3-1: config 0 descriptor?? [ 471.207697][ T6831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.234174][ T6831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.551485][ T5208] rc_core: IR keymap rc-hauppauge not found [ 471.579614][ T5208] Registered IR keymap rc-empty [ 471.599493][ T5208] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 471.640642][ T5208] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 471.691044][ T6831] team0: Port device team_slave_0 added [ 471.708061][ T5208] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 471.727421][ T6831] team0: Port device team_slave_1 added [ 471.767276][ T5208] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7 [ 471.831619][ T5208] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 471.939544][ T5208] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 471.991447][ T5208] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 472.032326][ T5208] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 472.071305][ T5208] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 472.071713][ T48] Bluetooth: hci2: command tx timeout [ 472.101135][ T5208] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 472.156373][ T5208] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 472.195872][ T6831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.211486][ T5208] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 472.219407][ T6831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.248236][ T6831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.252418][ T5208] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 472.261743][ T55] bridge_slave_1: left allmulticast mode [ 472.278660][ T55] bridge_slave_1: left promiscuous mode [ 472.286243][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.301282][ T55] bridge_slave_0: left allmulticast mode [ 472.307177][ T55] bridge_slave_0: left promiscuous mode [ 472.318582][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.327676][ T5208] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 472.373277][ T5208] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 472.404051][ T5208] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 472.474412][ T5208] usb 3-1: USB disconnect, device number 9 [ 472.821108][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.859696][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.914346][ T55] bond0 (unregistering): Released all slaves [ 473.092345][ T6831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.111847][ T6831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.169166][ T6831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.305864][ T55] hsr_slave_0: left promiscuous mode [ 473.343747][ T55] hsr_slave_1: left promiscuous mode [ 473.361061][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.388642][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.070335][ T55] team0 (unregistering): Port device team_slave_1 removed [ 475.111185][ T55] team0 (unregistering): Port device team_slave_0 removed [ 476.006184][ T6831] hsr_slave_0: entered promiscuous mode [ 476.021905][ T6831] hsr_slave_1: entered promiscuous mode [ 476.461261][ T6987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.230'. [ 476.687557][ T6876] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.716650][ T6876] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.741031][ T6876] bridge_slave_0: entered allmulticast mode [ 476.776771][ T6876] bridge_slave_0: entered promiscuous mode [ 476.837978][ T6876] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.863666][ T6876] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.899898][ T6876] bridge_slave_1: entered allmulticast mode [ 476.940265][ T6876] bridge_slave_1: entered promiscuous mode [ 478.508610][ T6876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.529663][ T5682] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 478.676017][ T6876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.711254][ T5682] usb 1-1: Using ep0 maxpacket: 16 [ 478.736288][ T5682] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.747674][ T5682] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 478.772434][ T5682] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 478.795722][ T5682] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 478.816169][ T5682] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 478.864870][ T5682] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 478.882785][ T5682] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 478.904146][ T5682] usb 1-1: Manufacturer: syz [ 478.935614][ T5682] usb 1-1: config 0 descriptor?? [ 479.062371][ T6876] team0: Port device team_slave_0 added [ 479.158433][ T6876] team0: Port device team_slave_1 added [ 479.401102][ T5682] rc_core: IR keymap rc-hauppauge not found [ 479.413970][ T5231] 8021q: adding VLAN 0 to HW filter on device eth9 [ 479.421148][ T5682] Registered IR keymap rc-empty [ 479.426762][ T5682] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 479.469814][ T5682] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 479.503142][ T5682] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 479.522088][ T6876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.547008][ T6876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.591004][ T5682] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8 [ 479.622924][ T6876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.654005][ T5682] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 479.691592][ T5682] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 479.722040][ T5682] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 479.771910][ T5682] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 479.801839][ T5682] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 479.814618][ T6876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.822406][ T6876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.871495][ T5682] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 479.885223][ T6876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.900241][ T5682] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 479.933105][ T5682] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 479.959602][ T5682] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 479.999748][ T5682] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 480.042268][ T5682] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 480.077489][ T5682] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 481.221130][ T5682] usb 1-1: USB disconnect, device number 6 [ 481.364144][ T6812] udevd[6812]: setting mode of /dev/bus/usb/001/006 to 020664 failed: No such file or directory [ 481.465714][ T6812] udevd[6812]: setting owner of /dev/bus/usb/001/006 to uid=0, gid=0 failed: No such file or directory [ 481.929322][ T6876] hsr_slave_0: entered promiscuous mode [ 481.958002][ T6876] hsr_slave_1: entered promiscuous mode [ 481.979952][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 482.263681][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 482.762172][ T6876] debugfs: 'hsr0' already exists in 'hsr' [ 482.781576][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 482.789818][ T6876] Cannot create hsr debugfs directory [ 482.827186][ T9] usb 1-1: config 7 has an invalid interface number: 223 but max is 0 [ 482.850654][ T9] usb 1-1: config 7 has no interface number 0 [ 482.852955][ T55] bridge_slave_1: left allmulticast mode [ 482.863156][ T55] bridge_slave_1: left promiscuous mode [ 482.872765][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.883469][ T9] usb 1-1: config 7 interface 223 altsetting 177 endpoint 0xF has invalid wMaxPacketSize 0 [ 482.903110][ T55] bridge_slave_0: left allmulticast mode [ 482.910554][ T55] bridge_slave_0: left promiscuous mode [ 482.916731][ T9] usb 1-1: config 7 interface 223 altsetting 177 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 482.917158][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.933013][ T9] usb 1-1: config 7 interface 223 has no altsetting 0 [ 482.956871][ T9] usb 1-1: New USB device found, idVendor=185b, idProduct=2870, bcdDevice=af.8a [ 482.968223][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.018068][ T9] usb 1-1: Product: syz [ 483.035714][ T9] usb 1-1: Manufacturer: syz [ 483.074769][ T9] usb 1-1: SerialNumber: syz [ 483.951247][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.968009][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.002201][ T55] bond0 (unregistering): Released all slaves [ 486.456456][ T55] hsr_slave_0: left promiscuous mode [ 486.487350][ T55] hsr_slave_1: left promiscuous mode [ 486.519947][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.549333][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.680004][ T9] usb 1-1: USB disconnect, device number 7 [ 491.459385][ T55] team0 (unregistering): Port device