last executing test programs: 7m2.21629678s ago: executing program 1 (id=2): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x20, 0xc, &(0x7f0000000200)=ANY=[@ANYRES64=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x27125ae6fbb99f61, '\x00', 0x0, @fallback=0x3}, 0x94) sendmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1}}], 0x1, 0x24000003) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000, 0x6, 0x0, 0x0, 0x6, 0x900066}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) sendto$packet(r1, &(0x7f00000002c0)="14042bfdd3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000000000, 0x40000010001, &(0x7f0000006680)) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 7m1.833790204s ago: executing program 3 (id=4): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x8000000008}) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) setrlimit(0x6, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r2 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0xf, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) close(r1) 7m0.660435982s ago: executing program 2 (id=3): open$dir(&(0x7f0000000440)='./cgroup/../file0\x00', 0x20000, 0x118) fchmodat(0xffffffffffffffff, &(0x7f0000000280)='./cgroup/../file0\x00', 0x40) r0 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000001080)=[@ioring_restriction_sqe_op, @ioring_restriction_sqe_flags_required={0x3, 0x11}], 0x2) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00'}) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x440000, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000005580)=""/102392, 0x18ff8) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/555, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x237) io_uring_enter(r0, 0x2e6f, 0x8555, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x880, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0xe) ioctl$TCFLSH(r3, 0x540b, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r4, 0x1, 0x0) 6m59.825330017s ago: executing program 0 (id=1): open$dir(&(0x7f0000000440)='./cgroup/../file0\x00', 0x20000, 0x118) fchmodat(0xffffffffffffffff, &(0x7f0000000280)='./cgroup/../file0\x00', 0x40) r0 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000001080)=[@ioring_restriction_sqe_op, @ioring_restriction_sqe_flags_required={0x3, 0x11}], 0x2) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00'}) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x440000, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/555, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x237) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x880, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000001c0)=0xe) ioctl$TCFLSH(r4, 0x540b, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r5, 0x1, 0x0) 6m59.643334906s ago: executing program 3 (id=6): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x8000000008}) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) setrlimit(0x6, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r2 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0xf, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) close(r1) 6m56.800914545s ago: executing program 4 (id=5): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x20, 0xc, &(0x7f0000000200)=ANY=[@ANYRES64=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x27125ae6fbb99f61, '\x00', 0x0, @fallback=0x3}, 0x94) sendmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1}}], 0x1, 0x24000003) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000, 0x6, 0x0, 0x0, 0x6, 0x900066}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) sendto$packet(r1, &(0x7f00000002c0)="14042bfdd3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000000000, 0x40000010001, &(0x7f0000006680)) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) bind$inet6(r0, &(0x7f0000000580)={0xa, 0x4624, 0x5, @private0, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00'], 0x28}}], 0x1, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000007000000040000000000000e0400000000000000000000000100000d0000000004000000040000000000000000000004040000000000000000000009030000000000000061"], 0x0, 0x5b}, 0x28) sendmsg$netlink(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="140100002500010300000000c00e000001"], 0x114}], 0x1}, 0x40000) 6m55.30735539s ago: executing program 0 (id=7): open$dir(&(0x7f0000000440)='./cgroup/../file0\x00', 0x20000, 0x118) fchmodat(0xffffffffffffffff, &(0x7f0000000280)='./cgroup/../file0\x00', 0x40) r0 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000001080)=[@ioring_restriction_sqe_op, @ioring_restriction_sqe_flags_required={0x3, 0x11}], 0x2) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00'}) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/555, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x237) io_uring_enter(r0, 0x2e6f, 0x8555, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x880, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000001c0)=0xe) ioctl$TCFLSH(r4, 0x540b, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r5, 0x1, 0x0) 6m55.208890211s ago: executing program 2 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xe) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xeeef0000, 0x33339000, 0x0, 0x0, 0xff, 0x8, 0xa, 0x2, 0x0, 0x6, 0x80, 0x10}, {0x8080000, 0x0, 0xe, 0x6, 0x7c, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x2fff, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xdc}, {0x4000, 0xeeee8000, 0x3, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4, 0x1}, {0xf000, 0x3000, 0x9, 0xfd, 0x0, 0x4, 0x20, 0xe, 0x0, 0x3c}, {0xfffa7000, 0x0, 0xd, 0x7, 0x0, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x82, 0x4}, {0x10000, 0x0, 0x9, 0x6, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0xfe}, {0x80a0000, 0xdddd0000, 0x0, 0x1, 0xff, 0x1, 0x0, 0xa, 0x26, 0x0, 0xf8}, {0x80a0000, 0x4}, {0x6000}, 0xfdfcffdb, 0x0, 0x0, 0x20402e, 0xb, 0x0, 0x100000, [0x0, 0x0, 0x1, 0x400000000]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_GET_SREGS2(0xffffffffffffffff, 0x8140aecc, &(0x7f0000000640)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x442, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x8010, r2, 0xec776000) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x0) mlock2(&(0x7f000006e000/0x1000)=nil, 0x1000, 0x1) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) socket$nl_route(0x10, 0x3, 0x0) r4 = fsopen(&(0x7f0000000140)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000080)='discard', &(0x7f0000000200)='\t', 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000fcffffff00000000800000009500000000"], &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="ec0000002100390d0000000000000000ac1414c7d89900000000000009000000e00000020000000000000000000000fbff000000000000000000000022000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r2], 0xec}}, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYRES16=r3], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r6}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r7) 6m55.064718762s ago: executing program 4 (id=9): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x20, 0xc, &(0x7f0000000200)=ANY=[@ANYRES64=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x27125ae6fbb99f61, '\x00', 0x0, @fallback=0x3}, 0x94) sendmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1}}], 0x1, 0x24000003) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000, 0x6, 0x0, 0x0, 0x6, 0x900066}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) sendto$packet(r2, &(0x7f00000002c0)="14042bfdd3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000000000, 0x40000010001, &(0x7f0000006680)) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) bind$inet6(r1, &(0x7f0000000580)={0xa, 0x4624, 0x5, @private0, 0x4}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00'], 0x28}}], 0x1, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x27) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000007000000040000000000000e0400000000000000000000000100000d0000000004000000040000000000000000000004040000000000000000000009030000000000000061"], 0x0, 0x5b}, 0x28) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="140100002500010300000000c00e000001"], 0x114}], 0x1}, 0x40000) 6m54.973603296s ago: executing program 3 (id=10): open$dir(&(0x7f0000000440)='./cgroup/../file0\x00', 0x20000, 0x118) fchmodat(0xffffffffffffffff, &(0x7f0000000280)='./cgroup/../file0\x00', 0x40) r0 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000001080)=[@ioring_restriction_sqe_op, @ioring_restriction_sqe_flags_required={0x3, 0x11}], 0x2) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/555, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x237) 6m53.890714968s ago: executing program 1 (id=11): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00022de10000fbdbdf256200e9ff0800647297a40f0700c0352c6dcebdaf9ec0d28e55b4d1e2710849dedd536c074159ee1309243beaff10f94fd8fe228517851d4b915ab3c3eb9d1c4aaa1485eb49f57a22248fb6bc7443327115f7c75619d95eed48455af7e7fc316f248de4a22aaa660c36b1a6cd1cb23874", @ANYRES32=0x0, @ANYBLOB="0600b4001e070000"], 0x24}, 0x1, 0x0, 0x0, 0x41010}, 0x40000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x8601, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f00000000c0)={0x6, r1, 'id0\x00'}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@loopback, @multicast1, 0x0}, &(0x7f0000000380)=0xc) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000580)=@generic={&(0x7f00000003c0)='./file0\x00', 0x0, 0x10}, 0x18) r5 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/cpu_byteorder', 0x0, 0xb) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000280)={r6, 0x1000, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1371a787e8dbe53ea6acc96e3a2500600bd3fe39558128bbad0099cebdc25f59060c9e6d68005000000000000000000000000de0eaae3f904ab1f", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) r7 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x1) fchdir(r8) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000005c0), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r11 = getpid() sched_setscheduler(r11, 0x2, &(0x7f0000000000)=0x3) sendmsg$nl_route(r2, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)=@newlinkprop={0xc0, 0x6c, 0x8, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, 0x9e41ffafaba9b25c, 0x341c1}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x5}, @IFLA_PORT_SELF={0x38, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xc, 0x2, 'nl80211\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "97235ead2ea4be3567208576251f0e3b"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "68c9603ceb1c256e8bccb709e82cc722"}]}, @IFLA_PHYS_SWITCH_ID={0x1c, 0x24, "05db0d68f1370ed2f1e28638eb63f138096dcc0a9325489b"}, @IFLA_XDP={0x2c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r8}, @IFLA_XDP_FD={0x8, 0x1, r9}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r10}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xc43a}, @IFLA_NET_NS_PID={0x8, 0x13, r11}, @IFLA_WEIGHT={0x8, 0xf, 0x5}]}, 0xc0}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x94) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r12, 0x40047438, &(0x7f0000000180)=""/246) writev(r12, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 6m53.684164075s ago: executing program 3 (id=12): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x8000000008}) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) setrlimit(0x6, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r2 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0xf, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) close(r1) 6m53.662809714s ago: executing program 4 (id=13): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) r3 = io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0xffffffff, 0x2, 0x0, 0x32a}) io_uring_enter(r3, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) openat$zero(0xffffffffffffff9c, &(0x7f0000000880), 0x381002, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r5, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) bind$inet(r5, &(0x7f0000000140)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000200)={0x0, @empty, @remote}, &(0x7f0000000400)=0xc) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x7253e043, '\x00', 0x0, r6, 0x3, 0x1, 0x5}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%-010d \x00'}, 0x20) r10 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000600), 0x20001, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r11, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r11, 0x0) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x7, '\x00', 0x0, r6, 0x1, 0x5, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x20, 0xf, &(0x7f0000000180)=@raw=[@alu={0x7, 0x0, 0xa, 0xb, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x1}, @ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0xfffffffffffffffc, 0xfffffffffffffffc}, @alu={0x7, 0x0, 0xa, 0x2, 0x1, 0x8, 0xfffffffffffffff0}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], &(0x7f0000000080)='syzkaller\x00', 0x7fffffff, 0xe1, &(0x7f0000000300)=""/225, 0x41000, 0x41, '\x00', r7, @netfilter, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x1, 0x7, 0x5c1, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000740)=[r8, r9, r10, r11, r12], &(0x7f0000000780)=[{0x5, 0x5, 0x8}], 0x10, 0xd73}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 6m53.134877831s ago: executing program 2 (id=14): io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000080)=@usbdevfs_connect={0x40000866}) ioctl$VHOST_VDPA_GET_GROUP_NUM(0xffffffffffffffff, 0x8004af81, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xaa082, 0x0) sendfile(r2, r2, 0x0, 0x200900) 6m53.014292623s ago: executing program 1 (id=15): r0 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000080), 0x80001, 0x0) close(r0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={0x0, r1}, 0x18) socketpair(0x26, 0x6, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') getdents64(r2, &(0x7f0000000740)=""/4096, 0x1000) renameat(r2, &(0x7f0000000280)='./file0\x00', r2, &(0x7f0000000300)='./file0\x00') syz_io_uring_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) 6m49.732716028s ago: executing program 3 (id=16): open$dir(&(0x7f0000000440)='./cgroup/../file0\x00', 0x20000, 0x118) fchmodat(0xffffffffffffffff, &(0x7f0000000280)='./cgroup/../file0\x00', 0x40) r0 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000001080)=[@ioring_restriction_sqe_op, @ioring_restriction_sqe_flags_required={0x3, 0x11}], 0x2) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/555, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x237) 6m49.726206367s ago: executing program 1 (id=17): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x503, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x880}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r3}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0x9) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001c0001000000000004086aa42d"], 0x30}}, 0x0) timer_settime(r4, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timer_getoverrun(r4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xef) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x40) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 6m49.53950994s ago: executing program 4 (id=18): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x8000000008}) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) setrlimit(0x6, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r2 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0xf, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) close(r1) 6m48.820189787s ago: executing program 2 (id=19): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r3 = eventfd(0x0) io_submit(r2, 0x2, &(0x7f0000000140)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x6, r3, &(0x7f00000002c0)="0000fd6000000000", 0x8, 0x32}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x7, r3, 0x0, 0x0, 0x10007, 0x0, 0x1, r3}]) r4 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) rt_sigtimedwait(&(0x7f0000000000)={[0xffffffffffffffff]}, &(0x7f0000000280), 0x0, 0x8) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 6m48.660327172s ago: executing program 3 (id=20): getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000000c0)=[@cpuid={0x64, 0x18, {0x7, 0x8}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0xa3, 0xfffffffffffffff7, 0x40, 0xfffffffffffffffb}}, @nested_load_code={0x12e, 0x5b, {0x2, "b9800000c00f3235008000000f30420f01f836410f23b4410f01c9431026c4a17e121dfe870000460f013bc4c33d426e071d66ba2000b87d1d8e71ef2e2666410f6f12"}}], 0xab}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000180), 0x8, 0x101000) r3 = socket$inet_smc(0x2b, 0x1, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000280)={0x6, r3, 0xe, {0x9, 0x3e34f2fc}, 0x2}, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x76b) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400000002090101000000000000000000000001860f2893ea39f9b2bf29103e16efc866e45f45740122782f33cbb9dc5bce3af2f0bb991a56bd87d3b1c240199e249ce42514f840f80b00b872ff888a9be6db3695d80ee3f8b7ad2e2f6360817324fa13ea6a716a90b7ba147e78ce7f13958291d70a47b1995303839f4b1eb5e4976b8d3f956bd9d4a6553ab2d09c6eb01751d54b6c4ca867d4dd8c7912e08999260b9d567fc2e6b5e73483c01401fe0c2597c927ba2c9e268bdc0b134aa63ada4746cd"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x44080) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000000c0)={0x3}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000007c0)=[@wr_crn={0x46, 0x20, {0x4, 0x6}}, @wr_drn={0x6e, 0x20, {0x0, 0x5}}, @rdmsr={0x32, 0x18, {0x181}}, @code={0xa, 0x53, {"67735a2e0f019ee0000000650f01cfab66ba420066b89b1566ef4d0fc79ee388ef1966450f38803266baf80cb8947a2c89ef66bafc0ced40e80018000043d07c7800"}}, @out_dx={0xaa, 0x28, {0x5b77, 0x5, 0x8}}, @cpuid={0x14, 0x18, {0x10001, 0x9}}, @rdmsr={0x32, 0x18, {0xb7d}}, @rdmsr={0x32, 0x18, {0x2f0}}, @out_dx={0xaa, 0x28, {0xe6cf, 0x3, 0x80000000004}}, @code={0xa, 0x46, {"26640f35360f060f2084b9f70b00000f32420fc75d00c461fc298f0a630000c462c3f521c40299ac66410f01c9b8010000000f01d9"}}, @rdmsr={0x32, 0x18, {0x966}}, @rdmsr={0x32, 0x18, {0x4000009e}}, @nested_create_vm={0x12d, 0x18, 0x1}, @in_dx={0x82, 0x20, {0xbde0, 0x7}}], 0x1f1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r7, 0x0, 0xd}, 0x18) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x90000, 0x40) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r10, 0x4400ae8f, &(0x7f0000000300)={"597aebb3200720801b0e6ba1c3c9395fa6939c9dfe61db731224a32e0e42a97ae54fa5934b3561c8b03878ea755360e1f5398d1ba0cabf6cf8281c713f1e24f6703e7b2139576f37f3343e77d5a7cc22391cd2cdcb81ce51eebfc55762fb866b1c78576c01006aa946b4bc5c06fd6e52e796c7e52630b4abf83a601b07f7178f50c4c9c50a210675d61beb4e28c375f45f347b81fc61fc31b0d3b2bca1ddda53e9f1999cc99ba57f5f6f0674748cc787ecf4cc36db31b276f802c8fab94774fc2370e62ff40f62ba4d27133b1529efbfaea33f7e3c24b64c38b64c2002349c8a1e2dee73e24eb570aeeeba66d4d5f2ffe4b52bc0e341fd3772ac3e465da234d70e806555d345ac3b45dc1c229c8e127e1fe544b70bbad8f3b79e5c0562b10958531e17656b1ab6ef9c7352b709c2a19b3bdd33613c9ef2eeacafb51d090a45032a89ad46bd2859bce48ae4f90f977d83d39db160f6c075af0c77130e5429f8b5e31569d78aa49f670474a4430357acfe713640fdeed88971b78b69b1652bd6e1d6ef4c3d9eb2e32871efaa26bae28839c51799f881fbebd0dda92b58bff3429d89641d35c0d4818137038f7463ba658e8cfa8c504e9c0833d41ae483f2d64aa6ec60199e2eb121c90a8a4956b4121504a1913c2052b33500fc610ca396fd549de3462c2e6a7164c931fd7900707f8ab4498bbad75109d28f421fb7a1d276e15a497a385c23189b33d4e02efb94670e07a03a4908b990a925542154c86694d84c65bac5a0e9e2f2e36b95aac26d64447ffd828f831380bc6eece3db2c18693d29b59760ed2ebabd7b9bf874126a7f08205c81a0df5ff169b236cf3d05002f1798913f3f75292f1f1c42a9151170309d0bda87447719341e85b7aa07f07965205c37ea21b5504eb97eab44a70a7b2597ce0af2608c5cc2a85366ec11e47e2a197c6e038f6f9f4d1d25edb077f6d98d44305c4ebc803047409dfa8e6f93d9ce63ab434957924dbdefefc99bff0bb4a68142e04c7c20954541728ed4505377ba88ec208ce064e3c8a7943577e20804932e0571a902cf0c45c54dbacb9968ed15fee9234fff2f631990bf840f5693d285ecd94688c63a251dd2e2a7d0049ee2c45c1e695b87711cf5a6d31414d0f708e5d0fc03b2f37becf1e3267ff6b4d740c2b5d905ecf572d2c9f06b5da649af020b6931dfe057442e2cf12f28d93fd1b49f5716a0c2d773250c2caf8f52f2da9412ae377ed6f74a2f0123d6bb9fae78c37a88f029f1ecaf91d023bbf90a6110b21a015b3a6a4b5e54433c662e6162b114c128c158b8391eb5b57f8cdd4be5207bfbaded1a2063852f15fd2a9d00becc20d2432846c6254625d0af44119fd273ea85ccd4e18e47456bd72ea67a334d65368a8858322d8a1bd2786eb36138fa0b3600f44d03ba84615fcf998500"}) 6m20.315390211s ago: executing program 32 (id=7): open$dir(&(0x7f0000000440)='./cgroup/../file0\x00', 0x20000, 0x118) fchmodat(0xffffffffffffffff, &(0x7f0000000280)='./cgroup/../file0\x00', 0x40) r0 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000001080)=[@ioring_restriction_sqe_op, @ioring_restriction_sqe_flags_required={0x3, 0x11}], 0x2) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00'}) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/555, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x237) io_uring_enter(r0, 0x2e6f, 0x8555, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x880, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000001c0)=0xe) ioctl$TCFLSH(r4, 0x540b, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r5, 0x1, 0x0) 6m19.939281898s ago: executing program 33 (id=17): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x503, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x880}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r3}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0x9) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001c0001000000000004086aa42d"], 0x30}}, 0x0) timer_settime(r4, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timer_getoverrun(r4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xef) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x40) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 6m19.482212945s ago: executing program 34 (id=19): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r3 = eventfd(0x0) io_submit(r2, 0x2, &(0x7f0000000140)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x6, r3, &(0x7f00000002c0)="0000fd6000000000", 0x8, 0x32}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x7, r3, 0x0, 0x0, 0x10007, 0x0, 0x1, r3}]) r4 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) rt_sigtimedwait(&(0x7f0000000000)={[0xffffffffffffffff]}, &(0x7f0000000280), 0x0, 0x8) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 6m19.281168268s ago: executing program 35 (id=20): getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000000c0)=[@cpuid={0x64, 0x18, {0x7, 0x8}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0xa3, 0xfffffffffffffff7, 0x40, 0xfffffffffffffffb}}, @nested_load_code={0x12e, 0x5b, {0x2, "b9800000c00f3235008000000f30420f01f836410f23b4410f01c9431026c4a17e121dfe870000460f013bc4c33d426e071d66ba2000b87d1d8e71ef2e2666410f6f12"}}], 0xab}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000180), 0x8, 0x101000) r3 = socket$inet_smc(0x2b, 0x1, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000280)={0x6, r3, 0xe, {0x9, 0x3e34f2fc}, 0x2}, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x76b) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400000002090101000000000000000000000001860f2893ea39f9b2bf29103e16efc866e45f45740122782f33cbb9dc5bce3af2f0bb991a56bd87d3b1c240199e249ce42514f840f80b00b872ff888a9be6db3695d80ee3f8b7ad2e2f6360817324fa13ea6a716a90b7ba147e78ce7f13958291d70a47b1995303839f4b1eb5e4976b8d3f956bd9d4a6553ab2d09c6eb01751d54b6c4ca867d4dd8c7912e08999260b9d567fc2e6b5e73483c01401fe0c2597c927ba2c9e268bdc0b134aa63ada4746cd"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x44080) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000000c0)={0x3}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000007c0)=[@wr_crn={0x46, 0x20, {0x4, 0x6}}, @wr_drn={0x6e, 0x20, {0x0, 0x5}}, @rdmsr={0x32, 0x18, {0x181}}, @code={0xa, 0x53, {"67735a2e0f019ee0000000650f01cfab66ba420066b89b1566ef4d0fc79ee388ef1966450f38803266baf80cb8947a2c89ef66bafc0ced40e80018000043d07c7800"}}, @out_dx={0xaa, 0x28, {0x5b77, 0x5, 0x8}}, @cpuid={0x14, 0x18, {0x10001, 0x9}}, @rdmsr={0x32, 0x18, {0xb7d}}, @rdmsr={0x32, 0x18, {0x2f0}}, @out_dx={0xaa, 0x28, {0xe6cf, 0x3, 0x80000000004}}, @code={0xa, 0x46, {"26640f35360f060f2084b9f70b00000f32420fc75d00c461fc298f0a630000c462c3f521c40299ac66410f01c9b8010000000f01d9"}}, @rdmsr={0x32, 0x18, {0x966}}, @rdmsr={0x32, 0x18, {0x4000009e}}, @nested_create_vm={0x12d, 0x18, 0x1}, @in_dx={0x82, 0x20, {0xbde0, 0x7}}], 0x1f1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r7, 0x0, 0xd}, 0x18) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x90000, 0x40) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r10, 0x4400ae8f, &(0x7f0000000300)={"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"}) 6m19.056713254s ago: executing program 36 (id=18): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x8000000008}) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) setrlimit(0x6, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r2 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0xf, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) close(r1) 22.541482733s ago: executing program 9 (id=1014): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{}, "24747942338921a1", "d830005894bf527ae179a7173985202bbfb61b36f3678de8ea2d0d6616076243", "5615d9f5", "7c5cec21291a43fe"}, 0x38) 22.324468979s ago: executing program 9 (id=1017): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 16.964415876s ago: executing program 6 (id=1032): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, &(0x7f0000000100)) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x406, 0x0) syz_io_uring_setup(0xc97, &(0x7f0000000700)={0x0, 0x6015, 0x800, 0xff7fffff, 0x11c}, &(0x7f00000003c0), &(0x7f0000000140)) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) rt_sigqueueinfo(0x0, 0x28, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xc, r4, 0x1, &(0x7f00000003c0)) getsockopt$inet6_int(r3, 0x29, 0x3, 0x0, &(0x7f00000000c0)) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xffe3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x44084) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r5) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 13.829878168s ago: executing program 6 (id=1045): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r2, 0x1) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r7 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) tkill(r7, 0xb) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x55fdb4595c3d8036) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031, 0x60}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 12.710239516s ago: executing program 9 (id=1049): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsopen(&(0x7f0000000200)='affs\x00', 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) rmdir(&(0x7f0000000300)='./file0\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x11) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) 11.519869877s ago: executing program 6 (id=1053): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040), 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setuid(0xee01) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random="08e7eebc872f"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x44}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 8.329086887s ago: executing program 9 (id=1057): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, 0x0, 0xa8) sendmsg$NFT_BATCH(r1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r5 = socket$xdp(0x2c, 0x3, 0x0) accept4(r1, &(0x7f0000000200)=@un=@abs, &(0x7f0000000180)=0x80, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000001a0000000000060300960042181100", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000f0000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x2) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x4}}, 0x9) msgget(0x0, 0x604) 4.786648642s ago: executing program 6 (id=1064): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x10, 0x0, 0x25dfdbfd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x102, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}, 0x1, 0x3f}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='oom_adj\x00') writev(r5, &(0x7f0000000140)=[{&(0x7f0000000280)='0', 0x1}, {&(0x7f0000000080)="d2", 0x1}], 0x2) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) mount$tmpfs(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="6d706f6c3d7072f9ff65723d7374617469633a"]) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x84, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x11}, @NFTA_SET_EXPRESSIONS={0x40, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xcc}}, 0x20050800) 3.771176467s ago: executing program 7 (id=1073): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0418"], 0x1a) write$proc_mixer(0xffffffffffffffff, 0x0, 0x86) 3.320018806s ago: executing program 7 (id=1077): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x800) 3.058654394s ago: executing program 7 (id=1081): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000340)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xffff, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x401, 0x52}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f00000003c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x34, 0xda18, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x80, 0xfffc, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x700, 0x20000006}]}}}}}}}, 0x0) 2.6236137s ago: executing program 7 (id=1085): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_all\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{}, "24747942338921a1", "d830005894bf527ae179a7173985202bbfb61b36f3678de8ea2d0d6616076243", "5615d9f5", "7c5cec21291a43fe"}, 0x38) 2.193240068s ago: executing program 7 (id=1089): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x3040}) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') llistxattr(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) unlink(&(0x7f00000002c0)='./file0\x00') 1.713436077s ago: executing program 8 (id=1094): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x2) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000080)={0x1, 0x2, 0x3, &(0x7f0000000000)={0x3, "7f4db02b9364453861def264ebcddff888df0437600c9212862e488cc2a19de8ee"}}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x22e02, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) mmap(&(0x7f00008c9000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r2, 0x100300) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) openat$vnet(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) 1.590870224s ago: executing program 9 (id=1095): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000103000000004800000001"], 0x114}], 0x1}, 0x24044010) recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{&(0x7f0000000300)=@nfc_llcp, 0x80, &(0x7f0000000280)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f0000000600)=""/106, 0x6a}], 0x2, &(0x7f0000000480)=""/18, 0x12}, 0x7}], 0x2, 0x14022, 0x0) 1.47734726s ago: executing program 8 (id=1096): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x7ffe, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 1.477045313s ago: executing program 5 (id=1097): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040), 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random="08e7eebc872f"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x44}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 1.326710824s ago: executing program 9 (id=1098): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004400000000002190337bf58400ffffffff050090780a0101026a0000000000000000000000ac1e0001ac14140107be00e0000002000000"], 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r9, @ANYRES32=r5], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000580)={0x1f, 0xffff, 0x3}, 0x6) write(r11, &(0x7f0000000340)="07000000010000", 0x7) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x1b, [0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r10, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) 1.254458431s ago: executing program 5 (id=1099): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_all\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{}, "24747942338921a1", "d830005894bf527ae179a7173985202bbfb61b36f3678de8ea2d0d6616076243", "5615d9f5", "7c5cec21291a43fe"}, 0x38) 1.20385627s ago: executing program 8 (id=1100): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001d00)=[{{&(0x7f0000000800)={0xa, 0x4e20, 0x9, @private2, 0x3}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000840)}], 0x1}}, {{&(0x7f0000000980)={0xa, 0x4e21, 0x7f, @empty, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000d40)=[@rthdrdstopts={{0x2c, 0x29, 0x37, {0x6, 0x2, '\x00', [@hao={0xc9, 0x10, @mcast2}]}}}, @hoplimit={{0x10}}, @hoplimit={{0x10, 0x29, 0x34, 0x5}}, @rthdr_2292={{0x24, 0x29, 0x39, {0x1, 0x2, 0x0, 0xbe, 0x0, [@private2]}}}], 0x70}}, {{&(0x7f0000000e00)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000}, 0x1c, &(0x7f0000000fc0)=[{&(0x7f0000000e40)="7a4d0fe64703a7197a9f3936ee38ff3402016274fb89d0ceb9751170798224da558593b751411bf2cb3fb4f5471bd82ce9545e2a6e", 0x35}], 0x1, &(0x7f000000e100)=[@dstopts_2292={{0x14, 0x29, 0x4, {0x8}}}, @hoplimit={{0x10, 0x29, 0x34, 0x5}}, @rthdr={{0x44, 0x29, 0x39, {0x3a, 0x6, 0x3, 0x1, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @empty]}}}, @hoplimit_2292={{0x10, 0x29, 0x8, 0x6}}, @rthdr={{0x54, 0x29, 0x39, {0x62, 0x8, 0x0, 0x1, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @private2, @empty]}}}, @hoplimit_2292={{0x10, 0x29, 0x8, 0xb}}, @rthdrdstopts={{0x14, 0x29, 0x37, {0x32}}}], 0xf0}}, {{0x0, 0x0, &(0x7f00000010c0)=[{0x0}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000001880)=[{0x0}, {0x0}, {&(0x7f0000001600)="e97342601ddfbdfd1d9ca7bb0d614fbc99cbfcbb64a37b22f6b82306c187e22d3cb1e1d19db8049e61de27194c3e7ba0710215f09936b7ef0271072487a536ab42d4e5b36bacf8888e3d1f32ec2f7e1b2f133b5eb6c8be184b52cf171bf6ef5a8a49496f31f1c0a34cd3f0d9d6dced408903b5e07af7bdec91c3db98fe7335a4bf5f6111c8255a2a408b742e4b0971e5ab41fb74d32d35e8f54cb15546f6210ddf50a5ee277074caba35d7df39c5b711758e0553e09f39cf79603f57156c8f063be062076e8576371a1ad9ba410d5f919ad6a701f83756bd4308d685f3c3a104d324", 0xe2}, {&(0x7f0000001700)="7fd01c20b21d8d0cbfb967a12a85c027427bb832c1bf8eaed2be490893db4d5765d41c6cdecfeb8e2b79ec80853c1b45f5d618f19921cf893fb738800c6a0989c73830b6", 0x44}, {&(0x7f0000001780)}, {&(0x7f000000f340)="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", 0xbe8}, {&(0x7f0000001840)="82d36637fe6ddf338313a68bafb446168237fc9956e8b5d9e2077813f4", 0x1d}], 0x7}}, {{&(0x7f00000018c0)={0xa, 0x4e22, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000001940)=[{&(0x7f0000001900)}], 0x1, &(0x7f0000001f00)}}, {{0x0, 0x0, &(0x7f0000001c80)=[{0x0}, {0x0}, {&(0x7f0000001b80)="226a7f6e1b9fac52ac138fdb4ef0deda39852a48438432f6fe63d866ce814aea0abb219348f729cb4aabd4c609a3d958ea6449c353858d9fa8424af4f92b", 0x3e}], 0x3, &(0x7f0000001cc0)}}], 0x7, 0x4001) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000480)=0x2, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002280)={0x50, 0x0, 0x0, {0x7, 0x9, 0x0, 0x110002, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000007080)="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", 0x2000, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009080)={0x2020, 0x0, 0x0}, 0x2020) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000300)) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x4048840) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r5, &(0x7f0000001100)=""/187, 0xbb) 856.469317ms ago: executing program 5 (id=1101): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) pread64(r2, &(0x7f0000001840)=""/4096, 0x1000, 0x1) 813.785081ms ago: executing program 8 (id=1102): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) shutdown(r0, 0x1) 727.270648ms ago: executing program 7 (id=1103): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r2, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) setsockopt$ax25_int(r5, 0x101, 0x19, &(0x7f0000000200), 0x4) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r4, 0x3) accept4$bt_l2cap(r4, 0x0, 0x0, 0x800) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r3, 0x2) preadv(r1, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/225, 0xe1}], 0x1, 0x7, 0x20000000) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r7, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) poll(&(0x7f0000000140)=[{r7, 0xa046}], 0x1, 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000600)="001a0000000000", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x7, 0x7], 0x0, 0x0, 0x2, 0x0, r6}}, 0x40) r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r9, 0x0) 587.990877ms ago: executing program 8 (id=1104): getpid() process_madvise(0xffffffffffffffff, &(0x7f00000015c0)=[{0x0}, {&(0x7f0000001600)="7fe370522d6af6625215f1793293827ec1fbafd2669ec71d6ec4f18aaa71edae948611d70900e80e4116a3c114041430f19bd4f37e3c7238ed6e6d46979c2220bde96ffe55c88d2e697fd133e5733e1bbb159ba81a1e8e2fb2e51596", 0x5c}, {&(0x7f0000001300)="0454c96113b0da138a30557b0c026d7c7ba28c5cf82e468ed91537d279936ddcf06ef737e0943554457a28db61aea38a154bf19b456388daf4df61c9febcd9b8a2b14929c6f097f4ff11e686a8a37381b9321ae19dd77be474863e35633dec7003568e91eab8e870a93a73b6dea475547a826b25021aecd727c201c9cea0bfba0122b00573c286b821d43d0b4e38ec90b7d08565bf81862bdf5115e75886e742c51e058d0752982da309d53a7c0d320fdbd38bfaa998ff981d15928f783b2728ecc210898685dfc72398e665b7892024c0ab0dcfe9d3fc", 0xd7}, {&(0x7f0000001400)="3e519bc4eb7b0a55b33bdb22cc7ca76aba33506ebcf89e67b16583e68404bbca008b995a73322a4cc7a3c436e94da49121c4f225ccd342612b46beb2f569a7a0423c0cf79f2d94c015b7b47bc11d5fe599214dbe7f92c8a14b6d254a8daa074ece2708f10e912eb72cb22efc14a0d0cc7cea79311ead3200c7aca0e920d83c8d7b", 0x81}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000014c0)="6b553f4de4ed875c9fadc16852f54981bcd646a5262fc3900592194638585e3d2e79f074f796720749ddc1a2661dcb2471a47d963fb4d817dfdb5f52dc8ab642030c2c771646051d08609527b36368b80794b8cb63fe817c3379951a047c5026c2e99eae6dc05c6845529fb603666d78c0e1e5f7bca8f1d8584b7409ccaf0da598af64d7bdd2ae21ac4fb4e07dee96a92a8dddecee7ccbede2d0a7d4f2da90dc3eb4ae8895091f05db58a786519f6fc924a465cc46ae6a9b8705de0705b8bab4f10cddc7756c53eadf4aa6e2379fd85e9c5e7bfc", 0xd4}], 0x6, 0x9, 0x0) 572.196368ms ago: executing program 5 (id=1105): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a10ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000200)=@chain) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3, 0x9) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x2000000}, 0x1c) 500.920763ms ago: executing program 6 (id=1106): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000030000000b00000008000300", @ANYRES32=r2, @ANYBLOB="20005080090001007ee5d52ffd0000000800030005ac0f00050002"], 0x3c}}, 0x20000010) 390.238631ms ago: executing program 5 (id=1107): setreuid(0x0, 0xee01) r0 = shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r0, 0xc) 142.540541ms ago: executing program 8 (id=1108): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]}) sync_file_range(0xffffffffffffffff, 0x4000000008, 0x3ff, 0x7) 96.959439ms ago: executing program 5 (id=1109): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040), 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random="08e7eebc872f"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x44}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 0s ago: executing program 6 (id=1110): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{&(0x7f0000000300)=@nfc_llcp, 0x80, &(0x7f0000000280)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f0000000600)=""/106, 0x6a}], 0x2, &(0x7f0000000480)=""/18, 0x12}, 0x7}], 0x2, 0x14022, 0x0) kernel console output (not intermixed with test programs): 0] type 2 family 0 port 6081 - 0 [ 214.654969][ T5125] Bluetooth: hci5: command tx timeout [ 214.792734][ T6381] netlink: 256 bytes leftover after parsing attributes in process `syz.6.40'. [ 215.480718][ T5987] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.768530][ T5125] Bluetooth: hci2: command tx timeout [ 215.943815][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 216.141251][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.141270][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.141291][ T10] usb 7-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 216.141302][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.190892][ T10] usb 7-1: config 0 descriptor?? [ 216.625762][ T5987] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.712128][ T10] razer 0003:1532:010E.0001: unknown main item tag 0x3 [ 216.778241][ T6322] chnl_net:caif_netlink_parms(): no params data found [ 216.930308][ T10] razer 0003:1532:010E.0001: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.6-1/input0 [ 217.781270][ T5987] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.880846][ T6321] chnl_net:caif_netlink_parms(): no params data found [ 217.988975][ T6388] bond1: entered promiscuous mode [ 217.991229][ T6388] 8021q: adding VLAN 0 to HW filter on device bond1 [ 218.021152][ T6384] usb 7-1: USB disconnect, device number 4 [ 220.255325][ T6416] syz.6.46 uses obsolete (PF_INET,SOCK_PACKET) [ 220.379663][ T6322] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.379789][ T6322] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.379960][ T6322] bridge_slave_0: entered allmulticast mode [ 220.407475][ T6322] bridge_slave_0: entered promiscuous mode [ 220.505952][ T6322] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.506083][ T6322] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.506303][ T6322] bridge_slave_1: entered allmulticast mode [ 220.545709][ T6322] bridge_slave_1: entered promiscuous mode [ 220.563647][ T5915] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 220.767453][ T5915] usb 8-1: Using ep0 maxpacket: 32 [ 220.827780][ T5915] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.827802][ T5915] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.827824][ T5915] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 220.827835][ T5915] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.887365][ T5915] usb 8-1: config 0 descriptor?? [ 221.084551][ T5915] hub 8-1:0.0: USB hub found [ 221.238505][ T5915] hub 8-1:0.0: 1 port detected [ 222.238353][ T6322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.511446][ T5915] hub 8-1:0.0: hub_hub_status failed (err = -32) [ 222.511472][ T5915] hub 8-1:0.0: config failed, can't get hub status (err -32) [ 222.531356][ T5915] usbhid 8-1:0.0: can't add hid device: -32 [ 222.531477][ T5915] usbhid 8-1:0.0: probe with driver usbhid failed with error -32 [ 222.628067][ T6322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.640198][ T6321] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.646852][ T6321] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.647100][ T6321] bridge_slave_0: entered allmulticast mode [ 222.678633][ T6321] bridge_slave_0: entered promiscuous mode [ 222.819643][ T5934] usb 8-1: USB disconnect, device number 3 [ 222.992167][ T6438] kvm: user requested TSC rate below hardware speed [ 223.024581][ T6321] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.024678][ T6321] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.024840][ T6321] bridge_slave_1: entered allmulticast mode [ 223.043900][ T6321] bridge_slave_1: entered promiscuous mode [ 223.167149][ T6442] kvm: kvm [6437]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60100000000 [ 223.176134][ T6442] kvm: kvm [6437]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60400000000 [ 223.254944][ T6442] kvm: kvm [6437]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60700000000 [ 223.302623][ T6442] kvm: kvm [6437]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60a00000000 [ 223.382842][ T6442] kvm: kvm [6437]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60d00000000 [ 223.420754][ T6442] kvm: kvm [6437]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x61000000000 [ 223.449846][ T6442] kvm: kvm [6437]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x61300000000 [ 223.518766][ T6442] kvm: kvm [6437]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x61600000000 [ 223.563055][ T6442] kvm: kvm [6437]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x61900000000 [ 223.604857][ T6442] kvm: kvm [6437]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x61c00000000 [ 223.661013][ T6322] team0: Port device team_slave_0 added [ 223.936309][ T6322] team0: Port device team_slave_1 added [ 223.968290][ T6321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.985298][ T5934] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 224.151558][ T5934] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 224.151579][ T5934] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 224.151600][ T5934] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 224.151612][ T5934] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.232374][ T6451] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 224.242878][ T6321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.280943][ T5934] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 224.695878][ T5934] usb 8-1: USB disconnect, device number 4 [ 225.699911][ T5987] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.862180][ T6322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.862191][ T6322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.862204][ T6322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.963724][ T45] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 226.171655][ T6322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.171667][ T6322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.171680][ T6322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.219048][ T6321] team0: Port device team_slave_0 added [ 226.256658][ T45] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.256688][ T45] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.256724][ T45] usb 8-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 226.256745][ T45] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.339827][ T45] usb 8-1: config 0 descriptor?? [ 226.647178][ T5987] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.695744][ T6460] netlink: 256 bytes leftover after parsing attributes in process `syz.5.53'. [ 227.191410][ T6321] team0: Port device team_slave_1 added [ 227.274632][ T45] razer 0003:1532:010E.0002: unknown main item tag 0x3 [ 227.441951][ T45] razer 0003:1532:010E.0002: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.7-1/input0 [ 228.085576][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 228.232180][ T6480] process 'syz.6.57' launched '/dev/fd/4' with NULL argv: empty string added [ 228.318249][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 228.323304][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.323322][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.323343][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 228.323355][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.331977][ T9] usb 6-1: config 0 descriptor?? [ 228.392261][ T9] hub 6-1:0.0: USB hub found [ 228.612755][ T9] hub 6-1:0.0: 1 port detected [ 228.633779][ T5987] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.755480][ T6321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.755496][ T6321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.755519][ T6321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.942416][ T5953] usb 8-1: USB disconnect, device number 5 [ 229.207358][ T9] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 229.207382][ T9] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 229.232099][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 229.232228][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 229.307793][ T6321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.307808][ T6321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.307830][ T6321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.328062][ T9] usb 6-1: USB disconnect, device number 3 [ 229.995562][ T6322] hsr_slave_0: entered promiscuous mode [ 230.024994][ T6322] hsr_slave_1: entered promiscuous mode [ 230.375089][ T5987] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.432098][ T6491] netlink: 256 bytes leftover after parsing attributes in process `syz.7.59'. [ 230.554299][ T6499] kvm: user requested TSC rate below hardware speed [ 230.649002][ T6499] kvm_pr_unimpl_wrmsr: 15 callbacks suppressed [ 230.649020][ T6499] kvm: kvm [6498]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60100000000 [ 230.720050][ T6499] kvm: kvm [6498]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60400000000 [ 232.419044][ T6321] hsr_slave_0: entered promiscuous mode [ 232.422368][ T6321] hsr_slave_1: entered promiscuous mode [ 232.430774][ T6321] debugfs: 'hsr0' already exists in 'hsr' [ 232.430800][ T6321] Cannot create hsr debugfs directory [ 232.442812][ T6508] netlink: 256 bytes leftover after parsing attributes in process `syz.7.61'. [ 233.365987][ T5125] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 233.478894][ T5125] Bluetooth: hci1: Injecting HCI hardware error event [ 233.480770][ T5125] Bluetooth: hci1: hardware error 0x00 [ 233.848732][ T6515] netlink: 32 bytes leftover after parsing attributes in process `syz.7.63'. [ 233.927744][ T6516] netlink: 24 bytes leftover after parsing attributes in process `syz.7.63'. [ 235.647868][ T5125] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 237.260528][ T6520] netlink: 256 bytes leftover after parsing attributes in process `syz.5.64'. [ 237.957083][ T5934] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 238.103953][ T5915] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 238.155192][ T5987] bridge_slave_1: left allmulticast mode [ 238.155217][ T5987] bridge_slave_1: left promiscuous mode [ 238.156478][ T5987] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.183782][ T5934] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 238.183815][ T5934] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 238.183855][ T5934] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 238.183875][ T5934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.211690][ T6531] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 238.246254][ T5934] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 238.256215][ T5915] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 238.256247][ T5915] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 238.256281][ T5915] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 238.256301][ T5915] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.324407][ T6533] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 238.365876][ T5987] bridge_slave_0: left allmulticast mode [ 238.365904][ T5987] bridge_slave_0: left promiscuous mode [ 238.373491][ T5987] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.498970][ T5915] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 238.725340][ T5987] bridge_slave_1: left allmulticast mode [ 238.725360][ T5987] bridge_slave_1: left promiscuous mode [ 238.726400][ T5987] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.842299][ T5987] bridge_slave_0: left allmulticast mode [ 238.844848][ T5987] bridge_slave_0: left promiscuous mode [ 238.862661][ T5987] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.003987][ T5934] usb 6-1: USB disconnect, device number 4 [ 239.136615][ T5915] usb 8-1: USB disconnect, device number 6 [ 242.291385][ T5799] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 242.482614][ T5799] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 242.482642][ T5799] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 242.482668][ T5799] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 242.482679][ T5799] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.525903][ T6548] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 242.545874][ T5799] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 243.141910][ T9] usb 6-1: USB disconnect, device number 5 [ 244.024429][ T5987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.096239][ T5987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.125777][ T5987] bond0 (unregistering): Released all slaves [ 244.355951][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 245.030727][ T10] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 245.030759][ T10] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 245.030796][ T10] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 245.030816][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.111400][ T6553] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 245.156604][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 245.593152][ T10] usb 6-1: USB disconnect, device number 6 [ 246.217817][ T5987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.328587][ T5987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.369760][ T5987] bond0 (unregistering): Released all slaves [ 246.414439][ T6540] netlink: 256 bytes leftover after parsing attributes in process `syz.7.70'. [ 246.435857][ T6555] netlink: 256 bytes leftover after parsing attributes in process `syz.6.74'. [ 246.663391][ T5896] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 247.866330][ T5896] usb 6-1: Using ep0 maxpacket: 32 [ 247.868252][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.868281][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.868316][ T5896] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 247.868337][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.886940][ T5896] usb 6-1: config 0 descriptor?? [ 247.924588][ T5896] hub 6-1:0.0: USB hub found [ 249.352127][ T5896] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 249.365728][ T5896] usbhid 6-1:0.0: can't add hid device: -71 [ 249.365992][ T5896] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 249.398093][ T5896] usb 6-1: USB disconnect, device number 7 [ 251.220467][ T6574] netlink: 256 bytes leftover after parsing attributes in process `syz.7.79'. [ 253.992896][ T5934] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 254.147453][ T5934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.147474][ T5934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.147497][ T5934] usb 6-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 254.147509][ T5934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.155649][ T5934] usb 6-1: config 0 descriptor?? [ 254.393656][ T5896] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 254.579195][ T5896] usb 7-1: Using ep0 maxpacket: 32 [ 254.776037][ T5896] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.776134][ T5896] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.776172][ T5896] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 254.776191][ T5896] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.848793][ T5896] usb 7-1: config 0 descriptor?? [ 254.864899][ T5896] hub 7-1:0.0: USB hub found [ 254.865282][ T5934] razer 0003:1532:010E.0003: unknown main item tag 0x3 [ 255.103720][ T5896] hub 7-1:0.0: 1 port detected [ 255.126634][ T5934] razer 0003:1532:010E.0003: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.5-1/input0 [ 255.282835][ T5934] usb 6-1: USB disconnect, device number 8 [ 255.381919][ T6602] fido_id[6602]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 255.610069][ T5896] hub 7-1:0.0: hub_hub_status failed (err = -71) [ 255.610095][ T5896] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 255.638772][ T5896] usbhid 7-1:0.0: can't add hid device: -71 [ 255.638876][ T5896] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 255.696874][ T5896] usb 7-1: USB disconnect, device number 5 [ 255.795222][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.795297][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.263683][ T5934] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 256.430374][ T5934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.430404][ T5934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.430438][ T5934] usb 6-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 256.430458][ T5934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.437277][ T5934] usb 6-1: config 0 descriptor?? [ 257.005285][ T5987] hsr_slave_0: left promiscuous mode [ 257.053775][ T5987] hsr_slave_1: left promiscuous mode [ 257.055032][ T5987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.055181][ T5987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.105163][ T5987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.105186][ T5987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.238888][ T5934] razer 0003:1532:010E.0004: unknown main item tag 0x3 [ 257.293779][ T5987] hsr_slave_0: left promiscuous mode [ 257.334715][ T5987] hsr_slave_1: left promiscuous mode [ 257.337556][ T5987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.337582][ T5987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.398500][ T5987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.398525][ T5987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.433479][ T5934] razer 0003:1532:010E.0004: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.5-1/input0 [ 257.650630][ T5934] usb 6-1: USB disconnect, device number 9 [ 257.749708][ T5987] veth1_macvtap: left promiscuous mode [ 257.751488][ T5987] veth0_macvtap: left promiscuous mode [ 257.751777][ T5987] veth1_vlan: left promiscuous mode [ 257.751951][ T5987] veth0_vlan: left promiscuous mode [ 258.356945][ T5987] veth1_macvtap: left promiscuous mode [ 258.357053][ T5987] veth0_macvtap: left promiscuous mode [ 258.357356][ T5987] veth1_vlan: left promiscuous mode [ 258.357542][ T5987] veth0_vlan: left promiscuous mode [ 258.443723][ T5929] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 258.806602][ T5929] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 258.806634][ T5929] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 258.806668][ T5929] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 258.806680][ T5929] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.843686][ T5934] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 258.860354][ T6630] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 258.881898][ T5929] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 259.034092][ T5934] usb 6-1: Using ep0 maxpacket: 32 [ 259.037532][ T5934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.037558][ T5934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.037593][ T5934] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 259.037612][ T5934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.041344][ T5934] usb 6-1: config 0 descriptor?? [ 259.049753][ T5934] hub 6-1:0.0: USB hub found [ 259.265066][ T5934] hub 6-1:0.0: 1 port detected [ 260.520232][ T5934] hub 6-1:0.0: hub_hub_status failed (err = -32) [ 260.520249][ T5934] hub 6-1:0.0: config failed, can't get hub status (err -32) [ 260.526302][ T5934] usbhid 6-1:0.0: can't add hid device: -32 [ 260.528066][ T5934] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 260.584509][ T5987] team0 (unregistering): Port device team_slave_1 removed [ 260.774502][ T5987] team0 (unregistering): Port device team_slave_0 removed [ 260.831733][ T5934] usb 7-1: USB disconnect, device number 6 [ 261.180054][ T5929] usb 6-1: USB disconnect, device number 10 [ 261.373826][ T5934] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 261.554253][ T5934] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 261.554284][ T5934] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 261.554316][ T5934] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 261.554327][ T5934] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.614652][ T6638] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 261.664548][ T5934] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 262.473049][ T5965] usb 7-1: USB disconnect, device number 7 [ 263.260650][ T6652] kvm: user requested TSC rate below hardware speed [ 263.338364][ T6652] kvm: kvm [6651]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60100000000 [ 263.342429][ T6652] kvm: kvm [6651]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60400000000 [ 263.367919][ T6652] kvm: kvm [6651]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60700000000 [ 263.371659][ T6652] kvm: kvm [6651]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60a00000000 [ 263.405106][ T6652] kvm: kvm [6651]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60d00000000 [ 263.408718][ T6652] kvm: kvm [6651]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x61000000000 [ 263.411796][ T6652] kvm: kvm [6651]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x61300000000 [ 263.852387][ T62] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 263.867949][ T62] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 263.869008][ T62] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 263.871039][ T62] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 263.871977][ T62] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 263.942070][ T62] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 263.963810][ T62] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 264.004257][ T62] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 264.006018][ T62] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 264.007017][ T62] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 265.386349][ T5987] team0 (unregistering): Port device team_slave_1 removed [ 266.348505][ T5125] Bluetooth: hci4: command tx timeout [ 266.350286][ T5125] Bluetooth: hci6: command tx timeout [ 266.471416][ T5987] team0 (unregistering): Port device team_slave_0 removed [ 268.428251][ T5827] Bluetooth: hci4: command tx timeout [ 268.428345][ T5814] Bluetooth: hci3: command 0x0406 tx timeout [ 268.428382][ T5820] Bluetooth: hci0: command 0x0406 tx timeout [ 268.428426][ T5818] Bluetooth: hci6: command tx timeout [ 268.559536][ T5929] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 268.717569][ T5929] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 268.717612][ T5929] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 268.717643][ T5929] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 268.717654][ T5929] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.723412][ T6671] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 268.754483][ T5929] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 268.953904][ T6629] netlink: 256 bytes leftover after parsing attributes in process `syz.7.88'. [ 269.425563][ T5929] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 269.529361][ T6677] netlink: 256 bytes leftover after parsing attributes in process `syz.7.98'. [ 269.551891][ T5934] usb 7-1: USB disconnect, device number 8 [ 269.640036][ T5929] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 269.640068][ T5929] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 269.640094][ T5929] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 269.640105][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.684553][ T6676] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 269.711372][ T5929] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 270.273840][ T5929] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 270.335257][ T5934] usb 6-1: USB disconnect, device number 11 [ 270.492999][ T5929] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 270.493045][ T5929] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 270.493116][ T5929] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 270.493151][ T5929] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.526363][ T62] Bluetooth: hci6: command tx timeout [ 270.526543][ T62] Bluetooth: hci4: command tx timeout [ 270.982232][ T6681] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 271.245930][ T5929] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 272.027240][ T5929] usb 8-1: USB disconnect, device number 7 [ 272.618482][ T62] Bluetooth: hci6: command tx timeout [ 272.618534][ T5125] Bluetooth: hci4: command tx timeout [ 274.212637][ T6706] netlink: 40 bytes leftover after parsing attributes in process `syz.7.104'. [ 274.475492][ T6716] kAFS: unable to lookup cell 'ÿ' [ 274.475907][ T6716] kAFS: unable to lookup cell '(,c¾Ì' [ 275.546262][ T6723] netlink: 256 bytes leftover after parsing attributes in process `syz.5.107'. [ 275.920837][ T6733] netlink: 104 bytes leftover after parsing attributes in process `syz.5.109'. [ 275.924913][ T6733] netlink: 'syz.5.109': attribute type 16 has an invalid length. [ 275.924933][ T6733] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.109'. [ 275.996572][ T5934] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 276.169411][ T5934] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 276.169445][ T5934] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 276.169499][ T5934] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 276.169517][ T5934] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.186691][ T6730] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 276.260153][ T5934] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 276.603802][ T5929] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 276.731471][ T6656] chnl_net:caif_netlink_parms(): no params data found [ 276.766730][ T6657] chnl_net:caif_netlink_parms(): no params data found [ 276.787162][ T5929] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 276.787193][ T5929] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 276.787230][ T5929] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 276.787249][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.840396][ T6738] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 276.864271][ T5929] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 277.683797][ T5934] usb 6-1: USB disconnect, device number 12 [ 277.973678][ T5929] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 278.129026][ T5929] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 278.129050][ T5929] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 278.129071][ T5929] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 278.129082][ T5929] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.148357][ T6753] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 278.182382][ T5929] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 278.373763][ T6764] kvm: user requested TSC rate below hardware speed [ 278.392655][ T6764] kvm: kvm [6763]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60100000000 [ 278.412980][ T6764] kvm: kvm [6763]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60400000000 [ 278.424991][ T6656] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.425934][ T6656] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.426145][ T6656] bridge_slave_0: entered allmulticast mode [ 278.431670][ T6764] kvm: kvm [6763]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60700000000 [ 278.442867][ T6656] bridge_slave_0: entered promiscuous mode [ 278.469432][ T6764] kvm: kvm [6763]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60a00000000 [ 278.475977][ T6657] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.476117][ T6657] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.476331][ T6657] bridge_slave_0: entered allmulticast mode [ 278.508127][ T6657] bridge_slave_0: entered promiscuous mode [ 278.528024][ T6764] kvm: kvm [6763]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60d00000000 [ 278.528892][ T6656] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.530231][ T6656] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.532285][ T6764] kvm: kvm [6763]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x61000000000 [ 278.536082][ T6656] bridge_slave_1: entered allmulticast mode [ 278.575928][ T6764] kvm: kvm [6763]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x61300000000 [ 278.580022][ T6764] kvm: kvm [6763]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x61600000000 [ 278.587152][ T6656] bridge_slave_1: entered promiscuous mode [ 278.599800][ T6764] kvm: kvm [6763]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x61900000000 [ 278.685675][ T5824] usb 8-1: USB disconnect, device number 8 [ 279.058786][ T6657] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.058925][ T6657] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.059124][ T6657] bridge_slave_1: entered allmulticast mode [ 279.061504][ T6657] bridge_slave_1: entered promiscuous mode [ 279.692981][ T6656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.724774][ T6657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.732387][ T6656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.757522][ T6657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.884218][ T5929] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 280.045866][ T5929] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 280.045887][ T5929] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 280.045948][ T5929] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 280.045960][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.083979][ T6772] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 280.204479][ T6656] team0: Port device team_slave_0 added [ 280.209607][ T6657] team0: Port device team_slave_0 added [ 280.225027][ T6656] team0: Port device team_slave_1 added [ 280.308396][ T6657] team0: Port device team_slave_1 added [ 280.633229][ T6656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.633246][ T6656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.633268][ T6656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.680466][ T6657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.680481][ T6657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.680504][ T6657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.719895][ T6657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.720169][ T6657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.720197][ T6657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.787147][ T6656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.787159][ T6656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.787173][ T6656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.857619][ T5915] usb 7-1: USB disconnect, device number 9 [ 280.902686][ T5929] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 281.224142][ T5824] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 281.377298][ T5824] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 281.377346][ T5824] usb 8-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00 [ 281.377367][ T5824] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.401157][ T5824] usb 8-1: config 0 descriptor?? [ 281.422923][ T6770] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 281.803707][ T5929] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 281.867853][ T6770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.871910][ T6770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.920309][ T5824] betop 0003:8380:1850.0005: report_id 1146923772 is invalid [ 281.920331][ T5824] betop 0003:8380:1850.0005: item 0 4 1 8 parsing failed [ 281.921104][ T5824] betop 0003:8380:1850.0005: parse failed [ 281.921171][ T5824] betop 0003:8380:1850.0005: probe with driver betop failed with error -22 [ 281.970978][ T5929] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.980630][ T5929] usb 7-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 281.980658][ T5929] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.980675][ T5929] usb 7-1: Product: syz [ 281.980696][ T5929] usb 7-1: Manufacturer: syz [ 281.980709][ T5929] usb 7-1: SerialNumber: syz [ 281.989386][ T5929] usb 7-1: config 0 descriptor?? [ 282.024898][ T5929] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 282.240258][ T6657] hsr_slave_0: entered promiscuous mode [ 282.242824][ T6657] hsr_slave_1: entered promiscuous mode [ 282.245805][ T6657] debugfs: 'hsr0' already exists in 'hsr' [ 282.246039][ T6657] Cannot create hsr debugfs directory [ 282.273286][ T6656] hsr_slave_0: entered promiscuous mode [ 282.278325][ T6656] hsr_slave_1: entered promiscuous mode [ 282.289651][ T6656] debugfs: 'hsr0' already exists in 'hsr' [ 282.289669][ T6656] Cannot create hsr debugfs directory [ 282.603682][ T6783] fuse: Bad value for 'group_id' [ 282.603702][ T6783] fuse: Bad value for 'group_id' [ 282.644308][ T5896] usb 8-1: USB disconnect, device number 9 [ 282.824631][ T5929] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 282.824724][ T5929] gspca_pac7302 7-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 282.918435][ T6804] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 282.931244][ T5934] usb 6-1: USB disconnect, device number 13 [ 282.965388][ T5987] bridge_slave_1: left allmulticast mode [ 282.970866][ T5987] bridge_slave_1: left promiscuous mode [ 282.971124][ T5987] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.055254][ T5987] bridge_slave_0: left allmulticast mode [ 283.055277][ T5987] bridge_slave_0: left promiscuous mode [ 283.055484][ T5987] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.635403][ T5987] bridge_slave_1: left allmulticast mode [ 283.635433][ T5987] bridge_slave_1: left promiscuous mode [ 283.635681][ T5987] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.678704][ T5824] usb 7-1: USB disconnect, device number 10 [ 283.770218][ T5987] bridge_slave_0: left allmulticast mode [ 283.770245][ T5987] bridge_slave_0: left promiscuous mode [ 283.770484][ T5987] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.986412][ T6818] kAFS: unable to lookup cell 'ÿ' [ 283.986861][ T6818] kAFS: unable to lookup cell '(,c¾Ì' [ 285.013742][ T5934] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 285.092749][ T5987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.166794][ T5934] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 285.166815][ T5934] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 285.166836][ T5934] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 285.166847][ T5934] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.201295][ T6822] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 285.204198][ T5987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.247401][ T5934] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 285.301028][ T5987] bond0 (unregistering): Released all slaves [ 286.155029][ T5987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.235256][ T5987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.315413][ T5987] bond0 (unregistering): Released all slaves [ 286.603879][ T5915] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 286.782157][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 286.782203][ T5915] usb 6-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00 [ 286.782224][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.820893][ T5915] usb 6-1: config 0 descriptor?? [ 286.838314][ T6843] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 287.023672][ T5929] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 287.103939][ T5987] hsr_slave_0: left promiscuous mode [ 287.144295][ T5987] hsr_slave_1: left promiscuous mode [ 287.146084][ T5987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.175563][ T5987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.178335][ T5929] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 287.178366][ T5929] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 287.178404][ T5929] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 287.178424][ T5929] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.194747][ T6845] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 287.212096][ T5929] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 287.423672][ T5987] hsr_slave_0: left promiscuous mode [ 287.463786][ T5987] hsr_slave_1: left promiscuous mode [ 287.464887][ T5987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.493120][ T5987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.518412][ T5929] usb 8-1: USB disconnect, device number 10 [ 287.737378][ T5915] usbhid 6-1:0.0: can't add hid device: -71 [ 287.737556][ T5915] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 287.781769][ T5915] usb 6-1: USB disconnect, device number 14 [ 288.223751][ T5929] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 288.383690][ T5929] usb 8-1: Using ep0 maxpacket: 32 [ 288.386032][ T5929] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.386061][ T5929] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.386096][ T5929] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 288.386117][ T5929] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.390000][ T5929] usb 8-1: config 0 descriptor?? [ 288.465510][ T5929] hub 8-1:0.0: USB hub found [ 288.613276][ T5929] hub 8-1:0.0: 1 port detected [ 288.714391][ T5987] team0 (unregistering): Port device team_slave_1 removed [ 288.956566][ T5987] team0 (unregistering): Port device team_slave_0 removed [ 289.625860][ T5929] hub 8-1:0.0: hub_hub_status failed (err = -32) [ 289.625886][ T5929] hub 8-1:0.0: config failed, can't get hub status (err -32) [ 289.631851][ T5929] usbhid 8-1:0.0: can't add hid device: -32 [ 289.631979][ T5929] usbhid 8-1:0.0: probe with driver usbhid failed with error -32 [ 289.781352][ T5929] usb 7-1: USB disconnect, device number 11 [ 290.072048][ T5125] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 290.622040][ T6870] mmap: syz.5.133 (6870) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 290.905822][ T5915] usb 8-1: USB disconnect, device number 11 [ 291.233817][ T5915] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 291.405981][ T5915] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 291.406016][ T5915] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 291.406052][ T5915] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 291.406074][ T5915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.435146][ T6873] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 291.443181][ T5915] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 291.552177][ T5987] team0 (unregistering): Port device team_slave_1 removed [ 291.673710][ T5896] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 291.692400][ T5987] team0 (unregistering): Port device team_slave_0 removed [ 291.839629][ T5896] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.841399][ T5896] usb 8-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 291.841424][ T5896] usb 8-1: New USB device strings: Mfr=154, Product=0, SerialNumber=0 [ 291.841442][ T5896] usb 8-1: Manufacturer: syz [ 291.906724][ T5896] usb 8-1: config 0 descriptor?? [ 291.937479][ T5896] usb 8-1: bad CDC descriptors [ 292.846115][ T5915] usb 8-1: USB disconnect, device number 12 [ 294.115925][ T5125] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 294.116118][ T5125] Bluetooth: hci0: Injecting HCI hardware error event [ 294.120450][ T5125] Bluetooth: hci0: hardware error 0x00 [ 294.154603][ T5965] usb 7-1: USB disconnect, device number 12 [ 294.581666][ T6656] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 294.633086][ T6656] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 294.708891][ T6656] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 294.747971][ T5986] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 294.826029][ T6656] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 294.903729][ T5986] usb 8-1: Using ep0 maxpacket: 8 [ 294.907842][ T5986] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.909086][ T5986] usb 8-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 294.909109][ T5986] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 294.909125][ T5986] usb 8-1: SerialNumber: syz [ 294.952885][ T5986] usb 8-1: config 0 descriptor?? [ 294.989873][ T5986] uvcvideo 8-1:0.0: Found UVC 0.00 device (05ac:8501) [ 294.990564][ T5986] uvcvideo 8-1:0.0: Failed to create links for entity 255 [ 294.990582][ T5986] uvcvideo 8-1:0.0: Failed to register entities (-22). [ 295.167388][ T6915] kvm: user requested TSC rate below hardware speed [ 295.205069][ T5986] usb 8-1: USB disconnect, device number 13 [ 295.639734][ T6929] netlink: 256 bytes leftover after parsing attributes in process `syz.5.143'. [ 296.423814][ T5125] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 296.753710][ T5915] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 297.353384][ T5915] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 297.353417][ T5915] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 297.353454][ T5915] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 297.353474][ T5915] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.367590][ T6933] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 297.412336][ T5915] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 297.440883][ T6656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.723470][ T6656] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.778821][ T189] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.779709][ T189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.141399][ T6529] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.141543][ T6529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.187496][ T6657] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 298.240201][ T6657] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 298.337586][ T6657] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 298.410407][ T6657] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 299.397156][ T6657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.432759][ T6657] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.502859][ T5986] usb 8-1: USB disconnect, device number 14 [ 299.511064][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.533881][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.584251][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.584418][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.592201][ T5125] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 299.992683][ T6656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.587446][ C0] vkms_vblank_simulate: vblank timer overrun [ 300.878135][ C0] vkms_vblank_simulate: vblank timer overrun [ 301.262544][ C0] vkms_vblank_simulate: vblank timer overrun [ 301.580337][ T6657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.391000][ T7019] netlink: 256 bytes leftover after parsing attributes in process `syz.5.153'. [ 302.532175][ T6656] veth0_vlan: entered promiscuous mode [ 302.553029][ T6656] veth1_vlan: entered promiscuous mode [ 302.605509][ T7030] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 302.605594][ T7030] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 302.815620][ C0] vkms_vblank_simulate: vblank timer overrun [ 302.843894][ T6656] veth0_macvtap: entered promiscuous mode [ 302.869696][ T6656] veth1_macvtap: entered promiscuous mode [ 303.001168][ T6656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.103931][ T6656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.138353][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.140551][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.142172][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.147384][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.551803][ T6382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.551823][ T6382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.633755][ T4865] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.633776][ T4865] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.418445][ T7052] netlink: 104 bytes leftover after parsing attributes in process `syz.6.157'. [ 304.419007][ T7052] netlink: 'syz.6.157': attribute type 16 has an invalid length. [ 304.419017][ T7052] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.157'. [ 304.544346][ T6657] veth0_vlan: entered promiscuous mode [ 304.666229][ T6657] veth1_vlan: entered promiscuous mode [ 306.049140][ T5125] Bluetooth: hci3: ISO packet for unknown connection handle 200 [ 306.068704][ T6657] veth0_macvtap: entered promiscuous mode [ 306.105342][ T6657] veth1_macvtap: entered promiscuous mode [ 306.211292][ T6657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.329719][ T5944] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 306.785476][ T6657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.812434][ T6382] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.812478][ T6382] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.812511][ T6382] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.812544][ T6382] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.846103][ T5944] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 306.846136][ T5944] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 306.846159][ T5944] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 306.846170][ T5944] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.867407][ T7067] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 306.907830][ T5944] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 307.296241][ T5944] usb 9-1: USB disconnect, device number 2 [ 308.218537][ T6382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.218557][ T6382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.249235][ T7087] netlink: 256 bytes leftover after parsing attributes in process `syz.7.164'. [ 308.511635][ T6529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.511655][ T6529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.168681][ T7120] netlink: 104 bytes leftover after parsing attributes in process `syz.7.170'. [ 310.215546][ T7120] netlink: 'syz.7.170': attribute type 16 has an invalid length. [ 