last executing test programs: 20.270539324s ago: executing program 0 (id=160): syz_emit_vhci(0x0, 0x24) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0xfff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = dup(r1) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@loopback, @in6=@loopback, 0x4e22, 0x1, 0x4e21, 0x4, 0x2, 0xa0, 0x0, 0x2c}, {0x2, 0x7ff, 0x0, 0x9, 0x4, 0xc, 0x3, 0x7}, {0x5, 0x2, 0x5, 0x869}, 0x1ff, 0x6e6bb8, 0x1, 0x1, 0x3}, {{@in6=@remote, 0x4d2, 0x32}, 0xa, @in6=@mcast1, 0x0, 0x3, 0x3, 0xdd, 0x10, 0x5, 0x4}}, 0xe8) statfs(0x0, 0x0) 19.728892934s ago: executing program 0 (id=161): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4, 0x2, 0x9}}}, 0xb4}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 19.328205847s ago: executing program 0 (id=163): mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 14.752622287s ago: executing program 0 (id=172): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000140)={0x0, 0x34324142, 0x2, @discrete={0x1, 0x401}}) r2 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r2, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r2, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) lseek(r2, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xba}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x90) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) openat$sw_sync(0xffffff9c, 0x0, 0x8044, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000080)) 14.740242246s ago: executing program 4 (id=173): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x3) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) dup(r4) bind$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) stat(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000200)) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) r6 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)) r7 = msgget$private(0x0, 0x193) msgsnd(r7, 0x0, 0x3f9, 0x800) msgrcv(r7, 0x0, 0x0, 0x3, 0x3000) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, 0x0, 0x0) 13.816442366s ago: executing program 2 (id=175): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000740)=ANY=[], 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 13.166284958s ago: executing program 4 (id=176): clock_gettime(0x1, &(0x7f0000000000)) syz_usb_connect(0x0, 0x4f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109023d0c020000000009049c00030103510009050a00000000000009050313000000000003270103"], 0x0) r0 = open(&(0x7f00000000c0)='./file2\x00', 0x70080, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0xff, 0x0, 0x7fff0004}]}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x9) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000017c0)=r1, 0x4) sendmsg$AUDIT_TRIM(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x3f6, 0x400, 0x70bd2a, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4008000}, 0xc014) 12.132783791s ago: executing program 2 (id=177): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x709000, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 11.65788151s ago: executing program 4 (id=178): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$setown(r3, 0x8, r2) socket$inet_udp(0x2, 0x2, 0x0) r4 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = fsmount(r4, 0x1, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r5, &(0x7f0000000140)='./file0\x00') 9.568768604s ago: executing program 4 (id=180): lsm_set_self_attr(0x69, 0x0, 0x42, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a5"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b700000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 8.296323326s ago: executing program 2 (id=182): mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 8.030664941s ago: executing program 1 (id=183): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 7.592666086s ago: executing program 1 (id=184): syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x24) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0xfff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = dup(r1) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@loopback, @in6=@loopback, 0x4e22, 0x1, 0x4e21, 0x4, 0x2, 0xa0, 0x0, 0x2c}, {0x2, 0x7ff, 0x0, 0x9, 0x4, 0xc, 0x3, 0x7}, {0x5, 0x2, 0x5, 0x869}, 0x1ff, 0x6e6bb8, 0x1, 0x1, 0x3}, {{@in6=@remote, 0x4d2, 0x32}, 0xa, @in6=@mcast1, 0x0, 0x3, 0x3, 0xdd, 0x10, 0x5, 0x4}}, 0xe8) statfs(0x0, 0x0) 7.348477773s ago: executing program 3 (id=185): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, &(0x7f0000000000)="ab", 0x1, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) 7.29518618s ago: executing program 1 (id=186): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x3) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) dup(r4) bind$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) stat(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000200)) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) r6 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)) r7 = msgget$private(0x0, 0x193) msgsnd(r7, 0x0, 0x3f9, 0x800) msgrcv(r7, 0x0, 0x0, 0x3, 0x3000) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, 0x0, 0x0) 5.988720229s ago: executing program 1 (id=187): socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x0, 0x3, 0x8, 0x6, 0x0, 0x5, 0x0}) 5.534512508s ago: executing program 0 (id=188): clock_gettime(0x1, &(0x7f0000000000)) syz_usb_connect(0x0, 0x4f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109023d0c020000000009049c00030103510009050a00000000000009050313000000000003270103"], 0x0) r0 = open(&(0x7f00000000c0)='./file2\x00', 0x70080, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0xff, 0x0, 0x7fff0004}]}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x9) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000017c0)=r1, 0x4) sendmsg$AUDIT_TRIM(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x3f6, 0x400, 0x70bd2a, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4008000}, 0xc014) 5.484714466s ago: executing program 3 (id=189): socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r0, 0x0, 0x0) 5.473179154s ago: executing program 1 (id=190): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$setown(r3, 0x8, r2) socket$inet_udp(0x2, 0x2, 0x0) r4 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = fsmount(r4, 0x1, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r5, &(0x7f0000000140)='./file0\x00') 5.114575285s ago: executing program 3 (id=191): r0 = socket(0x2, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = memfd_create(&(0x7f0000000680)='\x103q}2\x9a\xce\xaf^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99\x18\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1f\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\tRJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd99C\x9fF\x9c[M=\xa0^\xa8\xed)\xe8Z\xe8\x9b&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xc9\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8ZmH\x98\xaeb\xa5B5)\x80m\xff\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6\x05\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x19\x06U)j!