team_slave_1 removed [ 491.858728][ T55] team0 (unregistering): Port device team_slave_0 removed [ 492.341702][ T5682] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 492.535724][ T6831] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 492.557753][ T5682] usb 3-1: Using ep0 maxpacket: 32 [ 492.612622][ T5682] usb 3-1: unable to get BOS descriptor or descriptor too short [ 492.646794][ T5682] usb 3-1: config 7 has an invalid interface number: 223 but max is 0 [ 492.676103][ T6831] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 492.685276][ T5682] usb 3-1: config 7 has no interface number 0 [ 492.704483][ T5682] usb 3-1: config 7 interface 223 altsetting 177 endpoint 0xF has invalid wMaxPacketSize 0 [ 492.734465][ T5682] usb 3-1: config 7 interface 223 altsetting 177 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 492.765943][ T6930] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.775078][ T5682] usb 3-1: config 7 interface 223 has no altsetting 0 [ 492.779467][ T6930] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.790199][ T6930] bridge_slave_0: entered allmulticast mode [ 492.799439][ T5682] usb 3-1: New USB device found, idVendor=185b, idProduct=2870, bcdDevice=af.8a [ 492.799515][ T6930] bridge_slave_0: entered promiscuous mode [ 492.829915][ T5682] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.838568][ T5682] usb 3-1: Product: syz [ 492.846563][ T5682] usb 3-1: Manufacturer: syz [ 492.852463][ T5682] usb 3-1: SerialNumber: syz [ 492.920634][ T6831] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 492.987425][ T6831] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 493.007764][ T6831] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 493.045000][ T6831] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 493.076687][ T6831] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 493.188489][ T6831] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 493.514769][ T6930] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.543433][ T6930] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.558174][ T6930] bridge_slave_1: entered allmulticast mode [ 493.577772][ T6930] bridge_slave_1: entered promiscuous mode [ 493.901303][ T6930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.033910][ T6930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.368404][ T6930] team0: Port device team_slave_0 added [ 494.479502][ T6930] team0: Port device team_slave_1 added [ 494.759660][ T6930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.779473][ T6930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.837416][ T6930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.895028][ T6930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.902587][ T6930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.931590][ T6930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.090022][ T11] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 495.184651][ T5682] usb 3-1: USB disconnect, device number 10 [ 495.260190][ T11] usb 1-1: Using ep0 maxpacket: 16 [ 495.286165][ T11] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.304636][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 495.333399][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 495.366501][ T11] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 495.395426][ T11] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 495.438094][ T11] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 495.463301][ T11] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 495.490226][ T11] usb 1-1: Manufacturer: syz [ 495.515546][ T11] usb 1-1: config 0 descriptor?? [ 495.569534][ T6930] hsr_slave_0: entered promiscuous mode [ 495.583530][ T6930] hsr_slave_1: entered promiscuous mode [ 495.594384][ T6930] debugfs: 'hsr0' already exists in 'hsr' [ 495.602943][ T6930] Cannot create hsr debugfs directory [ 495.734889][ T6876] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 495.821068][ T6876] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 495.917985][ T6876] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 495.961747][ T6876] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 495.980717][ T11] rc_core: IR keymap rc-hauppauge not found [ 495.997894][ T11] Registered IR keymap rc-empty [ 496.019712][ T11] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 496.051960][ T6876] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 496.059606][ T11] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 496.104561][ T6876] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 496.107920][ T11] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 496.138892][ T6876] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 496.152910][ T11] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input9 [ 496.191618][ T6876] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 496.206453][ T11] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 496.291246][ T11] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 496.341951][ T11] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 496.400888][ T11] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 496.442037][ T11] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 496.491779][ T11] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 496.530243][ T11] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 496.572787][ T11] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 496.613362][ T11] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 496.654423][ T11] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 496.711230][ T11] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 496.739552][ T11] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 496.798687][ T11] usb 1-1: USB disconnect, device number 8 [ 497.496832][ T6831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.288193][ T7098] IPVS: set_ctl: invalid protocol: 12758 0.0.0.0:5 [ 499.191507][ T6831] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.258300][ T5231] 8021q: adding VLAN 0 to HW filter on device eth11 [ 499.420511][ T5895] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.428099][ T5895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.377279][ T5895] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.384893][ T5895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.744626][ T6831] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 500.793671][ T6831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 501.735187][ T6930] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 502.190468][ T6930] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 502.235897][ T6930] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 502.338217][ T6930] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 502.436634][ T6876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.474668][ T6930] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 502.578038][ T6930] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 502.627302][ T6930] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 502.734845][ T6930] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 502.982054][ T6876] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.146438][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.154031][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.493751][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.501330][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.760606][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 503.930981][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 503.965894][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 504.025621][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 504.083420][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 504.132539][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 504.184162][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 504.212308][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.521438][ T5688] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 504.538158][ T9] usb 1-1: GET_CAPABILITIES returned 2f [ 504.561711][ T9] usbtmc 1-1:16.0: can't read capabilities [ 504.704118][ T5688] usb 3-1: Using ep0 maxpacket: 16 [ 504.758594][ T5688] usb 3-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 504.796918][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 504.810859][ T5688] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 504.844338][ T11] usb 1-1: USB disconnect, device number 9 [ 504.884961][ T5688] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 255 [ 504.952477][ T6930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.963957][ T5688] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 504.987234][ T5688] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.025253][ T5688] usb 3-1: Product: syz [ 505.055847][ T5688] usb 3-1: Manufacturer: syz [ 505.075598][ T5688] usb 3-1: SerialNumber: syz [ 505.118217][ T5688] usb 3-1: config 0 descriptor?? [ 505.313492][ T6930] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.405387][ T11] usb 3-1: USB disconnect, device number 11 [ 505.480356][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.487870][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.634899][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.642536][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.808743][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 512.815417][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 517.887776][ T4876] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 517.900615][ T4876] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 517.918285][ T4876] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 517.950164][ T4876] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 517.961881][ T4876] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 520.371824][ T48] Bluetooth: hci5: command tx timeout [ 521.252558][ T4876] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 521.268270][ T4876] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 521.278938][ T4876] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 521.307062][ T4876] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 521.335458][ T4876] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 522.130705][ T48] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 522.216117][ T48] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 522.287813][ T48] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 522.337601][ T48] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 522.360888][ T48] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 522.549926][ T4876] Bluetooth: hci5: command tx timeout [ 524.943459][ T4876] Bluetooth: hci1: command tx timeout [ 524.943868][ T48] Bluetooth: hci6: command tx timeout [ 524.949421][ T4876] Bluetooth: hci5: command tx timeout [ 527.369839][ T4876] Bluetooth: hci6: command tx timeout [ 527.370032][ T48] Bluetooth: hci5: command tx timeout [ 527.375479][ T4876] Bluetooth: hci1: command tx timeout [ 529.431070][ T4876] Bluetooth: hci6: command tx timeout [ 529.990401][ T4876] Bluetooth: hci1: command tx timeout [ 530.118428][ T5943] bridge_slave_1: left allmulticast mode [ 530.167715][ T5943] bridge_slave_1: left promiscuous mode [ 530.224762][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.281715][ T5943] bridge_slave_0: left allmulticast mode [ 530.313936][ T5943] bridge_slave_0: left promiscuous mode [ 530.333753][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.550756][ T4876] Bluetooth: hci6: command tx timeout [ 532.620907][ T4876] Bluetooth: hci1: command tx timeout [ 534.014642][ T5943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 534.043957][ T5943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 534.092711][ T5943] bond0 (unregistering): Released all slaves [ 534.274999][ T5231] 8021q: adding VLAN 0 to HW filter on device eth12 [ 534.955031][ T5943] hsr_slave_0: left promiscuous mode [ 535.011103][ T5943] hsr_slave_1: left promiscuous mode [ 535.071696][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.134988][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.782525][ T7264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.269'. [ 537.846036][ T5943] team0 (unregistering): Port device team_slave_1 removed [ 537.981624][ T5943] team0 (unregistering): Port device team_slave_0 removed [ 543.959315][ T7125] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 545.609107][ T7125] usb 1-1: device descriptor read/64, error -71 [ 546.462146][ T5231] 8021q: adding VLAN 0 to HW filter on device eth10 [ 546.739493][ T7125] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 551.139346][ T7243] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 551.350418][ T7243] usb 3-1: Using ep0 maxpacket: 32 [ 551.397561][ T7243] usb 3-1: unable to get BOS descriptor or descriptor too short [ 551.476677][ T7243] usb 3-1: config 7 has an invalid interface number: 223 but max is 0 [ 551.550668][ T7243] usb 3-1: config 7 has no interface number 0 [ 551.567938][ T7243] usb 3-1: config 7 interface 223 altsetting 177 endpoint 0xF has invalid wMaxPacketSize 0 [ 551.622519][ T7243] usb 3-1: config 7 interface 223 altsetting 177 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 551.677961][ T7243] usb 3-1: config 7 interface 223 has no altsetting 0 [ 551.745312][ T7243] usb 3-1: New USB device found, idVendor=185b, idProduct=2870, bcdDevice=af.8a [ 551.798441][ T7243] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.854606][ T7243] usb 3-1: Product: syz [ 551.879062][ T7243] usb 3-1: Manufacturer: syz [ 551.903683][ T7243] usb 3-1: SerialNumber: syz [ 552.149787][ T5691] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 552.259818][ T5943] bridge_slave_1: left allmulticast mode [ 552.290362][ T5943] bridge_slave_1: left promiscuous mode [ 552.324333][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.341574][ T5691] usb 1-1: Using ep0 maxpacket: 32 [ 552.378138][ T5691] usb 1-1: unable to get BOS descriptor or descriptor too short [ 552.417884][ T5691] usb 1-1: config 7 has an invalid interface number: 223 but max is 0 [ 552.433232][ T5943] bridge_slave_0: left allmulticast mode [ 552.451316][ T5691] usb 1-1: config 7 has no interface number 0 [ 552.462512][ T5943] bridge_slave_0: left promiscuous mode [ 552.471801][ T5691] usb 1-1: config 7 interface 223 altsetting 177 endpoint 0xF has invalid wMaxPacketSize 0 [ 552.486744][ T5691] usb 1-1: config 7 interface 223 altsetting 177 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 552.486967][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.501133][ T5691] usb 1-1: config 7 interface 223 has no altsetting 0 [ 552.533807][ T5691] usb 1-1: New USB device found, idVendor=185b, idProduct=2870, bcdDevice=af.8a [ 552.564639][ T5943] bridge_slave_1: left allmulticast mode [ 552.571849][ T5691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.580682][ T5943] bridge_slave_1: left promiscuous mode [ 552.590059][ T5691] usb 1-1: Product: syz [ 552.594586][ T5691] usb 1-1: Manufacturer: syz [ 552.606463][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.619064][ T5691] usb 1-1: SerialNumber: syz [ 552.636569][ T5943] bridge_slave_0: left allmulticast mode [ 552.655587][ T5943] bridge_slave_0: left promiscuous mode [ 552.682572][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.269729][ T5691] usb 1-1: USB disconnect, device number 12 [ 553.744921][ T5943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 553.810433][ T5943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 553.852183][ T5943] bond0 (unregistering): Released all slaves [ 555.721468][ T5943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 555.787344][ T5943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 555.851641][ T5943] bond0 (unregistering): Released all slaves [ 555.894943][ T7173] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.904784][ T7173] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.921323][ T7173] bridge_slave_0: entered allmulticast mode [ 555.973587][ T7173] bridge_slave_0: entered promiscuous mode [ 556.373827][ T5231] 8021q: adding VLAN 0 to HW filter on device eth13 [ 556.441974][ T7173] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.454576][ T7173] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.530580][ T7173] bridge_slave_1: entered allmulticast mode [ 556.564179][ T7173] bridge_slave_1: entered promiscuous mode [ 556.666488][ T7243] usb 3-1: USB disconnect, device number 12 [ 556.895867][ T7190] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.913915][ T7190] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.928944][ T7190] bridge_slave_0: entered allmulticast mode [ 556.939805][ T7190] bridge_slave_0: entered promiscuous mode [ 556.973839][ T7190] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.986343][ T7190] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.995507][ T7190] bridge_slave_1: entered allmulticast mode [ 557.007763][ T7190] bridge_slave_1: entered promiscuous mode [ 557.160535][ T7190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.214923][ T7190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.383543][ T7190] team0: Port device team_slave_0 added [ 558.507084][ T5943] hsr_slave_0: left promiscuous mode [ 558.847955][ T5943] hsr_slave_1: left promiscuous mode [ 558.867374][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 558.893130][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 558.971385][ T5943] hsr_slave_0: left promiscuous mode [ 558.996941][ T5943] hsr_slave_1: left promiscuous mode [ 559.028235][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 559.060614][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.827748][ T5943] team0 (unregistering): Port