310.215562][ T7120] netlink: 64138 bytes leftover after parsing attributes in process `syz.7.170'. [ 311.064643][ C0] vkms_vblank_simulate: vblank timer overrun [ 311.627567][ C0] vkms_vblank_simulate: vblank timer overrun [ 311.727412][ T5953] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 312.441592][ T5953] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 312.441625][ T5953] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 312.441662][ T5953] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 312.441683][ T5953] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.548687][ T7130] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 313.627514][ T5953] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 315.326430][ T5953] usb 10-1: USB disconnect, device number 2 [ 315.418742][ T7169] netlink: 104 bytes leftover after parsing attributes in process `syz.7.184'. [ 315.428641][ T7169] netlink: 'syz.7.184': attribute type 16 has an invalid length. [ 315.428661][ T7169] netlink: 64138 bytes leftover after parsing attributes in process `syz.7.184'. [ 317.238465][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.238508][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.963796][ T5986] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 320.116341][ T7201] kvm: user requested TSC rate below hardware speed [ 320.143761][ T7201] kvm: kvm [7200]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60100000000 [ 320.181611][ T7201] kvm: kvm [7200]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60400000000 [ 320.195920][ T5986] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 320.195953][ T5986] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 320.195996][ T5986] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 320.196017][ T5986] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.228973][ T7201] kvm: kvm [7200]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60700000000 [ 320.233165][ T7201] kvm: kvm [7200]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60a00000000 [ 320.256066][ T7192] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 320.331791][ T5986] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 320.956585][ T5986] usb 9-1: USB disconnect, device number 3 [ 321.781413][ T7227] netlink: 4 bytes leftover after parsing attributes in process `syz.8.197'. [ 321.781551][ T7227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.110328][ T7234] netlink: 256 bytes leftover after parsing attributes in process `syz.6.200'. [ 324.009430][ C1] vkms_vblank_simulate: vblank timer overrun [ 324.936500][ C1] vkms_vblank_simulate: vblank timer overrun [ 325.296950][ C1] vkms_vblank_simulate: vblank timer overrun [ 325.358079][ C1] vkms_vblank_simulate: vblank timer overrun [ 325.544174][ T5125] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 325.550743][ T5125] Bluetooth: hci6: Injecting HCI hardware error event [ 325.552418][ T62] Bluetooth: hci6: hardware error 0x00 [ 326.513703][ T10] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 326.678309][ T10] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 326.678341][ T10] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 326.678372][ T10] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 326.678390][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.707514][ T7272] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 326.762172][ T10] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 327.783686][ T62] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 327.982684][ T7289] kvm: user requested TSC rate below hardware speed [ 328.021926][ T7289] kvm: kvm [7288]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60100000000 [ 328.061955][ T7289] kvm: kvm [7288]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60400000000 [ 328.145290][ T7289] kvm: kvm [7288]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60700000000 [ 329.279014][ T10] usb 8-1: USB disconnect, device number 15 [ 330.029120][ T7307] netlink: 256 bytes leftover after parsing attributes in process `syz.8.211'. [ 330.203926][ T10] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 330.410223][ T6016] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 330.507625][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.531735][ T10] usb 8-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 330.531754][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.531764][ T10] usb 8-1: Product: syz [ 330.531772][ T10] usb 8-1: Manufacturer: syz [ 330.531779][ T10] usb 8-1: SerialNumber: syz [ 330.550997][ T10] usb 8-1: config 0 descriptor?? [ 330.575944][ T6016] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 330.575976][ T6016] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 330.576013][ T6016] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 330.576031][ T6016] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.592884][ T10] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 330.660194][ T7313] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 330.693385][ T6016] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 331.058447][ T7310] 9pnet_fd: Insufficient options for proto=fd [ 331.077024][ T10] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 331.077121][ T10] gspca_pac7302 8-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 331.107646][ T10] usb 8-1: USB disconnect, device number 16 [ 331.484983][ T10] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 331.651563][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.651597][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.651632][ T10] usb 10-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 331.651652][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.699443][ T10] usb 10-1: config 0 descriptor?? [ 331.854732][ T62] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 332.128236][ T10] razer 0003:1532:010E.0006: unknown main item tag 0x3 [ 332.255359][ T5944] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 332.336700][ T10] razer 0003:1532:010E.0006: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.9-1/input0 [ 332.405170][ T5944] usb 9-1: Using ep0 maxpacket: 8 [ 332.408168][ T5944] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.411658][ T5944] usb 9-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 332.411683][ T5944] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 332.411702][ T5944] usb 9-1: SerialNumber: syz [ 332.473395][ T5944] usb 9-1: config 0 descriptor?? [ 332.493426][ T5944] uvcvideo 9-1:0.0: Found UVC 0.00 device (05ac:8501) [ 332.504460][ T5944] uvcvideo 9-1:0.0: Failed to create links for entity 255 [ 332.504481][ T5944] uvcvideo 9-1:0.0: Failed to register entities (-22). [ 333.056183][ T10] usb 9-1: USB disconnect, device number 4 [ 333.343383][ T7326] bond1: option resend_igmp: invalid value (2878) [ 333.343407][ T7326] bond1: option resend_igmp: allowed values 0 - 255 [ 333.428925][ T7326] bond1 (unregistering): Released all slaves [ 333.464166][ T5915] usb 6-1: USB disconnect, device number 15 [ 333.862855][ T5896] usb 10-1: USB disconnect, device number 3 [ 333.877805][ T7360] kvm: user requested TSC rate below hardware speed [ 333.897457][ T7360] kvm: kvm [7357]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60100000000 [ 333.901402][ T7360] kvm: kvm [7357]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60400000000 [ 333.923413][ T7360] kvm: kvm [7357]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60700000000 [ 333.927879][ T7360] kvm: kvm [7357]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60a00000000 [ 333.981690][ T7360] kvm: kvm [7357]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60d00000000 [ 333.995858][ T7360] kvm: kvm [7357]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x61000000000 [ 334.000165][ T7360] kvm: kvm [7357]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x61300000000 [ 334.024596][ T7360] kvm: kvm [7357]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x61600000000 [ 334.029653][ T7360] kvm: kvm [7357]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x61900000000 [ 334.033737][ T5915] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 334.066370][ T7360] kvm: kvm [7357]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x61c00000000 [ 335.283702][ T5915] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 335.283736][ T5915] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 335.283770][ T5915] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 335.283790][ T5915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.208735][ T62] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 336.211677][ T62] Bluetooth: hci3: Injecting HCI hardware error event [ 336.215811][ T5125] Bluetooth: hci3: hardware error 0x00 [ 336.415984][ T7359] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 336.447776][ T5915] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 336.833719][ T10] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 337.957114][ T10] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 337.957148][ T10] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 337.957184][ T10] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 337.957205][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.384124][ T7381] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 338.414336][ T10] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 338.423761][ T5125] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 338.512698][ T5915] usb 7-1: USB disconnect, device number 13 [ 338.574373][ T7391] netlink: 104 bytes leftover after parsing attributes in process `syz.7.230'. [ 338.575451][ T7391] netlink: 'syz.7.230': attribute type 16 has an invalid length. [ 338.575467][ T7391] netlink: 64138 bytes leftover after parsing attributes in process `syz.7.230'. [ 338.637793][ T7392] kvm: user requested TSC rate below hardware speed [ 339.023681][ T10] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 339.179037][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.198622][ T10] usb 6-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 339.198652][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.198670][ T10] usb 6-1: Product: syz [ 339.198682][ T10] usb 6-1: Manufacturer: syz [ 339.198694][ T10] usb 6-1: SerialNumber: syz [ 339.268866][ T10] usb 6-1: config 0 descriptor?? [ 339.293432][ T10] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 339.403931][ T7194] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 339.483706][ T5896] usb 10-1: USB disconnect, device number 4 [ 339.595890][ T7194] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 339.595923][ T7194] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 339.595964][ T7194] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 339.595983][ T7194] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.668408][ T7408] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 339.711734][ T7402] 9pnet_fd: Insufficient options for proto=fd [ 339.761808][ T7194] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 340.004716][ T10] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 340.005409][ T10] gspca_pac7302 6-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 340.149255][ T7194] usb 6-1: USB disconnect, device number 16 [ 340.625532][ C0] vkms_vblank_simulate: vblank timer overrun [ 340.915908][ C0] vkms_vblank_simulate: vblank timer overrun [ 341.011585][ C0] vkms_vblank_simulate: vblank timer overrun [ 341.264765][ C0] vkms_vblank_simulate: vblank timer overrun [ 341.749317][ C0] vkms_vblank_simulate: vblank timer overrun [ 342.875405][ C0] vkms_vblank_simulate: vblank timer overrun [ 343.084343][ T5929] usb 7-1: USB disconnect, device number 14 [ 343.482370][ T7443] kvm: user requested TSC rate below hardware speed [ 343.590907][ T7443] kvm_pr_unimpl_wrmsr: 29 callbacks suppressed [ 343.590925][ T7443] kvm: kvm [7440]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60100000000 [ 343.631951][ T7443] kvm: kvm [7440]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60400000000 [ 343.666109][ T7443] kvm: kvm [7440]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60700000000 [ 343.670269][ T7443] kvm: kvm [7440]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60a00000000 [ 343.705081][ T7443] kvm: kvm [7440]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60d00000000 [ 343.709634][ T7443] kvm: kvm [7440]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x61000000000 [ 343.753185][ T7443] kvm: kvm [7440]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x61300000000 [ 346.503659][ T5986] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 346.657659][ T5986] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 346.657692][ T5986] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 346.657729][ T5986] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 346.657750][ T5986] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.709375][ T7490] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 346.745477][ T5986] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 347.202146][ T7508] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 347.202191][ T7508] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 347.360258][ T10] usb 9-1: USB disconnect, device number 5 [ 347.650796][ T5986] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 348.516481][ T5986] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.543763][ T5986] usb 7-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 348.543792][ T5986] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.543809][ T5986] usb 7-1: Product: syz [ 348.543821][ T5986] usb 7-1: Manufacturer: syz [ 348.543833][ T5986] usb 7-1: SerialNumber: syz [ 348.611420][ T5986] usb 7-1: config 0 descriptor?? [ 348.649066][ T5986] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 349.110060][ T5986] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 349.110153][ T5986] gspca_pac7302 7-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 349.136846][ T5986] usb 7-1: USB disconnect, device number 15 [ 349.393658][ T5945] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 349.555406][ T5945] usb 8-1: Using ep0 maxpacket: 8 [ 349.584188][ T5945] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.587205][ T5945] usb 8-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 349.587230][ T5945] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 349.587249][ T5945] usb 8-1: SerialNumber: syz [ 349.598530][ T5945] usb 8-1: config 0 descriptor?? [ 349.652214][ T5945] uvcvideo 8-1:0.0: Found UVC 0.00 device (05ac:8501) [ 349.652330][ T5945] uvcvideo 8-1:0.0: Failed to create links for entity 255 [ 349.652344][ T5945] uvcvideo 8-1:0.0: Failed to register entities (-22). [ 349.884083][ T5945] usb 8-1: USB disconnect, device number 17 [ 350.040496][ C0] vkms_vblank_simulate: vblank timer overrun [ 351.061247][ C0] vkms_vblank_simulate: vblank timer overrun [ 351.232919][ C0] vkms_vblank_simulate: vblank timer overrun [ 352.095543][ T7588] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 352.095590][ T7588] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 352.257024][ T5824] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 352.324692][ T5986] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 352.460076][ C0] vkms_vblank_simulate: vblank timer overrun [ 352.768085][ C0] vkms_vblank_simulate: vblank timer overrun [ 352.794922][ T5824] usb 9-1: Using ep0 maxpacket: 8 [ 352.797466][ T5824] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.800639][ T5824] usb 9-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 352.800666][ T5824] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 352.800685][ T5824] usb 9-1: SerialNumber: syz [ 352.865453][ T5986] usb 8-1: Using ep0 maxpacket: 8 [ 352.867742][ T5986] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.870191][ T5986] usb 8-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 352.870216][ T5986] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 352.870235][ T5986] usb 8-1: SerialNumber: syz [ 352.933298][ T5824] usb 9-1: config 0 descriptor?? [ 352.952190][ T5824] uvcvideo 9-1:0.0: Found UVC 0.00 device (05ac:8501) [ 352.952309][ T5824] uvcvideo 9-1:0.0: Failed to create links for entity 255 [ 352.952323][ T5824] uvcvideo 9-1:0.0: Failed to register entities (-22). [ 353.001953][ T5986] usb 8-1: config 0 descriptor?? [ 353.016469][ T5986] uvcvideo 8-1:0.0: Found UVC 0.00 device (05ac:8501) [ 353.016546][ T5986] uvcvideo 8-1:0.0: Failed to create links for entity 255 [ 353.016555][ T5986] uvcvideo 8-1:0.0: Failed to register entities (-22). [ 353.182899][ T5986] usb 9-1: USB disconnect, device number 6 [ 353.312869][ T5824] usb 8-1: USB disconnect, device number 18 [ 353.347130][ T7328] udevd[7328]: setting owner of /dev/bus/usb/008/018 to uid=0, gid=0 failed: No such file or directory [ 354.164346][ T5986] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 354.383971][ T5824] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 354.415058][ T5986] usb 8-1: Using ep0 maxpacket: 32 [ 354.418548][ T5986] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.418578][ T5986] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.418615][ T5986] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 354.418635][ T5986] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.475204][ T5986] usb 8-1: config 0 descriptor?? [ 354.487060][ T5986] hub 8-1:0.0: USB hub found [ 354.547011][ T5824] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.569052][ T5824] usb 9-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 354.569447][ T5824] usb 9-1: New USB device strings: Mfr=154, Product=0, SerialNumber=0 [ 354.569468][ T5824] usb 9-1: Manufacturer: syz [ 354.690663][ T5986] hub 8-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 354.706862][ T5824] usb 9-1: config 0 descriptor?? [ 354.739242][ T5824] usb 9-1: bad CDC descriptors [ 354.770147][ T7645] netlink: 256 bytes leftover after parsing attributes in process `syz.9.293'. [ 354.784099][ T7193] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 354.935689][ T7193] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 354.935723][ T7193] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 354.935761][ T7193] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 354.935781][ T7193] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.001806][ T7649] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 355.287062][ T7193] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 356.535610][ T7193] usb 9-1: USB disconnect, device number 7 [ 357.529033][ T5986] usbhid 8-1:0.0: can't add hid device: -71 [ 357.529155][ T5986] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 357.638472][ T5986] usb 8-1: USB disconnect, device number 19 [ 357.638747][ T6016] usb 7-1: USB disconnect, device number 16 [ 358.473663][ T5986] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 358.763600][ T5986] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 358.763632][ T5986] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 358.763668][ T5986] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 358.763688][ T5986] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.833861][ T7686] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 358.853875][ T5986] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 359.609780][ T7701] netlink: 256 bytes leftover after parsing attributes in process `syz.8.311'. [ 360.287850][ T6016] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 360.515062][ T7710] netlink: 256 bytes leftover after parsing attributes in process `syz.9.313'. [ 360.586074][ T6016] usb 7-1: Using ep0 maxpacket: 32 [ 360.588880][ T6016] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.588909][ T6016] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.588946][ T6016] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 360.588967][ T6016] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.639189][ T7704] syz.8.311 (7704) used greatest stack depth: 16872 bytes left [ 360.696464][ T6016] usb 7-1: config 0 descriptor?? [ 360.726816][ T6016] hub 7-1:0.0: USB hub found [ 360.899482][ T6016] hub 7-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 361.593693][ T5986] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 361.606181][ T6016] usbhid 7-1:0.0: can't add hid device: -71 [ 361.606301][ T6016] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 361.660193][ T6016] usb 7-1: USB disconnect, device number 17 [ 361.756267][ T5986] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 361.756300][ T5986] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 361.756337][ T5986] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 361.756356][ T5986] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.800097][ T7194] usb 8-1: USB disconnect, device number 20 [ 361.853407][ T7733] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 361.948912][ T5986] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 362.335174][ T7755] netlink: 256 bytes leftover after parsing attributes in process `syz.8.326'. [ 363.145030][ T5953] usb 10-1: USB disconnect, device number 5 [ 363.246867][ T7385] udevd[7385]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 364.980857][ T7786] netlink: 104 bytes leftover after parsing attributes in process `syz.9.337'. [ 364.982388][ T7786] netlink: 'syz.9.337': attribute type 16 has an invalid length. [ 364.982401][ T7786] netlink: 64138 bytes leftover after parsing attributes in process `syz.9.337'. [ 368.658851][ T7818] kvm: user requested TSC rate below hardware speed [ 368.723109][ T7818] kvm: kvm [7817]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60100000000 [ 368.739436][ T7818] kvm: kvm [7817]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60400000000 [ 368.743485][ T7818] kvm: kvm [7817]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60700000000 [ 368.876326][ T7818] kvm: kvm [7817]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60a00000000 [ 368.880385][ T7818] kvm: kvm [7817]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60d00000000 [ 371.322244][ T7865] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 371.322289][ T7865] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 371.618285][ T9] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 371.777211][ T9] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 371.777244][ T9] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 371.777281][ T9] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 371.777301][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.793798][ T5824] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 371.847414][ T7869] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 371.907599][ T9] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 371.977343][ T5824] usb 9-1: Using ep0 maxpacket: 8 [ 371.980701][ T5824] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.992135][ T5824] usb 9-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 371.992162][ T5824] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 371.992181][ T5824] usb 9-1: SerialNumber: syz [ 372.038363][ T5824] usb 9-1: config 0 descriptor?? [ 372.057324][ T5824] uvcvideo 9-1:0.0: Found UVC 0.00 device (05ac:8501) [ 372.057446][ T5824] uvcvideo 9-1:0.0: Failed to create links for entity 255 [ 372.057461][ T5824] uvcvideo 9-1:0.0: Failed to register entities (-22). [ 372.333726][ T7193] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 372.412817][ T7194] usb 9-1: USB disconnect, device number 8 [ 372.543661][ T7193] usb 10-1: Using ep0 maxpacket: 8 [ 372.546939][ T7193] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.556228][ T7193] usb 10-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 372.556256][ T7193] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 372.556273][ T7193] usb 10-1: SerialNumber: syz [ 372.707136][ T7193] usb 10-1: config 0 descriptor?? [ 372.766736][ T7193] uvcvideo 10-1:0.0: Found UVC 0.00 device (05ac:8501) [ 372.766810][ T7193] uvcvideo 10-1:0.0: Failed to create links for entity 255 [ 372.766818][ T7193] uvcvideo 10-1:0.0: Failed to register entities (-22). [ 373.033090][ T6016] usb 10-1: USB disconnect, device number 6 [ 374.423812][ T5824] usb 7-1: USB disconnect, device number 18 [ 375.447135][ T7936] netlink: 256 bytes leftover after parsing attributes in process `syz.6.378'. [ 375.645639][ T10] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 375.813798][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 375.816280][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 375.816326][ T10] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 375.816349][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.821634][ T10] usb 9-1: config 0 descriptor?? [ 375.828700][ T7949] kvm: user requested TSC rate below hardware speed [ 375.881442][ T10] hub 9-1:0.0: bad descriptor, ignoring hub [ 375.881479][ T10] hub 9-1:0.0: probe with driver hub failed with error -5 [ 375.911780][ T10] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 376.472771][ T7955] kvm: kvm [7948]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60100000000 [ 378.684342][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.684416][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.075597][ T5929] usb 9-1: USB disconnect, device number 9 [ 381.656682][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.8.404'. [ 381.656708][ T8032] openvswitch: netlink: Flow actions attr not present in new flow. [ 382.029726][ T8041] netlink: 'syz.8.404': attribute type 10 has an invalid length. [ 382.048393][ T8041] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.071373][ T8041] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.258155][ T8041] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.259412][ T8041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.265456][ T8041] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.266711][ T8041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.344775][ T8041] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 382.478054][ T8041] syz.8.404 (8041) used greatest stack depth: 16056 bytes left [ 383.254067][ T8033] netlink: 256 bytes leftover after parsing attributes in process `syz.7.405'. [ 383.392362][ T5915] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 383.441615][ T8051] kAFS: unable to lookup cell 'ÿ' [ 383.441971][ T8051] kAFS: unable to lookup cell '(,c¾Ì' [ 383.594182][ T5915] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.607469][ T5915] usb 7-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 383.607506][ T5915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.607524][ T5915] usb 7-1: Product: syz [ 383.607536][ T5915] usb 7-1: Manufacturer: syz [ 383.607550][ T5915] usb 7-1: SerialNumber: syz [ 383.654897][ T5915] usb 7-1: config 0 descriptor?? [ 383.712998][ T5915] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 384.307170][ T5915] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 384.307229][ T5915] gspca_pac7302 7-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 384.347308][ T5915] usb 7-1: USB disconnect, device number 19 [ 384.826978][ T5915] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 384.978351][ T5915] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 384.978385][ T5915] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 384.978422][ T5915] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 384.978443][ T5915] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.997767][ T8070] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 385.033153][ T5915] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 385.260140][ T8087] kvm: user requested TSC rate below hardware speed [ 385.297484][ T8087] kvm: kvm [8086]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60100000000 [ 385.302165][ T8087] kvm: kvm [8086]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60400000000 [ 385.328399][ T8087] kvm: kvm [8086]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60700000000 [ 385.349787][ T8087] kvm: kvm [8086]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60a00000000 [ 385.820382][ T7193] usb 10-1: USB disconnect, device number 7 [ 386.586930][ T8102] netlink: 256 bytes leftover after parsing attributes in process `syz.7.423'. [ 387.463776][ T5986] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 387.593730][ T5986] usb 10-1: device descriptor read/64, error -71 [ 387.733675][ T7193] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 387.834801][ T8123] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 387.834850][ T8123] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 387.884504][ T5986] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 387.893629][ T7193] usb 8-1: Using ep0 maxpacket: 8 [ 387.895761][ T7193] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.897055][ T7193] usb 8-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 387.897079][ T7193] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 387.897098][ T7193] usb 8-1: SerialNumber: syz [ 387.966986][ T7193] usb 8-1: config 0 descriptor?? [ 387.982579][ T7193] uvcvideo 8-1:0.0: Found UVC 0.00 device (05ac:8501) [ 387.982702][ T7193] uvcvideo 8-1:0.0: Failed to create links for entity 255 [ 387.982718][ T7193] uvcvideo 8-1:0.0: Failed to register entities (-22). [ 388.016157][ T5986] usb 10-1: device descriptor read/64, error -71 [ 388.063663][ T10] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 388.124196][ T5986] usb usb10-port1: attempt power cycle [ 388.219388][ T7193] usb 8-1: USB disconnect, device number 21 [ 388.236236][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.237424][ T10] usb 7-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 388.237450][ T10] usb 7-1: New USB device strings: Mfr=154, Product=0, SerialNumber=0 [ 388.237467][ T10] usb 7-1: Manufacturer: syz [ 388.302714][ T10] usb 7-1: config 0 descriptor?? [ 388.336443][ T10] usb 7-1: bad CDC descriptors [ 388.495321][ T5986] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 388.518380][ T5986] usb 10-1: device descriptor read/8, error -71 [ 389.085496][ T5986] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 389.114490][ T5986] usb 10-1: device descriptor read/8, error -71 [ 389.224269][ T5986] usb usb10-port1: unable to enumerate USB device [ 389.387356][ T5986] usb 7-1: USB disconnect, device number 20 [ 389.933868][ T8167] kAFS: unable to lookup cell 'ÿ' [ 389.936678][ T8167] kAFS: unable to lookup cell '(,c¾Ì' [ 391.139450][ T5125] Bluetooth: hci4: command 0x0406 tx timeout [ 392.401959][ T8196] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 392.402010][ T8196] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 392.438436][ T9] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 392.603761][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 392.605685][ T9] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.607005][ T9] usb 10-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 392.607032][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 392.607049][ T9] usb 10-1: SerialNumber: syz [ 392.673089][ T9] usb 10-1: config 0 descriptor?? [ 392.714464][ T9] uvcvideo 10-1:0.0: Found UVC 0.00 device (05ac:8501) [ 392.714590][ T9] uvcvideo 10-1:0.0: Failed to create links for entity 255 [ 392.714606][ T9] uvcvideo 10-1:0.0: Failed to register entities (-22). [ 392.893747][ C0] vkms_vblank_simulate: vblank timer overrun [ 392.980734][ C0] vkms_vblank_simulate: vblank timer overrun [ 393.220634][ C0] vkms_vblank_simulate: vblank timer overrun [ 393.345009][ T5915] usb 10-1: USB disconnect, device number 12 [ 394.596179][ C0] vkms_vblank_simulate: vblank timer overrun [ 394.702071][ C0] vkms_vblank_simulate: vblank timer overrun [ 394.826824][ C0] vkms_vblank_simulate: vblank timer overrun [ 394.936835][ C0] vkms_vblank_simulate: vblank timer overrun [ 395.035507][ C0] vkms_vblank_simulate: vblank timer overrun [ 395.389408][ C0] vkms_vblank_simulate: vblank timer overrun [ 395.517751][ T8250] netlink: 8 bytes leftover after parsing attributes in process `syz.6.465'. [ 395.517774][ T8250] openvswitch: netlink: Flow actions attr not present in new flow. [ 395.803744][ C0] vkms_vblank_simulate: vblank timer overrun [ 395.912116][ T8254] netlink: 'syz.6.465': attribute type 10 has an invalid length. [ 395.920904][ T8254] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.931708][ T8254] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.957289][ T8254] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.957452][ T8254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.957792][ T8254] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.957972][ T8254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.963284][ T8254] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 395.967844][ C0] vkms_vblank_simulate: vblank timer overrun [ 396.356908][ T8242] kvm: user requested TSC rate below hardware speed [ 397.127787][ T7194] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 397.141024][ C0] vkms_vblank_simulate: vblank timer overrun [ 397.225698][ C0] vkms_vblank_simulate: vblank timer overrun [ 397.347979][ C0] vkms_vblank_simulate: vblank timer overrun [ 397.675681][ T7194] usb 9-1: device descriptor read/64, error -71 [ 398.340211][ T8279] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 398.340257][ T8279] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 398.403634][ T7194] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 398.534930][ T7194] usb 9-1: device descriptor read/64, error -71 [ 398.644318][ T7194] usb usb9-port1: attempt power cycle [ 398.993642][ T7194] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 399.014427][ T7194] usb 9-1: device descriptor read/8, error -71 [ 399.253655][ T7194] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 399.279057][ T7194] usb 9-1: device descriptor read/8, error -71 [ 399.396177][ T7194] usb usb9-port1: unable to enumerate USB device [ 399.945073][ T8336] netlink: 256 bytes leftover after parsing attributes in process `syz.9.489'. [ 400.968464][ C0] vkms_vblank_simulate: vblank timer overrun [ 401.044106][ T9] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 401.200067][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.202256][ T9] usb 7-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 401.202278][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.202288][ T9] usb 7-1: Product: syz [ 401.202295][ T9] usb 7-1: Manufacturer: syz [ 401.202302][ T9] usb 7-1: SerialNumber: syz [ 401.242415][ T8369] kvm: user requested TSC rate below hardware speed [ 401.254656][ T8368] kvm: user requested TSC rate below hardware speed [ 401.286887][ T8368] kvm: kvm [8366]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60100000000 [ 401.293192][ T9] usb 7-1: config 0 descriptor?? [ 401.308892][ T8368] kvm: kvm [8366]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60400000000 [ 401.312933][ T8368] kvm: kvm [8366]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60700000000 [ 401.337531][ T9] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 401.375452][ T8368] kvm: kvm [8366]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60a00000000 [ 401.379342][ T8368] kvm: kvm [8366]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60d00000000 [ 401.383367][ T8368] kvm: kvm [8366]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x61000000000 [ 401.773792][ T9] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 401.773941][ T9] gspca_pac7302 7-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 401.801680][ T9] usb 7-1: USB disconnect, device number 21 [ 403.981236][ C0] vkms_vblank_simulate: vblank timer overrun [ 404.209565][ T62] Bluetooth: hci4: ISO packet for unknown connection handle 200 [ 404.292888][ T8401] netlink: 256 bytes leftover after parsing attributes in process `syz.6.511'. [ 404.819797][ T8440] netlink: 144 bytes leftover after parsing attributes in process `syz.6.520'. [ 405.257036][ T8451] kvm: user requested TSC rate below hardware speed [ 405.302960][ T8451] kvm: kvm [8450]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60100000000 [ 405.317540][ T8451] kvm: kvm [8450]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60400000000 [ 405.321718][ T8451] kvm: kvm [8450]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60700000000 [ 405.353678][ T7193] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 405.373725][ T8451] kvm: kvm [8450]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60a00000000 [ 405.516134][ T7193] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.560548][ T7193] usb 9-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 405.560575][ T7193] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.560594][ T7193] usb 9-1: Product: syz [ 405.560606][ T7193] usb 9-1: Manufacturer: syz [ 405.560619][ T7193] usb 9-1: SerialNumber: syz [ 405.645728][ T7193] usb 9-1: config 0 descriptor?? [ 405.663485][ T7193] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 405.815865][ C0] vkms_vblank_simulate: vblank timer overrun [ 406.013775][ T5986] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 406.175424][ T5986] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.178955][ T7193] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 406.179049][ T7193] gspca_pac7302 9-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 406.215602][ T5986] usb 7-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 406.215630][ T5986] usb 7-1: New USB device strings: Mfr=154, Product=0, SerialNumber=0 [ 406.215648][ T5986] usb 7-1: Manufacturer: syz [ 406.222888][ T5986] usb 7-1: config 0 descriptor?? [ 406.253888][ T7193] usb 9-1: USB disconnect, device number 14 [ 406.255155][ T5986] usb 7-1: bad CDC descriptors [ 407.718107][ T5953] usb 7-1: USB disconnect, device number 22 [ 407.764835][ T8506] kAFS: unable to lookup cell 'ÿ' [ 407.765391][ T8506] kAFS: unable to lookup cell '(,c¾Ì' [ 409.077860][ T8533] netlink: 104 bytes leftover after parsing attributes in process `syz.8.547'. [ 409.082300][ T8533] netlink: 'syz.8.547': attribute type 16 has an invalid length. [ 409.082320][ T8533] netlink: 64138 bytes leftover after parsing attributes in process `syz.8.547'. [ 410.238671][ C0] vkms_vblank_simulate: vblank timer overrun [ 410.394196][ C0] vkms_vblank_simulate: vblank timer overrun [ 410.476053][ C0] vkms_vblank_simulate: vblank timer overrun [ 410.873675][ T5953] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 411.043660][ T5953] usb 9-1: Using ep0 maxpacket: 8 [ 411.050043][ T5953] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.052314][ T5953] usb 9-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 411.052339][ T5953] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 411.052358][ T5953] usb 9-1: SerialNumber: syz [ 411.113798][ T5986] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 411.114276][ T5953] usb 9-1: config 0 descriptor?? [ 411.173829][ T5953] uvcvideo 9-1:0.0: Found UVC 0.00 device (05ac:8501) [ 411.173953][ T5953] uvcvideo 9-1:0.0: Failed to create links for entity 255 [ 411.173967][ T5953] uvcvideo 9-1:0.0: Failed to register entities (-22). [ 411.293672][ T5986] usb 8-1: Using ep0 maxpacket: 8 [ 411.301029][ T5986] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.307672][ T5986] usb 8-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 411.307700][ T5986] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 411.307718][ T5986] usb 8-1: SerialNumber: syz [ 411.340326][ T5986] usb 8-1: config 0 descriptor?? [ 411.389608][ T5986] uvcvideo 8-1:0.0: Found UVC 0.00 device (05ac:8501) [ 411.389726][ T5986] uvcvideo 8-1:0.0: Failed to create links for entity 255 [ 411.389742][ T5986] uvcvideo 8-1:0.0: Failed to register entities (-22). [ 411.389809][ T5953] usb 9-1: USB disconnect, device number 15 [ 411.573759][ T10] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 411.580352][ T5986] usb 8-1: USB disconnect, device number 22 [ 411.726576][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.727600][ T10] usb 7-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 411.727616][ T10] usb 7-1: New USB device strings: Mfr=154, Product=0, SerialNumber=0 [ 411.727633][ T10] usb 7-1: Manufacturer: syz [ 411.731676][ T10] usb 7-1: config 0 descriptor?? [ 411.781960][ T10] usb 7-1: bad CDC descriptors [ 412.646170][ T62] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 412.772768][ T5985] usb 7-1: USB disconnect, device number 23 [ 417.053606][ T62] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 417.053880][ T62] Bluetooth: hci4: Injecting HCI hardware error event [ 417.056912][ T62] Bluetooth: hci4: hardware error 0x00 [ 418.875555][ T8637] kvm: user requested TSC rate below hardware speed [ 418.955666][ T8637] kvm_pr_unimpl_wrmsr: 9 callbacks suppressed [ 418.955679][ T8637] kvm: kvm [8636]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60100000000 [ 418.958937][ T8637] kvm: kvm [8636]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60400000000 [ 418.962049][ T8637] kvm: kvm [8636]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60700000000 [ 419.035868][ T8637] kvm: kvm [8636]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60a00000000 [ 419.038899][ T8637] kvm: kvm [8636]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60d00000000 [ 419.143829][ T10] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 419.293633][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 419.295873][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.297856][ T10] usb 7-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 419.297886][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 419.297910][ T10] usb 7-1: SerialNumber: syz [ 419.303743][ T62] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 419.345697][ T10] usb 7-1: config 0 descriptor?? [ 419.361484][ T10] uvcvideo 7-1:0.0: Found UVC 0.00 device (05ac:8501) [ 419.361600][ T10] uvcvideo 7-1:0.0: Failed to create links for entity 255 [ 419.361615][ T10] uvcvideo 7-1:0.0: Failed to register entities (-22). [ 419.598228][ T7193] usb 7-1: USB disconnect, device number 24 [ 420.483925][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz.8.599'. [ 420.483948][ T8666] openvswitch: netlink: Flow actions attr not present in new flow. [ 420.835437][ T8669] netlink: 'syz.8.599': attribute type 10 has an invalid length. [ 420.837323][ T8669] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.841998][ T8669] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.953772][ T5799] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 426.943624][ T5799] usb 7-1: Using ep0 maxpacket: 8 [ 426.945921][ T5799] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.947587][ T5799] usb 7-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 426.947612][ T5799] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 426.947629][ T5799] usb 7-1: SerialNumber: syz [ 427.002816][ T5799] usb 7-1: config 0 descriptor?? [ 427.013271][ T5799] uvcvideo 7-1:0.0: Found UVC 0.00 device (05ac:8501) [ 427.013383][ T5799] uvcvideo 7-1:0.0: Failed to create links for entity 255 [ 427.013399][ T5799] uvcvideo 7-1:0.0: Failed to register entities (-22). [ 427.224013][ T5915] usb 7-1: USB disconnect, device number 25 [ 428.165162][ T5915] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 428.313599][ T5915] usb 7-1: Using ep0 maxpacket: 8 [ 428.315976][ T5915] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.317190][ T5915] usb 7-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 428.317215][ T5915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 428.317233][ T5915] usb 7-1: SerialNumber: syz [ 428.470122][ T5915] usb 7-1: config 0 descriptor?? [ 428.486096][ T5915] uvcvideo 7-1:0.0: Found UVC 0.00 device (05ac:8501) [ 428.486214][ T5915] uvcvideo 7-1:0.0: Failed to create links for entity 255 [ 428.486230][ T5915] uvcvideo 7-1:0.0: Failed to register entities (-22). [ 428.714122][ T10] usb 7-1: USB disconnect, device number 26 [ 429.063190][ T8746] netlink: 4 bytes leftover after parsing attributes in process `syz.7.630'. [ 429.063242][ T8746] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 429.267895][ T8753] netlink: 8 bytes leftover after parsing attributes in process `syz.9.618'. [ 429.267925][ T8753] openvswitch: netlink: Flow actions attr not present in new flow. [ 429.586741][ T8760] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 429.586790][ T8760] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 429.702892][ T8770] netlink: 'syz.9.618': attribute type 10 has an invalid length. [ 430.444691][ T8770] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.445518][ T8770] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.452672][ T8770] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.453247][ T8770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.453788][ T8770] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.453960][ T8770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.458049][ T8770] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 431.469805][ T5934] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 431.613779][ T5934] usb 10-1: Using ep0 maxpacket: 8 [ 431.624196][ T5934] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.625406][ T5934] usb 10-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 431.625429][ T5934] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 431.625448][ T5934] usb 10-1: SerialNumber: syz [ 431.631096][ T5934] usb 10-1: config 0 descriptor?? [ 431.698330][ T5934] uvcvideo 10-1:0.0: Found UVC 0.00 device (05ac:8501) [ 431.698445][ T5934] uvcvideo 10-1:0.0: Failed to create links for entity 255 [ 431.698460][ T5934] uvcvideo 10-1:0.0: Failed to register entities (-22). [ 431.891692][ T5934] usb 10-1: USB disconnect, device number 13 [ 432.923693][ T7194] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 433.095389][ T7194] usb 9-1: Using ep0 maxpacket: 32 [ 433.115597][ T7194] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.115628][ T7194] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.115666][ T7194] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 433.115686][ T7194] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.148714][ T7194] usb 9-1: config 0 descriptor?? [ 433.156382][ T7194] hub 9-1:0.0: USB hub found [ 433.373751][ T7194] hub 9-1:0.0: 1 port detected [ 434.585506][ T7194] hub 9-1:0.0: hub_hub_status failed (err = -32) [ 434.585531][ T7194] hub 9-1:0.0: config failed, can't get hub status (err -32) [ 434.608689][ T7194] usbhid 9-1:0.0: can't add hid device: -32 [ 434.608804][ T7194] usbhid 9-1:0.0: probe with driver usbhid failed with error -32 [ 434.911528][ T8835] kvm: user requested TSC rate below hardware speed [ 435.672741][ T8835] kvm: kvm [8833]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60100000000 [ 435.677766][ T8835] kvm: kvm [8833]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60400000000 [ 435.697443][ T8835] kvm: kvm [8833]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60700000000 [ 435.701568][ T8835] kvm: kvm [8833]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60a00000000 [ 436.165069][ T8848] kvm: user requested TSC rate below hardware speed [ 436.240671][ T8848] kvm: kvm [8847]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60100000000 [ 436.254667][ T8848] kvm: kvm [8847]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60400000000 [ 436.258645][ T8848] kvm: kvm [8847]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60700000000 [ 436.262790][ T8848] kvm: kvm [8847]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60a00000000 [ 436.268694][ T8848] kvm: kvm [8847]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x60d00000000 [ 436.293787][ T5934] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 436.305174][ T5915] usb 9-1: USB disconnect, device number 16 [ 436.341298][ T8848] kvm: kvm [8847]: vcpu0, guest rIP: 0x134 Unhandled WRMSR(0xc2) = 0x61000000000 [ 436.443665][ T5934] usb 10-1: Using ep0 maxpacket: 8 [ 436.447565][ T5934] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.449376][ T5934] usb 10-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 436.449407][ T5934] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 436.449441][ T5934] usb 10-1: SerialNumber: syz [ 436.505509][ T5934] usb 10-1: config 0 descriptor?? [ 436.511259][ T5934] uvcvideo 10-1:0.0: Found UVC 0.00 device (05ac:8501) [ 436.511278][ T5934] uvcvideo 10-1:0.0: No valid video chain found. [ 436.666160][ T8862] kAFS: unable to lookup cell 'ÿ' [ 436.666870][ T8862] kAFS: unable to lookup cell '(,c¾Ì' [ 436.727564][ T5934] usb 10-1: USB disconnect, device number 14 [ 439.714878][ T5915] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 439.863660][ T5915] usb 7-1: Using ep0 maxpacket: 32 [ 439.867027][ T5915] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.867045][ T5915] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.867066][ T5915] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 439.867077][ T5915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.921810][ T5915] usb 7-1: config 0 descriptor?? [ 439.940946][ T5915] hub 7-1:0.0: USB hub found [ 439.963903][ T5824] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 440.124052][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.125660][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.128801][ T5915] hub 7-1:0.0: 1 port detected [ 440.129897][ T5824] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 440.129926][ T5824] usb 8-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 440.129961][ T5824] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 440.129980][ T5824] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.149363][ T5824] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 440.150395][ T5824] usb 8-1: invalid MIDI out EP 0 [ 440.531692][ T6267] udevd[6267]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 440.758899][ T5824] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 441.392356][ T5915] hub 7-1:0.0: hub_hub_status failed (err = -32) [ 441.392380][ T5915] hub 7-1:0.0: config failed, can't get hub status (err -32) [ 441.431893][ T5915] usbhid 7-1:0.0: can't add hid device: -32 [ 441.432009][ T5915] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 441.879428][ C1] vkms_vblank_simulate: vblank timer overrun [ 442.234155][ T8930] netlink: 8 bytes leftover after parsing attributes in process `syz.8.700'. [ 442.234178][ T8930] openvswitch: netlink: Flow actions attr not present in new flow. [ 442.410760][ C1] vkms_vblank_simulate: vblank timer overrun [ 442.448367][ T5896] usb 7-1: USB disconnect, device number 27 [ 443.447407][ T8933] netlink: 'syz.8.700': attribute type 10 has an invalid length. [ 443.546423][ C1] vkms_vblank_simulate: vblank timer overrun [ 443.643427][ C1] vkms_vblank_simulate: vblank timer overrun [ 444.267080][ T5824] usb 8-1: USB disconnect, device number 23 [ 444.514874][ C1] vkms_vblank_simulate: vblank timer overrun [ 444.842991][ C1] vkms_vblank_simulate: vblank timer overrun [ 445.155895][ C1] vkms_vblank_simulate: vblank timer overrun [ 445.362402][ C1] vkms_vblank_simulate: vblank timer overrun [ 446.133742][ T5824] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 446.290039][ T5824] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 446.326432][ T5824] usb 10-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 446.326461][ T5824] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.326480][ T5824] usb 10-1: Product: syz [ 446.326499][ T5824] usb 10-1: Manufacturer: syz [ 446.326512][ T5824] usb 10-1: SerialNumber: syz [ 446.386753][ T5824] usb 10-1: config 0 descriptor?? [ 446.407981][ T5824] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 446.971113][ T5824] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 446.971201][ T5824] gspca_pac7302 10-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 447.023706][ T5824] usb 10-1: USB disconnect, device number 15 [ 447.353745][ T5817] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 447.503704][ T5817] usb 9-1: Using ep0 maxpacket: 32 [ 447.506268][ T5817] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.506343][ T5817] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.506383][ T5817] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 447.506404][ T5817] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.564698][ T5817] usb 9-1: config 0 descriptor?? [ 447.579769][ T5817] hub 9-1:0.0: USB hub found [ 448.589050][ T5817] hub 9-1:0.0: 1 port detected [ 449.015200][ T9003] kAFS: unable to lookup cell 'ÿ' [ 449.015697][ T9003] kAFS: unable to lookup cell '(,c¾Ì' [ 449.738909][ T5817] hub 9-1:0.0: hub_hub_status failed (err = -32) [ 449.738936][ T5817] hub 9-1:0.0: config failed, can't get hub status (err -32) [ 449.752751][ T5817] usbhid 9-1:0.0: can't add hid device: -32 [ 449.752920][ T5817] usbhid 9-1:0.0: probe with driver usbhid failed with error -32 [ 450.410221][ T5985] usb 9-1: USB disconnect, device number 17 [ 450.839030][ T5985] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 451.755566][ T5985] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.775393][ T5985] usb 9-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 451.775421][ T5985] usb 9-1: New USB device strings: Mfr=154, Product=0, SerialNumber=0 [ 451.775438][ T5985] usb 9-1: Manufacturer: syz [ 451.813747][ T5985] usb 9-1: config 0 descriptor?? [ 451.817892][ T5985] usb 9-1: bad CDC descriptors [ 451.994494][ T9029] netlink: 256 bytes leftover after parsing attributes in process `syz.6.734'. [ 452.170731][ T9036] netlink: 8 bytes leftover after parsing attributes in process `syz.9.737'. [ 452.170754][ T9036] openvswitch: netlink: Flow actions attr not present in new flow. [ 452.773590][ C1] vkms_vblank_simulate: vblank timer overrun [ 452.833049][ T9036] netlink: 'syz.9.737': attribute type 10 has an invalid length. [ 452.833344][ T9036] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.833648][ T9036] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.048694][ C1] vkms_vblank_simulate: vblank timer overrun [ 453.428013][ T7194] usb 9-1: USB disconnect, device number 18 [ 453.481669][ T9044] kvm: user requested TSC rate below hardware speed [ 454.123830][ T5799] usb 10-1: new full-speed USB device number 16 using dummy_hcd [ 454.125928][ T9068] netlink: 16 bytes leftover after parsing attributes in process `syz.8.749'. [ 454.125942][ T9068] openvswitch: netlink: Flow actions attr not present in new flow. [ 454.280532][ T5799] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.294931][ T5799] usb 10-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 454.294960][ T5799] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.294978][ T5799] usb 10-1: Product: syz [ 454.294990][ T5799] usb 10-1: Manufacturer: syz [ 454.295002][ T5799] usb 10-1: SerialNumber: syz [ 454.316197][ T5799] usb 10-1: config 0 descriptor?? [ 454.338629][ T9075] netlink: 8 bytes leftover after parsing attributes in process `syz.7.752'. [ 454.338653][ T9075] openvswitch: netlink: Flow actions attr not present in new flow. [ 454.558339][ T5799] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 454.660973][ T9081] netlink: 'syz.7.752': attribute type 10 has an invalid length. [ 454.666819][ T9081] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.674533][ T9081] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.755100][ T9081] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.756241][ T9081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.758895][ T9081] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.760060][ T9081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.810691][ T9081] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 455.326232][ T5799] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 455.326324][ T5799] gspca_pac7302 10-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 455.439170][ T5799] usb 10-1: USB disconnect, device number 16 [ 455.844572][ T5799] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 456.199576][ T5799] usb 8-1: Using ep0 maxpacket: 32 [ 456.279419][ T5799] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.279460][ T5799] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.279500][ T5799] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 456.279520][ T5799] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.322901][ T5799] usb 8-1: config 0 descriptor?? [ 456.360463][ T5799] hub 8-1:0.0: USB hub found [ 457.017368][ T5799] hub 8-1:0.0: 1 port detected [ 457.132916][ T9091] netlink: 256 bytes leftover after parsing attributes in process `syz.8.757'. [ 458.665168][ T5799] hub 8-1:0.0: hub_hub_status failed (err = -32) [ 458.665193][ T5799] hub 8-1:0.0: config failed, can't get hub status (err -32) [ 458.697057][ T5799] usbhid 8-1:0.0: can't add hid device: -32 [ 458.697179][ T5799] usbhid 8-1:0.0: probe with driver usbhid failed with error -32 [ 458.934952][ T5799] usb 8-1: USB disconnect, device number 24 [ 460.085684][ T9141] ceph: No mds server is up or the cluster is laggy [ 460.092089][ T5943] libceph: connect (1)[c::]:6789 error -101 [ 460.113443][ T5943] libceph: mon0 (1)[c::]:6789 connect error [ 461.410083][ T9168] input: syz1 as /devices/virtual/input/input5 [ 461.801148][ T9167] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 462.159019][ T9176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.164762][ T9176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.648409][ T9153] netlink: 40 bytes leftover after parsing attributes in process `syz.6.777'. [ 462.899638][ T9176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.899657][ T9176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.597128][ T5915] IPVS: starting estimator thread 0... [ 467.627637][ T5943] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 468.602378][ T5943] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 470.890373][ T9251] IPVS: using max 11 ests per chain, 26400 per kthread [ 471.397865][ T9260] fido_id[9260]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 472.752429][ T9262] netlink: 56 bytes leftover after parsing attributes in process `syz.6.820'. [ 473.239809][ T9289] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 473.470179][ T9298] binder_alloc: 9297: binder_alloc_buf size 16777216 failed, no address space [ 473.470267][ T9298] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 473.888858][ T9308] 9pnet_virtio: no channels available for device syz [ 474.327235][ T9308] ======================================================= [ 474.327235][ T9308] WARNING: The mand mount option has been deprecated and [ 474.327235][ T9308] and is ignored by this kernel. Remove the mand [ 474.327235][ T9308] option from the mount to silence this warning. [ 474.327235][ T9308] ======================================================= [ 474.373062][ T9308] overlayfs: missing 'lowerdir' [ 474.791284][ T9310] capability: warning: `syz.7.838' uses deprecated v2 capabilities in a way that may be insecure [ 476.266323][ T9319] netlink: 56 bytes leftover after parsing attributes in process `syz.9.840'. [ 476.694210][ T5944] usb 9-1: new full-speed USB device number 19 using dummy_hcd [ 476.782517][ T9322] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 476.782530][ T9322] File: /dev/nullb0 PID: 9322 Comm: syz.9.840 [ 476.880748][ T5944] usb 9-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0xED, changing to 0x8D [ 476.880831][ T5944] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x8D has invalid maxpacket 52921, setting to 64 [ 476.880846][ T5944] usb 9-1: config 0 interface 0 has no altsetting 0 [ 477.081109][ T5944] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 477.081128][ T5944] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 477.081139][ T5944] usb 9-1: Product: syz [ 477.081146][ T5944] usb 9-1: Manufacturer: syz [ 477.081153][ T5944] usb 9-1: SerialNumber: syz [ 477.360595][ T5944] usb 9-1: config 0 descriptor?? [ 477.674781][ T5944] usb 9-1: selecting invalid altsetting 0 [ 478.060614][ T9327] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 478.060931][ T9327] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 478.061124][ T9327] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 478.061336][ T9327] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 478.061522][ T9327] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 478.061700][ T9327] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 478.061887][ T9327] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 478.062070][ T9327] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 478.062251][ T9327] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 478.062440][ T9327] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 478.062824][ T9327] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 478.063011][ T9327] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 478.063193][ T9327] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 478.063393][ T9327] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 478.186108][ T9327] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 478.186474][ T9327] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 478.186850][ T9327] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 478.283722][ T9327] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 478.284085][ T9327] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 478.284419][ T9327] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 478.359091][ T9327] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 478.359321][ T9327] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 478.359505][ T9327] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 478.359688][ T9327] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 478.359888][ T9327] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 478.360148][ T9327] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 478.360335][ T9327] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 478.360535][ T9327] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 478.360718][ T9327] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 478.360906][ T9327] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 478.487475][ T9327] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 478.487822][ T9327] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 478.488188][ T9327] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 478.521045][ T9327] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 478.592514][ T9327] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 478.663978][ T9327] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 478.664179][ T9327] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 478.664391][ T9327] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 478.664584][ T9327] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 478.664762][ T9327] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 478.664956][ T9327] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 478.665134][ T9327] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 478.665314][ T9327] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 478.665505][ T9327] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 480.877695][ T9321] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 480.885648][ T5799] usb 9-1: USB disconnect, device number 19 [ 481.709156][ T9384] kAFS: No cell specified [ 488.755784][ T9528] netlink: 8 bytes leftover after parsing attributes in process `syz.7.915'. [ 490.675650][ C0] vkms_vblank_simulate: vblank timer overrun [ 492.794645][ C0] vkms_vblank_simulate: vblank timer overrun [ 493.562877][ C0] vkms_vblank_simulate: vblank timer overrun [ 495.762156][ C0] vkms_vblank_simulate: vblank timer overrun [ 496.406124][ T5943] libceph: connect (1)[c::]:6789 error -101 [ 496.406430][ T5943] libceph: mon0 (1)[c::]:6789 connect error [ 496.461119][ T5943] libceph: connect (1)[c::]:6789 error -101 [ 496.461246][ T5943] libceph: mon0 (1)[c::]:6789 connect error [ 496.568195][ T9693] ceph: No mds server is up or the cluster is laggy [ 496.804203][ T5943] libceph: connect (1)[c::]:6789 error -101 [ 496.804329][ T5943] libceph: mon0 (1)[c::]:6789 connect error [ 497.222103][ C0] vkms_vblank_simulate: vblank timer overrun [ 497.454967][ C0] vkms_vblank_simulate: vblank