\x91\'\x98\xd2kFN\xfa\x80)O\xb9(!n\x9d\x13\x15\xf1\x1a\xb8y\x14l\xd1', 0x7) flistxattr(0xffffffffffffffff, &(0x7f0000000440)=""/204, 0xcc) ioctl$FS_IOC_RESVSP(r6, 0x402c5828, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x762}) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r6, 0x0) syz_clone3(&(0x7f00000003c0)={0x385204080, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=@newtaction={0x3f0, 0x30, 0x1, 0x0, 0x0, {}, [{0x3dc, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_nat={0x1e0, 0x1e, 0x0, 0x0, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0x9, 0x3, 0x5, 0x69bf}, @local, @dev={0xac, 0x14, 0x14, 0x21}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x5, 0x8, 0x9, 0x9}, @remote, @dev={0xac, 0x14, 0x14, 0x2b}, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x4, 0xa, 0x1, 0x5}, @loopback, @loopback, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x2, 0x2, 0x1fb, 0xf}, @dev={0xac, 0x14, 0x14, 0x42}, @remote, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x6, 0x7, 0x8, 0x3}, @private=0xa010101, @multicast2, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xf, 0xf, 0x8, 0x7ff, 0x1}, @loopback, @remote, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x0, 0x0, 0x7fffffff, 0x1}, @rand_addr=0x64010100, @loopback, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x78c, 0x1, 0x4, 0x1, 0x200}, @private=0xa010102, @loopback, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x11, 0x0, 0x5}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, {0x50, 0x6, "4117e619610b069a41551d941a6ddfb78e60f826be4031b1468224692ff37b4451f5192e5fa0b24d3ffcb026417358592f1484700cc6dcaf74f9fe2f1282c364f8aa9a88fc125263a2a1fa6b"}, {0xc}, {0xc, 0x8, {0x2, 0x6}}}}, @m_vlan={0x60, 0x1c, 0x0, 0x0, {{0x9}, {0x4}, {0x32, 0x6, "69c71b26fdf199e8f386a7b68585df31987ee497fcd763572547356ab3e627d3406273db3cd31f27651d9e47c712"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x7}}}}, @m_police={0xa4, 0x80, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xf95, 0xffffffffffffffff, 0x2, 0x80, 0xff24, {0x6, 0x1, 0xf71, 0x5, 0x40, 0x5}, {0x3, 0x2, 0x445b, 0xffff, 0xf58, 0x3}, 0x3, 0x7, 0x200}}]]}, {0x3b, 0x6, "0d9dfebf6c979f7064043fc605bcb33c624c52aba67077c7b2229401e984014f66b567573e7096b8fa1c2e75459934647632a832d87398"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_gact={0xc8, 0x0, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x86, 0x6, 0x6, 0x7fffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x10001, 0x4, 0xffffffffffffffff, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x40010, 0x8001, 0x4, 0xfff, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0xff, 0x0, 0x0, 0x6}}]}, {0x39, 0x6, "ab6ed62e0f36036d7ee2fcca8e732038c70de4ec410fe02d1a0aaab00aa086b7558666bbd72142f4f3e2ff8301be87a648d05aa717"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x3f0}, 0x1, 0x0, 0x0, 0x804}, 0x0) 3.440685966s ago: executing program 4 (id=192): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0xeffffffb, 0x80800) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x200, 0x4000, 0x4, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x3, 0x0, 0x2, r2, 0xb}) 3.332345543s ago: executing program 0 (id=193): sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.331136893s ago: executing program 1 (id=194): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket(0x11, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x8100, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="6c6f636b206d836d00"], 0x9) ioctl$SNAPSHOT_FREE(r3, 0x3305) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xf3890fa1a144c15) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000001c0)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x0, 0x1000, 0xd}}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x7, 0x5) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100}, &(0x7f0000000200), &(0x7f00000001c0)) 1.459549765s ago: executing program 4 (id=195): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000400), 0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000009c0)={0x10, 0xfff}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, 0x0) setrlimit(0x4, &(0x7f0000000100)={0x5, 0x1}) setrlimit(0xc, &(0x7f00000002c0)={0x200, 0x2}) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x4000, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) 1.457833191s ago: executing program 3 (id=196): ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5202) 1.33263515s ago: executing program 2 (id=197): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x18) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendto(r1, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 1.205043887s ago: executing program 3 (id=198): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="14", @ANYRES64=r2, @ANYRESOCT=r1], &(0x7f0000000000), 0x0) mount$bind(0x0, 0x0, 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) 228.906382ms ago: executing program 2 (id=199): bpf$MAP_CREATE(0x0, 0x0, 0x48) semctl$IPC_INFO(0x0, 0x3, 0x3, &(0x7f00000007c0)=""/219) 222.46968ms ago: executing program 3 (id=200): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_usb_connect(0x1, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=201): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r6, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x800452d3, &(0x7f0000000600)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x4000c00) syz_emit_ethernet(0x126, &(0x7f00000009c0)={@local, @random="c6eb8947e4e4", @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@ipv4={0x800, @icmp={{0x2f, 0x4, 0x0, 0x0, 0x114, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @local, {[@cipso={0x86, 0x2c, 0xffffffffffffffff, [{0x7, 0x9, "1734adb21ccaa9"}, {0x7, 0x9, "e7200a6029addf"}, {0x2, 0xd, "9ff77b25106e6b6a696713"}, {0x7, 0x7, "0cda2123c6"}]}, @cipso={0x86, 0x2c, 0x0, [{0x0, 0x6, "3a73dabc"}, {0x1, 0x2}, {0x1, 0x2}, {0x7, 0xf, "dceb1201fbb8376aebf19ab8de"}, {0x1, 0x2}, {0x5, 0xb, "034bfa78ca8a7c8c61"}]}, @rr={0x7, 0xb, 0x6c, [@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x3e, 0x1, [{0x1, 0x11, "a6577751e8467146af504a986a4cf7"}, {0x1, 0x10, "1659d646b35346b1a10634d41089"}, {0x1, 0x8, "49f14677d8dd"}, {0x5, 0xf, "fd67145223b6ecbd06fe11bd22"}]}]}}, @time_exceeded={0xb, 0xe0dbf46ca9d044ba, 0x0, 0x3, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private=0xa010101, @multicast1, {[@cipso={0x86, 0x27, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x2}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @multicast1, @multicast2]}]}}}}}}}, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.104' (ED25519) to the list of known hosts. [ 71.695829][ T5800] cgroup: Unknown subsys name 'net' [ 71.936916][ T5800] cgroup: Unknown subsys name 'cpuset' [ 71.972963][ T5800] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.621741][ T5800] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.261952][ T5130] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.272437][ T5130] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.273232][ T5130] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.274425][ T5130] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.275224][ T5130] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.277793][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.281600][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.314738][ T5819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.344320][ T5819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.348165][ T5819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.423194][ T5817] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.425196][ T5817] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.425919][ T5817] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.427619][ T5817] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.430569][ T5817] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.537971][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.540526][ T5130] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.541940][ T5130] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.544544][ T5130] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.545292][ T5814] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.583853][ T5817] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.596271][ T5814] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.603164][ T5817] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.604387][ T5817] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.605086][ T5817] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.159036][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 77.399303][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 77.448082][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 77.909607][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.910843][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.911196][ T5811] bridge_slave_0: entered allmulticast mode [ 77.913740][ T5811] bridge_slave_0: entered promiscuous mode [ 77.938849][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 77.949165][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 77.957339][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.957453][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.957604][ T5811] bridge_slave_1: entered allmulticast mode [ 77.960353][ T5811] bridge_slave_1: entered promiscuous mode [ 78.313873][ T5817] Bluetooth: hci0: command tx timeout [ 78.394335][ T5817] Bluetooth: hci1: command tx timeout [ 78.472628][ T5817] Bluetooth: hci2: command tx timeout [ 78.527597][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.603167][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.604271][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.604401][ T5816] bridge_slave_0: entered allmulticast mode [ 78.605861][ T5816] bridge_slave_0: entered promiscuous mode [ 78.629455][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.629864][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.629995][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.630147][ T5821] bridge_slave_0: entered allmulticast mode [ 78.632334][ T5817] Bluetooth: hci3: command tx timeout [ 78.634074][ T5821] bridge_slave_0: entered promiscuous mode [ 78.637362][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.637498][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.637938][ T5816] bridge_slave_1: entered allmulticast mode [ 78.640443][ T5816] bridge_slave_1: entered promiscuous mode [ 78.712728][ T5817] Bluetooth: hci4: command tx timeout [ 78.763197][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.763322][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.763440][ T5821] bridge_slave_1: entered allmulticast mode [ 78.764971][ T5821] bridge_slave_1: entered promiscuous mode [ 79.225046][ T5811] team0: Port device team_slave_0 added [ 79.287512][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.416881][ T5811] team0: Port device team_slave_1 added [ 79.421377][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.440676][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.440907][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.441330][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.441496][ T5822] bridge_slave_0: entered allmulticast mode [ 79.467088][ T5822] bridge_slave_0: entered promiscuous mode [ 79.593760][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.593897][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.594076][ T5824] bridge_slave_0: entered allmulticast mode [ 79.596794][ T5824] bridge_slave_0: entered promiscuous mode [ 79.685846][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.754035][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.754173][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.754370][ T5822] bridge_slave_1: entered allmulticast mode [ 79.761246][ T5822] bridge_slave_1: entered promiscuous mode [ 79.773379][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.773512][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.773698][ T5824] bridge_slave_1: entered allmulticast mode [ 79.776457][ T5824] bridge_slave_1: entered promiscuous mode [ 80.164199][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.164210][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.164223][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.244894][ T5816] team0: Port device team_slave_0 added [ 80.366705][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.366721][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.366751][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.368740][ T5821] team0: Port device team_slave_0 added [ 80.371067][ T5816] team0: Port device team_slave_1 added [ 80.376990][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.390429][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.393671][ T5817] Bluetooth: hci0: command tx timeout [ 80.415163][ T5821] team0: Port device team_slave_1 added [ 80.472395][ T5817] Bluetooth: hci1: command tx timeout [ 80.509686][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.511723][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.552400][ T5817] Bluetooth: hci2: command tx timeout [ 80.712377][ T5817] Bluetooth: hci3: command tx timeout [ 80.792448][ T5817] Bluetooth: hci4: command tx timeout [ 81.073839][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.073855][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.073877][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.313536][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.313546][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.313559][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.314589][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.314602][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.314624][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.316757][ T5822] team0: Port device team_slave_0 added [ 81.319615][ T5824] team0: Port device team_slave_0 added [ 81.401359][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.401375][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.401398][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.423984][ T5822] team0: Port device team_slave_1 added [ 81.428041][ T5824] team0: Port device team_slave_1 added [ 81.446198][ T5811] hsr_slave_0: entered promiscuous mode [ 81.447718][ T5811] hsr_slave_1: entered promiscuous mode [ 81.596642][ T1072] cfg80211: failed to load regulatory.db [ 82.113751][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.113762][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.113776][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.218154][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.218165][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.218178][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.384456][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.384471][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.384495][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.396819][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.396834][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.396857][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.406891][ T5816] hsr_slave_0: entered promiscuous mode [ 82.408013][ T5816] hsr_slave_1: entered promiscuous mode [ 82.409034][ T5816] debugfs: 'hsr0' already exists in 'hsr' [ 82.409151][ T5816] Cannot create hsr debugfs directory [ 82.482900][ T5817] Bluetooth: hci0: command tx timeout [ 82.563318][ T5817] Bluetooth: hci1: command tx timeout [ 82.609378][ T5821] hsr_slave_0: entered promiscuous mode [ 82.610123][ T5821] hsr_slave_1: entered promiscuous mode [ 82.610670][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 82.610687][ T5821] Cannot create hsr debugfs directory [ 82.632318][ T5817] Bluetooth: hci2: command tx timeout [ 82.792506][ T5817] Bluetooth: hci3: command tx timeout [ 82.872586][ T5817] Bluetooth: hci4: command tx timeout [ 83.284241][ T5822] hsr_slave_0: entered promiscuous mode [ 83.285537][ T5822] hsr_slave_1: entered promiscuous mode [ 83.286388][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 83.286411][ T5822] Cannot create hsr debugfs directory [ 83.297151][ T5824] hsr_slave_0: entered promiscuous mode [ 83.298364][ T5824] hsr_slave_1: entered promiscuous mode [ 83.299184][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 83.299204][ T5824] Cannot create hsr debugfs directory [ 84.552320][ T5817] Bluetooth: hci0: command tx timeout [ 84.601041][ T5811] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.642349][ T5817] Bluetooth: hci1: command tx timeout [ 84.674651][ T5811] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.712342][ T5817] Bluetooth: hci2: command tx timeout [ 84.717667][ T5811] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.749706][ T5811] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.840244][ T5816] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.872381][ T5817] Bluetooth: hci3: command tx timeout [ 84.881762][ T5816] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.926183][ T5816] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.952614][ T5817] Bluetooth: hci4: command tx timeout [ 84.976888][ T5816] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.106240][ T5821] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.139945][ T5821] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.168225][ T5821] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.218265][ T5821] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.366632][ T5822] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.421493][ T5822] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.450713][ T5822] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.502097][ T5822] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.639504][ T5824] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.690369][ T5824] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.736350][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.737521][ T5824] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.781374][ T5824] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.890928][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.920593][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.941987][ T3997] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.950219][ T3997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.987857][ T3997] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.987977][ T3997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.041535][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.076151][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.095425][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.095670][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.141629][ T3997] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.141737][ T3997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.193403][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.225153][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.246749][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.246868][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.286847][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.286965][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.366960][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.384006][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.439223][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.439342][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.475302][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.481652][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.545365][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.625030][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.625168][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.711036][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.711197][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.914837][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.116433][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.225221][ T5811] veth0_vlan: entered promiscuous mode [ 87.306679][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.325032][ T5811] veth1_vlan: entered promiscuous mode [ 87.415597][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.446824][ T5816] veth0_vlan: entered promiscuous mode [ 87.545738][ T5816] veth1_vlan: entered promiscuous mode [ 87.578300][ T5811] veth0_macvtap: entered promiscuous mode [ 87.620079][ T5811] veth1_macvtap: entered promiscuous mode [ 87.627580][ T5821] veth0_vlan: entered promiscuous mode [ 87.651755][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.685460][ T5821] veth1_vlan: entered promiscuous mode [ 87.725853][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.749315][ T5816] veth0_macvtap: entered promiscuous mode [ 87.779033][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.781550][ T5816] veth1_macvtap: entered promiscuous mode [ 87.839914][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.847990][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.854224][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.858661][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.947460][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.953465][ T5821] veth0_macvtap: entered promiscuous mode [ 88.015070][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.022024][ T5824] veth0_vlan: entered promiscuous mode [ 88.040656][ T5821] veth1_macvtap: entered promiscuous mode [ 88.138526][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.149808][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.167127][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.181168][ T5824] veth1_vlan: entered promiscuous mode [ 88.189160][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.281715][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.305754][ T3997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.305782][ T3997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.422044][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.495792][ T5822] veth0_vlan: entered promiscuous mode [ 88.538721][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.548036][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.570721][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.571794][ T3997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.571810][ T3997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.610891][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.642022][ T5822] veth1_vlan: entered promiscuous mode [ 88.658406][ T3997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.658424][ T3997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.715086][ T5824] veth0_macvtap: entered promiscuous mode [ 88.795326][ T5824] veth1_macvtap: entered promiscuous mode [ 88.799294][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.799313][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.029544][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.029563][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.074882][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.105209][ T5822] veth0_macvtap: entered promiscuous mode [ 89.139776][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.191837][ T5822] veth1_macvtap: entered promiscuous mode [ 89.217251][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.236973][ T3997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.236992][ T3997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.237789][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.271121][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.302957][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.405085][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.442153][ T5931] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.442514][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 89.499996][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.596624][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 89.632125][ T10] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 89.633277][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 89.633303][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 89.633326][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 89.633348][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.633389][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 89.633410][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.651448][ T145] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.657298][ T145] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.661025][ T145] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.663483][ T145] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.918675][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.918694][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.046188][ T10] usb 1-1: usb_control_msg returned -32 [ 90.046237][ T10] usbtmc 1-1:16.0: can't read capabilities [ 90.516686][ T5943] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9'. [ 90.594054][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.594074][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.653186][ T3997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.653204][ T3997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.840062][ T5948] usbtmc 1-1:16.0: CHECK_CLEAR_STATUS returned 3 [ 90.862490][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.862508][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.085196][ T5884] usb 1-1: USB disconnect, device number 2 [ 94.172278][ T5988] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 94.336082][ T5975] Bluetooth: MGMT ver 1.23 [ 96.389543][ T6011] program syz.1.27 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.802253][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 96.802295][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 96.802327][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 96.802374][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 96.802406][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 96.802439][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 96.802471][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 96.802503][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 96.802535][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 96.802567][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 97.662317][ T5906] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.832512][ T5906] usb 4-1: Using ep0 maxpacket: 16 [ 97.835801][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.835830][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.835848][ T5906] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 97.835886][ T5906] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 97.835908][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.937027][ T5906] usb 4-1: config 0 descriptor?? [ 99.289153][ T5906] usbhid 4-1:0.0: can't add hid device: -71 [ 99.289272][ T5906] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 99.304300][ T5906] usb 4-1: USB disconnect, device number 2 [ 108.192711][ T5825] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 108.583399][ T5825] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.583469][ T5825] usb 4-1: config 0 has no interfaces? [ 108.583572][ T5825] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 108.583638][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.852053][ T5825] usb 4-1: config 0 descriptor?? [ 109.460168][ T5812] usb 4-1: USB disconnect, device number 3 [ 111.637255][ T6091] binder_alloc: 6089: binder_alloc_buf, no vma [ 113.305893][ T5817] Bluetooth: hci4: Unable to find connection for big 0x6f [ 113.712496][ T37] audit: type=1326 audit(1759411162.563:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6109 comm="syz.1.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23be44eec9 code=0x7ffc0000 [ 113.712530][ T37] audit: type=1326 audit(1759411162.563:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6109 comm="syz.1.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23be44eec9 code=0x7ffc0000 [ 113.712553][ T37] audit: type=1326 audit(1759411162.563:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6109 comm="syz.1.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f23be44eec9 code=0x7ffc0000 [ 113.712575][ T37] audit: type=1326 audit(1759411162.573:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6109 comm="syz.1.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23be44eec9 code=0x7ffc0000 [ 113.712602][ T37] audit: type=1326 audit(1759411162.573:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6109 comm="syz.1.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f23be44eec9 code=0x7ffc0000 [ 113.712623][ T37] audit: type=1326 audit(1759411162.573:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6109 comm="syz.1.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23be44eec9 code=0x7ffc0000 [ 113.712650][ T37] audit: type=1326 audit(1759411162.573:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6109 comm="syz.1.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f23be44eec9 code=0x7ffc0000 [ 113.712672][ T37] audit: type=1326 audit(1759411162.573:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6109 comm="syz.1.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23be44eec9 code=0x7ffc0000 [ 113.712693][ T37] audit: type=1326 audit(1759411162.573:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6109 comm="syz.1.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f23be44eec9 code=0x7ffc0000 [ 113.712716][ T37] audit: type=1326 audit(1759411162.573:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6109 comm="syz.1.