last executing test programs: 2m1.014640876s ago: executing program 0 (id=1): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000040)={'dvmrp0\x00', {0x2, 0x0, @local}}) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x14, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) socket$nl_netfilter(0x10, 0x3, 0xc) 1m59.378025012s ago: executing program 1 (id=2): socket$pppoe(0x18, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x521101, 0x187) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r1, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x60000000, 0xd1, 0x0, &(0x7f0000000540)="bf2b4ee7955c04f6ffcda24251ef32f5b1d254b3cb5b193a35d2038a08af0fdcb125fe21e3f96c4881486a052ed53c682015bb2ceb0237dfb0b5a8a64cdc932ae709cd51bd087ddb000000000000000000b4c7081c86a774b850e2dcc8822a374b446c5102c1eac18db2b4518e9d83f76d7465cdd8d7d188640f33bc16b8b77ad695057b724101887c2c44305cd9a136dbc377466fb2ec77db453874f54acb3473afb3f0dfff7fd14cc1e1d3595e61182b6ac285dfcc34e51c3d971b25baccb46b54ebcab7df8441a3272cbac5883e3ad1", &(0x7f0000000280)}, 0x50) 1m58.055828133s ago: executing program 1 (id=6): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1m57.498053635s ago: executing program 0 (id=7): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x18, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[], 0x38}}, 0x20000080) sendto$packet(r1, &(0x7f0000000000)='5', 0x11, 0x40, &(0x7f0000000200)={0x11, 0x8100, r4, 0x1, 0x9, 0x6, @broadcast}, 0x14) r5 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x2, @local, 0xc}, 0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r5, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0xffffff71}], 0x1, 0x0, 0xb, 0x804c044}, 0x881) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r10, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) listen(r10, 0x0) accept4$vsock_stream(r10, 0x0, 0x0, 0x800) shutdown(r10, 0x0) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1m56.367375342s ago: executing program 0 (id=9): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=@newsa={0x150, 0x10, 0x713, 0xfffffffe, 0x25dfdbfc, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x20, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0x400fe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x10000, 0x0, 0x543}, {0x4, 0x7fffffffffffffff, 0x2000000000}, {0x2}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x40, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32, @ANYRESHEX=r5], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000180)='fsi_master_gpio_poll_response_busy\x00', r6}, 0x18) syz_emit_ethernet(0x33, &(0x7f0000000000)=ANY=[@ANYBLOB="e90c610faca20180c20000000800450000250000e0"], 0x0) r7 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r7, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m53.654610103s ago: executing program 0 (id=11): socket$pppoe(0x18, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x521101, 0x187) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r1, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x60000000, 0x105, 0x0, &(0x7f0000000540)="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", &(0x7f0000000280)}, 0x50) 1m53.292282694s ago: executing program 1 (id=13): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40000103, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0xa8, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10138, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x20, 0x1c, 0x1fe, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 1m51.728426192s ago: executing program 0 (id=17): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x1}, @TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m49.413002754s ago: executing program 1 (id=19): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1m46.926334527s ago: executing program 1 (id=23): open_tree(0xffffffffffffff9c, 0x0, 0x89901) shmat(0x0, &(0x7f0000ff6000/0x4000)=nil, 0x400c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc3400000000001090224"], 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) 1m34.668681629s ago: executing program 32 (id=17): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x1}, @TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m30.230990782s ago: executing program 33 (id=23): open_tree(0xffffffffffffff9c, 0x0, 0x89901) shmat(0x0, &(0x7f0000ff6000/0x4000)=nil, 0x400c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc3400000000001090224"], 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) 16.006861004s ago: executing program 3 (id=110): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(0x0, r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x1}, @TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 14.587798364s ago: executing program 3 (id=112): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 12.809551621s ago: executing program 3 (id=113): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000210001"], 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[]) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RAW={0x8}]}}]}, 0x3c}}, 0x0) 12.480936987s ago: executing program 2 (id=115): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) cachestat(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r5 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r7 = dup2(r6, r6) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) 12.441125285s ago: executing program 4 (id=116): open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r0 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r0, &(0x7f0000ff6000/0x4000)=nil, 0x400c) mremap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000fed000/0x2000)=nil) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 9.311467226s ago: executing program 2 (id=117): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 8.947401289s ago: executing program 3 (id=118): syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7c000000000b03000000000000000000030000060500010000000000080003400000000108000340000000000500010000000000080002"], 0x7c}}, 0x4814) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0x21c) 8.888159453s ago: executing program 2 (id=119): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) cachestat(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r5 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r7 = dup2(r6, r6) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) 7.495677405s ago: executing program 2 (id=120): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000031401002fbd7000fcdbdf250900000000007a3100000000080041007278650014000000767863616e3100"/56], 0x38}, 0x1, 0x0, 0x0, 0x200008d4}, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r0, &(0x7f0000000300), 0x5005) socket$netlink(0x10, 0x3, 0x15) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r6, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 7.267358506s ago: executing program 3 (id=121): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x200000c4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$vicodec0(0xffffff9c, &(0x7f0000001dc0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000001e00)={0x1000000, 0x8, 0x4, 0x0, 0x4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd1f, 