last executing test programs: 2m19.018181164s ago: executing program 2 (id=3): socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000033be0000000000000000000400950000000000000067091b586e0b6a26b6c6681c009237b529734733a49d1d8dd4586500bad28cd23696c187adaecfd55009b3a429771ddb3cc848154e1335df4bfbe35c24c29f946ed49b0d4332ff3f259e25e6141e2d0f20"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000400)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000080)=0xffff, 0x4) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/wireless\x00') preadv(r3, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/165, 0xa5}], 0x10000000000002f1, 0x4, 0x0) 2m17.922123621s ago: executing program 2 (id=12): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0xfffffffffffffc4a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) syz_usb_disconnect(r1) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109"], 0x0) 2m2.670187646s ago: executing program 32 (id=12): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0xfffffffffffffc4a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) syz_usb_disconnect(r1) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109"], 0x0) 12.560742444s ago: executing program 4 (id=282): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 12.063038122s ago: executing program 0 (id=288): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_dest={0x18, 0x114, 0x2, {0x2, 0x7c}}], 0x18, 0x1}, 0x0) 11.075133948s ago: executing program 4 (id=289): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000400000000000000060015000400000014001680100008800c000380080015"], 0x38}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)={0x1c, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x131}]}]}, 0x1c}}, 0x84) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x1f, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, 0x0, &(0x7f0000000180)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) socket(0x840000000002, 0x3, 0xff) io_uring_setup(0x0, 0x0) r5 = io_uring_setup(0x2c49, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x3}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x18, &(0x7f0000000000), 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2a800, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0xb8}}, 0x20050800) syz_open_dev$vcsn(&(0x7f0000000b40), 0x1ff, 0x400) read$FUSE(r2, &(0x7f0000001c80)={0x2020}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='sched_switch\x00', r4, 0x0, 0x7}, 0x18) 8.160553623s ago: executing program 0 (id=297): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet_mptcp(0x2, 0x1, 0x106) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mq_open(&(0x7f00000005c0)='eth0\x00#\x13\xaeu\xe0\xfb\x050*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\x19\xf1\xcce\xab\x80M\xc9\xcf\xaeR\xb69k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3\xff\a\x00\x00\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\aY\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3Cs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\x96{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\x03\x00\x00\x00y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\x8e\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9\xb3\x83\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|c\xf3\x8b\xc2E\x00\x00\x00\x00\x00\x00', 0x42, 0x0, 0x0) 8.026757775s ago: executing program 4 (id=299): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f0000000040)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x5, [@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @default]}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x88402) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0xc4c85512, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8696, 0x4, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7fffffffffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0x11, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x2) syz_open_dev$cec(&(0x7f0000000540), 0x0, 0x60000) bpf$MAP_CREATE(0x0, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000003d000900000000000020000003"], 0x1c}, 0x1, 0x0, 0x0, 0x24004c00}, 0x4000010) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff1}, {}, {0x5, 0xffe0}}}, 0x24}}, 0x0) 7.951294096s ago: executing program 0 (id=300): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) syz_usbip_server_init(0x5) syz_usbip_server_init(0x3) r1 = syz_io_uring_setup(0x850, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x2, 0xffffffff}, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r4, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0x7330, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x1) 6.810433064s ago: executing program 4 (id=302): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r5, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r5, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.539242328s ago: executing program 4 (id=305): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_dest={0x18, 0x114, 0x2, {0x2, 0x7c}}], 0x18, 0x1}, 0x0) 5.457356015s ago: executing program 3 (id=307): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[], 0x32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000300)={0x1fe, 0x340, 0x380, 0x0}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000340)=[{0x2, 0x0, 0x0, 0x81}]}) vmsplice(r3, 0x0, 0x0, 0x0) capget(&(0x7f0000000080)={0x20071026}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x19, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x96e}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x4dc}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 5.337176287s ago: executing program 1 (id=308): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet_mptcp(0x2, 0x1, 0x106) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mq_open(&(0x7f00000005c0)='eth0\x00#\x13\xaeu\xe0\xfb\x050*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\x19\xf1\xcce\xab\x80M\xc9\xcf\xaeR\xb69k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3\xff\a\x00\x00\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\aY\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3Cs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\x96{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\x03\x00\x00\x00y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\x8e\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9\xb3\x83\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|c\xf3\x8b\xc2E\x00\x00\x00\x00\x00\x00', 0x42, 0x0, 0x0) 4.597654068s ago: executing program 0 (id=309): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000740)={0x8, @sliced={0x2, [0x2, 0x8, 0x86, 0x3d, 0x5, 0x3, 0x8000, 0x0, 0x5, 0x1, 0x3, 0x3c3, 0x2, 0x7, 0x2, 0x6b, 0xfc, 0x0, 0xadc6, 0x1b3e, 0x1000, 0x0, 0x2, 0x3, 0x8, 0x7fff, 0xd, 0x702f, 0xb0, 0x7, 0x5, 0x101, 0x93, 0xcf4, 0x8, 0x4, 0xff, 0x7, 0x4, 0x3, 0x80, 0x2, 0x3, 0x5, 0x0, 0x4, 0x6, 0xac6], 0x6}}) 4.547173019s ago: executing program 3 (id=310): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000700)="09268a60fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88ff4f90b1a7511bf746bec66ba1fe92e8615fc3f7af9c3310b39cc2dc3616dcdfaebc65ca325fd99357ed9d11b266a7c88722db6e38df1089394f438cb9fbc08e62754c233cced4a4d4d05a3e5029a01298d3ee87d8a0803a2d26906f42f5b5aaf47d2752a8b23954f309cae13ef250cf76775ddfd153eef2b1a8458a3cb6dc764f19b41c8c61c7305a51a4bfa0c897c7c1f438a851222a5560c0e77b0b5934296bc6f28af87d651f7348a2ba2ca67f930cc655afe0220cbeb79a2a87bba6be2de3e756e674c405bcc51843b4cc75ff7ec38a34d1a2a61f0a1223e69484b5d922b5590758c33317df18c40", 0x11f, 0x40040, 0x0, 0x0) 4.48915803s ago: executing program 1 (id=311): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580), 0x10000, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f}, 0x94) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/custom1\x00', 0x800, 0x0) mmap$binder(&(0x7f00008fd000/0x9000)=nil, 0x9000, 0x1, 0x11, r4, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x0, 0x5001) r5 = accept$packet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000240)=0x14) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r6, &(0x7f0000000080)="240000001a007f0214f9f4070009040803000000000000050002000008000f40fe00000e", 0x24) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000340)={0x0, 0x80, "a1629711009da29576315422901ef1ffdbc73c7e7cf1e30dec71a93db4ba9c9599ec8a57ab08ae08b3f6727ffeb67c9f7222a24458674c99b786adcdb502d27fb93edc7b02dd43fa96fcc3b268d599d7f5ff0e5215463d9da3b2e877856ad712f01b311c61bcabfb6a2624d3255d9fd96fe95f7cdad412409e2c5b02b2d9961c"}) lseek(r7, 0x10000000005, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711225080000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 4.383380962s ago: executing program 0 (id=312): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r3 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r3, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, 0x0, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r4, 0x4014563c, &(0x7f0000000800)={0xa, {0x1, 0x10000, 0x9, 0xa8000000}}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FICLONERANGE(r5, 0x4020940d, 0x0) read$FUSE(r5, &(0x7f0000004900)={0x2020}, 0x2020) 4.368445352s ago: executing program 3 (id=313): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYRES16=r5, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r4, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r7, 0x1, 0x300, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0xc0c4) 4.063781896s ago: executing program 3 (id=314): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f0000000300)={0x1fe, 0x340, 0x380, &(0x7f0000000980)=[0x4b83, 0x8001, 0x800, 0xa6, 0xfffffffffffff801, 0xd, 0xe2b, 0x3, 0x3, 0x3, 0xc01, 0x80000001, 0xac, 0xffffffffffff2f66, 0xe0a9, 0xf, 0x7, 0x5b, 0x7, 0x6, 0x80, 0x4e27, 0x400, 0x64c1, 0x9c3, 0x0, 0x1, 0xfff, 0x4, 0xa0af5e8, 0xffff, 0xffffffffffffcc8c, 0x1, 0xd1c, 0x6, 0x1ff, 0x1c, 0x3, 0x40, 0xffffffff, 0x4, 0xfffffffffffffc01, 0x8000000000000001, 0x1ff, 0x1e7, 0x102b, 0x2, 0xfffffffffffffffc, 0xfffffffffffffff1, 0x5, 0x28, 0x4, 0x0, 0x3, 0x7, 0x8000000000000001, 