device team_slave_1 removed [ 560.876850][ T5943] team0 (unregistering): Port device team_slave_0 removed [ 561.766531][ T5943] team0 (unregistering): Port device team_slave_1 removed [ 561.821571][ T5943] team0 (unregistering): Port device team_slave_0 removed [ 562.141600][ T7173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.172010][ T7173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.186500][ T7195] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.196644][ T7195] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.214075][ T7195] bridge_slave_0: entered allmulticast mode [ 562.224830][ T7195] bridge_slave_0: entered promiscuous mode [ 562.242992][ T7243] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 562.243217][ T7195] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.262435][ T7195] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.275777][ T7195] bridge_slave_1: entered allmulticast mode [ 562.290096][ T7195] bridge_slave_1: entered promiscuous mode [ 562.312480][ T7190] team0: Port device team_slave_1 added [ 562.389230][ T7243] usb 3-1: device descriptor read/64, error -71 [ 562.639787][ T7243] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 562.690716][ T7195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.786837][ T7243] usb 3-1: device descriptor read/64, error -71 [ 562.822676][ T7190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 562.835910][ T7190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 562.872577][ T7190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 562.917214][ T7243] usb usb3-port1: attempt power cycle [ 562.970702][ T7195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.995102][ T7190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.016174][ T7190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.048247][ T7190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.077319][ T7173] team0: Port device team_slave_0 added [ 563.340211][ T7243] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 563.533552][ T7173] team0: Port device team_slave_1 added [ 563.575033][ T7195] team0: Port device team_slave_0 added [ 563.582269][ T7243] usb 3-1: device descriptor read/8, error -71 [ 563.606101][ T7195] team0: Port device team_slave_1 added [ 563.746631][ T7195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 563.756602][ T7195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.804123][ T7195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 563.850333][ T7243] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 563.882826][ T7243] usb 3-1: device descriptor read/8, error -71 [ 563.950034][ T7195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.962852][ T7195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.992251][ T7195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 564.005038][ T7243] usb usb3-port1: unable to enumerate USB device [ 564.191715][ T7173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.211376][ T7173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.310941][ T7173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.456312][ T7173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.467261][ T7173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.500938][ T7173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 564.560485][ T7190] hsr_slave_0: entered promiscuous mode [ 564.572741][ T7190] hsr_slave_1: entered promiscuous mode [ 565.116722][ T7195] hsr_slave_0: entered promiscuous mode [ 565.163838][ T7195] hsr_slave_1: entered promiscuous mode [ 565.194299][ T7195] debugfs: 'hsr0' already exists in 'hsr' [ 565.219188][ T7195] Cannot create hsr debugfs directory [ 569.430170][ T7173] hsr_slave_0: entered promiscuous mode [ 570.444773][ T7173] hsr_slave_1: entered promiscuous mode [ 571.452526][ T7173] debugfs: 'hsr0' already exists in 'hsr' [ 571.479429][ T7173] Cannot create hsr debugfs directory [ 573.438829][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.447252][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 580.721560][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 580.730917][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 580.741277][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 580.766022][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 580.790325][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 581.814578][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 581.825702][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 581.836384][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 581.865129][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 581.879272][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 582.351449][ T7243] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 582.530107][ T7243] usb 3-1: device descriptor read/64, error -71 [ 582.702152][ T5231] 8021q: adding VLAN 0 to HW filter on device eth14 [ 582.781818][ T5943] bridge_slave_1: left allmulticast mode [ 582.805141][ T5943] bridge_slave_1: left promiscuous mode [ 582.829898][ T7243] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 582.840799][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.869744][ T48] Bluetooth: hci2: command tx timeout [ 582.890587][ T5943] bridge_slave_0: left allmulticast mode [ 582.896417][ T5943] bridge_slave_0: left promiscuous mode [ 582.903152][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.991674][ T7243] usb 3-1: device descriptor read/64, error -71 [ 583.148209][ T7243] usb usb3-port1: attempt power cycle [ 583.664281][ T4876] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 583.682050][ T4876] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 583.694089][ T4876] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 584.661348][ T5584] Bluetooth: hci4: command tx timeout [ 584.688210][ T4876] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 585.215757][ T5584] Bluetooth: hci2: command tx timeout [ 585.224048][ T7243] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 585.234526][ T4876] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 585.466736][ T5943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 585.563338][ T5943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 585.592414][ T7243] usb 3-1: device descriptor read/8, error -71 [ 585.650828][ T5943] bond0 (unregistering): Released all slaves [ 586.257728][ T5943] hsr_slave_0: left promiscuous mode [ 586.323395][ T5943] hsr_slave_1: left promiscuous mode [ 590.091454][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 590.093008][ T4876] Bluetooth: hci4: command tx timeout [ 590.105203][ T48] Bluetooth: hci2: command tx timeout [ 590.109835][ T5584] Bluetooth: hci5: command tx timeout [ 591.125952][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 593.084622][ T5584] Bluetooth: hci4: command tx timeout [ 593.090421][ T4876] Bluetooth: hci5: command tx timeout [ 593.096091][ T6227] Bluetooth: hci2: command tx timeout [ 595.041731][ T5943] team0 (unregistering): Port device team_slave_1 removed [ 595.097507][ T5943] team0 (unregistering): Port device team_slave_0 removed [ 595.114265][ T6227] Bluetooth: hci5: command tx timeout [ 595.124369][ T4876] Bluetooth: hci4: command tx timeout [ 595.931848][ T7483] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 597.190016][ T6227] Bluetooth: hci5: command tx timeout [ 599.784149][ T7509] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 600.379515][ T7125] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 600.550161][ T7125] usb 3-1: device descriptor read/64, error -71 [ 600.593865][ T12] bridge_slave_1: left allmulticast mode [ 600.625458][ T12] bridge_slave_1: left promiscuous mode [ 600.636966][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.665891][ T12] bridge_slave_0: left allmulticast mode [ 600.676371][ T12] bridge_slave_0: left promiscuous mode [ 600.697477][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.723415][ T12] bridge_slave_1: left allmulticast mode [ 600.729922][ T12] bridge_slave_1: left promiscuous mode [ 600.757462][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.779244][ T12] bridge_slave_0: left allmulticast mode [ 600.790150][ T12] bridge_slave_0: left promiscuous mode [ 600.796670][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.802393][ T7125] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 600.994763][ T7125] usb 3-1: device descriptor read/64, error -71 [ 601.120830][ T7125] usb usb3-port1: attempt power cycle [ 601.182432][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 601.237470][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 601.255975][ T12] bond0 (unregistering): Released all slaves [ 601.541921][ T7125] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 601.589839][ T7125] usb 3-1: device descriptor read/8, error -71 [ 601.627209][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 