0x408000) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) dup3(r4, r5, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xcf, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf2504"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 6.77440252s ago: executing program 4 (id=122): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_open_procfs(0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @ib={0x1b, 0x9, 0x4, {"2ed96cfde8fb00cdd2303d56fae5e4e7"}, 0x40f9, 0x6, 0x8}, @in6={0xa, 0x4e24, 0x3ff, @private0}}}, 0x118) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0x198b, 0x10100, 0x0, 0x3aa, 0x0, r1}, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) read$alg(r6, &(0x7f00000012c0)=""/4109, 0x100d) 5.672544301s ago: executing program 4 (id=123): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) socket$pppoe(0x18, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 5.398360617s ago: executing program 4 (id=124): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b', @ANYRES32=r0], 0x24}}, 0x0) 3.749315993s ago: executing program 2 (id=125): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000210001"], 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[]) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RAW={0x8}]}}]}, 0x3c}}, 0x0) 1.148937756s ago: executing program 4 (id=126): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) fallocate(r0, 0x23, 0x1ff, 0x7f) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7c000000000b03000000000000000000030000060500010000000000080003400000000108000340000000000500010000"], 0x7c}}, 0x4814) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) gettid() open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000140)='ext4_es_remove_extent\x00', 0xffffffffffffffff, 0x0, 0x8003}, 0x18) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f0000002080)=0x64, 0x21c) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.065912384s ago: executing program 2 (id=127): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000031401002fbd7000fcdbdf250900000000007a3100000000080041007278650014000000767863616e3100"/56], 0x38}, 0x1, 0x0, 0x0, 0x200008d4}, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r0, &(0x7f0000000300), 0x5005) socket$netlink(0x10, 0x3, 0x15) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r6, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 5.72755ms ago: executing program 4 (id=128): r0 = socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x28, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x28}}, 0x4008012) socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) munmap(&(0x7f00006bb000/0x1000)=nil, 0x1000) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000640)={0x2020}, 0x2020) r7 = socket(0x40000000015, 0x5, 0x0) r8 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r8, 0x0, 0x0) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r10}) syz_emit_ethernet(0x82, &(0x7f0000000040)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) 0s ago: executing program 3 (id=129): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x200000c4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$vicodec0(0xffffff9c, &(0x7f0000001dc0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000001e00)={0x1000000, 0x8, 0x4, 0x0, 0x4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd1f, 0x408000) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) dup3(r4, r5, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xcf, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf2504"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.6' (ED25519) to the list of known hosts. [ 87.019467][ T45] cfg80211: failed to load regulatory.db [ 89.218804][ T5821] cgroup: Unknown subsys name 'net' [ 89.481421][ T5821] cgroup: Unknown subsys name 'cpuset' [ 89.536980][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.493747][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 94.522120][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.527949][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.528766][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.530204][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.532047][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.533038][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.535292][ T5153] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.548861][ T5153] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.584060][ T5153] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.596622][ T5153] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.597994][ T5153] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.599633][ T5153] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.600542][ T5153] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.604895][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.608968][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.616423][ T5153] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.627041][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.628887][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.629710][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.631906][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.746436][ T5153] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.751289][ T5153] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.752725][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.765133][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.781318][ T5153] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.636649][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 95.731876][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 95.782056][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 96.077369][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 96.213555][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 96.513927][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.514021][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.514584][ T5833] bridge_slave_0: entered allmulticast mode [ 96.530751][ T5833] bridge_slave_0: entered promiscuous mode [ 96.617251][ T5153] Bluetooth: hci0: command tx timeout [ 96.695834][ T5842] Bluetooth: hci2: command tx timeout [ 96.696011][ T5153] Bluetooth: hci1: command tx timeout [ 96.776374][ T5153] Bluetooth: hci3: command tx timeout [ 96.784574][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.784678][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.784813][ T5833] bridge_slave_1: entered allmulticast mode [ 96.788469][ T5833] bridge_slave_1: entered promiscuous mode [ 96.855650][ T5153] Bluetooth: hci4: command tx timeout [ 97.097463][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.097623][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.097847][ T5834] bridge_slave_0: entered allmulticast mode [ 97.101729][ T5834] bridge_slave_0: entered promiscuous mode [ 97.129615][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.129815][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.130362][ T5835] bridge_slave_0: entered allmulticast mode [ 97.133461][ T5835] bridge_slave_0: entered promiscuous mode [ 97.251234][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.251359][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.251569][ T5834] bridge_slave_1: entered