timer overrun [ 498.567791][ C0] vkms_vblank_simulate: vblank timer overrun [ 498.718847][ C0] vkms_vblank_simulate: vblank timer overrun [ 498.873101][ C0] vkms_vblank_simulate: vblank timer overrun [ 499.013113][ C0] vkms_vblank_simulate: vblank timer overrun [ 499.815933][ C0] vkms_vblank_simulate: vblank timer overrun [ 502.599265][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.599332][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.953925][ T9809] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 508.500708][ T9822] 9pnet_virtio: no channels available for device syz [ 510.257864][ T9813] netlink: 'syz.7.1047': attribute type 2 has an invalid length. [ 517.941364][ T9896] syz.6.1064 (9896): /proc/9856/oom_adj is deprecated, please use /proc/9856/oom_score_adj instead. [ 517.958305][ T9896] tmpfs: Bad value for 'mpol' [ 519.702572][ T9941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.705658][ T9941] team0: Port device batadv0 added [ 520.132632][ T9937] Bluetooth: MGMT ver 1.23 [ 562.996491][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.996565][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.013560][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 626.013582][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P140/2:b..l P9935/1:b..l P9958/2:b..l P3496/1:b..l P9959/3:b..l [ 626.013679][ C0] rcu: (detected by 0, t=10502 jiffies, g=41329, q=207 ncpus=2) [ 626.013703][ C0] task:syz.5.1109 state:R running task stack:24984 pid:9959 tgid:9959 ppid:6027 task_flags:0x40044c flags:0x00080000 [ 626.013754][ C0] Call Trace: [ 626.013760][ C0] [ 626.013771][ C0] __schedule+0x1480/0x50a0 [ 626.013886][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 626.013910][ C0] ? __pfx___schedule+0x10/0x10 [ 626.013932][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 626.013950][ C0] preempt_schedule_irq+0xb5/0x150 [ 626.013965][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 626.013985][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 626.014005][ C0] irqentry_exit+0x5d8/0x660 [ 626.014048][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 626.014066][ C0] RIP: 0010:lock_is_held_type+0x14e/0x190 [ 626.014083][ C0] Code: 4c 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 05 99 8a e9 06 48 3b 44 24 08 75 43 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d 3d c1 03 00 cc 90 0f 0b 90 48 c7 c7 ea 6e de 8c e8 7c 19 00 00 [ 626.014095][ C0] RSP: 0018:ffffc9000c71f310 EFLAGS: 00000282 [ 626.014106][ C0] RAX: 0000000000000001 RBX: ffff88801a180000 RCX: 6c69ef1e897fa600 [ 626.014116][ C0] RDX: 0000000000000000 RSI: ffffffff8cfbc96b RDI: ffffffff8b3e94e0 [ 626.014126][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 626.014133][ C0] R10: dffffc0000000000 R11: fffff94000241029 R12: 0000000000048205 [ 626.014143][ C0] R13: dffffc0000000000 R14: ffff88813fffa870 R15: 0000000000001000 [ 626.014165][ C0] page_ext_lookup+0xe7/0x180 [ 626.014185][ C0] ? page_table_check_clear+0x187/0x700 [ 626.014203][ C0] page_table_check_clear+0x278/0x700 [ 626.014221][ C0] ? vm_normal_page+0xbe/0x1a0 [ 626.014238][ C0] unmap_page_range+0x2ec6/0x3c10 [ 626.014286][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 626.014307][ C0] ? mas_find+0xb0e/0xd30 [ 626.014343][ C0] ? unmap_vmas+0x144/0x580 [ 626.014361][ C0] unmap_vmas+0x399/0x580 [ 626.014383][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 626.014418][ C0] exit_mmap+0x23b/0xb20 [ 626.014436][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 626.014447][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 626.014497][ C0] ? __pfx_exit_aio+0x10/0x10 [ 626.014515][ C0] ? uprobe_clear_state+0x288/0x2a0 [ 626.014524][ C0] ? mm_update_next_owner+0xa7/0x870 [ 626.014540][ C0] __mmput+0xcb/0x3d0 [ 626.014551][ C0] exit_mm+0x1da/0x2c0 [ 626.014564][ C0] ? __pfx_exit_mm+0x10/0x10 [ 626.014581][ C0] do_exit+0x658/0x2310 [ 626.014593][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 626.014609][ C0] ? __pfx_do_exit+0x10/0x10 [ 626.014619][ C0] ? rt_mutex_slowunlock+0x493/0x8a0 [ 626.014628][ C0] ? rt_spin_lock+0x1c1/0x3e0 [ 626.014647][ C0] do_group_exit+0x21c/0x2d0 [ 626.014659][ C0] ? rt_spin_unlock+0x161/0x200 [ 626.014676][ C0] get_signal+0x125d/0x1310 [ 626.014697][ C0] arch_do_signal_or_restart+0x9a/0x7a0 [ 626.014713][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 626.014733][ C0] ? exit_to_user_mode_loop+0x55/0x4f0 [ 626.014747][ C0] exit_to_user_mode_loop+0x87/0x4f0 [ 626.014758][ C0] ? rcu_is_watching+0x15/0xb0 [ 626.014774][ C0] do_syscall_64+0x2e3/0xf80 [ 626.014811][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.014820][ C0] ? clear_bhb_loop+0x60/0xb0 [ 626.014832][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.014841][ C0] RIP: 0033:0x7fb41646f749 [ 626.014853][ C0] RSP: 002b:00007ffe9c234ba8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 626.014863][ C0] RAX: 0000000000000001 RBX: 00007fb4166c5fa8 RCX: 00007fb41646f749 [ 626.014871][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb4166c5fa8 [ 626.014879][ C0] RBP: 0000000000000000 R08: 00007ffe9c234a47 R09: 000000019c234e9f [ 626.014885][ C0] R10: 00007fb4166c5fa0 R11: 0000000000000246 R12: 00007fb4166c5fac [ 626.014892][ C0] R13: 00007fb4166c5fa0 R14: 0000000000001c50 R15: 0000000000000003 [ 626.014907][ C0] [ 626.014912][ C0] task:kworker/u8:16 state:R running task stack:16736 pid:3496 tgid:3496 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 626.014938][ C0] Workqueue: bat_events batadv_tt_purge [ 626.014974][ C0] Call Trace: [ 626.014977][ C0] [ 626.014984][ C0] __schedule+0x1480/0x50a0 [ 626.015000][ C0] ? trace_sched_exit_tp+0x36/0xf0 [ 626.015013][ C0] ? __schedule+0x1496/0x50a0 [ 626.015029][ C0] ? __pfx___schedule+0x10/0x10 [ 626.015045][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 626.015057][ C0] preempt_schedule_irq+0xb5/0x150 [ 626.015068][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 626.015079][ C0] ? rtlock_slowlock_locked+0xd8/0x4010 [ 626.015087][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 626.015101][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 626.015115][ C0] irqentry_exit+0x5d8/0x660 [ 626.015128][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 626.015138][ C0] RIP: 0010:_raw_spin_lock_irqsave+0x60/0xf0 [ 626.015149][ C0] Code: e5 8c 48 c7 44 24 10 60 e6 c3 8a 49 89 e7 49 c1 ef 03 48 b8 f1 f1 f1 f1 00 f3 f3 f3 49 bc 00 00 00 00 00 fc ff df 4b 89 04 27 <48> c7 44 24 20 00 00 00 00 9c 8f 44 24 20 4c 8b 74 24 20 fa 41 f7 [ 626.015157][ C0] RSP: 0018:ffffc9000d11f800 EFLAGS: 00000a06 [ 626.015164][ C0] RAX: f3f3f300f1f1f1f1 RBX: ffff888052ed5980 RCX: d20c1ba0386f9b00 [ 626.015171][ C0] RDX: 0000000000000004 RSI: ffffffff8cfbc96b RDI: ffff888052ed5980 [ 626.015178][ C0] RBP: ffffc9000d11f890 R08: ffffffff8ac2b3f1 R09: ffffffff8d5aec20 [ 626.015184][ C0] R10: 0000000000000000 R11: fffffbfff1db2a2f R12: dffffc0000000000 [ 626.015191][ C0] R13: ffff888052ed5980 R14: dffffc0000000000 R15: 1ffff92001a23f00 [ 626.015201][ C0] ? rt_spin_lock+0x1c1/0x3e0 [ 626.015219][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 626.015230][ C0] ? rt_spin_lock+0x1c1/0x3e0 [ 626.015243][ C0] ? rcu_is_watching+0x15/0xb0 [ 626.015257][ C0] rt_mutex_slowunlock+0xb0/0x8a0 [ 626.015265][ C0] ? reacquire_held_locks+0x121/0x1c0 [ 626.015277][ C0] ? rt_spin_lock+0x1c1/0x3e0 [ 626.015292][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 626.015302][ C0] ? rt_spin_unlock+0x150/0x200 [ 626.015312][ C0] ? rt_spin_unlock+0x161/0x200 [ 626.015322][ C0] ? batadv_tt_purge+0x97/0xa10 [ 626.015330][ C0] batadv_tt_purge+0x463/0xa10 [ 626.015342][ C0] ? batadv_tt_purge+0x97/0xa10 [ 626.015351][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 626.015362][ C0] process_scheduled_works+0xad1/0x1770 [ 626.015386][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 626.015404][ C0] worker_thread+0x8a0/0xda0 [ 626.015430][ C0] kthread+0x711/0x8a0 [ 626.015444][ C0] ? __pfx_worker_thread+0x10/0x10 [ 626.015453][ C0] ? __pfx_kthread+0x10/0x10 [ 626.015463][ C0] ? rt_spin_unlock+0x150/0x200 [ 626.015476][ C0] ? rt_spin_unlock+0x161/0x200 [ 626.015484][ C0] ? __pfx_kthread+0x10/0x10 [ 626.015496][ C0] ret_from_fork+0x599/0xb30 [ 626.015507][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 626.015521][ C0] ? __switch_to_asm+0x39/0x70 [ 626.015533][ C0] ? __switch_to_asm+0x33/0x70 [ 626.015543][ C0] ? __pfx_kthread+0x10/0x10 [ 626.015555][ C0] ret_from_fork_asm+0x1a/0x30 [ 626.015575][ C0] [ 626.015579][ C0] task:syz.8.1108 state:R running task stack:24984 pid:9958 tgid:9958 ppid:6656 task_flags:0x40044c flags:0x00080000 [ 626.015606][ C0] Call Trace: [ 626.015609][ C0] [ 626.015615][ C0] __schedule+0x1480/0x50a0 [ 626.015639][ C0] ? __pfx___schedule+0x10/0x10 [ 626.015652][ C0] ? irqentry_exit+0x5dd/0x660 [ 626.015668][ C0] ? trace_irq_disable+0x37/0x100 [ 626.015681][ C0] ? preempt_schedule+0xae/0xc0 [ 626.015692][ C0] preempt_schedule_common+0x83/0xd0 [ 626.015702][ C0] preempt_schedule+0xae/0xc0 [ 626.015712][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 626.015722][ C0] ? pfn_valid+0xba/0x490 [ 626.015737][ C0] preempt_schedule_thunk+0x16/0x30 [ 626.015747][ C0] ? pfn_valid+0x3fd/0x490 [ 626.015760][ C0] pfn_valid+0x402/0x490 [ 626.015774][ C0] page_table_check_clear+0x21/0x700 [ 626.015787][ C0] ? vm_normal_page+0xbe/0x1a0 [ 626.015799][ C0] unmap_page_range+0x2ec6/0x3c10 [ 626.015833][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 626.015848][ C0] ? mas_find+0xb0e/0xd30 [ 626.015857][ C0] ? unmap_vmas+0x144/0x580 [ 626.015870][ C0] unmap_vmas+0x399/0x580 [ 626.015885][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 626.015909][ C0] exit_mmap+0x23b/0xb20 [ 626.015921][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 626.015928][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 626.015945][ C0] ? __pfx_exit_aio+0x10/0x10 [ 626.015961][ C0] ? uprobe_clear_state+0x288/0x2a0 [ 626.015970][ C0] ? mm_update_next_owner+0xa7/0x870 [ 626.015987][ C0] __mmput+0xcb/0x3d0 [ 626.015998][ C0] exit_mm+0x1da/0x2c0 [ 626.016010][ C0] ? __pfx_exit_mm+0x10/0x10 [ 626.016027][ C0] do_exit+0x658/0x2310 [ 626.016038][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 626.016054][ C0] ? __pfx_do_exit+0x10/0x10 [ 626.016064][ C0] ? rt_mutex_slowunlock+0x493/0x8a0 [ 626.016073][ C0] ? rt_spin_lock+0x1c1/0x3e0 [ 626.016092][ C0] do_group_exit+0x21c/0x2d0 [ 626.016103][ C0] ? rt_spin_unlock+0x161/0x200 [ 626.016113][ C0] get_signal+0x125d/0x1310 [ 626.016133][ C0] arch_do_signal_or_restart+0x9a/0x7a0 [ 626.016147][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 626.016167][ C0] ? exit_to_user_mode_loop+0x55/0x4f0 [ 626.016181][ C0] exit_to_user_mode_loop+0x87/0x4f0 [ 626.016191][ C0] ? rcu_is_watching+0x15/0xb0 [ 626.016206][ C0] do_syscall_64+0x2e3/0xf80 [ 626.016217][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.016227][ C0] ? clear_bhb_loop+0x60/0xb0 [ 626.016251][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.016260][ C0] RIP: 0033:0x7f8eb6143e89 [ 626.016267][ C0] RSP: 002b:00007ffc9e3a3768 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3 [ 626.016277][ C0] RAX: fffffffffffffffc RBX: 00007f8eb60c62a0 RCX: 00007f8eb6143e89 [ 626.016283][ C0] RDX: 00007f8eb60c62a0 RSI: 0000000000000058 RDI: 00007ffc9e3a37b0 [ 626.016290][ C0] RBP: 00007f8eb434d6c0 R08: 00007f8eb434d6c0 R09: 00007ffc9e3a3897 [ 626.016296][ C0] R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffa8 [ 626.016303][ C0] R13: 000000000000006e R14: 00007ffc9e3a37b0 R15: 00007ffc9e3a3898 [ 626.016318][ C0] [ 626.016322][ C0] task:syz.9.1098 state:R running task stack:25296 pid:9935 tgid:9933 ppid:6657 task_flags:0x400040 flags:0x00080002 [ 626.016348][ C0] Call Trace: [ 626.016351][ C0] [ 626.016357][ C0] __schedule+0x1480/0x50a0 [ 626.016384][ C0] ? __pfx___schedule+0x10/0x10 [ 626.016392][ C0] ? rtlock_slowlock_locked+0xd8/0x4010 [ 626.016403][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 626.016420][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 626.016432][ C0] preempt_schedule_irq+0xb5/0x150 [ 626.016442][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 626.016456][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 626.016470][ C0] irqentry_exit+0x5d8/0x660 [ 626.016484][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 626.016493][ C0] RIP: 0010:lock_release+0x2a6/0x3b0 [ 626.016504][ C0] Code: 4d 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 52 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 da 12 0d 10 <48> 3b 44 24 28 75 75 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 [ 626.016512][ C0] RSP: 0018:ffffc9000c6cf5f0 EFLAGS: 00000206 [ 626.016519][ C0] RAX: c528d7acf800ab00 RBX: 0000000000000202 RCX: c528d7acf800ab00 [ 626.016525][ C0] RDX: 0000000000000001 RSI: ffffffff8cfbc96b RDI: ffffffff8b3e94e0 [ 626.016532][ C0] RBP: ffff888026540b88 R08: ffffffff8ac2b3f1 R09: ffffffff8d5aec20 [ 626.016539][ C0] R10: 0000000000000000 R11: ffffed100a23dbd5 R12: 0000000000000001 [ 626.016545][ C0] R13: 0000000000000001 R14: ffffffff8d5aec20 R15: ffff888026540000 [ 626.016555][ C0] ? rt_spin_lock+0x1c1/0x3e0 [ 626.016573][ C0] ? rt_spin_unlock+0x150/0x200 [ 626.016583][ C0] rt_spin_unlock+0x15c/0x200 [ 626.016593][ C0] __skb_try_recv_datagram+0xa9/0x1b0 [ 626.016644][ C0] __unix_dgram_recvmsg+0x2d4/0xd60 [ 626.016691][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 626.016703][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 626.016717][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 626.016731][ C0] ? unix_dgram_recvmsg+0xb1/0xd0 [ 626.016741][ C0] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 626.016752][ C0] sock_recvmsg_nosec+0x186/0x1c0 [ 626.016786][ C0] ____sys_recvmsg+0x3ab/0x470 [ 626.016803][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 626.016822][ C0] ? import_iovec+0x74/0xa0 [ 626.016860][ C0] ___sys_recvmsg+0x1b5/0x510 [ 626.016875][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 626.016902][ C0] ? __might_fault+0xb0/0x130 [ 626.016914][ C0] do_recvmmsg+0x30d/0x770 [ 626.016931][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 626.016959][ C0] __x64_sys_recvmmsg+0x190/0x240 [ 626.016972][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 626.016987][ C0] ? do_syscall_64+0xbe/0xf80 [ 626.016999][ C0] do_syscall_64+0xfa/0xf80 [ 626.017010][ C0] ? rcu_is_watching+0x15/0xb0 [ 626.017021][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.017030][ C0] ? clear_bhb_loop+0x60/0xb0 [ 626.017041][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.017050][ C0] RIP: 0033:0x7f6315e3f749 [ 626.017057][ C0] RSP: 002b:00007f6314085038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 626.017066][ C0] RAX: ffffffffffffffda RBX: 00007f6316096090 RCX: 00007f6315e3f749 [ 626.017073][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005 [ 626.017079][ C0] RBP: 00007f6315ec3f91 R08: 0000000000000000 R09: 0000000000000000 [ 626.017085][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 626.017091][ C0] R13: 00007f6316096128 R14: 00007f6316096090 R15: 00007ffe90bd65a8 [ 626.017106][ C0] [ 626.017110][ C0] task:kworker/u8:5 state:R running task stack:19456 pid:140 tgid:140 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 626.017136][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 626.017186][ C0] Call Trace: [ 626.017190][ C0] [ 626.017196][ C0] __schedule+0x1480/0x50a0 [ 626.017220][ C0] ? __pfx___schedule+0x10/0x10 [ 626.017234][ C0] ? rtlock_slowlock_locked+0xd8/0x4010 [ 626.017245][ C0] ? irqentry_exit+0x5dd/0x660 [ 626.017255][ C0] ? preempt_schedule+0xae/0xc0 [ 626.017266][ C0] preempt_schedule_common+0x83/0xd0 [ 626.017277][ C0] preempt_schedule+0xae/0xc0 [ 626.017286][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 626.017305][ C0] preempt_schedule_thunk+0x16/0x30 [ 626.017317][ C0] _raw_spin_unlock_irqrestore+0xfd/0x110 [ 626.017329][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 626.017340][ C0] ? rt_spin_lock+0x1c1/0x3e0 [ 626.017357][ C0] rt_mutex_slowunlock+0x493/0x8a0 [ 626.017365][ C0] ? reacquire_held_locks+0x121/0x1c0 [ 626.017377][ C0] ? rt_spin_lock+0x1c1/0x3e0 [ 626.017391][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 626.017402][ C0] ? rt_spin_unlock+0x150/0x200 [ 626.017412][ C0] ? rt_spin_unlock+0x161/0x200 [ 626.017420][ C0] ? nsim_dev_trap_report_work+0x72e/0xbc0 [ 626.017433][ C0] nsim_dev_trap_report_work+0x7e5/0xbc0 [ 626.017454][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 626.017465][ C0] process_scheduled_works+0xad1/0x1770 [ 626.017488][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 626.017507][ C0] worker_thread+0x8a0/0xda0 [ 626.017529][ C0] kthread+0x711/0x8a0 [ 626.017542][ C0] ? __pfx_worker_thread+0x10/0x10 [ 626.017552][ C0] ? __pfx_kthread+0x10/0x10 [ 626.017562][ C0] ? rt_spin_unlock+0x150/0x200 [ 626.017572][ C0] ? rt_spin_unlock+0x161/0x200 [ 626.017580][ C0] ? __pfx_kthread+0x10/0x10 [ 626.017592][ C0] ret_from_fork+0x599/0xb30 [ 626.017602][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 626.017617][ C0] ? __switch_to_asm+0x39/0x70 [ 626.017627][ C0] ? __switch_to_asm+0x33/0x70 [ 626.017638][ C0] ? __pfx_kthread+0x10/0x10 [ 626.017650][ C0] ret_from_fork_asm+0x1a/0x30 [ 626.017675][ C0] [ 626.017686][ C0] rcu: rcu_preempt kthread starved for 10269 jiffies! g41329 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 626.017703][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 626.017711][ C0] rcu: RCU grace-period kthread stack dump: [ 626.017717][ C0] task:rcu_preempt state:R running task stack:23264 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00080000 [ 626.017761][ C0] Call Trace: [ 626.017766][ C0] [ 626.017777][ C0] __schedule+0x1480/0x50a0 [ 626.017821][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 626.017843][ C0] ? __pfx___schedule+0x10/0x10 [ 626.017876][ C0] ? schedule+0x91/0x360 [ 626.017899][ C0] schedule+0x165/0x360 [ 626.017920][ C0] schedule_timeout+0x12b/0x270 [ 626.017939][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 626.017955][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 626.017976][ C0] ? __pfx_process_timeout+0x10/0x10 [ 626.018002][ C0] ? prepare_to_swait_event+0x341/0x380 [ 626.018029][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 626.018065][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 626.018083][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 626.018107][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 626.018126][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 626.018152][ C0] ? finish_swait+0xcd/0x1f0 [ 626.018174][ C0] rcu_gp_kthread+0x99/0x390 [ 626.018201][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 626.018225][ C0] ? __kthread_parkme+0x7b/0x200 [ 626.018246][ C0] ? __kthread_parkme+0x1a1/0x200 [ 626.018273][ C0] kthread+0x711/0x8a0 [ 626.018300][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 626.018323][ C0] ? __pfx_kthread+0x10/0x10 [ 626.018342][ C0] ? rt_spin_unlock+0x150/0x200 [ 626.018364][ C0] ? rt_spin_unlock+0x161/0x200 [ 626.018379][ C0] ? __pfx_kthread+0x10/0x10 [ 626.018404][ C0] ret_from_fork+0x599/0xb30 [ 626.018423][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 626.018452][ C0] ? __switch_to_asm+0x39/0x70 [ 626.018474][ C0] ? __switch_to_asm+0x33/0x70 [ 626.018494][ C0] ? __pfx_kthread+0x10/0x10 [ 626.018518][ C0] ret_from_fork_asm+0x1a/0x30 [ 626.018558][ C0] [ 626.018566][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 626.018594][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 626.018615][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 626.018626][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 626.018647][ C0] Code: 83 c9 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 f3 27 00 f3 0f 1e fa fb f4 58 c9 03 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 626.018670][ C0] RSP: 0018:ffffffff8d207d80 EFLAGS: 000002c2 [ 626.018685][ C0] RAX: 219ab05afcf7a000 RBX: ffffffff8195f82a RCX: 219ab05afcf7a000 [ 626.018699][ C0] RDX: 0000000000000001 RSI: ffffffff8cde6eea RDI: ffffffff8b3e94e0 [ 626.018712][ C0] RBP: ffffffff8d207ea8 R08: ffff8880b8833b5b R09: 1ffff1101710676b [ 626.018726][ C0] R10: dffffc0000000000 R11: ffffed101710676c R12: ffffffff8ed95170 [ 626.018740][ C0] R13: 1ffffffff1a60650 R14: 0000000000000000 R15: 0000000000000000 [ 626.018752][ C0] FS: 0000000000000000(0000) GS:ffff888126d81000(0000) knlGS:0000000000000000 [ 626.018767][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 626.018779][ C0] CR2: 00007f850322642d CR3: 0000000035c42000 CR4: 00000000003526f0 [ 626.018796][ C0] Call Trace: [ 626.018803][ C0] [ 626.018810][ C0] default_idle+0x13/0x20 [ 626.018832][ C0] default_idle_call+0x73/0xb0 [ 626.018855][ C0] do_idle+0x1ea/0x520 [ 626.018873][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 626.018893][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 626.018914][ C0] ? __pfx_do_idle+0x10/0x10 [ 626.018940][ C0] ? do_idle+0x5/0x520 [ 626.018959][ C0] cpu_startup_entry+0x44/0x60 [ 626.018976][ C0] rest_init+0x2de/0x300 [ 626.019002][ C0] start_kernel+0x3ae/0x410 [ 626.019031][ C0] x86_64_start_reservations+0x24/0x30 [ 626.019052][ C0] x86_64_start_kernel+0x143/0x1c0 [ 626.019072][ C0] common_startup_64+0x13e/0x147 [ 626.019111][ C0] [ 630.941024][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.941096][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 SYZFAIL: failed to send rpc fd=3 want=824 sent=0 n=-1 (errno 32: Broken pipe)