0xfffffffffffff5d5, 0xfffffffffffffffa, 0x6, 0x3, 0x0, 0x2, 0x3, 0x4, 0x0, 0x65b5, 0x4, 0x9, 0xffffffffffffffff, 0xbac, 0x7, 0x8, 0x101, 0xe, 0x56cfa03c, 0x1, 0x7, 0x9, 0x9, 0x9, 0xfdb, 0x1, 0x5, 0x7, 0x0, 0x1, 0x7, 0xd71, 0x5, 0x81, 0x9, 0x5, 0x80, 0x7, 0x100, 0x401, 0x5, 0x40, 0x9, 0x2, 0xf6, 0xffffffffffffffff, 0x1, 0xffffffffffff8000, 0x8000000000000000, 0x8000000000000000, 0x80000001, 0x8, 0xc, 0x0, 0x6e, 0x7f, 0x20000000, 0x4ff7, 0x2, 0x40, 0x7d7f, 0xb, 0x2, 0xffffffffffffffff, 0x858f, 0x3, 0x5, 0x400, 0x1e, 0x4, 0xffffffffffff6c8d, 0x5c256116]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{}, 0x0, &(0x7f0000000880)}, 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000340)=[{0x2, 0x0, 0x0, 0x81}]}) vmsplice(r3, 0x0, 0x0, 0x0) capset(0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) capget(&(0x7f0000000080)={0x20071026}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x96e}}, &(0x7f0000000100)='GPL\x00', 0x1}, 0x94) 3.287967479s ago: executing program 0 (id=315): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10c4, 0x8acf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000080)={0x14, &(0x7f0000000140)={0x20, 0x9, 0x7, {0x7, 0x0, "efd3f2d0c5"}}, 0x0}, 0x0) 3.286690079s ago: executing program 1 (id=316): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580), 0x10000, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f}, 0x94) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$binder(&(0x7f00008fd000/0x9000)=nil, 0x9000, 0x1, 0x11, r4, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x0, 0x5001) r5 = accept$packet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000240)=0x14) getsockname$packet(r5, 0x0, &(0x7f0000000300)) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000080)="240000001a007f0214f9f4070009040803000000000000050002000008000f40fe00000e", 0x24) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000340)={0x0, 0xad, "a1629711009da29576315422901ef1ffdbc73c7e7cf1e30dec71a93db4ba9c9599ec8a57ab08ae08b3f6727ffeb67c9f7222a24458674c99b786adcdb502d27fb93edc7b02dd43fa96fcc3b268d599d7f5ff0e5215463d9da3b2e877856ad712f01b311c61bcabfb6a2624d3255d9fd96fe95f7cdad412409e2c5b02b2d9961cf13c8ecec04fb3e95c24656048d6eac24001fa4095e46ff90431af4790ec2dec43fef1848e4260071e7dc0d3ab"}) lseek(r7, 0x10000000005, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711225080000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 2.347174363s ago: executing program 3 (id=317): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f0000000040)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x5, [@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @default]}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x88402) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0xc4c85512, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8696, 0x4, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7fffffffffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0x11, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x2) syz_open_dev$cec(&(0x7f0000000540), 0x0, 0x60000) bpf$MAP_CREATE(0x0, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000003d000900000000000020000003"], 0x1c}, 0x1, 0x0, 0x0, 0x24004c00}, 0x4000010) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff1}, {}, {0x5, 0xffe0}}}, 0x24}}, 0x0) 2.061824978s ago: executing program 1 (id=318): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000140), r4) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.322647369s ago: executing program 4 (id=319): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) syz_usbip_server_init(0x5) syz_usbip_server_init(0x3) r1 = syz_io_uring_setup(0x850, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x2, 0xffffffff}, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0x7330, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, 0x0) 1.110736193s ago: executing program 3 (id=320): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[], 0x32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000340)=[{0x2, 0x0, 0x0, 0x81}]}) vmsplice(r3, 0x0, 0x0, 0x0) capget(&(0x7f0000000080)={0x20071026}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x19, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x96e}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x4dc}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 659.992569ms ago: executing program 1 (id=321): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) sendmmsg$inet(r0, &(0x7f0000000380)=[{{&(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @multicast1}}}], 0x20}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001440)="85dff603fa879b39113a08a1093289f99c717206c5b08001186e16ce44c5f0035bd9ce957b1dd95fc8051b0eecbf286caace45ad8b80e26b0aeef1468c687004c682e047c32850343ba97bc52120e7a895233204edd323a11b0461072c5cdebeba138897b9c1a071f0bfc15f1b024944a81542a345bdb75f259312460217e7ffb19ade0cc2c6c137799bded0b8bd7e2805bfc8d99974c302d959144667b78d8d3f9867441f3bfc9742b3641cb654d12b7a799c24caa7e772b2332d9d98461853feb6fd8a2b8ecf17f283850162afcc144fdb94f2bf8d3c689daea7ff2e29afe53223eb9598a1bf2074722d3aaa808b89f4197b6686b22dbf0a32b121bcb042d6ef95bddf07ef700bf9443365b7eab80d23d4ec13449fd3e4aa5605bfd49dbdbde9fe2b026d1fc9b45cae6c83a1f464ecf3f08476c2b18d37cf6cfdb44bce777961be324bc5f8e91289a8687102143370c2cb2d6aeb033c895545cfee34020367a1208b1c17012554d458d20f658132c6555555de2d0ae93812639206970bec37fe4cff65e2fd118c550b7c34bdd0a9a406aca14670701778ea28e8a49fc95ed1581bb2df7f6ce07f00d2abfa3c5ce9402c7fc3f2f00d2c1e0d654681a9410a84689258db56f9cc6b635950b0a939dca6c40f5d9bc46b21a722761762cc849b1a062d246c8170b44475bb33e08799c32627c3286396da3300dc83890faffbfbdf14a90e196fa78b95f2fed313f9ebc4d0e807d5abdb4c8e3481e22eec9cfd249549b2f05f11691aa0faf617220bf0cc47d9647236ce2843f94d25a785718b2929a0c272b07ffb3ea1f01fb46dc990404ebc2aed4c282a9457be7728f6c82756b850b9cf27f1863d4dc35de6d921bdfc9fd8142750cd97023dc3ea2717d456848d9f24ebd1fb0669b23d2d727fc5c078960644fa8ae6c5691c7a4651089c2dd57027e7f4646fc0a4532266ed09c58771f4f58b1f9fb2a20efb8462d9d7561b1ba354b4167db3917f1ddecec56283f285b299ab359e990d58f1fe75a053c891388e40a21b206285a29a430046cf204baca1d9cf07bee044738d9e8a029b97142603bf8e08489e937176b3409f3f6381277558b0cdd8c0561a3dc8209c6b59113ec387e5920039ab6480b807e3909b69127370dea4afed4ed2b84fa1f6464cbbd5fe6bc5fa0ad78e49b86c7b5f5205fc141e431c28f862adba49d4a241711e0c6630e3790af53c99368e9cf1dcdfe180347a8d3dcd14c6c56be8a3c81dbb76de7be69e0416956f974c5eec306ec90b3942777d239aad82883e391e3be2be4d3c39da55388fc083d0d7f2c4e3b8541dd09e973c5451df68ab49f998f155210cc8ef131480a736a0d7f7e25357713f5889e170f8aa9344879cc9918171d45c6e6f2a84ff9910189cab9aaefc7ba95d2371353e3be2e98b917afe8dc22ba5e6997e1d05bc8cae862bc0c4736049843ff7805552828280f855cbb27edcfac248816d069008b18c23d28dc27d9719d145a536b803d2e481576b5a5387f6cf69b014378418a1954a261fa192487482817de010e2fcc2932891e40b8f253bf58a0f4d01db28c7513597a0ed42ad48a7b63a5ce2dd4e38b824e641caceb870cadd79dc05157e2c7d9ddf7ee16665dfbbeb29ab4326554b103ae5bdb3909a8493b5df543563e239efd41aa8c1292f59d3a8ac4e8e8af6044285b8eb1828956aedd9807b7389ef510b7b4366a6f80d577fcb76df0868c8283cd074cea315bacd7a6e4695dc168194e47b8e4af14f07bef4f09a1ce70630c8fa24f7dd05c714f44e84468af8e15d252f47584c35cd21f4b0356b6e0b721290dc2c602839bb49d53920db5a1224a90799ff348ad4e8904da15d453b0620a03b3e4f26312a7ec1f3376c99d7ddc4f9a6ed05e3dc0ef496883d9f89fbc1d95ee7a8532b6b922f31d2761d19910613a18bcadbc72455824366db35ee91757634d9942af6eebb2b0bcde4120f4c9ba66434cbb95d91a64a86bf535b79e2ee79865dd12d8a2d509ab506d50238e48141911a451a1273066bfc16e4e6bbdb6953a6fe62e836c8630afdd19a44c7b8b5be6e6f0f37c25121a6c48746ccba01b0ee172d1f1f4208d18e9cd6743b42555aef06cc3ed1400b1a0101eb3b447a80d85394a52f91fe16892a6d42a0b23dd756c15b6958bba8c7b5f88cf7ada2a11629901db1770eaf03962f661249d241335d1e87923712cc38201b0fa0477979643c831d539add86d154656a0122fdcbb5658a20394c56ecd1cbd97b3c9c94900b0d1cffdb9078965ddb9cb7c22e24380818c696ea962e7eeb2f058f7b56b6159ae65995230bc33192d6d45e3d2823b65c97057ee666b8fc83b039c2259e2ab746049e7849b52225b8e42d415628036fb066071a1ca7f74c2cc0980e388852e248c67e042542d6ff1e022ca7f2a1f434bcb7921af834fa89240b1152a588d4a0a99503f72794f5798d20d9168f65c0a8c0172e1b95cafe9e246f366d57c19ee7857bb03a1707238ef49cb58695a01a98afe3ba8d84794a3abf40b88340eb4c01cb624cc69eef10a6c0f04a6279d12d1e15a019e2292dba7556fca386e6debfb14a9c2646c363ace16f4edbe88a0e8e0e557abe1801cf292877205b245ef1bc1ab3bc96531a5e4334f199e0cdc9c1e21f89ec6a422f22e8c5cc2bfc9067f89992437b2a567216f757b8a779dbc99b321028be90612e23404d057b6721ff9a6e5ebd7d3840bd358dea2702722cf9913801950afd45654f99ff33ad7bb67ff5b2ff318ac4eec270d362de5bf16a8556a2e4e95b6809ce0009fb55a0469282288f85a933eb6caf232ae8445016df36b798213b4ffa38c2e0f28620d7a6996aeadea297399d8becc2552beebe253d435afa8369c60cca7f321997956099cb6b7b5cf502028ab9ef6cb0129ec93e8a1d84b205b68ad0bcd6d6b162c766b4d2a9468c2fce03b746024970c346e49879fb2220150c39a2f28595a4b7fc714fc623ce880ee6a90f634892cd40b1a28e9dc5102f93707518ffabd6060beaea25d77b6c62f9491a0a1bb93dd2ec5bfb920fd93939ccf06203bd8e85e32f77d4b619224215964dabdbe3fc0caa11a16ae56843fc6624c4489d728d14215eb6007dafc88d21430eb20ad8d5dee5f7dad0643ee4a32ebb17f720af85f1efbe92e4eb6cc13b6b3cca43f08c1592319cd129fe83baa6deec1dafb2d1d26720ad997d123b7d606fde25dac843eee405aa6a4e19fdc26e5a8f089e53ba33e30e81eb87cd5dc6953d424ae7cb310d5631379ac1078b6c5fb018ac941d83ede9f5d51eaf1ce312f2255c9bba82f751cb503e83a17d443769ee4c46fd1e4c1100e794327c52f03b9a09a590bc73b9f9a8239854b1f8e5673d6638f2a13793dd92cd8c816925cf881111fbf6bd3bb6efbc7cc6fb354d9fa8a98b789962fc344974b228e9fe8279ee99eb836816a9c7203a66537e52bc4128b0506a110bc4ddb325342232fd8f435a001719e05a9bb8d0d04913f896ce4770abadab3079f539fabea3b223d760cc367d357136424e93c57c48a7660bbfb408f44c94fb5ba51faf55e03717394afd1e28059b6955f06f075f5147af0ba90bcdb56204e922202e9287e33957e60498f3746d8b19cd8d162a0746eddcddf252b36879279db2f09a32175186d8e0538ab4fce4594b9800cca618d23a25358e529baa1461ac95f244d8435170162a3ae82e150c8685e4890b0e662cd65357ba964b351d726c9c87f3ec1340b8f8ed7d6361c333693a7d5a27008da56b56c0f343543b17c885c679128ca11f432db007f7e534d8597b50a8ff7db937f90c82787e9b0eaef8bc0b082e5cc5f262c5cd18e00fb0bf3714206f0c6f8065e6c4c09b54548993888ef85a478ed6dc33fe1e6e4ab4d2a4f6c53a95af77cdabfeaeb5e73a056f4a25d339ffdc18a9acc07b1d25e1f61d8b9940d73ea12b5a6782a1fda18efa854ccae307c77d8329be08482dba7299eff971b7f4fbf50c787ebe09bc24e93c213085833a7c120819c6d9d1c74ab48d1fa5446a8e3e062c64b323b0d6630e3192e90208fe6ad333c6c66bb738700cb30a88393c74d9e029ddeebcbe3027fc5689a51524d99ebdef1ce7185d20b4802b8877675937ce94491d4ada7a0079eac311dbdffd57004811f563c41b72a306367997b28208becbdddce0a2e5abf53e61d4811e569a9cb9ff654e69755f72b318a5", 