allmulticast mode [ 97.253517][ T5834] bridge_slave_1: entered promiscuous mode [ 97.337218][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.337416][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.337628][ T5835] bridge_slave_1: entered allmulticast mode [ 97.340887][ T5835] bridge_slave_1: entered promiscuous mode [ 97.362931][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.688685][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.768165][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.768405][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.768623][ T5838] bridge_slave_0: entered allmulticast mode [ 97.770682][ T5838] bridge_slave_0: entered promiscuous mode [ 98.131363][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.133145][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.133242][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.133377][ T5838] bridge_slave_1: entered allmulticast mode [ 98.135120][ T5838] bridge_slave_1: entered promiscuous mode [ 98.156929][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.158414][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.158559][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.158738][ T5848] bridge_slave_0: entered allmulticast mode [ 98.161649][ T5848] bridge_slave_0: entered promiscuous mode [ 98.271034][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.371151][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.371434][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.371929][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.372128][ T5848] bridge_slave_1: entered allmulticast mode [ 98.376019][ T5848] bridge_slave_1: entered promiscuous mode [ 98.500068][ T5833] team0: Port device team_slave_0 added [ 98.695727][ T5153] Bluetooth: hci0: command tx timeout [ 98.775744][ T5842] Bluetooth: hci2: command tx timeout [ 98.781934][ T5153] Bluetooth: hci1: command tx timeout [ 98.786034][ T5833] team0: Port device team_slave_1 added [ 98.791865][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.855542][ T5153] Bluetooth: hci3: command tx timeout [ 98.946183][ T5153] Bluetooth: hci4: command tx timeout [ 99.102555][ T5834] team0: Port device team_slave_0 added [ 99.170869][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.174039][ T5835] team0: Port device team_slave_0 added [ 99.202458][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.218242][ T5834] team0: Port device team_slave_1 added [ 99.365963][ T5835] team0: Port device team_slave_1 added [ 99.368724][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.429239][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.429258][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.429298][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.707148][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.707166][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.707194][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.709563][ T5838] team0: Port device team_slave_0 added [ 99.899202][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.899221][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.899247][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.931535][ T5838] team0: Port device team_slave_1 added [ 99.935707][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.935722][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.935747][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.951681][ T5848] team0: Port device team_slave_0 added [ 99.953995][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.954009][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.954033][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.058062][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.058081][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.058110][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.062751][ T5848] team0: Port device team_slave_1 added [ 100.488774][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.488787][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.488803][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.662920][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.662939][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.662967][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.665005][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.665019][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.665046][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.699117][ T5833] hsr_slave_0: entered promiscuous mode [ 100.700718][ T5833] hsr_slave_1: entered promiscuous mode [ 100.775822][ T5153] Bluetooth: hci0: command tx timeout [ 100.855943][ T5842] Bluetooth: hci2: command tx timeout [ 100.856094][ T5153] Bluetooth: hci1: command tx timeout [ 100.920793][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.920812][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.920841][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.937792][ T5153] Bluetooth: hci3: command tx timeout [ 101.015722][ T5153] Bluetooth: hci4: command tx timeout [ 101.132083][ T5834] hsr_slave_0: entered promiscuous mode [ 101.133645][ T5834] hsr_slave_1: entered promiscuous mode [ 101.134739][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 101.134812][ T5834] Cannot create hsr debugfs directory [ 101.218197][ T5835] hsr_slave_0: entered promiscuous mode [ 101.219861][ T5835] hsr_slave_1: entered promiscuous mode [ 101.220996][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 101.221023][ T5835] Cannot create hsr debugfs directory [ 101.739073][ T5838] hsr_slave_0: entered promiscuous mode [ 101.743198][ T5838] hsr_slave_1: entered promiscuous mode [ 101.743818][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 101.743838][ T5838] Cannot create hsr debugfs directory [ 101.858725][ T5848] hsr_slave_0: entered promiscuous mode [ 101.860261][ T5848] hsr_slave_1: entered promiscuous mode [ 101.861600][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 101.861624][ T5848] Cannot create hsr debugfs directory [ 102.856634][ T5153] Bluetooth: hci0: command tx timeout [ 102.945495][ T5153] Bluetooth: hci1: command tx timeout [ 102.945525][ T5842] Bluetooth: hci2: command tx timeout [ 103.025881][ T5842] Bluetooth: hci3: command tx timeout [ 103.096032][ T5842] Bluetooth: hci4: command tx timeout [ 103.391662][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.459958][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.505118][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.566960][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.707594][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.731473][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.782666][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.825889][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.022095][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.054318][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.116142][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.174501][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.343415][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 104.393201][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 