601.665383][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 601.724619][ T12] bond0 (unregistering): Released all slaves [ 601.837968][ T5231] 8021q: adding VLAN 0 to HW filter on device eth15 [ 601.859208][ T7125] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 601.898270][ T7125] usb 3-1: device descriptor read/8, error -71 [ 602.005655][ T12] hsr_slave_0: left promiscuous mode [ 602.042701][ T7125] usb usb3-port1: unable to enumerate USB device [ 602.055632][ T12] hsr_slave_1: left promiscuous mode [ 602.066901][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 602.088027][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 602.137520][ T12] hsr_slave_0: left promiscuous mode [ 602.146444][ T12] hsr_slave_1: left promiscuous mode [ 602.156906][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 602.167676][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 602.544680][ T12] team0 (unregistering): Port device team_slave_1 removed [ 602.661906][ T12] team0 (unregistering): Port device team_slave_0 removed [ 603.788697][ T12] team0 (unregistering): Port device team_slave_1 removed [ 603.825968][ T12] team0 (unregistering): Port device team_slave_0 removed [ 604.476460][ T7539] warning: `syz.2.309' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 605.339234][ T7243] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 605.510028][ T7243] usb 3-1: Using ep0 maxpacket: 16 [ 605.541329][ T7243] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 605.552335][ T7243] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 605.575441][ T7243] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 605.590695][ T7243] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.612440][ T7243] usb 3-1: Product: syz [ 605.616814][ T7243] usb 3-1: Manufacturer: syz [ 605.622587][ T7243] usb 3-1: SerialNumber: syz [ 605.681571][ T7243] usb 3-1: cannot find UAC_HEADER [ 606.013997][ T7243] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 606.086344][ T7243] usb 3-1: USB disconnect, device number 25 [ 606.320374][ T7413] udevd[7413]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 607.080459][ T7435] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.123944][ T7435] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.173964][ T7435] bridge_slave_0: entered allmulticast mode [ 607.236052][ T7435] bridge_slave_0: entered promiscuous mode [ 608.387716][ T7435] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.418167][ T7435] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.458653][ T7435] bridge_slave_1: entered allmulticast mode [ 608.507651][ T7435] bridge_slave_1: entered promiscuous mode [ 609.027972][ T7435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 609.155553][ T7435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 609.724123][ T7435] team0: Port device team_slave_0 added [ 609.805723][ T7435] team0: Port device team_slave_1 added [ 609.832821][ T7456] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.855457][ T7456] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.875711][ T7456] bridge_slave_0: entered allmulticast mode [ 609.904955][ T7456] bridge_slave_0: entered promiscuous mode [ 610.027825][ T7456] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.056502][ T7456] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.091310][ T7456] bridge_slave_1: entered allmulticast mode [ 610.117883][ T7456] bridge_slave_1: entered promiscuous mode [ 610.389910][ T7435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 610.408131][ T7435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 610.686821][ T7435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 610.750577][ T7435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 610.793321][ T7435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 610.891886][ T7435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 611.324238][ T7456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.401264][ T5231] 8021q: adding VLAN 0 to HW filter on device eth16 [ 611.497613][ T7456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.428013][ T7445] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.456857][ T7445] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.479860][ T7445] bridge_slave_0: entered allmulticast mode [ 612.498434][ T7445] bridge_slave_0: entered promiscuous mode [ 612.552897][ T7456] team0: Port device team_slave_0 added [ 612.632701][ T7435] hsr_slave_0: entered promiscuous mode [ 612.644020][ T7435] hsr_slave_1: entered promiscuous mode [ 612.661276][ T7445] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.670825][ T7445] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.678684][ T7445] bridge_slave_1: entered allmulticast mode [ 612.695011][ T7445] bridge_slave_1: entered promiscuous mode [ 612.721906][ T7456] team0: Port device team_slave_1 added [ 612.810700][ T7125] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 612.980631][ T7125] usb 3-1: Using ep0 maxpacket: 32 [ 613.003157][ T7125] usb 3-1: unable to get BOS descriptor or descriptor too short [ 613.019159][ T7125] usb 3-1: config 7 has an invalid interface number: 223 but max is 0 [ 613.027910][ T7125] usb 3-1: config 7 has no interface number 0 [ 613.029395][ T7456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.039903][ T7125] usb 3-1: config 7 interface 223 altsetting 177 endpoint 0xF has invalid wMaxPacketSize 0 [ 613.044825][ T7456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.063823][ T7125] usb 3-1: config 7 interface 223 altsetting 177 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 613.096172][ T7456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.119336][ T7125] usb 3-1: config 7 interface 223 has no altsetting 0 [ 613.150004][ T7445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.150070][ T7125] usb 3-1: New USB device found, idVendor=185b, idProduct=2870, bcdDevice=af.8a [ 613.166403][ T7456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.179033][ T7125] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.180818][ T7456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.199307][ T7125] usb 3-1: Product: syz [ 613.236665][ T7456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.240853][ T7125] usb 3-1: Manufacturer: syz [ 613.260718][ T7125] usb 3-1: SerialNumber: syz [ 613.327031][ T7445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.660517][ T7445] team0: Port device team_slave_0 added [ 613.768113][ T7456] hsr_slave_0: entered promiscuous mode [ 613.785353][ T7456] hsr_slave_1: entered promiscuous mode [ 613.806463][ T7456] debugfs: 'hsr0' already exists in 'hsr' [ 613.812642][ T7456] Cannot create hsr debugfs directory [ 613.871265][ T7445] team0: Port device team_slave_1 added [ 613.970760][ T7125] usb 3-1: USB disconnect, device number 26 [ 615.045404][ T7445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 615.117168][ T7445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 615.323401][ T7445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.449275][ T7445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.469096][ T7445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 615.519362][ T7445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.779201][ T7243] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 615.929597][ T7243] usb 3-1: device descriptor read/64, error -71 [ 616.179328][ T7243] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 616.231919][ T7445] hsr_slave_0: entered promiscuous mode [ 616.243411][ T7445] hsr_slave_1: entered promiscuous mode [ 616.253850][ T7445] debugfs: 'hsr0' already exists in 'hsr' [ 616.263482][ T7445] Cannot create hsr debugfs directory [ 616.289659][ T5682] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 616.333254][ T7243] usb 3-1: device descriptor read/64, error -71 [ 616.455228][ T7243] usb usb3-port1: attempt power cycle [ 616.467950][ T5682] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 616.508477][ T5682] usb 1-1: config 1 has no interface number 0 [ 616.518588][ T5682] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 616.533230][ T5682] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 616.545504][ T5682] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 616.580818][ T5682] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 616.623321][ T5682] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=10.40 [ 616.643993][ T5682] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.664892][ T5682] usb 1-1: Product: syz [ 616.675715][ T5682] usb 1-1: Manufacturer: syz [ 616.686098][ T5682] usb 1-1: SerialNumber: syz [ 616.717744][ T7610] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 616.846432][ T7243] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 616.899903][ T7243] usb 3-1: device descriptor read/8, error -71 [ 616.971298][ T7610] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 