0xbaa}], 0x1}}], 0x2, 0x40080c0) 0s ago: executing program 1 (id=322): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000700)="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", 0x129, 0x40040, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.19' (ED25519) to the list of known hosts. [ 81.678359][ T5757] cgroup: Unknown subsys name 'net' [ 81.844395][ T5757] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.583147][ T5757] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.186566][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.205176][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.224947][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.233242][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.244049][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.251489][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.281114][ T5769] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.299957][ T5775] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.308582][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.317770][ T5778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.345955][ T5778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.356721][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.374807][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.382003][ T5778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.401573][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.409935][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.429548][ T5775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.442142][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.450784][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.455384][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.466031][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.473444][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.474260][ T5775] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.488414][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.895363][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 86.066426][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 86.110673][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 86.127652][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.135227][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.142668][ T5766] bridge_slave_0: entered allmulticast mode [ 86.150596][ T5766] bridge_slave_0: entered promiscuous mode [ 86.163034][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.170540][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.177828][ T5766] bridge_slave_1: entered allmulticast mode [ 86.185467][ T5766] bridge_slave_1: entered promiscuous mode [ 86.323815][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.365558][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.372803][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.380547][ T5770] bridge_slave_0: entered allmulticast mode [ 86.387685][ T5770] bridge_slave_0: entered promiscuous mode [ 86.399146][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.408523][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 86.433160][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.440787][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.448142][ T5772] bridge_slave_0: entered allmulticast mode [ 86.455684][ T5772] bridge_slave_0: entered promiscuous mode [ 86.463429][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.471307][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.478908][ T5770] bridge_slave_1: entered allmulticast mode [ 86.486544][ T5770] bridge_slave_1: entered promiscuous mode [ 86.526117][ T5766] team0: Port device team_slave_0 added [ 86.532497][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.540326][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.547765][ T5772] bridge_slave_1: entered allmulticast mode [ 86.556220][ T5772] bridge_slave_1: entered promiscuous mode [ 86.599690][ T5766] team0: Port device team_slave_1 added [ 86.670312][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.683068][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.696327][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.711896][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.719179][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.745173][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.771868][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.786644][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.794153][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.820988][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.901103][ T5772] team0: Port device team_slave_0 added [ 86.910325][ T5770] team0: Port device team_slave_0 added [ 86.942809][ T5772] team0: Port device team_slave_1 added [ 86.963119][ T5770] team0: Port device team_slave_1 added [ 86.983185][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.990518][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.998744][ T5771] bridge_slave_0: entered allmulticast mode [ 87.006382][ T5771] bridge_slave_0: entered promiscuous mode [ 87.083637][ T5766] hsr_slave_0: entered promiscuous mode [ 87.095792][ T5766] hsr_slave_1: entered promiscuous mode [ 87.120603][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.127799][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.159307][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.177580][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.185356][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.192625][ T5771] bridge_slave_1: entered allmulticast mode [ 87.201739][ T5771] bridge_slave_1: entered promiscuous mode [ 87.209646][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.217553][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.244861][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.258202][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.265854][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.292229][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.312276][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.319747][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.346874][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.364867][ T5775] Bluetooth: hci0: command tx timeout [ 87.434064][ T5775] Bluetooth: hci3: command tx timeout [ 87.507519][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.523881][ T5775] Bluetooth: hci1: command tx timeout [ 87.529655][ T5775] Bluetooth: hci2: command tx timeout [ 87.580548][ T5770] hsr_slave_0: entered promiscuous mode [ 87.589816][ T5770] hsr_slave_1: entered promiscuous mode [ 87.599960][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.611326][ T5770] Cannot create hsr debugfs directory [ 87.628622][ T5772] hsr_slave_0: entered promiscuous mode [ 87.637819][ T5772] hsr_slave_1: entered promiscuous mode [ 87.647337][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.657388][ T5772] Cannot create hsr debugfs directory [ 87.669011][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.744606][ T5771] team0: Port device team_slave_0 added [ 87.775266][ T5771] team0: Port device team_slave_1 added [ 87.911758][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.919074][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.945486][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.985650][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.992684][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.018876][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.107409][ T5771] hsr_slave_0: entered promiscuous mode [ 88.119531][ T5771] hsr_slave_1: entered promiscuous mode [ 88.127628][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.135377][ T5771] Cannot create hsr debugfs directory [ 88.297880][ T5770] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.310900][ T5770] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.337345][ T5770] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.349164][ T5770] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.463217][ T5766] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.475528][ T5766] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.488820][ T5766] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.501898][ T5766] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.577561][ T5772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.589067][ T5772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.616317][ T5772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.628049][ T5772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.747298][ T5771] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.757498][ T5771] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.768057][ T5771] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.783306][ T5771] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.850480][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.934203][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.972107][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.986181][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.993887][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.025199][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.032894][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.107746][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.120444][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.138465][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.188312][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.195540][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.214884][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.233028][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.240240][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.251082][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.258281][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.282038][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.309272][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.316547][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.362176][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.369445][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.437038][ T5775] Bluetooth: hci0: command tx timeout [ 89.459425][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.466680][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.513941][ T5775] Bluetooth: hci3: command tx timeout [ 89.594120][ T50] Bluetooth: hci1: command tx timeout [ 89.599691][ T5775] Bluetooth: hci2: command tx timeout [ 89.833507][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.871567][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.987353][ T5770] veth0_vlan: entered promiscuous mode [ 90.045353][ T5770] veth1_vlan: entered promiscuous mode [ 90.058241][ T5771] veth0_vlan: entered promiscuous mode [ 90.112697][ T5771] veth1_vlan: entered promiscuous mode [ 90.143165][ T5770] veth0_macvtap: entered promiscuous mode [ 90.172198][ T5770] veth1_macvtap: entered promiscuous mode [ 90.191910][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.222726][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.260523][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.287197][ T5771] veth0_macvtap: entered promiscuous mode [ 90.309148][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.325444][ T5770] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.335676][ T5770] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.345376][ T5770] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.355076][ T5770] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.369305][ T5771] veth1_macvtap: entered promiscuous mode [ 90.421660][ T5772] veth0_vlan: entered promiscuous mode [ 90.491530][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.508200][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.520656][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.541107][ T5766] veth0_vlan: entered promiscuous mode [ 90.566364][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.577673][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.590263][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.599264][ T5772] veth1_vlan: entered promiscuous mode [ 90.637092][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.648799][ T5771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.650163][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.663157][ T5771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.680854][ T5771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.691040][ T5771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.729363][ T5766] veth1_vlan: entered promiscuous mode [ 90.781526][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.784285][ T5772] veth0_macvtap: entered promiscuous mode [ 90.798753][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.829311][ T5772] veth1_macvtap: entered promiscuous mode [ 90.888973][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.905608][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.916097][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.926831][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.939610][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.993246][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.005482][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.017327][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.028981][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.042926][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.059869][ T5772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.069248][ T5772] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.078562][ T5772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.087499][ T5772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.160579][ T5766] veth0_macvtap: entered promiscuous mode [ 91.175072][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.185668][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.227298][ T5766] veth1_macvtap: entered promiscuous mode [ 91.529107][ T5775] Bluetooth: hci0: command tx timeout [ 91.675913][ T50] Bluetooth: hci3: command tx timeout [ 91.676654][ T5769] Bluetooth: hci1: command tx timeout [ 91.690848][ T5782] Bluetooth: hci2: command tx timeout [ 91.949023][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.962803][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.964548][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.979349][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.001285][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.015136][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.033891][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.053986][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.055687][ T5862] program syz.1.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.074878][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.085794][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.098179][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.117823][ T5863] program syz.1.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.151492][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.165628][ T5863] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 92.179606][ T786] cfg80211: failed to load regulatory.db [ 92.190970][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.215553][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.227721][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.247081][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.259062][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.269361][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.280978][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.296527][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.369932][ T5766] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.380967][ T5766] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.390251][ T5766] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.399520][ T5766] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.446579][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.475893][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.558861][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.740531][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.764000][ T5769] Bluetooth: hci0: command tx timeout [ 93.769822][ T5769] Bluetooth: hci1: command tx timeout [ 93.771071][ T5782] Bluetooth: hci3: command tx timeout [ 93.781002][ T5782] Bluetooth: hci2: command tx timeout [ 93.828690][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.840231][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.890590][ T5877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 93.965801][ T5878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 94.120772][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.325582][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.955139][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 95.204759][ T5882] tmpfs: Bad value for 'mpol' [ 95.373983][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.382638][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.391328][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.399991][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 95.512735][ T5890] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.656970][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.751913][ T5814] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.873317][ T5906] netlink: 'syz.3.16': attribute type 152 has an invalid length. [ 97.659823][ T5909] block nbd0: NBD_DISCONNECT [ 97.688464][ T5814] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 97.886858][ T5814] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 97.897404][ T5814] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.916314][ T5814] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 97.932243][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.942518][ T5814] usb 3-1: Product: syz [ 97.953827][ T5814] usb 3-1: Manufacturer: syz [ 97.969209][ T5814] usb 3-1: SerialNumber: syz [ 98.050985][ T5917] loop6: detected capacity change from 0 to 7 [ 98.740422][ T5917] Dev loop6: unable to read RDB block 7 [ 98.741379][ T28] audit: type=1326 audit(1751105672.910:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.1.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a078e929 code=0x7ffc0000 [ 98.746424][ T5917] loop6: AHDI p1 p2 p3 [ 98.772751][ T5917] loop6: partition table partially beyond EOD, truncated [ 98.783162][ T5917] loop6: p1 start 1601398130 is beyond EOD, truncated [ 98.790161][ T5917] loop6: p2 start 1702059890 is beyond EOD, truncated [ 98.843190][ T28] audit: type=1326 audit(1751105672.950:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.1.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a078e929 code=0x7ffc0000 [ 98.865835][ C1] vkms_vblank_simulate: vblank timer overrun [ 98.890839][ T5916] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.993176][ T5814] hub 3-1:1.0: bad descriptor, ignoring hub [ 99.293879][ T5814] hub: probe of 3-1:1.0 failed with error -5 [ 99.304492][ T28] audit: type=1326 audit(1751105673.050:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.1.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd3a078e929 code=0x7ffc0000 [ 99.332788][ T28] audit: type=1326 audit(1751105673.050:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.1.