104.436682][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 104.501966][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 104.726616][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.727874][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.775803][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.820452][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.877217][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.002284][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.074368][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.076184][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.105373][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.153493][ T1446] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.153610][ T1446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.257038][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.317777][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.339161][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.339450][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.405341][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.412740][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.493575][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.498748][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.577998][ T1446] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.578449][ T1446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.685538][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.685710][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.738287][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.792617][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.833434][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.835688][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.913523][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.913699][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.074986][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.170206][ T1446] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.170507][ T1446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.263770][ T1446] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.263944][ T1446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.311855][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.616957][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.785928][ T5833] veth0_vlan: entered promiscuous mode [ 106.883404][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.917967][ T5833] veth1_vlan: entered promiscuous mode [ 107.098873][ T5834] veth0_vlan: entered promiscuous mode [ 107.199990][ T5834] veth1_vlan: entered promiscuous mode [ 107.247545][ T5833] veth0_macvtap: entered promiscuous mode [ 107.253048][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.323804][ T5833] veth1_macvtap: entered promiscuous mode [ 107.354669][ T5835] veth0_vlan: entered promiscuous mode [ 107.451066][ T5835] veth1_vlan: entered promiscuous mode [ 107.464611][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.487841][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.562560][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.564796][ T5834] veth0_macvtap: entered promiscuous mode [ 107.630387][ T5834] veth1_macvtap: entered promiscuous mode [ 107.634622][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.658250][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.665110][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.699583][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.909964][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.925210][ T5835] veth0_macvtap: entered promiscuous mode [ 108.042720][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.065037][ T5835] veth1_macvtap: entered promiscuous mode [ 108.152464][ T67] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.184653][ T67] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.203613][ T67] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.204054][ T5848] veth0_vlan: entered promiscuous mode [ 108.214036][ T67] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.234436][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.234458][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.300912][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.383330][ T5848] veth1_vlan: entered promiscuous mode [ 108.407362][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.488199][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.488223][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.578215][ T5838] veth0_vlan: entered promiscuous mode [ 108.581313][ T1103] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.605809][ T1103] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.609500][ T1103] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.614940][ T1103] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.763463][ T5838] veth1_vlan: entered promiscuous mode [ 108.789967][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.789990][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.100331][ T5848] veth0_macvtap: entered promiscuous mode [ 109.130879][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.130902][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.170925][ T5848] veth1_macvtap: entered promiscuous mode [ 109.327610][ T4504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.327635][ T4504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.358396][ T5838] veth0_macvtap: entered promiscuous mode [ 109.462148][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.484712][ T5838] veth1_macvtap: entered promiscuous mode [ 109.500332][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.545108][ T43] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.654856][ T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.708714][ T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.728651][ T43] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.913685][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.061330][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.061353][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.248095][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.485084][ T1096] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.494532][ T1096] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.524774][ T1096] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.556061][ T1096] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.670148][ T5923] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 110.742703][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.742718][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.845566][ T5923] usb 4-1: Using ep0 maxpacket: 32 [ 110.862478][ T5923] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.862506][ T5923] usb 4-1: config 0 has no interfaces? [ 110.862539][ T5923] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 110.862561][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.960436][ T5923] usb 4-1: config 0 descriptor?? [ 111.184018][ T5958] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 111.665458][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.785466][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.845467][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.862684][ T5958] gretap1: entered promiscuous mode [ 112.241159][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.241184][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.284408][ T5902] usb 4-1: USB disconnect, device number 2 [ 112.422394][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.422417][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.675929][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.675955][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.524563][ T5840] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 113.721058][ T5840] usb 3-1: Using ep0 maxpacket: 32 [ 113.784967][ T5840] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.784998][ T5840] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 113.785040][ T5840] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 113.785065][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.936432][ T5840] usb 3-1: config 0 descriptor?? [ 114.125450][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.199699][ T5987] hub 9-0:1.0: USB hub found [ 114.200872][ T5987] hub 9-0:1.0: 1 port detected [ 114.355780][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 114.405429][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.613476][ T5974] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 114.785452][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.340826][ T5990] gretap1: entered promiscuous mode [ 116.754627][ T5894] usb 3-1: USB disconnect, device number 2 [ 118.400734][ T6014] netlink: 64 bytes leftover after parsing attributes in process `syz.3.14'. [ 118.574817][ T6017] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15'. [ 119.948556][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 120.371778][ T6022] syz.3.14 (6022): drop_caches: 2 [ 121.031709][ T6046] netlink: 64 bytes leftover after parsing attributes in process `syz.3.20'. [ 121.065489][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 121.065642][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 128.125057][ T5909] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 128.403361][ T6066] hub 9-0:1.0: USB hub found [ 128.419873][ T6066] hub 9-0:1.0: 1 port detected [ 128.636833][ T5909] usb 2-1: Using ep0 maxpacket: 32 [ 129.216452][ T5909] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.216483][ T5909] usb 2-1: config 0 has no interfaces? [ 129.216518][ T5909] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 129.216544][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.364699][ T6050] syz.3.20 (6050): drop_caches: 2 [ 129.388084][ T5909] usb 2-1: config 0 descriptor?? [ 129.758320][ T6062] gretap1: entered promiscuous mode [ 132.076390][ C0] vkms_vblank_simulate: vblank timer overrun [ 132.131732][ C0] vkms_vblank_simulate: vblank timer overrun [ 132.145603][ T6091] tipc: Can't bind to reserved service type 0 [ 132.898522][ T6100] netlink: 64 bytes leftover after parsing attributes in process `syz.4.31'. [ 134.409170][ T6102] syz.4.31 (6102): drop_caches: 2 [ 134.429874][ T6102] syz.4.31 (6102): drop_caches: 2 [ 135.542194][ T6105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.30'. [ 136.059582][ C1] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 138.225302][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.232917][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 144.368298][ T5153] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 144.371558][ T5153] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 144.372627][ T5153] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 144.374295][ T5153] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 144.375286][ T5153] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 146.936872][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 146.945325][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 146.961567][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 146.962981][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 146.980978][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 147.263549][ T5842] Bluetooth: hci5: command tx timeout [ 149.015642][ T5842] Bluetooth: hci0: command tx timeout [ 149.342860][ T5842] Bluetooth: hci5: command tx timeout [ 150.473084][ T6173] syz.4.46 (6173): drop_caches: 2 [ 150.475783][ T6173] syz.4.46 (6173): drop_caches: 2 [ 151.095745][ T5842] Bluetooth: hci0: command tx timeout [ 151.415735][ T5842] Bluetooth: hci5: command tx timeout [ 151.715560][ T5894] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 151.768198][ T45] usb 2-1: USB disconnect, device number 2 [ 151.851685][ T6184] netlink: 12 bytes leftover after parsing attributes in process `syz.4.49'. [ 151.865825][ T5894] usb 3-1: Using ep0 maxpacket: 32 [ 151.904901][ T5894] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.904920][ T5894] usb 3-1: config 0 has no interfaces? [ 151.904944][ T5894] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 151.904958][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.956919][ T5894] usb 3-1: config 0 descriptor?? [ 152.227349][ T6175] netlink: 'syz.2.47': attribute type 1 has an invalid length. [ 152.275313][ T6188] netlink: 28 bytes leftover after parsing attributes in process `syz.2.47'. [ 152.489283][ T6186] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 152.492926][ T6189] gretap1: entered promiscuous mode [ 152.708340][ T6192] netlink: 16 bytes leftover after parsing attributes in process `syz.4.51'. [ 152.923282][ T6052] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.076161][ T6175] macvlan2: entered promiscuous mode [ 153.077117][ T6175] macvlan2: entered allmulticast mode [ 153.181091][ T5842] Bluetooth: hci0: command tx timeout [ 153.255091][ T5894] usb 3-1: USB disconnect, device number 3 [ 153.495950][ T5842] Bluetooth: hci5: command tx timeout [ 153.730290][ T6052] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.783184][ T6136] chnl_net:caif_netlink_parms(): no params data found [ 154.210669][ T6052] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.220408][ T6202] Zero length message leads to an empty skb [ 154.560808][ T6204] netlink: 256 bytes leftover after parsing attributes in process `syz.2.53'. [ 155.295562][ T5842] Bluetooth: hci0: command tx timeout [ 155.454453][ T6052] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.367664][ T6136] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.367762][ T6136] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.367945][ T6136] bridge_slave_0: entered allmulticast mode [ 156.385553][ T6136] bridge_slave_0: entered promiscuous mode [ 156.415861][ T6136] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.416008][ T6136] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.416252][ T6136] bridge_slave_1: entered allmulticast mode [ 156.419036][ T6136] bridge_slave_1: entered promiscuous mode [ 157.116901][ T6136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.123955][ T6136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.657869][ T6230] syz.2.59 (6230): drop_caches: 2 [ 157.660347][ T6230] syz.2.59 (6230): drop_caches: 2 [ 159.128771][ T6136] team0: Port device team_slave_0 added [ 159.188499][ T6136] team0: Port device