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23be44eec9 code=0x7ffc0000 [ 114.029815][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 114.077552][ T39] Bluetooth: hci5: Frame reassembly failed (-84) [ 115.832590][ T5817] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 116.102382][ T5954] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 117.313406][ T5954] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 117.313430][ T5954] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.313447][ T5954] usb 1-1: config 0 has no interface number 0 [ 117.313493][ T5954] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 117.313515][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.319236][ T5954] usb 1-1: config 0 descriptor?? [ 117.792737][ T5954] usb 1-1: can't set config #0, error -71 [ 117.856077][ T5954] usb 1-1: USB disconnect, device number 3 [ 118.157511][ T6140] netlink: 'syz.4.66': attribute type 10 has an invalid length. [ 118.157526][ T6140] netlink: 40 bytes leftover after parsing attributes in process `syz.4.66'. [ 118.157658][ T6140] dummy0: entered promiscuous mode [ 118.250879][ T6140] bridge0: port 3(dummy0) entered blocking state [ 118.251032][ T6140] bridge0: port 3(dummy0) entered disabled state [ 118.357384][ T6140] dummy0: entered allmulticast mode [ 118.541515][ T6140] bridge0: port 3(dummy0) entered blocking state [ 118.541678][ T6140] bridge0: port 3(dummy0) entered forwarding state [ 118.570950][ T6147] Bluetooth: MGMT ver 1.23 [ 119.409904][ T59] Bluetooth: hci2: Unable to find connection for big 0x00 [ 119.436110][ T6137] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 120.682470][ T6150] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 126.367110][ T59] Bluetooth: hci1: Unable to find connection for big 0x00 [ 129.502309][ T5885] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 129.694591][ T5885] usb 3-1: config index 0 descriptor too short (expected 3133, got 61) [ 129.694619][ T5885] usb 3-1: config 0 has an invalid interface number: 156 but max is 1 [ 129.694637][ T5885] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.694652][ T5885] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 129.694669][ T5885] usb 3-1: config 0 has no interface number 0 [ 129.694722][ T5885] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 129.694743][ T5885] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 129.694766][ T5885] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 129.694785][ T5885] usb 3-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.694825][ T5885] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 129.694845][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.701403][ T5885] usb 3-1: config 0 descriptor?? [ 129.739788][ T59] Bluetooth: hci3: Unable to find connection for big 0x00 [ 129.846452][ T5885] gspca_main: spca561-2.14.0 probing abcd:cdee [ 130.044938][ T5885] spca561 3-1:0.156: probe with driver spca561 failed with error -22 [ 130.046741][ T5885] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 130.046782][ T5885] usb 3-1: MIDIStreaming interface descriptor not found [ 130.341059][ T5885] usb 3-1: USB disconnect, device number 2 [ 132.803307][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.803420][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.197148][ T59] Bluetooth: hci0: Unable to find connection for big 0x00 [ 134.952868][ T5802] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 135.128970][ T5802] usb 5-1: config index 0 descriptor too short (expected 3133, got 61) [ 135.128997][ T5802] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 135.129016][ T5802] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.129031][ T5802] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 135.129050][ T5802] usb 5-1: config 0 has no interface number 0 [ 135.129096][ T5802] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 135.129117][ T5802] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 135.129140][ T5802] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 135.129170][ T5802] usb 5-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.129210][ T5802] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 135.129230][ T5802] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.253169][ T5802] usb 5-1: config 0 descriptor?? [ 135.271285][ T5802] gspca_main: spca561-2.14.0 probing abcd:cdee [ 135.473640][ T5802] spca561 5-1:0.156: probe with driver spca561 failed with error -22 [ 135.475214][ T5802] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 135.475266][ T5802] usb 5-1: MIDIStreaming interface descriptor not found [ 135.802590][ T5802] usb 5-1: USB disconnect, device number 2 [ 136.877109][ T59] Bluetooth: hci0: Unable to find connection for big 0x00 [ 138.422274][ T5802] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 138.588097][ T5802] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 138.588155][ T5802] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 138.588176][ T5802] usb 1-1: config 0 interface 0 has no altsetting 0 [ 138.633022][ T5802] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 138.633049][ T5802] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 138.633067][ T5802] usb 1-1: Product: syz [ 138.633080][ T5802] usb 1-1: Manufacturer: syz [ 138.633093][ T5802] usb 1-1: SerialNumber: syz [ 138.705451][ T5802] usb 1-1: config 0 descriptor?? [ 138.720265][ T5802] hub 1-1:0.0: bad descriptor, ignoring hub [ 138.720300][ T5802] hub 1-1:0.0: probe with driver hub failed with error -5 [ 138.741071][ T5802] usb 1-1: selecting invalid altsetting 0 [ 139.406849][ T6028] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 139.885918][ T6028] usb 5-1: config index 0 descriptor too short (expected 3133, got 61) [ 139.885945][ T6028] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 139.885963][ T6028] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.885980][ T6028] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 139.885999][ T6028] usb 5-1: config 0 has no interface number 0 [ 139.886044][ T6028] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 139.886064][ T6028] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 139.886087][ T6028] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 139.886106][ T6028] usb 5-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.886152][ T6028] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 139.886173][ T6028] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.968587][ T6028] usb 5-1: config 0 descriptor?? [ 140.061759][ T6028] gspca_main: spca561-2.14.0 probing abcd:cdee [ 140.677543][ T6028] spca561 5-1:0.156: probe with driver spca561 failed with error -22 [ 140.679256][ T6028] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 140.679303][ T6028] usb 5-1: MIDIStreaming interface descriptor not found [ 141.052336][ T6028] usb 5-1: USB disconnect, device number 3 [ 141.217183][ T6273] udevd[6273]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.156/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 142.195124][ T6028] usb 1-1: USB disconnect, device number 4 [ 142.456096][ T59] Bluetooth: hci0: Unable to find connection for big 0x00 [ 146.896460][ T6339] netlink: 'syz.1.137': attribute type 4 has an invalid length. [ 146.944091][ T6340] netlink: 'syz.1.137': attribute type 4 has an invalid length. [ 147.962355][ T6028] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 148.154778][ T6028] usb 1-1: config index 0 descriptor too short (expected 3133, got 61) [ 148.154794][ T6028] usb 1-1: config 0 has an invalid interface number: 156 but max is 1 [ 148.154805][ T6028] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.154813][ T6028] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 148.154823][ T6028] usb 1-1: config 0 has no interface number 0 [ 148.154853][ T6028] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 148.154864][ T6028] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 148.154875][ T6028] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 148.154886][ T6028] usb 1-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.154907][ T6028] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 148.154918][ T6028] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.335822][ T6028] usb 1-1: config 0 descriptor?? [ 148.349453][ T6028] gspca_main: spca561-2.14.0 probing abcd:cdee [ 148.512366][ T5885] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 148.559659][ T6028] spca561 1-1:0.156: probe with driver spca561 failed with