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a078e929 code=0x7ffc0000 [ 99.358615][ T28] audit: type=1326 audit(1751105673.050:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.1.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a078e929 code=0x7ffc0000 [ 99.380601][ C1] vkms_vblank_simulate: vblank timer overrun [ 99.388225][ T28] audit: type=1326 audit(1751105673.050:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.1.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd3a078e929 code=0x7ffc0000 [ 99.411485][ T28] audit: type=1326 audit(1751105673.060:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.1.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a078e929 code=0x7ffc0000 [ 99.433411][ C1] vkms_vblank_simulate: vblank timer overrun [ 99.448234][ T5814] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 99.473766][ T28] audit: type=1326 audit(1751105673.060:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.1.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd3a078e929 code=0x7ffc0000 [ 99.495719][ C1] vkms_vblank_simulate: vblank timer overrun [ 99.540004][ T28] audit: type=1326 audit(1751105673.060:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.1.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a078e929 code=0x7ffc0000 [ 99.562092][ C1] vkms_vblank_simulate: vblank timer overrun [ 99.644187][ T28] audit: type=1326 audit(1751105673.060:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.1.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd3a078e929 code=0x7ffc0000 [ 99.666209][ C1] vkms_vblank_simulate: vblank timer overrun [ 99.935668][ T5927] capability: warning: `syz.0.21' uses deprecated v2 capabilities in a way that may be insecure [ 100.775148][ T5895] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 101.940831][ T5947] xt_CT: You must specify a L4 protocol and not use inversions on it [ 102.009592][ T5951] netlink: 'syz.0.27': attribute type 152 has an invalid length. [ 102.729720][ T5947] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 102.754458][ T5947] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 102.804588][ T5954] overlayfs: failed to resolve './bus': -2 [ 105.062320][ T5967] xt_CT: No such helper "snmp" [ 106.427992][ T5895] usb 3-1: device descriptor read/all, error -110 [ 106.774011][ T5895] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 107.143339][ T5895] usb 3-1: device descriptor read/64, error -32 [ 107.794052][ T5895] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 109.807237][ T5895] usb 3-1: device descriptor read/8, error -32 [ 110.903878][ T5895] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 110.934168][ T5895] usb 3-1: device descriptor read/8, error -32 [ 111.259748][ T5834] usb 3-1: USB disconnect, device number 2 [ 111.475945][ T5834] usblp0: removed [ 112.124338][ T6016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.48'. [ 112.913349][ T5775] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 112.930163][ T5775] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 112.940339][ T5775] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 112.960576][ T5775] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 112.973113][ T5775] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 112.981508][ T5775] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 114.049833][ T6028] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.474165][ T5769] Bluetooth: Unexpected continuation frame (len 10) [ 114.688814][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.894728][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.041904][ T5769] Bluetooth: hci4: command tx timeout [ 115.110371][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.701622][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.272209][ T5769] Bluetooth: hci4: command tx timeout [ 117.904468][ T6017] chnl_net:caif_netlink_parms(): no params data found [ 119.435561][ T5769] Bluetooth: hci4: command tx timeout [ 120.099761][ T6017] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.112212][ T6017] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.119875][ T6017] bridge_slave_0: entered allmulticast mode [ 120.127904][ T6017] bridge_slave_0: entered promiscuous mode [ 121.110140][ T6017] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.117837][ T6017] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.130074][ T6017] bridge_slave_1: entered allmulticast mode [ 121.143462][ T6017] bridge_slave_1: entered promiscuous mode [ 121.153395][ T6065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.59'. [ 121.513819][ T5769] Bluetooth: hci4: command tx timeout [ 122.225207][ T28] audit: type=1326 audit(1751105696.380:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a078e929 code=0x7ffc0000 [ 122.256074][ T6017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.959909][ T6017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.002364][ T28] audit: type=1326 audit(1751105696.380:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a078e929 code=0x7ffc0000 [ 123.141310][ T28] audit: type=1326 audit(1751105696.380:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd3a078e929 code=0x7ffc0000 [ 123.213323][ T28] audit: type=1326 audit(1751105696.380:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a078e929 code=0x7ffc0000 [ 124.094216][ T28] audit: type=1326 audit(1751105696.380:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a078e929 code=0x7ffc0000 [ 124.116912][ T28] audit: type=1326 audit(1751105696.380:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd3a078e929 code=0x7ffc0000 [ 124.211567][ T28] audit: type=1326 audit(1751105696.380:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a078e929 code=0x7ffc0000 [ 124.234730][ T28] audit: type=1326 audit(1751105696.380:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a078e929 code=0x7ffc0000 [ 124.265497][ T28] audit: type=1326 audit(1751105696.380:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd3a078e929 code=0x7ffc0000 [ 124.287992][ T28] audit: type=1326 audit(1751105696.380:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a078e929 code=0x7ffc0000 [ 124.314226][ T5769] Bluetooth: Unexpected continuation frame (len 10) [ 124.444522][ T6017] team0: Port device team_slave_0 added [ 124.591959][ T6017] team0: Port device team_slave_1 added [ 124.864024][ T5814] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 125.296804][ T5814] usb 4-1: Using ep0 maxpacket: 16 [ 125.333272][ T5814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.366717][ T6017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.376351][ T5814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.398030][ T6017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.442296][ T6017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.451721][ T5814] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.466429][ T6017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.466488][ T6017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.466512][ T6017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.600258][ T6017] hsr_slave_0: entered promiscuous mode [ 125.757832][ T5814] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 125.769702][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.787702][ T5814] usb 4-1: config 0 descriptor?? [ 125.794902][ T6017] hsr_slave_1: entered promiscuous mode [ 126.578376][ T6017] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.587510][ T6017] Cannot create hsr debugfs directory [ 126.629752][ T6106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.68'. [ 126.831099][ T5814] usbhid 4-1:0.0: can't add hid device: -71 [ 126.872096][ T5814] usbhid: probe of 4-1:0.0 failed with error -71 [ 126.906835][ T5814] usb 4-1: USB disconnect, device number 2 [ 129.758445][ T6130] netlink: 252 bytes leftover after parsing attributes in process `syz.3.71'. [ 132.088985][ T5769] Bluetooth: Unexpected continuation frame (len 10) [ 132.563101][ T6149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.74'. [ 132.886177][ T6017] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 133.065914][ T6017] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 133.121838][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.130312][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.161436][ T12] hsr_slave_0: left promiscuous mode [ 134.252485][ T12] hsr_slave_1: left promiscuous mode [ 134.262369][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.915932][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.939150][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.970961][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.998599][ T12] bridge_slave_1: left allmulticast mode [ 135.019273][ T12] bridge_slave_1: left promiscuous mode [ 135.044808][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.065437][ T12] bridge_slave_0: left allmulticast mode [ 135.082321][ T12] bridge_slave_0: left promiscuous mode [ 135.130582][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.263596][ T12] veth1_macvtap: left promiscuous mode [ 135.284556][ T12] veth0_macvtap: left promiscuous mode [ 135.290749][ T12] veth1_vlan: left promiscuous mode [ 135.318362][ T12] veth0_vlan: left promiscuous mode [ 135.528659][ T6179] netlink: 20 bytes leftover after parsing attributes in process `syz.0.83'. [ 135.574588][ T6180] netlink: 252 bytes leftover after parsing attributes in process `syz.1.84'. [ 137.520626][ T12] team0 (unregistering): Port device team_slave_1 removed [ 137.917138][ T12] team0 (unregistering): Port device team_slave_0 removed [ 138.147437][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.227658][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.399511][ T5769] Bluetooth: Unexpected continuation frame (len 10) [ 138.951609][ T12] bond0 (unregistering): Released all slaves [ 139.054416][ T6204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.88'. [ 139.511599][ T6017] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 139.596458][ T6179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.615527][ T6179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.625881][ T6179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.640219][ T6179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.930326][ T6017] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 141.614257][ T6227] netlink: 252 bytes leftover after parsing attributes in process `syz.0.92'. [ 141.733188][ T6017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.761927][ T6017] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.861686][ T2939] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.868967][ T2939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.640628][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.648300][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.969469][ T5769] Bluetooth: Unexpected continuation frame (len 10) [ 144.363783][ T6258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.97'. [ 144.752151][ T6261] netlink: 20 bytes leftover after parsing attributes in process `syz.0.99'. [ 144.933256][ T6017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.603756][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 145.795206][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 145.807607][ T8] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 145.846889][ T8] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 145.912598][ T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 145.940411][ T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 145.967236][ T8] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.988418][ T8] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 145.998014][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.192219][ T6017] veth0_vlan: entered promiscuous mode [ 146.227887][ T8] usb 2-1: usb_control_msg returned -32 [ 146.233581][ T8] usbtmc 2-1:16.0: can't read capabilities [ 146.249857][ T6017] veth1_vlan: entered promiscuous mode [ 147.143358][ T6017] veth0_macvtap: entered promiscuous mode [ 147.204888][ T6017] veth1_macvtap: entered promiscuous mode [ 147.241279][ T6017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.266782][ T6017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.278046][ T6017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.289042][ T6017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.302267][ T5769] Bluetooth: Unexpected continuation frame (len 10) [ 147.341735][ T6017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.426312][ T6017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.463814][ T6017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.628594][ T6017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.639694][ T6017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.651947][ T6017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.670108][ T6017] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.685491][ T6017] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.699506][ T6017] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.772964][ T6017] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.965559][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.007616][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.316969][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.357111][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.371234][ T786] usb 2-1: USB disconnect, device number 2 [ 148.386046][ T6319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.109'. [ 152.567164][ T6366] netlink: 'syz.4.117': attribute type 152 has an invalid length. [ 153.528502][ T5769] Bluetooth: Unexpected continuation frame (len 10) [ 157.487015][ T6419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.127'. [ 157.574097][ T786] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 157.784120][ T786] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 157.819225][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.860018][ T786] usb 1-1: config 0 descriptor?? [ 157.898989][ T786] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 158.346901][ T786] gspca_cpia1: usb_control_msg 03, error -32 [ 158.363676][ T786] gspca_cpia1: usb_control_msg 03, error -71 [ 158.372802][ T786] gspca_cpia1: usb_control_msg 01, error -71 [ 158.386758][ T786] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 158.422671][ T786] usb 1-1: USB disconnect, device number 2 [ 159.277217][ T5769] Bluetooth: Unexpected continuation frame (len 10) [ 162.568231][ T6482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.141'. [ 162.598786][ T6479] netlink: 24 bytes leftover after parsing attributes in process `syz.4.142'. [ 164.720988][ T6505] netlink: 20 bytes leftover after parsing attributes in process `syz.3.145'. [ 165.447887][ T5769] Bluetooth: Unexpected continuation frame (len 10) [ 167.271868][ T6519] Process accounting resumed [ 168.550127][ T6540] veth0: entered promiscuous mode [ 168.758773][ T6540] veth0: left promiscuous mode [ 168.857447][ T6548] netlink: 20 bytes leftover after parsing attributes in process `syz.0.155'. [ 170.166923][ T6553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.156'. [ 170.783937][ T5769] Bluetooth: Unexpected continuation frame (len 10) [ 171.163764][ T6574] netlink: 252 bytes leftover after parsing attributes in process `syz.3.161'. [ 172.050190][ T6588] netlink: 20 bytes leftover after parsing attributes in process `syz.4.164'. [ 173.382163][ T6595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.167'. [ 173.589323][ T6603] netlink: 'syz.4.166': attribute type 152 has an invalid length. [ 174.945220][ T5769] Bluetooth: Unexpected continuation frame (len 10) [ 178.237707][ T6634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.177'. [ 178.453797][ T5841] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 178.532120][ T6646] tmpfs: Bad value for 'mpol' [ 178.653781][ T5841] usb 2-1: Using ep0 maxpacket: 16 [ 178.672586][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.747864][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.868940][ T5841] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 179.082864][ T5841] usb 2-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 179.260507][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.554823][ T5841] usb 2-1: config 0 descriptor?? [ 180.193058][ T5841] usbhid 2-1:0.0: can't add hid device: -71 [ 180.199717][ T5769] Bluetooth: Unexpected continuation frame (len 10) [ 180.220874][ T5841] usbhid: probe of 2-1:0.0 failed with error -71 [ 180.244353][ T5841] usb 2-1: USB disconnect, device number 3 [ 180.540536][ T6672] netlink: 252 bytes leftover after parsing attributes in process `syz.4.183'. [ 182.044732][ T6686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.186'. [ 182.769520][ T6691] tmpfs: Bad value for 'mpol' [ 185.026680][ T5769] Bluetooth: Unexpected continuation frame (len 10) [ 186.756745][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.196'. [ 186.895377][ T6729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.196'. [ 187.677990][ T6737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.197'. [ 189.787866][ T6754] netlink: 252 bytes leftover after parsing attributes in process `syz.1.203'. [ 189.978073][ T5769] Bluetooth: Unexpected continuation frame (len 10) [ 191.643875][ T6779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.207'. [ 191.845412][ T6779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.207'. [ 192.086306][ T6781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.208'. [ 192.931661][ T6793] netlink: 12 bytes leftover after parsing attributes in process `syz.0.212'. [ 192.967568][ T6793] netlink: 60 bytes leftover after parsing attributes in process `syz.0.212'. [ 194.370297][ T5769] Bluetooth: Unexpected continuation frame (len 10) [ 194.558634][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.565145][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.923826][ T5860] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 195.164574][ T5860] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 195.203952][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.251992][ T5860] usb 2-1: config 0 descriptor?? [ 195.280790][ T5860] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 195.510213][ T6827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.219'. [ 195.678465][ T5860] gspca_cpia1: usb_control_msg 03, error -71 [ 195.729724][ T5860] gspca_cpia1: usb_control_msg 01, error -71 [ 195.745725][ T5860] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 195.845704][ T5860] usb 2-1: USB disconnect, device number 4 [ 196.293487][ T6834] netlink: 252 bytes leftover after parsing attributes in process `syz.0.221'. [ 197.853075][ T5769] Bluetooth: Unexpected continuation frame (len 10) [ 198.770448][ T6878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.231'. [ 198.863834][ T5841] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 199.075430][ T5841] usb 1-1: Using ep0 maxpacket: 8 [ 199.098655][ T5841] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 199.122594][ T5841] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 199.148782][ T5841] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 199.175014][ T5841] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 199.210346][ T5841] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 199.232357][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.413794][ T54] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 199.459612][ T6873] Zero length message leads to an empty skb [ 199.476707][ T5841] usb 1-1: GET_CAPABILITIES returned 0 [ 199.482317][ T5841] usbtmc 1-1:16.0: can't read capabilities [ 199.783956][ T54] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 199.951953][ T6894] netlink: 252 bytes leftover after parsing attributes in process `syz.1.233'. [ 200.088225][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.130939][ T54] usb 5-1: config 0 descriptor?? [ 200.171501][ T54] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 200.577805][ T54] gspca_cpia1: usb_control_msg 03, error -71 [ 200.598466][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 200.619604][ T54] gspca_cpia1: usb_control_msg 01, error -71 [ 200.911678][ T54] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 201.147011][ T54] usb 5-1: USB disconnect, device number 2 [ 203.621711][ T5769] Bluetooth: Unexpected continuation frame (len 10) [ 204.658818][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.241'. [ 204.889448][ T6939] netlink: 252 bytes leftover after parsing attributes in process `syz.1.242'. [ 206.254231][ T5834] usb 1-1: USB disconnect, device number 3 [ 211.992922][ T6960] syz.0.246 (6960): drop_caches: 2 [ 212.589136][ T6987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.251'. [ 212.608711][ T5775] Bluetooth: Unexpected continuation frame (len 10) [ 212.643738][ T5775] Bluetooth: hci3: command 0x0406 tx timeout [ 212.649985][ T5769] Bluetooth: hci2: command 0x0406 tx timeout [ 212.656235][ T5769] Bluetooth: hci1: command 0x0406 tx timeout [ 215.094107][ T7002] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 215.101027][ T7002] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 215.139142][ T7008] TCP: out of memory -- consider tuning tcp_mem [ 215.183128][ T7002] vhci_hcd vhci_hcd.0: Device attached [ 215.225121][ T7015] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(8) [ 215.231729][ T7015] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 215.327291][ T7015] vhci_hcd vhci_hcd.0: Device attached [ 215.384017][ T23] vhci_hcd: vhci_device speed not set [ 215.434203][ T7002] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(7) [ 215.440796][ T7002] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 215.463160][ T7002] vhci_hcd vhci_hcd.0: Device attached [ 215.471587][ T7020] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 215.478246][ T7020] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 215.486323][ T7020] vhci_hcd vhci_hcd.0: Device attached [ 215.494548][ T7009] vhci_hcd: connection closed [ 215.495519][ T23] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 215.509123][ T7022] vhci_hcd: connection closed [ 215.509338][ T7016] vhci_hcd: connection closed [ 215.515410][ T1094] vhci_hcd: stop threads [ 215.580361][ T7023] vhci_hcd: connection closed [ 215.581890][ T1094] vhci_hcd: release socket [ 215.600097][ T1094] vhci_hcd: disconnect device [ 215.621276][ T1094] vhci_hcd: stop threads [ 215.642117][ T1094] vhci_hcd: release socket [ 215.659505][ T1094] vhci_hcd: disconnect device [ 215.685938][ T1094] vhci_hcd: stop threads [ 215.699026][ T1094] vhci_hcd: release socket [ 215.731918][ T1094] vhci_hcd: disconnect device [ 215.762920][ T1094] vhci_hcd: stop threads [ 215.767366][ T1094] vhci_hcd: release socket [ 215.772330][ T1094] vhci_hcd: disconnect device [ 216.947019][ T7035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.263'. [ 216.956273][ T5782] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 217.222137][ T7037] netlink: 252 bytes leftover after parsing attributes in process `syz.4.264'. [ 217.469197][ T5782] Bluetooth: Unexpected continuation frame (len 10) [ 217.845142][ T7048] TCP: out of memory -- consider tuning tcp_mem [ 218.972742][ T7059] netlink: 252 bytes leftover after parsing attributes in process `syz.3.274'. [ 219.094017][ T5814] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 219.373939][ T5814] usb 1-1: Using ep0 maxpacket: 32 [ 219.382933][ T5814] usb 1-1: no configurations [ 219.390357][ T5814] usb 1-1: can't read configurations, error -22 [ 219.786891][ T7070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.277'. [ 219.800702][ T5814] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 219.997404][ T5814] usb 1-1: Using ep0 maxpacket: 32 [ 220.010062][ T5814] usb 1-1: no configurations [ 220.021218][ T5814] usb 1-1: can't read configurations, error -22 [ 220.040537][ T5814] usb usb1-port1: attempt power cycle [ 220.468692][ T48] Bluetooth: hci0: Frame reassembly failed (-84) [ 220.484081][ T5814] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 220.513693][ T7072] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 220.520288][ T7072] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 220.548666][ T7072] vhci_hcd vhci_hcd.0: Device attached [ 220.552793][ T5814] usb 1-1: Using ep0 maxpacket: 32 [ 220.564268][ T5814] usb 1-1: no configurations [ 220.573059][ T5814] usb 1-1: can't read configurations, error -22 [ 220.597185][ T7077] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(7) [ 220.603790][ T7077] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 220.779778][ T7077] vhci_hcd vhci_hcd.0: Device attached [ 220.893539][ T7072] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 220.900225][ T7072] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 220.941409][ T7072] vhci_hcd vhci_hcd.0: Device attached [ 221.538715][ T5814] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 221.601407][ T7086] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(13) [ 221.608090][ T7086] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 221.662551][ T7086] vhci_hcd vhci_hcd.0: Device attached [ 221.684771][ T5814] usb 1-1: Using ep0 maxpacket: 32 [ 221.694149][ T5814] usb 1-1: no configurations [ 221.698815][ T5814] usb 1-1: can't read configurations, error -22 [ 221.709169][ T5814] usb usb1-port1: unable to enumerate USB device [ 221.716649][ T7079] vhci_hcd: connection closed [ 221.720960][ T7073] vhci_hcd: connection reset by peer [ 221.720960][ T7084] vhci_hcd: connection closed [ 221.732532][ T1082] vhci_hcd: stop threads [ 221.759088][ T1082] vhci_hcd: release socket [ 221.764934][ T7087] vhci_hcd: connection closed [ 221.767846][ T1082] vhci_hcd: disconnect device [ 221.779341][ T1082] vhci_hcd: stop threads [ 221.784013][ T1082] vhci_hcd: release socket [ 221.785460][ T7090] TCP: out of memory -- consider tuning tcp_mem [ 221.788634][ T1082] vhci_hcd: disconnect device [ 221.801452][ T1082] vhci_hcd: stop threads [ 221.807530][ T1082] vhci_hcd: release socket [ 221.814397][ T1082] vhci_hcd: disconnect device [ 221.819638][ T1082] vhci_hcd: stop threads [ 221.837847][ T1082] vhci_hcd: release socket [ 221.842434][ T1082] vhci_hcd: disconnect device [ 221.893797][ T23] vhci_hcd: vhci_device speed not set [ 221.952293][ T7093] Process accounting resumed [ 222.008190][ T7098] netlink: 252 bytes leftover after parsing attributes in process `syz.1.285'. [ 222.470907][ T7106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.287'. [ 222.482565][ T5778] Bluetooth: hci0: command 0x1003 tx timeout [ 222.504217][ T5782] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 223.175243][ T7110] netlink: set zone limit has 8 unknown bytes [ 223.280099][ T7110] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.079853][ T5860] usb usb40-port1: attempt power cycle [ 224.085544][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 225.321527][ T7110] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.373750][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 225.389496][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.415854][ T9] usb 2-1: config 0 has no interfaces? [ 225.432376][ T9] usb 2-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 225.441835][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.473026][ T9] usb 2-1: Product: syz [ 225.488598][ T9] usb 2-1: Manufacturer: syz [ 225.505562][ T9] usb 2-1: SerialNumber: syz [ 225.512960][ T7122] TCP: out of memory -- consider tuning tcp_mem [ 225.534926][ T9] usb 2-1: config 0 descriptor?? [ 225.570463][ T7110] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.749774][ T5814] usb 2-1: USB disconnect, device number 5 [ 225.799558][ T7110] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.824889][ T5860] usb usb40-port1: unable to enumerate USB device [ 225.854799][ T7125] Process accounting resumed [ 225.972705][ T7110] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.007948][ T7128] netlink: 252 bytes leftover after parsing attributes in process `syz.3.296'. [ 226.029133][ T7110] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.074334][ T7110] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.110028][ T7110] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.492461][ T7142] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 226.499056][ T7142] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 226.507298][ T7136] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 226.513870][ T7136] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 226.525438][ T7136] vhci_hcd vhci_hcd.0: Device attached [ 226.533206][ T7139] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 226.539854][ T7139] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 226.548099][ T7142] vhci_hcd vhci_hcd.0: Device attached [ 226.631600][ T7149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.299'. [ 227.135047][ T9] vhci_hcd: vhci_device speed not set [ 227.414555][ T7139] vhci_hcd vhci_hcd.0: Device attached [ 227.444211][ T7136] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(7) [ 227.450817][ T7136] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 227.492936][ T7136] vhci_hcd vhci_hcd.0: Device attached [ 227.499120][ T9] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 227.515577][ T7153] TCP: out of memory -- consider tuning tcp_mem [ 227.519140][ T7148] vhci_hcd: connection closed [ 227.522652][ T7146] vhci_hcd: connection closed [ 227.524041][ T1134] vhci_hcd: stop threads [ 227.533745][ T7143] vhci_hcd: connection closed [ 227.539092][ T7137] vhci_hcd: connection reset by peer [ 227.567967][ T1134] vhci_hcd: release socket [ 227.592753][ T1134] vhci_hcd: disconnect device [ 227.604286][ T1134] vhci_hcd: stop threads [ 227.610674][ T1134] vhci_hcd: release socket [ 227.618963][ T1134] vhci_hcd: disconnect device [ 227.632088][ T1134] vhci_hcd: stop threads [ 227.639116][ T1134] vhci_hcd: release socket [ 227.929557][ T1134] vhci_hcd: disconnect device [ 228.107352][ T1134] vhci_hcd: stop threads [ 228.202316][ T1134] vhci_hcd: release socket [ 228.312402][ T1134] vhci_hcd: disconnect device [ 228.394175][ T5782] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 228.402064][ T5778] Bluetooth: hci0: command 0x1003 tx timeout [ 229.199819][ T7169] netlink: 252 bytes leftover after parsing attributes in process `syz.3.307'. [ 231.834014][ T5812] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 232.183812][ T5812] usb 1-1: Using ep0 maxpacket: 16 [ 232.196577][ T5812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.280282][ T7202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.317'. [ 232.820824][ T5812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.950117][ T9] vhci_hcd: vhci_device speed not set [ 233.087454][ T5812] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 233.329724][ T5812] usb 1-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 233.383573][ T5812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.451483][ T5812] usb 1-1: config 0 descriptor?? [ 233.523373][ T7207] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 233.529978][ T7207] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 233.566379][ T7207] vhci_hcd vhci_hcd.0: Device attached [ 233.764453][ T23] vhci_hcd: vhci_device speed not set [ 233.864045][ T23] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 233.919446][ T7207] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 233.926176][ T7207] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 234.069201][ T7207] vhci_hcd vhci_hcd.0: Device attached [ 234.165677][ T7215] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(7) [ 234.172271][ T7215] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 234.205313][ T7215] vhci_hcd vhci_hcd.0: Device attached [ 234.212467][ T7220] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(13) [ 234.214364][ T5812] hid-u2fzero 0003:10C4:8ACF.0001: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.0-1/input0 [ 234.219635][ T7220] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 234.302227][ T5812] hid-u2fzero 0003:10C4:8ACF.0001: U2F Zero LED initialised [ 234.327142][ T7220] vhci_hcd vhci_hcd.0: Device attached [ 234.333121][ T5812] general protection fault, probably for non-canonical address 0xdffffc0000000015: 0000 [#1] PREEMPT SMP KASAN [ 234.338163][ T7210] vhci_hcd: connection reset by peer [ 234.344962][ T5812] KASAN: null-ptr-deref in range [0x00000000000000a8-0x00000000000000af] [ 234.345006][ T5812] CPU: 0 PID: 5812 Comm: kworker/0:3 Not tainted 6.6.95-syzkaller #0 [ 234.366803][ T5812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 234.373763][ T7221] vhci_hcd: connection closed [ 234.376856][ T5812] Workqueue: usb_hub_wq hub_event [ 234.377122][ T7216] vhci_hcd: connection closed [ 234.381576][ T5812] [ 234.381601][ T5812] RIP: 0010:u2fzero_rng_read+0x233/0x630 [ 234.386698][ T7217] vhci_hcd: connection closed [ 234.391309][ T5812] Code: 10 42 80 3c 38 00 74 08 48 89 df e8 e7 94 fa f9 41 bf a8 00 00 00 4c 03 3b 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 5f 95 fa f9 48 8d 44 24 60 49 89 07 [ 234.423570][ T5812] RSP: 0018:ffffc9000487e780 EFLAGS: 00010202 [ 234.429662][ T5812] RAX: 0000000000000015 RBX: ffff88802dba9030 RCX: dffffc0000000000 [ 234.437653][ T5812] RDX: 0000000000000000 RSI: ffffc9000487e8a0 RDI: ffff88802716a568 [ 234.445642][ T5812] RBP: ffffc9000487e998 R08: 0000000000000000 R09: 0000000000000000 [ 234.453647][ T5812] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88802dba9300 [ 234.461637][ T5812] R13: 1ffff9200090fcf8 R14: ffff88802dba9418 R15: 00000000000000a8 [ 234.469631][ T5812] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 234.478574][ T5812] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 234.485160][ T5812] CR2: 00007fd3a09b7bac CR3: 0000000064d30000 CR4: 00000000003506f0 [ 234.493169][ T5812] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 234.501199][ T5812] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 234.509194][ T5812] Call Trace: [ 234.512482][ T5812] [ 234.515423][ T5812] ? u2fzero_brightness_set+0x2a0/0x2a0 [ 234.520987][ T5812] ? add_early_randomness+0x1e/0x1a0 [ 234.526297][ T5812] ? mutex_unlock+0x10/0x10 [ 234.530822][ T5812] ? u2fzero_brightness_set+0x2a0/0x2a0 [ 234.536376][ T5812] add_early_randomness+0x7a/0x1a0 [ 234.541532][ T5812] hwrng_register+0x3db/0x4a0 [ 234.546221][ T5812] devm_hwrng_register+0x47/0xb0 [ 234.551171][ T5812] u2fzero_probe+0x348/0x460 [ 234.555769][ T5812] hid_device_probe+0x293/0x5b0 [ 234.560636][ T5812] ? hid_uevent+0x350/0x350 [ 234.565150][ T5812] really_probe+0x25b/0xb40 [ 234.569671][ T5812] ? pm_runtime_barrier+0x14b/0x1c0 [ 234.574891][ T5812] __driver_probe_device+0x18c/0x330 [ 234.580191][ T5812] driver_probe_device+0x4f/0x420 [ 234.585229][ T5812] __device_attach_driver+0x2ca/0x520 [ 234.590621][ T5812] bus_for_each_drv+0x24b/0x2d0 [ 234.595486][ T5812] ? coredump_store+0x90/0x90 [ 234.600175][ T5812] ? bus_find_device+0x320/0x320 [ 234.605127][ T5812] __device_attach+0x2b5/0x400 [ 234.609906][ T5812] ? device_attach+0x20/0x20 [ 234.614512][ T5812] ? preempt_schedule_thunk+0x1a/0x30 [ 234.619918][ T5812] bus_probe_device+0x180/0x260 [ 234.624767][ T786] usb usb34-port1: attempt power cycle [ 234.630265][ T5812] device_add+0x85b/0xc20 [ 234.634611][ T5812] hid_add_device+0x38d/0x530 [ 234.639306][ T5812] usbhid_probe+0xe02/0x1220 [ 234.643914][ T5812] usb_probe_interface+0x5a4/0xb00 [ 234.649057][ T5812] ? usb_register_driver+0x3d0/0x3d0 [ 234.654350][ T5812] really_probe+0x25b/0xb40 [ 234.658877][ T5812] ? pm_runtime_barrier+0x14b/0x1c0 [ 234.664158][ T5812] __driver_probe_device+0x18c/0x330 [ 234.669483][ T5812] driver_probe_device+0x4f/0x420 [ 234.674538][ T5812] __device_attach_driver+0x2ca/0x520 [ 234.679955][ T5812] bus_for_each_drv+0x24b/0x2d0 [ 234.684821][ T5812] ? coredump_store+0x90/0x90 [ 234.689507][ T5812] ? bus_find_device+0x320/0x320 [ 234.694458][ T5812] __device_attach+0x2b5/0x400 [ 234.699245][ T5812] ? device_attach+0x20/0x20 [ 234.703863][ T5812] ? __kmem_cache_free+0xba/0x1f0 [ 234.708891][ T5812] ? do_raw_spin_unlock+0x121/0x230 [ 234.714104][ T5812] bus_probe_device+0x180/0x260 [ 234.718971][ T5812] device_add+0x85b/0xc20 [ 234.723344][ T5812] usb_set_configuration+0x1a79/0x20c0 [ 234.728855][ T5812] usb_generic_driver_probe+0x8d/0x150 [ 234.734381][ T5812] usb_probe_device+0x13d/0x280 [ 234.739388][ T5812] ? usb_register_device_driver+0x230/0x230 [ 234.745336][ T5812] really_probe+0x25b/0xb40 [ 234.749896][ T5812] ? pm_runtime_barrier+0x14b/0x1c0 [ 234.755156][ T5812] __driver_probe_device+0x18c/0x330 [ 234.760594][ T5812] driver_probe_device+0x4f/0x420 [ 234.765675][ T5812] __device_attach_driver+0x2ca/0x520 [ 234.771103][ T5812] bus_for_each_drv+0x24b/0x2d0 [ 234.775985][ T5812] ? coredump_store+0x90/0x90 [ 234.780672][ T5812] ? bus_find_device+0x320/0x320 [ 234.785623][ T5812] __device_attach+0x2b5/0x400 [ 234.790401][ T5812] ? device_attach+0x20/0x20 [ 234.795008][ T5812] ? __kmem_cache_free+0xba/0x1f0 [ 234.800125][ T5812] ? do_raw_spin_unlock+0x121/0x230 [ 234.804342][ T7209] netlink: 252 bytes leftover after parsing attributes in process `syz.3.320'. [ 234.805419][ T5812] bus_probe_device+0x180/0x260 [ 234.819336][ T5812] device_add+0x85b/0xc20 [ 234.823707][ T5812] usb_new_device+0xa31/0x1630 [ 234.829356][ T5812] ? usb_disconnect+0x8a0/0x8a0 [ 234.835224][ T5812] ? _raw_spin_unlock_irq+0x23/0x50 [ 234.841072][ T5812] ? lockdep_hardirqs_on+0x98/0x150 [ 234.846292][ T5812] hub_event+0x2957/0x49c0 [ 234.850746][ T5812] ? led_work+0x720/0x720 [ 234.855093][ T5812] ? read_lock_is_recursive+0x20/0x20 [ 234.860481][ T5812] ? _raw_spin_unlock_irq+0x23/0x50 [ 234.865703][ T5812] ? process_scheduled_works+0x957/0x15b0 [ 234.871443][ T5812] ? process_scheduled_works+0x957/0x15b0 [ 234.877183][ T5812] process_scheduled_works+0xa45/0x15b0 [ 234.882761][ T5812] ? assign_work+0x400/0x400 [ 234.887371][ T5812] ? assign_work+0x39e/0x400 [ 234.892073][ T5812] worker_thread+0xa55/0xfc0 [ 234.896693][ T5812] kthread+0x2fa/0x390 [ 234.900945][ T5812] ? pr_cont_work+0x560/0x560 [ 234.905639][ T5812] ? kthread_blkcg+0xd0/0xd0 [ 234.910243][ T5812] ret_from_fork+0x48/0x80 [ 234.914706][ T5812] ? kthread_blkcg+0xd0/0xd0 [ 234.919328][ T5812] ret_from_fork_asm+0x11/0x20 [ 234.924136][ T5812] [ 234.927180][ T5812] Modules linked in: [ 234.934503][ T11] vhci_hcd: stop threads [ 234.938817][ T11] vhci_hcd: release socket [ 234.943426][ T11] vhci_hcd: disconnect device [ 234.948491][ T11] vhci_hcd: stop threads [ 234.952787][ T11] vhci_hcd: release socket [ 234.958140][ T11] vhci_hcd: disconnect device [ 234.999184][ T11] vhci_hcd: stop threads [ 235.002549][ T5812] ---[ end trace 0000000000000000 ]--- [ 235.011320][ T5812] RIP: 0010:u2fzero_rng_read+0x233/0x630 [ 235.014694][ T11] vhci_hcd: release socket [ 235.022198][ T5812] Code: 10 42 80 3c 38 00 74 08 48 89 df e8 e7 94 fa f9 41 bf a8 00 00 00 4c 03 3b 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 5f 95 fa f9 48 8d 44 24 60 49 89 07 [ 235.027670][ T11] vhci_hcd: disconnect device [ 235.047464][ T5812] RSP: 0018:ffffc9000487e780 EFLAGS: 00010202 [ 235.055777][ T5812] RAX: 0000000000000015 RBX: ffff88802dba9030 RCX: dffffc0000000000 [ 235.065520][ T5812] RDX: 0000000000000000 RSI: ffffc9000487e8a0 RDI: ffff88802716a568 [ 235.073130][ T11] vhci_hcd: stop threads [ 235.082780][ T11] vhci_hcd: release socket [ 235.085388][ T5812] RBP: ffffc9000487e998 R08: 0000000000000000 R09: 0000000000000000 [ 235.087941][ T11] vhci_hcd: disconnect device [ 235.095861][ T5812] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88802dba9300 [ 235.108541][ T5812] R13: 1ffff9200090fcf8 R14: ffff88802dba9418 R15: 00000000000000a8 [ 235.116911][ T5812] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 235.126478][ T5812] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 235.133104][ T5812] CR2: 00007f2edaa1ae9c CR3: 000000000cb30000 CR4: 00000000003506f0 [ 235.141238][ T5812] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 235.149394][ T5812] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 235.157768][ T5812] Kernel panic - not syncing: Fatal exception [ 235.164160][ T5812] Kernel Offset: disabled [ 235.168492][ T5812] Rebooting in 86400 seconds..