team_slave_1 added [ 159.189579][ T6052] bridge_slave_1: left allmulticast mode [ 159.190003][ T6052] bridge_slave_1: left promiscuous mode [ 159.192931][ T6052] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.334851][ T6052] bridge_slave_0: left allmulticast mode [ 159.334878][ T6052] bridge_slave_0: left promiscuous mode [ 159.335078][ T6052] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.384725][ T6253] syz.3.66 (6253): drop_caches: 2 [ 163.473201][ T6253] syz.3.66 (6253): drop_caches: 2 [ 165.336064][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 165.540531][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.540570][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.540613][ T10] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 165.540638][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.620825][ T10] usb 5-1: config 0 descriptor?? [ 167.135972][ T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 167.251739][ T6052] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.329074][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 167.348329][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.348358][ T31] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 167.348405][ T31] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 167.348425][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.373101][ T31] usb 4-1: config 0 descriptor?? [ 167.431544][ T6052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.611631][ T6052] bond0 (unregistering): Released all slaves [ 168.558630][ T6238] veth0: renamed from veth1_vlan [ 168.909667][ T6267] gretap1: entered promiscuous mode [ 169.297984][ T5961] usb 4-1: USB disconnect, device number 3 [ 170.605127][ T6279] netlink: 256 bytes leftover after parsing attributes in process `syz.3.71'. [ 170.953182][ T10] usbhid 5-1:0.0: can't add hid device: -32 [ 170.953322][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 171.260742][ T10] usb 5-1: USB disconnect, device number 2 [ 171.545271][ T6136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.545285][ T6136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.545301][ T6136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.728462][ T6136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.728483][ T6136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.728511][ T6136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.740864][ T6144] chnl_net:caif_netlink_parms(): no params data found [ 173.359348][ T6136] hsr_slave_0: entered promiscuous mode [ 173.371846][ T6136] hsr_slave_1: entered promiscuous mode [ 173.373958][ T6136] debugfs: 'hsr0' already exists in 'hsr' [ 173.373980][ T6136] Cannot create hsr debugfs directory [ 173.726478][ T6052] hsr_slave_0: left promiscuous mode [ 173.832883][ T6052] hsr_slave_1: left promiscuous mode [ 173.833816][ T6052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.833883][ T6052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.080194][ T6052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.080235][ T6052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.758194][ T6052] veth1_macvtap: left promiscuous mode [ 175.758498][ T6052] veth0_macvtap: left promiscuous mode [ 175.765548][ T6052] veth1_vlan: left promiscuous mode [ 175.797689][ T6052] veth0_vlan: left promiscuous mode [ 176.096136][ T6298] netlink: 64 bytes leftover after parsing attributes in process `syz.4.76'. [ 176.466959][ T6298] syz.4.76 (6298): drop_caches: 2 [ 176.475267][ T6298] syz.4.76 (6298): drop_caches: 2 [ 181.695684][ T31] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 181.845632][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 181.851752][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.851782][ T31] usb 5-1: config 0 has no interfaces? [ 181.851817][ T31] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 181.851841][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.869236][ T31] usb 5-1: config 0 descriptor?? [ 182.082198][ T6325] netlink: 'syz.4.81': attribute type 1 has an invalid length. [ 182.133944][ T6326] netlink: 28 bytes leftover after parsing attributes in process `syz.4.81'. [ 182.708862][ T6052] team0 (unregistering): Port device team_slave_1 removed [ 182.936701][ T6052] team0 (unregistering): Port device team_slave_0 removed [ 185.512047][ T6290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.512096][ T6290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.554192][ T6290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.554300][ T6290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.744394][ T6325] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 185.821717][ T6327] gretap1: entered promiscuous mode [ 187.353163][ T31] usb 5-1: USB disconnect, device number 3 [ 187.660945][ T6342] netlink: 64 bytes leftover after parsing attributes in process `syz.2.83'. [ 188.163242][ T6352] syz.2.83 (6352): drop_caches: 2 [ 188.164972][ T6352] syz.2.83 (6352): drop_caches: 2 [ 190.674719][ T6144] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.674912][ T6144] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.675173][ T6144] bridge_slave_0: entered allmulticast mode [ 190.744541][ T6144] bridge_slave_0: entered promiscuous mode [ 191.005835][ T6144] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.006017][ T6144] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.006289][ T6144] bridge_slave_1: entered allmulticast mode [ 191.010723][ T6144] bridge_slave_1: entered promiscuous mode [ 191.858343][ T6144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.056899][ T6144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.316045][ T6386] netlink: 64 bytes leftover after parsing attributes in process `syz.3.90'. [ 192.806930][ T6389] syz.3.90 (6389): drop_caches: 2 [ 192.829620][ T6389] syz.3.90 (6389): drop_caches: 2 [ 195.404024][ T6405] netlink: 64 bytes leftover after parsing attributes in process `syz.4.92'. [ 196.008253][ T6411] syz.4.92 (6411): drop_caches: 2 [ 196.026766][ T6411] syz.4.92 (6411): drop_caches: 2 [ 199.793535][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.793591][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.884130][ T6144] team0: Port device team_slave_0 added [ 201.919518][ T6144] team0: Port device team_slave_1 added [ 203.594225][ T6431] netlink: 64 bytes leftover after parsing attributes in process `syz.4.96'. [ 203.966398][ T6433] syz.4.96 (6433): drop_caches: 2 [ 203.992989][ T6433] syz.4.96 (6433): drop_caches: 2 [ 204.910221][ T6439] syz.3.97 (6439): drop_caches: 2 [ 204.910453][ T6439] syz.3.97 (6439): drop_caches: 2 [ 205.884556][ T6443] netlink: 64 bytes leftover after parsing attributes in process `syz.4.98'. [ 206.476990][ T6447] syz.4.98 (6447): drop_caches: 2 [ 206.479564][ T6447] syz.4.98 (6447): drop_caches: 2 [ 206.518595][ T6452] netlink: 260 bytes leftover after parsing attributes in process `syz.2.99'. [ 206.960965][ T5153] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 206.985177][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 207.001248][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 207.025058][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 207.038596][ T5153] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 