error -22 [ 148.560893][ T6028] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 148.560926][ T6028] usb 1-1: MIDIStreaming interface descriptor not found [ 148.962293][ T5885] usb 5-1: Using ep0 maxpacket: 32 [ 149.261588][ T5885] usb 5-1: no configurations [ 149.261606][ T5885] usb 5-1: can't read configurations, error -22 [ 149.410929][ T5885] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 149.412532][ T6028] usb 1-1: USB disconnect, device number 5 [ 149.593073][ T5885] usb 5-1: Using ep0 maxpacket: 32 [ 149.596757][ T5885] usb 5-1: no configurations [ 149.596768][ T5885] usb 5-1: can't read configurations, error -22 [ 149.596973][ T5885] usb usb5-port1: attempt power cycle [ 150.172372][ T5885] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 150.202804][ T5885] usb 5-1: Using ep0 maxpacket: 32 [ 150.208299][ T5885] usb 5-1: no configurations [ 150.208310][ T5885] usb 5-1: can't read configurations, error -22 [ 150.362302][ T5885] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 150.383250][ T5885] usb 5-1: Using ep0 maxpacket: 32 [ 150.384180][ T5885] usb 5-1: no configurations [ 150.384195][ T5885] usb 5-1: can't read configurations, error -22 [ 150.384807][ T5885] usb usb5-port1: unable to enumerate USB device [ 150.872519][ T5885] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 151.025527][ T5885] usb 1-1: config 0 has an invalid descriptor of length 23, skipping remainder of the config [ 151.025552][ T5885] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 151.031078][ T5885] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice=63.01 [ 151.031094][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.031104][ T5885] usb 1-1: Product: syz [ 151.031111][ T5885] usb 1-1: Manufacturer: syz [ 151.031117][ T5885] usb 1-1: SerialNumber: syz [ 151.097747][ T5885] usb 1-1: config 0 descriptor?? [ 151.433096][ T5906] usb 1-1: USB disconnect, device number 6 [ 154.065001][ T37] kauditd_printk_skb: 26 callbacks suppressed [ 154.065017][ T37] audit: type=1326 audit(1759411202.933:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6391 comm="syz.2.154" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f65486feec9 code=0x0 [ 154.392292][ T5885] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 154.587727][ T5885] usb 2-1: config index 0 descriptor too short (expected 3133, got 61) [ 154.587755][ T5885] usb 2-1: config 0 has an invalid interface number: 156 but max is 1 [ 154.587773][ T5885] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.587787][ T5885] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 154.587805][ T5885] usb 2-1: config 0 has no interface number 0 [ 154.587854][ T5885] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 154.587874][ T5885] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 154.587897][ T5885] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 154.587916][ T5885] usb 2-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.587956][ T5885] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 154.587975][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.733950][ T5885] usb 2-1: config 0 descriptor?? [ 154.756602][ T5885] gspca_main: spca561-2.14.0 probing abcd:cdee [ 154.972766][ T5885] spca561 2-1:0.156: probe with driver spca561 failed with error -22 [ 154.992645][ T5885] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 154.992695][ T5885] usb 2-1: MIDIStreaming interface descriptor not found [ 155.098081][ T5885] usb 2-1: USB disconnect, device number 2 [ 155.319436][ T5963] udevd[5963]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.002433][ T6415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.162'. [ 156.069516][ T6415] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 156.069516][ T6415] program syz.4.162 not setting count and/or reply_len properly [ 158.978052][ T37] audit: type=1326 audit(1759411207.843:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6423 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859cb2eec9 code=0x7ffc0000 [ 158.978106][ T37] audit: type=1326 audit(1759411207.843:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6423 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859cb2eec9 code=0x7ffc0000 [ 158.978146][ T37] audit: type=1326 audit(1759411207.843:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6423 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859cb2eec9 code=0x7ffc0000 [ 158.978182][ T37] audit: type=1326 audit(1759411207.843:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6423 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859cb2eec9 code=0x7ffc0000 [ 158.978223][ T37] audit: type=1326 audit(1759411207.843:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6423 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f859cb2eec9 code=0x7ffc0000 [ 159.312934][ T37] audit: type=1326 audit(1759411208.003:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6428 comm="syz.1.169" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f23be44eec9 code=0x0 [ 159.419272][ T37] audit: type=1326 audit(1759411208.183:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6423 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859cb2eec9 code=0x7ffc0000 [ 159.419325][ T37] audit: type=1326 audit(1759411208.273:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6423 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859cb2eec9 code=0x7ffc0000 [ 159.419367][ T37] audit: type=1326 audit(1759411208.273:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6423 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859cb2eec9 code=0x7ffc0000 [ 159.419407][ T37] audit: type=1326 audit(1759411208.273:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6423 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859cb2eec9 code=0x7ffc0000 [ 159.419446][ T37] audit: type=1326 audit(1759411208.283:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6423 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f859cb2eec9 code=0x7ffc0000 [ 159.419486][ T37] audit: type=1326 audit(1759411208.283:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6423 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859cb2eec9 code=0x7ffc0000 [ 159.419526][ T37] audit: type=1326 audit(1759411208.283:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6423 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859cb2eec9 code=0x7ffc0000 [ 159.428243][ T37] audit: type=1326 audit(1759411208.273:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6423 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859cb2eec9 code=0x7ffc0000 [ 159.429967][ T37] audit: type=1326 audit(1759411208.293:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6423 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859cb2eec9 code=0x7ffc0000 [ 162.042676][ T5885] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 162.207508][ T5885] usb 5-1: config index 0 descriptor too short (expected 3133, got 61) [ 162.207535][ T5885] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 162.207553][ T5885] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.207570][ T5885] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 162.207589][ T5885] usb 5-1: config 0 has no interface number 0 [ 162.207641][ T5885] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 162.207662][ T5885] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 162.207685][ T5885] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 162.207705][ T5885] usb 5-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 162.207744][ T5885] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 