616.985908][ T7610] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 617.173303][ T7243] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 617.238068][ T7243] usb 3-1: device descriptor read/8, error -71 [ 617.463157][ T7243] usb usb3-port1: unable to enumerate USB device [ 617.893304][ T5682] cdc_ncm 1-1:1.1: bind() failure [ 618.005766][ T5682] usb 1-1: USB disconnect, device number 13 [ 618.107914][ T7435] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 618.145355][ T7435] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 618.165032][ T7435] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 618.184039][ T7435] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 618.222603][ T7435] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 618.246675][ T7435] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 618.266311][ T7435] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 618.288180][ T7435] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 619.154972][ T7456] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 619.203743][ T7627] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 619.278562][ T7456] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 619.326976][ T7456] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 619.351145][ T5682] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 619.491356][ T5682] usb 3-1: device descriptor read/64, error -71 [ 619.508449][ T7456] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 619.595938][ T7456] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 619.676486][ T7456] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 619.758066][ T7456] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 619.825220][ T7456] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 619.839371][ T5682] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 619.999847][ T5682] usb 3-1: device descriptor read/64, error -71 [ 620.130333][ T5682] usb usb3-port1: attempt power cycle [ 620.202322][ T7445] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 620.286108][ T7445] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 620.313799][ T7445] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 620.363344][ T7445] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 620.521533][ T5682] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 620.582348][ T5682] usb 3-1: device descriptor read/8, error -71 [ 620.634656][ T7435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 620.730788][ T7435] 8021q: adding VLAN 0 to HW filter on device team0 [ 620.841446][ T5682] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 620.878987][ T5682] usb 3-1: device descriptor read/8, error -71 [ 620.959629][ T7435] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 620.987307][ T7435] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 621.001832][ T5682] usb usb3-port1: unable to enumerate USB device [ 621.057402][ T7445] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 621.335289][ T7445] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 621.381373][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.389122][ T5945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 621.407486][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.415153][ T5945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 621.523738][ T7445] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 621.584382][ T7445] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 623.132837][ T7456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 625.100698][ T7456] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.543030][ T5904] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.550623][ T5904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 628.765098][ T7445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.888396][ T5904] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.896109][ T5904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 629.363583][ T7445] 8021q: adding VLAN 0 to HW filter on device team0 [ 629.585652][ T5903] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.593208][ T5903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 630.224099][ T5693] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 630.702798][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.710345][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 631.289097][ T5693] usb 1-1: device descriptor read/64, error -71 [ 632.338124][ T7435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 632.465598][ T5693] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 635.519365][ T7738] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 636.092141][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 636.099290][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 643.806202][ T7456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 643.978402][ T4876] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 643.990660][ T4876] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 644.002500][ T4876] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 644.024434][ T4876] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 644.046368][ T4876] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 646.160715][ T4876] Bluetooth: hci1: command tx timeout [ 646.310788][ T6227] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 646.321278][ T6227] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 646.332507][ T6227] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 646.363255][ T6227] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 646.380131][ T6227] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 648.229514][ T4876] Bluetooth: hci1: command tx timeout [ 648.470122][ T4876] Bluetooth: hci6: command tx timeout [ 649.409746][ T6227] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 649.458131][ T6227] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 649.479420][ T6227] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 649.513218][ T6227] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 649.537646][ T6227] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 650.380601][ T6227] Bluetooth: hci1: command tx timeout [ 650.549484][ T6227] Bluetooth: hci6: command tx timeout [ 651.669727][ T6227] Bluetooth: hci7: command tx timeout [ 652.389399][ T6227] Bluetooth: hci1: command tx timeout [ 652.629180][ T6227] Bluetooth: hci6: command tx timeout [ 653.750173][ T6227] Bluetooth: hci7: command tx timeout [ 654.140602][ T5693] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 654.393497][ T5693] usb 1-1: Using ep0 maxpacket: 16 [ 654.438318][ T5693] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 654.503466][ T5693] usb 1-1: config 0 has no interfaces? [ 654.541906][ T5693] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 654.605828][ T5693] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.648464][ T5693] usb 1-1: Product: syz [ 654.666038][ T5693] usb 1-1: Manufacturer: syz [ 654.697121][ T5693] usb 1-1: SerialNumber: syz [ 654.712140][ T6227] Bluetooth: hci6: command tx timeout [ 654.783288][ T5693] usb 1-1: config 0 descriptor?? [ 655.067743][ T11] usb 1-1: USB disconnect, device number 16 [ 655.829438][ T6227] Bluetooth: hci7: command tx timeout [ 656.345244][ T55] bridge_slave_1: left allmulticast mode [ 656.387087][ T55] bridge_slave_1: left promiscuous mode [ 656.422078][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.346'. [ 656.446859][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.511025][ T55] bridge_slave_0: left allmulticast mode [ 656.542724][ T55] bridge_slave_0: left promiscuous mode [ 656.570299][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.128415][ T7840] binder: 7838:7840 ioctl c00c6211 0 returned -14 [ 657.547771][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 657.608643][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 657.659391][ T55] bond0 (unregistering): Released all slaves [ 657.940929][ T6227] Bluetooth: hci7: command tx timeout [ 659.235900][ T55] hsr_slave_0: left promiscuous mode [ 659.335418][ T55] hsr_slave_1: left promiscuous mode [ 659.384665][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 659.436497][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 662.899373][ T7067] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 663.111582][ T7067] usb 3-1: Using ep0 maxpacket: 16 [ 663.144351][ T7067] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 663.160655][ T7067] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 663.163004][ T55] team0 (unregistering): Port device team_slave_1 removed [ 663.202903][ T7067] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 663.215832][ T7067] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.229907][ T7067] usb 3-1: Product: syz [ 663.234314][ T55] team0 (unregistering): Port device team_slave_0 removed [ 