207.040923][ T5153] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 207.085146][ T5842] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 207.099866][ T5842] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 207.101916][ T5842] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 207.102778][ T5842] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 208.862850][ T6470] hub 9-0:1.0: USB hub found [ 208.870475][ T6470] hub 9-0:1.0: 1 port detected [ 209.575592][ T5842] Bluetooth: hci6: command tx timeout [ 209.577032][ T5842] Bluetooth: hci2: command tx timeout [ 210.149392][ T6487] netlink: 256 bytes leftover after parsing attributes in process `syz.4.103'. [ 210.697560][ T6052] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.904277][ T6479] syzkaller0: entered promiscuous mode [ 210.904310][ T6479] syzkaller0: entered allmulticast mode [ 211.295599][ T5894] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 211.445513][ T5894] usb 4-1: Using ep0 maxpacket: 32 [ 211.452927][ T5894] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.452954][ T5894] usb 4-1: config 0 has no interfaces? [ 211.452988][ T5894] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 211.453014][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.498049][ T5894] usb 4-1: config 0 descriptor?? [ 211.644431][ T6052] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.655755][ T59] Bluetooth: hci2: command tx timeout [ 211.655795][ T59] Bluetooth: hci6: command tx timeout [ 211.735803][ T6494] netlink: 'syz.3.105': attribute type 1 has an invalid length. [ 211.820297][ T6499] netlink: 72 bytes leftover after parsing attributes in process `syz.2.106'. [ 212.128848][ T6500] syz.2.106 (6500): drop_caches: 2 [ 212.153556][ T6500] syz.2.106 (6500): drop_caches: 2 [ 212.745806][ T6495] netlink: 28 bytes leftover after parsing attributes in process `syz.3.105'. [ 213.046636][ T6502] gretap1: entered promiscuous mode [ 213.052915][ T6502] bond1: (slave gretap1): making interface the new active one [ 213.054760][ T6502] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 213.088876][ T6504] macvlan2: entered promiscuous mode [ 213.088908][ T6504] macvlan2: entered allmulticast mode [ 213.089770][ T6504] bond1: entered promiscuous mode [ 213.092357][ T6504] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 213.093267][ T6504] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 213.093995][ T6504] bond1: left promiscuous mode [ 213.211334][ T6507] netlink: 16 bytes leftover after parsing attributes in process `syz.2.107'. [ 213.430017][ T10] usb 4-1: USB disconnect, device number 4 [ 213.455754][ T5840] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 213.533727][ T6052] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.605525][ T5840] usb 5-1: Using ep0 maxpacket: 32 [ 213.613216][ T5840] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.613256][ T5840] usb 5-1: config 0 has no interfaces? [ 213.613293][ T5840] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 213.613318][ T5840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.641761][ T5840] usb 5-1: config 0 descriptor?? [ 213.735627][ T5842] Bluetooth: hci6: command tx timeout [ 213.735686][ T5842] Bluetooth: hci2: command tx timeout [ 213.876263][ T6508] netlink: 'syz.4.108': attribute type 1 has an invalid length. [ 213.919055][ T6052] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.933016][ T6512] netlink: 28 bytes leftover after parsing attributes in process `syz.4.108'. [ 213.965597][ T5926] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 214.115683][ T5926] usb 3-1: Using ep0 maxpacket: 32 [ 214.118845][ T5926] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.118873][ T5926] usb 3-1: config 0 has no interfaces? [ 214.118916][ T5926] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 214.118941][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.160601][ T6513] gretap1: entered promiscuous mode [ 214.167477][ T6513] bond1: (slave gretap1): making interface the new active one [ 214.168867][ T6513] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 214.193274][ T5926] usb 3-1: config 0 descriptor?? [ 214.287051][ T6515] macvlan2: entered promiscuous mode [ 214.287085][ T6515] macvlan2: entered allmulticast mode [ 214.298554][ T6515] bond1: entered promiscuous mode [ 214.306718][ T6515] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 214.307660][ T6515] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 214.308162][ T6515] bond1: left promiscuous mode [ 214.417073][ T6511] netlink: 'syz.2.109': attribute type 1 has an invalid length. [ 214.479408][ T6525] netlink: 28 bytes leftover after parsing attributes in process `syz.2.109'. [ 214.671710][ T10] usb 5-1: USB disconnect, device number 4 [ 214.772282][ T6519] syzkaller0: entered promiscuous mode [ 214.772304][ T6519] syzkaller0: entered allmulticast mode [ 214.794108][ T6528] gretap1: entered promiscuous mode [ 214.799481][ T6528] bond1: (slave gretap1): making interface the new active one [ 214.800617][ T6528] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 214.838459][ T6532] macvlan2: entered promiscuous mode [ 214.838481][ T6532] macvlan2: entered allmulticast mode [ 214.839219][ T6532] bond1: entered promiscuous mode [ 214.839948][ T6532] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 214.840624][ T6532] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 214.841051][ T6532] bond1: left promiscuous mode [ 215.090994][ T5926] usb 3-1: USB disconnect, device number 4 [ 215.817164][ T5845] Bluetooth: hci2: command tx timeout [ 215.817202][ T5845] Bluetooth: hci6: command tx timeout [ 215.817924][ T6539] syz.4.111 (6539): drop_caches: 2 [ 215.818414][ T6539] syz.4.111 (6539): drop_caches: 2 [ 216.646410][ T6545] hub 9-0:1.0: USB hub found [ 216.650983][ T6545] hub 9-0:1.0: 1 port detected [ 217.134885][ T5153] Bluetooth: hci1: command 0x0406 tx timeout [ 217.134931][ T5153] Bluetooth: hci3: command 0x0406 tx timeout [ 217.134957][ T5153] Bluetooth: hci4: command 0x0406 tx timeout [ 218.985531][ T5926] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 220.785617][ T5926] usb 5-1: Using ep0 maxpacket: 32 [ 220.788189][ T5926] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.788216][ T5926] usb 5-1: config 0 has no interfaces? [ 220.788250][ T5926] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 220.788276][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.799053][ T5926] usb 5-1: config 0 descriptor?? [ 221.044412][ T6557] netlink: 'syz.4.116': attribute type 1 has an invalid length. [ 221.681973][ T6583] blktrace: Concurrent blktraces are not allowed on loop5 [ 222.673207][ T6557] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 223.058217][ T10] usb 5-1: USB disconnect, device number 5 [ 223.187897][ T6590] netlink: 256 bytes leftover after parsing attributes in process `syz.3.121'. [ 223.424034][ T6052] bridge_slave_1: left allmulticast mode [ 223.424069][ T6052] bridge_slave_1: left promiscuous mode [ 223.424247][ T6052] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.515131][ T6052] bridge_slave_0: left allmulticast mode [ 223.515288][ T6052] bridge_slave_0: left promiscuous mode [ 223.519201][ T6052] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.122258][ T37] audit: type=1800 audit(1757426675.740:2): pid=6600 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.120" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 224.399027][ T6598] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 224.399059][ T6598] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 224.406565][ T6598] vhci_hcd vhci_hcd.0: Device attached [ 224.695800][ T45] usb 38-1: SetAddress Request (2) to port 0 [ 224.695896][ T45] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 224.876861][ T6599] vhci_hcd: connection reset by peer [ 225.034311][ T162] vhci_hcd: stop threads [ 225.035031][ T162] vhci_hcd: release socket [ 225.038692][ T162] vhci_hcd: disconnect device [ 228.356550][ T6052] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.441563][ T6052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.461644][ T6052] bond0 (unregistering): Released all slaves [ 228.803346][ T6605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.124'. [ 229.229807][ T6619] netlink: 72 bytes leftover after parsing attributes in process `syz.4.126'. [ 229.487119][ T6620] syz.4.126 (6620): drop_caches: 2 [ 229.489677][ T6620] syz.4.126 (6620): drop_caches: 2 [ 229.737288][ T45] usb 38-1: device descriptor read/8, error -110 [ 230.166994][ T45] usb usb38-port1: attempt power cycle [ 230.516046][ T6455] chnl_net:caif_netlink_parms(): no params data found [ 230.586230][ T6450] chnl_net:caif_netlink_parms(): no params data found [ 230.715929][ T6632] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 230.718953][ T6632] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 230.732176][ T6632] vhci_hcd vhci_hcd.0: Device attached [ 230.777685][ T6635] netlink: 256 bytes leftover after parsing attributes in process `syz.3.129'. [ 230.956081][ T45] usb 38-1: SetAddress Request (5) to port 0 [ 230.956119][ T45] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 230.956133][ T45] in_atomic(): 0, irqs_disabled(): 1, non_block: 0, pid: 45, name: kworker/1:1 [ 230.956150][ T45] preempt_count: 0, expected: 0 [ 230.956160][ T45] RCU nest depth: 0, expected: 0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 230.956170][ T45] 6 locks held by kworker/1:1/45: [ 230.956181][ T45] #0: ffff888021690938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 230.956245][ T45] #1: ffffc90000b67bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 230.956300][ T45] #2: ffff888146758188 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 230.956351][ T45] #3: ffff88814675d5b8 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 230.956400][ T45] #4: ffff8880283ada58 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 230.956451][ T45] #5: ffff8880289ba668 (&mbus->lock#2){+.+.}-{3:3}, at: mon_complete+0x5c/0x200 [ 230.956511][ T45] irq event stamp: 1218766 [ 230.956519][ T45] hardirqs last enabled at (1218765): [] _raw_spin_unlock_irqrestore+0x85/0x110 [ 230.956556][ T45] hardirqs last disabled at (1218766): [] vhci_urb_enqueue+0xb2c/0xe70 [ 230.956579][ T45] softirqs last enabled at (1211928): [] __local_bh_enable_ip+0x1a4/0x270 [ 230.956610][ T45] softirqs last disabled at (1211904): [] __dev_queue_xmit+0x26f/0x3b70 [ 230.956644][ T45] CPU: 1 UID: 0 PID: 45 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 230.956667][ T45] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 230.956680][ T45] Workqueue: usb_hub_wq hub_event [ 230.956704][ T45] Call Trace: [ 230.956711][ T45] [ 230.956721][ T45] dump_stack_lvl+0x189/0x250 [ 230.956752][ T45] ? __dev_queue_xmit+0x26f/0x3b70 [ 230.956773][ T45] ? __dev_queue_xmit+0x26f/0x3b70 [ 230.956803][ T45] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.956836][ T45] ? rtlock_slowlock_locked+0xd8/0x4010 [ 230.956870][ T45] ? print_lock_name+0xde/0x100 [ 230.956901][ T45] __might_resched+0x44b/0x5d0 [ 230.956935][ T45] ? __pfx___might_resched+0x10/0x10 [ 230.956969][ T45] ? mon_complete+0x5c/0x200 [ 230.957000][ T45] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 230.957046][ T45] rt_spin_lock+0xc7/0x2c0 [ 230.957077][ T45] ? __pfx_rt_spin_lock+0x10/0x10 [ 230.957104][ T45] ? rt_mutex_slowunlock+0x493/0x8a0 [ 230.957131][ T45] ? reacquire_held_locks+0x127/0x1d0 [ 230.957164][ T45] ? __pfx_migrate_enable+0x10/0x10 [ 230.957195][ T45] mon_complete+0x5c/0x200 [ 230.957231][ T45] __usb_hcd_giveback_urb+0x254/0x5e0 [ 230.957271][ T45] vhci_urb_enqueue+0xb4f/0xe70 [ 230.957310][ T45] ? __pfx_vhci_urb_enqueue+0x10/0x10 [ 230.957335][ T45] ? usb_hcd_map_urb_for_dma+0x3c1/0xd80 [ 230.957375][ T45] usb_hcd_submit_urb+0x320/0x1a80 [ 230.957422][ T45] usb_start_wait_urb+0x114/0x4c0 [ 230.957455][ T45] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 230.957491][ T45] ? trace_kmalloc+0x1f/0xd0 [ 230.957536][ T45] usb_control_msg+0x232/0x3e0 [ 230.957558][ T45] ? hub_port_reset+0x8f1/0x1740 [ 230.957589][ T45] hub_port_init+0xe24/0x2800 [ 230.957646][ T45] hub_event+0x2532/0x4a20 [ 230.957741][ T45] ? __pfx_hub_event+0x10/0x10 [ 230.957773][ T45] ? process_scheduled_works+0x9ef/0x17b0 [ 230.957809][ T45] ? _raw_spin_unlock_irq+0x23/0x50 [ 230.957839][ T45] ? process_scheduled_works+0x9ef/0x17b0 [ 230.957865][ T45] ? process_scheduled_works+0x9ef/0x17b0 [ 230.957894][ T45] process_scheduled_works+0xade/0x17b0 [ 230.957969][ T45] ? __pfx_process_scheduled_works+0x10/0x10 [ 230.958017][ T45] worker_thread+0x8a0/0xda0 [ 230.958078][ T45] kthread+0x70e/0x8a0 [ 230.958113][ T45] ? __pfx_worker_thread+0x10/0x10 [ 230.958139][ T45] ? __pfx_kthread+0x10/0x10 [ 230.958176][ T45] ? __pfx_kthread+0x10/0x10 [ 230.958210][ T45] ret_from_fork+0x3f9/0x770 [ 230.958242][ T45] ? __pfx_ret_from_fork+0x10/0x10 [ 230.958279][ T45] ? __switch_to_asm+0x39/0x70 [ 230.958298][ T45] ? __switch_to_asm+0x33/0x70 [ 230.958317][ T45] ? __pfx_kthread+0x10/0x10 [ 230.958351][ T45] ret_from_fork_asm+0x1a/0x30 [ 230.958394][ T45] [ 230.960241][ T45] usb 38-1: new SuperSpeed USB device number 5 using vhci_hcd [ 231.116253][ T37] audit: type=1800 audit(1757426682.780:3): pid=6632 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.127" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 231.919226][ T6633] vhci_hcd: connection reset by peer [ 231.928402][ T6124] vhci_hcd: stop threads [ 231.928423][ T6124] vhci_hcd: release socket [ 231.928519][ T6124] vhci_hcd: disconnect device [ 233.355677][ T6052] hsr_slave_0: left promiscuous mode [ 233.454402][ T6052] hsr_slave_1: left promiscuous mode [ 233.459912][ T6052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.459944][ T6052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.596781][ T6052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.596816][ T6052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.714947][ T6052] veth1_macvtap: left promiscuous mode [ 233.715035][ T6052] veth0_macvtap: left promiscuous mode [ 233.715213][ T6052] veth1_vlan: left promiscuous mode [ 233.725479][ T6052] veth0_vlan: left promiscuous mode [ 236.055871][ T45] usb 38-1: device descriptor read/8, error -110 [ 236.168627][ T45] usb usb38-port1: unable to enumerate USB device [ 236.619320][ T6052] team0 (unregistering): Port device team_slave_1 removed [ 236.826560][ T6052] team0 (unregistering): Port device team_slave_0 removed