162.207765][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.396017][ T5885] usb 5-1: config 0 descriptor?? [ 162.423806][ T5885] gspca_main: spca561-2.14.0 probing abcd:cdee [ 162.605017][ T5885] spca561 5-1:0.156: probe with driver spca561 failed with error -22 [ 162.605971][ T5885] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 162.606000][ T5885] usb 5-1: MIDIStreaming interface descriptor not found [ 162.612313][ T5825] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 162.762280][ T5825] usb 1-1: Using ep0 maxpacket: 32 [ 162.763081][ T5825] usb 1-1: no configurations [ 162.763095][ T5825] usb 1-1: can't read configurations, error -22 [ 162.904477][ T5885] usb 5-1: USB disconnect, device number 8 [ 162.912380][ T5825] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 163.128096][ T5927] udevd[5927]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 163.142293][ T5825] usb 1-1: Using ep0 maxpacket: 32 [ 163.145163][ T5825] usb 1-1: no configurations [ 163.145178][ T5825] usb 1-1: can't read configurations, error -22 [ 163.147280][ T5825] usb usb1-port1: attempt power cycle [ 163.572335][ T5825] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 168.799201][ T5825] usb 1-1: device descriptor read/8, error -110 [ 169.042292][ T5825] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 169.062655][ T5825] usb 1-1: device descriptor read/8, error -32 [ 169.174070][ T5825] usb usb1-port1: unable to enumerate USB device [ 169.874739][ T5884] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 170.355112][ T5884] usb 1-1: config index 0 descriptor too short (expected 3133, got 61) [ 170.355181][ T5884] usb 1-1: config 0 has an invalid interface number: 156 but max is 1 [ 170.355241][ T5884] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.355279][ T5884] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 170.355337][ T5884] usb 1-1: config 0 has no interface number 0 [ 170.355708][ T5884] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 170.355778][ T5884] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 170.355822][ T5884] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 170.355882][ T5884] usb 1-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.356042][ T5884] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 170.356103][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.384132][ T5884] usb 1-1: config 0 descriptor?? [ 170.404136][ T5884] gspca_main: spca561-2.14.0 probing abcd:cdee [ 170.649438][ T5884] spca561 1-1:0.156: probe with driver spca561 failed with error -22 [ 170.651083][ T5884] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 170.651134][ T5884] usb 1-1: MIDIStreaming interface descriptor not found [ 170.781396][ T5884] usb 1-1: USB disconnect, device number 11 [ 172.205048][ T5858] udevd[5858]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 175.011500][ T5825] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 180.755818][ T5825] usb 4-1: device descriptor read/64, error -110 [ 180.877658][ T5825] Oops: general protection fault, probably [ 180.877658][ T5825] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] SMP KASAN PTI [ 180.877675][ T5825] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 180.877697][ T5825] CPU: 0 UID: 0 PID: 5825 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 180.877709][ T5825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 180.877716][ T5825] Workqueue: usb_hub_wq hub_event [ 180.877739][ T5825] RIP: 0010:usb_gadget_udc_reset+0x29/0xb0 [ 180.877756][ T5825] Code: 90 f3 0f 1e fa 41 57 41 56 53 49 89 f6 48 89 fb 49 bf 00 00 00 00 00 fc ff df e8 02 0c 03 fb 49 83 c6 40 4c 89 f0 48 c1 e8 03 <42> 80 3c 38 00 74 08 4c 89 f7 e8 d8 e7 63 fb 4d 8b 1e 48 89 df 2e [ 180.877765][ T5825] RSP: 0018:ffffc90004d6f278 EFLAGS: 00010202 [ 180.877774][ T5825] RAX: 0000000000000008 RBX: ffff888145f14c40 RCX: 0000000000100000 [ 180.877782][ T5825] RDX: ffffc9001aa0b000 RSI: 000000000000121d RDI: 000000000000121e [ 180.877788][ T5825] RBP: ffff888030298b64 R08: ffffffff8eb5bf37 R09: 1ffffffff1d6b7e6 [ 180.877796][ T5825] R10: dffffc0000000000 R11: fffffbfff1d6b7e7 R12: ffff888145f14c40 [ 180.877803][ T5825] R13: 1ffff11028bf5ca1 R14: 0000000000000040 R15: dffffc0000000000 [ 180.877810][ T5825] FS: 0000000000000000(0000) GS:ffff888127022000(0000) knlGS:0000000000000000 [ 180.877819][ T5825] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 180.877826][ T5825] CR2: 00005581dbb165d0 CR3: 000000003caca000 CR4: 00000000003526f0 [ 180.877836][ T5825] Call Trace: [ 180.877840][ T5825] [ 180.877846][ T5825] set_link_state+0x80b/0x1220 [ 180.877861][ T5825] dummy_hub_control+0xcc0/0x1760 [ 180.877875][ T5825] ? trace_kmalloc+0x1f/0xd0 [ 180.877889][ T5825] usb_hcd_submit_urb+0xde6/0x1a80 [ 180.877904][ T5825] usb_start_wait_urb+0x114/0x4c0 [ 180.877916][ T5825] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 180.877941][ T5825] usb_control_msg+0x232/0x3e0 [ 180.877953][ T5825] hub_port_reset+0x390/0x1740 [ 180.877970][ T5825] hub_port_init+0x2b0/0x2800 [ 180.877983][ T5825] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 180.878002][ T5825] hub_event+0x2532/0x4a20 [ 180.878023][ T5825] ? __pfx_hub_event+0x10/0x10 [ 180.878034][ T5825] ? process_scheduled_works+0x9ef/0x17b0 [ 180.878049][ T5825] ? _raw_spin_unlock_irq+0x23/0x50 [ 180.878059][ T5825] ? process_scheduled_works+0x9ef/0x17b0 [ 180.878071][ T5825] ? process_scheduled_works+0x9ef/0x17b0 [ 180.878084][ T5825] process_scheduled_works+0xae1/0x17b0 [ 180.878102][ T5825] ? __pfx_process_scheduled_works+0x10/0x10 [ 180.878118][ T5825] worker_thread+0x8a0/0xda0 [ 180.878134][ T5825] ? __kthread_parkme+0x7b/0x200 [ 180.878150][ T5825] kthread+0x711/0x8a0 [ 180.878161][ T5825] ? __pfx_worker_thread+0x10/0x10 [ 180.878173][ T5825] ? __pfx_kthread+0x10/0x10 [ 180.878182][ T5825] ? rt_spin_unlock+0x150/0x200 [ 180.878195][ T5825] ? rt_spin_unlock+0x161/0x200 [ 180.878207][ T5825] ? __pfx_kthread+0x10/0x10 [ 180.878216][ T5825] ret_from_fork+0x439/0x7d0 [ 180.878230][ T5825] ? __pfx_ret_from_fork+0x10/0x10 [ 180.878244][ T5825] ? __switch_to_asm+0x39/0x70 [ 180.878254][ T5825] ? __switch_to_asm+0x33/0x70 [ 180.878264][ T5825] ? __pfx_kthread+0x10/0x10 [ 180.878273][ T5825] ret_from_fork_asm+0x1a/0x30 [ 180.878286][ T5825] [ 180.878289][ T5825] Modules linked in: [ 180.878312][ T5825] ---[ end trace 0000000000000000 ]--- [ 180.886984][ T5825] RIP: 0010:usb_gadget_udc_reset+0x29/0xb0 [ 180.887021][ T5825] Code: 90 f3 0f 1e fa 41 57 41 56 53 49 89 f6 48 89 fb 49 bf 00 00 00 00 00 fc ff df e8 02 0c 03 fb 49 83 c6 40 4c 89 f0 48 c1 e8 03 <42> 80 3c 38 00 74 08 4c 89 f7 e8 d8 e7 63 fb 4d 8b 1e 48 89 df 2e [ 180.887036][ T5825] RSP: 0018:ffffc90004d6f278 EFLAGS: 00010202 [ 180.887054][ T5825] RAX: 0000000000000008 RBX: ffff888145f14c40 RCX: 0000000000100000 [ 180.887068][ T5825] RDX: ffffc9001aa0b000 RSI: 000000000000121d RDI: 000000000000121e [ 180.887081][ T5825] RBP: ffff888030298b64 R08: ffffffff8eb5bf37 R09: 1ffffffff1d6b7e6 [ 180.887096][ T5825] R10: dffffc0000000000 R11: fffffbfff1d6b7e7 R12: ffff888145f14c40 [ 180.887111][ T5825] R13: 1ffff11028bf5ca1 R14: 0000000000000040 R15: dffffc0000000000 [ 180.887125][ T5825] FS: 0000000000000000(0000) GS:ffff888127022000(0000) knlGS:0000000000000000 [ 180.887140][ T5825] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 180.887153][ T5825] CR2: 0000001b2fd24224 CR3: 000000002565c000 CR4: 00000000003526f0 [ 180.887173][ T5825] Kernel panic - not syncing: Fatal exception [ 180.887409][ T5825] Kernel Offset: disabled