663.234468][ T7067] usb 3-1: Manufacturer: syz [ 663.275184][ T7067] usb 3-1: SerialNumber: syz [ 663.329028][ T11] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 663.520789][ T11] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 663.543687][ T11] usb 1-1: config 1 has no interface number 0 [ 663.562197][ T7067] usb 3-1: USB disconnect, device number 35 [ 663.566273][ T11] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 663.594412][ T11] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 663.605807][ T11] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 663.685818][ T11] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 663.736089][ T11] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=10.40 [ 663.772203][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.809421][ T11] usb 1-1: Product: syz [ 663.813869][ T11] usb 1-1: Manufacturer: syz [ 663.818627][ T11] usb 1-1: SerialNumber: syz [ 663.845357][ T7873] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 664.077379][ T7873] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 664.093792][ T7873] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 664.924033][ T11] cdc_ncm 1-1:1.1: bind() failure [ 664.997532][ T7755] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.017394][ T11] usb 1-1: USB disconnect, device number 17 [ 665.036061][ T7755] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.071045][ T7755] bridge_slave_0: entered allmulticast mode [ 665.096697][ T7755] bridge_slave_0: entered promiscuous mode [ 665.338346][ T7755] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.350227][ T7755] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.357870][ T7755] bridge_slave_1: entered allmulticast mode [ 665.368368][ T7755] bridge_slave_1: entered promiscuous mode [ 665.462034][ T7755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 665.482931][ T7755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 666.061003][ T7755] team0: Port device team_slave_0 added [ 666.129907][ T7755] team0: Port device team_slave_1 added [ 666.849751][ T7755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 666.890833][ T7755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 666.962213][ T7755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.717939][ T7755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.725662][ T7755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.768074][ T7755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 671.029478][ T7067] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 671.044004][ T7918] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 671.209205][ T7067] usb 3-1: Using ep0 maxpacket: 32 [ 671.226288][ T7067] usb 3-1: unable to get BOS descriptor or descriptor too short [ 671.273366][ T7067] usb 3-1: config 7 has an invalid interface number: 223 but max is 0 [ 671.338313][ T7067] usb 3-1: config 7 has no interface number 0 [ 671.352263][ T7067] usb 3-1: config 7 interface 223 altsetting 177 endpoint 0xF has invalid wMaxPacketSize 0 [ 671.376026][ T7067] usb 3-1: config 7 interface 223 altsetting 177 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 671.403130][ T7067] usb 3-1: config 7 interface 223 has no altsetting 0 [ 671.419816][ T7067] usb 3-1: New USB device found, idVendor=185b, idProduct=2870, bcdDevice=af.8a [ 671.438308][ T7067] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.451191][ T7067] usb 3-1: Product: syz [ 671.456229][ T7067] usb 3-1: Manufacturer: syz [ 671.464732][ T7067] usb 3-1: SerialNumber: syz [ 671.795525][ T7755] hsr_slave_0: entered promiscuous mode [ 671.824865][ T7755] hsr_slave_1: entered promiscuous mode [ 672.247764][ T7067] usb 3-1: USB disconnect, device number 36 [ 677.369504][ T5693] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 677.614929][ T5693] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 677.687417][ T5693] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 677.742652][ T5693] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 677.815942][ T5693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.971857][ T5693] usb 3-1: config 0 descriptor?? [ 678.057841][ T5693] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 678.286025][ T7067] usb 3-1: USB disconnect, device number 37 [ 678.822472][ T7067] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 679.029120][ T7067] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 679.052644][ T7782] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.064668][ T7067] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 679.095045][ T7782] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.115311][ T7067] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 679.133539][ T7782] bridge_slave_0: entered allmulticast mode [ 679.149247][ T7067] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.172434][ T7782] bridge_slave_0: entered promiscuous mode [ 679.248326][ T7067] usb 3-1: config 0 descriptor?? [ 680.279226][ T7782] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.321104][ T7782] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.337948][ T7782] bridge_slave_1: entered allmulticast mode [ 680.388484][ T7782] bridge_slave_1: entered promiscuous mode [ 681.232101][ T7067] usb 3-1: can't set config #0, error -71 [ 681.284099][ T7067] usb 3-1: USB disconnect, device number 38 [ 684.142409][ T7782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.184549][ T7782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.844285][ T7769] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.876257][ T7769] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.899735][ T7769] bridge_slave_0: entered allmulticast mode [ 684.926421][ T7769] bridge_slave_0: entered promiscuous mode [ 684.955135][ T7769] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.996940][ T7769] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.010461][ T7769] bridge_slave_1: entered allmulticast mode [ 685.041796][ T7769] bridge_slave_1: entered promiscuous mode [ 685.199472][ T7067] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 685.301260][ T7991] binder: 7990:7991 ioctl c00c6211 0 returned -14 [ 685.348165][ T7782] team0: Port device team_slave_0 added [ 685.411426][ T7067] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 685.447493][ T7067] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 685.491058][ T7067] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.505427][ T7782] team0: Port device team_slave_1 added [ 685.518970][ T7067] usb 1-1: config 0 descriptor?? [ 685.567059][ T7067] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 685.584134][ T7769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 685.626510][ T55] bridge_slave_1: left allmulticast mode [ 685.637557][ T55] bridge_slave_1: left promiscuous mode [ 685.645582][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.672522][ T55] bridge_slave_0: left allmulticast mode [ 685.683214][ T55] bridge_slave_0: left promiscuous mode [ 685.696760][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.767019][ T55] bridge_slave_1: left allmulticast mode [ 685.782831][ T7243] usb 1-1: USB disconnect, device number 18 [ 685.792251][ T55] bridge_slave_1: left promiscuous mode [ 685.824190][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.876563][ T55] bridge_slave_0: left allmulticast mode [ 685.884898][ T55] bridge_slave_0: left promiscuous mode [ 685.894814][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.260825][ T7243] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 686.361014][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 686.377412][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 686.389195][ T5688] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 686.396466][ T55] bond0 (unregistering): Released all slaves [ 686.437996][ T7243] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 686.449264][ T7243] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 686.458584][ T7243] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.490083][ T7243] usb 1-1: config 0 descriptor?? [ 686.521775][ T7243] aiptek 1-1:0.0: interface has no int in endpoints, but must have minimum 1 [ 686.561378][ T7243] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 686.619008][ T5688] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 686.628507][ T5688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 686.644743][ T5688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 686.655985][ T5688] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 686.669591][ T5688] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 686.680623][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 686.682990][ T5688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.707452][ T5688] usb 3-1: config 0 descriptor?? [ 686.723448][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 686.736471][ T7988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.739867][ T55] bond0 (unregistering): Released all slaves [ 686.793798][ T7988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.870012][ T7769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 687.064896][ T7769] team0: Port device team_slave_0 added [ 687.075186][ T7782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 687.089192][ T7782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 687.126225][ T7782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 687.178396][ T5688] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 687.194809][ T7769] team0: Port device team_slave_1 added [ 687.203579][ T5688] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 687.227000][ T5688] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 687.253099][ T5688] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 687.270088][ T5688] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 687.277872][ T5688] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 687.299694][ T55] hsr_slave_0: left promiscuous mode [ 687.317363][ T55] hsr_slave_1: left promiscuous mode [ 687.321181][ T5688] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 687.327788][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 687.358448][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 687.397396][ T5688] usb 3-1: USB disconnect, device number 39 [ 687.414993][ T55] hsr_slave_0: left promiscuous mode [ 687.427871][ T55] hsr_slave_1: left promiscuous mode [ 687.437778][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 687.450827][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 687.674248][ T8000] fido_id[8000]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 688.105687][ T5688] usb 1-1: USB disconnect, device number 19 [ 688.214677][ T8003] binder: 8002:8003 ioctl c00c6211 0 returned -14 [ 688.450487][ C0] ===================================================== [ 688.457962][ C0] BUG: KMSAN: uninit-value in __flush_smp_call_function_queue+0x343/0x1810 [ 688.466743][ C0] __flush_smp_call_function_queue+0x343/0x1810 [ 688.473165][ C0] generic_smp_call_function_single_interrupt+0x1c/0x30 [ 688.480281][ C0] __sysvec_call_function_single+0x48/0x350 [ 688.486372][ C0] sysvec_call_function_single+0x7c/0x90 [ 688.492296][ C0] asm_sysvec_call_function_single+0x1f/0x30 [ 688.498437][ C0] _raw_spin_unlock_irqrestore+0x33/0x60 [ 688.504284][ C0] __wake_up_sync_key+0x283/0x2b0 [ 688.509496][ C0] __unix_dgram_recvmsg+0x847/0x1750 [ 688.515008][ C0] unix_dgram_recvmsg+0x112/0x180 [ 688.520163][ C0] sock_recvmsg_nosec+0x1e2/0x270 [ 688.525383][ C0] ____sys_recvmsg+0x4e5/0x620 [ 688.530328][ C0] ___sys_recvmsg+0x20b/0x850 [ 688.535158][ C0] do_recvmmsg+0x40e/0xdf0 [ 688.539678][ C0] __x64_sys_recvmmsg+0x383/0x500 [ 688.544814][ C0] x64_sys_call+0x96d/0x3ea0 [ 688.549553][ C0] do_syscall_64+0x15d/0x3c0 [ 688.554265][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.560284][ C0] [ 688.562664][ C0] Local variable rf created at: [ 688.567570][ C0] __schedule+0x3a/0x8750 [ 688.572036][ C0] preempt_schedule_irq+0x50/0xa0 [ 688.577203][ C0] [ 688.579608][ C0] CPU: 0 UID: 0 PID: 8007 Comm: syz.0.375 Not tainted syzkaller #0 PREEMPT(lazy) [ 688.588936][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 688.599081][ C0] ===================================================== [ 688.606076][ C0] Disabling lock debugging due to kernel taint [ 688.612295][ C0] Kernel panic - not syncing: kmsan.panic set ... [ 688.618816][ C0] CPU: 0 UID: 0 PID: 8007 Comm: syz.0.375 Tainted: G B syzkaller #0 PREEMPT(lazy) [ 688.629733][ C0] Tainted: [B]=BAD_PAGE [ 688.633944][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 688.644105][ C0] Call Trace: [ 688.647453][ C0] [ 688.650362][ C0] __dump_stack+0x26/0x30 [ 688.654837][ C0] dump_stack_lvl+0x50/0x1c0 [ 688.659564][ C0] ? dump_stack+0x12/0x25 [ 688.664034][ C0] dump_stack+0x1e/0x25 [ 688.668318][ C0] vpanic+0x7b4/0x1430 [ 688.672556][ C0] panic+0x15d/0x160 [ 688.676640][ C0] kmsan_report+0x31a/0x320 [ 688.681306][ C0] ? __msan_warning+0x1b/0x30 [ 688.686122][ C0] ? __flush_smp_call_function_queue+0x343/0x1810 [ 688.692704][ C0] ? generic_smp_call_function_single_interrupt+0x1c/0x30 [ 688.700009][ C0] ? __sysvec_call_function_single+0x48/0x350 [ 688.706227][ C0] ? sysvec_call_function_single+0x7c/0x90 [ 688.712208][ C0] ? asm_sysvec_call_function_single+0x1f/0x30 [ 688.718505][ C0] ? _raw_spin_unlock_irqrestore+0x33/0x60 [ 688.724467][ C0] ? __wake_up_sync_key+0x283/0x2b0 [ 688.729823][ C0] ? __unix_dgram_recvmsg+0x847/0x1750 [ 688.735401][ C0] ? unix_dgram_recvmsg+0x112/0x180 [ 688.740739][ C0] ? sock_recvmsg_nosec+0x1e2/0x270 [ 688.746071][ C0] ? ____sys_recvmsg+0x4e5/0x620 [ 688.751178][ C0] ? ___sys_recvmsg+0x20b/0x850 [ 688.756196][ C0] ? do_recvmmsg+0x40e/0xdf0 [ 688.760898][ C0] ? __x64_sys_recvmmsg+0x383/0x500 [ 688.766227][ C0] ? x64_sys_call+0x96d/0x3ea0 [ 688.771146][ C0] ? do_syscall_64+0x15d/0x3c0 [ 688.776029][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.782234][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 688.787534][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 688.793514][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 688.798788][ C0] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 688.805286][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 688.810564][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 688.815843][ C0] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 688.822337][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 688.827632][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 688.833617][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 688.838908][ C0] __msan_warning+0x1b/0x30 [ 688.843561][ C0] __flush_smp_call_function_queue+0x343/0x1810 [ 688.849975][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 688.855297][ C0] generic_smp_call_function_single_interrupt+0x1c/0x30 [ 688.862427][ C0] __sysvec_call_function_single+0x48/0x350 [ 688.868488][ C0] sysvec_call_function_single+0x7c/0x90 [ 688.874301][ C0] [ 688.877292][ C0] [ 688.880295][ C0] asm_sysvec_call_function_single+0x1f/0x30 [ 688.886445][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x33/0x60 [ 688.893128][ C0] Code: 56 53 48 89 f3 49 89 fe e8 ba fb b2 f1 4c 89 f7 e8 f2 ee b2 f1 c6 00 00 41 c6 06 00 f7 c3 00 02 00 00 74 01 fb be 04 00 00 00 <48> c7 c7 28 40 60 95 e8 01 f1 b2 f1 65 ff 0d c2 7a 64 04 74 0a 5b [ 688.912865][ C0] RSP: 0018:ffff888091717798 EFLAGS: 00000206 [ 688.919064][ C0] RAX: ffff888054e60cc0 RBX: 0000000000000282 RCX: 00000000001a9be0 [ 688.927138][ C0] RDX: ffff888055260cc0 RSI: 0000000000000004 RDI: ffff888055660cc0 [ 688.935209][ C0] RBP: ffff8880917177a8 R08: ffffea000000000f R09: 0000000000000000 [ 688.943282][ C0] R10: ffff888237cb2028 R11: ffffffff81bab5f0 R12: 0000000000000000 [ 688.951355][ C0] R13: 00000000019400ea R14: ffff888055660cc0 R15: ffff888055660cc8 [ 688.959444][ C0] ? __pfx_task_woken_rt+0x10/0x10 [ 688.964745][ C0] ? _raw_spin_unlock_irqrestore+0x1e/0x60 [ 688.970719][ C0] __wake_up_sync_key+0x283/0x2b0 [ 688.975928][ C0] __unix_dgram_recvmsg+0x847/0x1750 [ 688.981353][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 688.986646][ C0] ? __pfx_____sys_recvmsg+0x1/0x10 [ 688.992040][ C0] unix_dgram_recvmsg+0x112/0x180 [ 688.997236][ C0] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 689.002999][ C0] sock_recvmsg_nosec+0x1e2/0x270 [ 689.008192][ C0] ____sys_recvmsg+0x4e5/0x620 [ 689.013187][ C0] ___sys_recvmsg+0x20b/0x850 [ 689.018067][ C0] ? kmsan_internal_check_memory+0x9f/0x240 [ 689.024126][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 689.029408][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 689.035393][ C0] do_recvmmsg+0x40e/0xdf0 [ 689.039945][ C0] ? stack_depot_save_flags+0x35/0x790 [ 689.045585][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 689.050900][ C0] __x64_sys_recvmmsg+0x383/0x500 [ 689.056051][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 689.061368][ C0] x64_sys_call+0x96d/0x3ea0 [ 689.066118][ C0] do_syscall_64+0x15d/0x3c0 [ 689.070834][ C0] ? clear_bhb_loop+0x50/0xa0 [ 689.075650][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.081677][ C0] RIP: 0033:0x7f17f319ce59 [ 689.086199][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 689.105939][ C0] RSP: 002b:00007f17f3fc1028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 689.114498][ C0] RAX: ffffffffffffffda RBX: 00007f17f3416090 RCX: 00007f17f319ce59 [ 689.122575][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 689.130647][ C0] RBP: 00007f17f3232d6f R08: 0000000000000000 R09: 0000000000000000 [ 689.138711][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 689.146778][ C0] R13: 00007f17f3416128 R14: 00007f17f3416090 R15: 00007ffe76bcb9f8 [ 689.154902][ C0] [ 689.158282][ C0] Kernel Offset: disabled [ 689.162663][ C0] Rebooting in 86400 seconds..