last executing test programs: 4m48.652995431s ago: executing program 1 (id=186): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=0x0], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x1, [{0x3, 0x2, 0x58864b00}], '\x00'}, @datasec={0x4, 0x0, 0x0, 0xf, 0x3, [], "e0ea94"}]}, {0x0, [0x5f, 0x5f]}}, 0x0, 0x44, 0x0, 0x1}, 0x28) r0 = getpid() r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000200)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300800a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a68fbff9cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000000000000000000000084d6f31d5de024f", 0xc0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) unlink(&(0x7f00000000c0)='./file0\x00') pwritev2(r4, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x1}], 0x1, 0x5, 0xa, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={0x2c, r6, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x71a90f0fa04800ec}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r8, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) 4m47.720690198s ago: executing program 1 (id=191): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffe, 0x30004004, 0x0, 0xfffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x1, 0x100}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r7, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x3) r8 = accept4$unix(r5, &(0x7f00000000c0)=@abs, &(0x7f0000000000)=0x6e, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xd) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xe) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) r9 = openat$autofs(0xffffff9c, &(0x7f0000000200), 0xd00, 0x0) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) r11 = getpgid(r4) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r12 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) write$FUSE_INTERRUPT(r12, &(0x7f00000000c0)={0x10, 0xfffffffffffffff5}, 0x10) sendmsg$unix(r8, &(0x7f0000000300)={&(0x7f0000000280)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000480)="476f12c61b8d3ed642dd71cadb352464d4b249f98bd7cf471f25b52d822ee52a758f70e588b91767e7b7ad1dff3a6807b5ee9f2330a88dd953fb3178158a361a42ea9e8e8a5bea1c15553280e6e309f003cdea2de7860e869f8dc59b2fac7a365c279323ad78e5953db0007feb601cb8e5457669c2bc69e7dfaf4c4363317f21f16f4ab7f6e505e14db28bec87ce0d296a93598fc0a22e17c58a2c8b3f61f285e60bac75785d0518d86ae282eb1f06fc3f8f6e2d361c66aa8e78180ae8642d12dfb8d3c9a933d38a0d63eaff42a4e9ad9cd8565baea879c5bccd1231140ecfb09a3cf79d00f9cd8d4879adc91c419505b8", 0xf1}], 0x1, &(0x7f0000000380)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, r0, r5, r9]}}, @rights={{0x14, 0x1, 0x1, [r7, r10]}}, @cred={{0x18, 0x1, 0x2, {r11, r2, r3}}}], 0x4c, 0x20000000}, 0x4000) r13 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r13, 0x2) close_range(r6, 0xffffffffffffffff, 0x0) 4m46.60192377s ago: executing program 1 (id=196): socket$inet_mptcp(0x2, 0x1, 0x106) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x101301) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040844) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3848b25e258a25f9dae13", 0xd}], 0x1}}], 0x1, 0x20008000) shutdown(r4, 0x1) getpgid(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000100)=0x3f7, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendto$packet(r5, 0x0, 0x0, 0x40000, &(0x7f0000000240)={0x11, 0xf7, r6, 0x1, 0x20, 0x6, @remote}, 0x14) recvfrom$packet(r5, 0x0, 0x0, 0x2000, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x13c, 0x10, 0x413, 0x70bd26, 0x40, {{@in=@remote, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x7, 0x4e1f, 0x0, 0xa, 0x20, 0x20, 0x67}, {@in=@dev={0xac, 0x14, 0x14, 0x22}, 0x4d4, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, {0x800, 0x17d, 0x0, 0x40000000000004, 0xffffffffffffffff, 0x6, 0x7f, 0x2}, {0x0, 0x21fd, 0x4, 0x4}, {0x4000f6, 0x4, 0x8}, 0x0, 0x34ff, 0x2, 0x1, 0xbe, 0x33}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000804) creat(0x0, 0x0) 4m43.512740723s ago: executing program 1 (id=202): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @local, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@rand_addr, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private, 0x4}, {@broadcast}, {@multicast2}, {@dev}]}]}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000001f0000000200000022bf000001000000", @ANYRES32, @ANYRES32, @ANYRES64=r2], 0x50) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, 0x0, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x401, r3, 0x0, 0xa002a0}, 0x38) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000b00)={0x0, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)=[{}]}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000020000000000000000000822"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 4m42.462186057s ago: executing program 1 (id=206): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f0000000400), &(0x7f0000000480)='./file0\x00', 0x0, 0x8, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x40000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14fc29", 0xb) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r5, &(0x7f00000002c0)={'#! ', '', [{0x20, '\x0f\x10\t'}]}, 0x8) close(r5) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r7}, 0x38) 4m40.522822205s ago: executing program 1 (id=209): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRES64, @ANYRESDEC=r0, @ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xb1, &(0x7f0000000140)=""/177, 0x41000, 0xaa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3fc, 0x7, 0xfffffffd, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x40, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x9, 0x20000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1, 0x7], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x2, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x7, 0xc0800000, 0x0, 0x10000, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x3], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000300)={0x18, &(0x7f0000000000)={0x40, 0x3, 0x3e, {0x3e, 0x1a, "d31cee0b3d3d9e67dee919f1b76552cbc53ad82007bfba049bb7c2ea0340c18ae7b65410740a09960633ac762e9c24a53fc9260f6fc068c485f7d31b"}}, &(0x7f00000001c0)={0x0, 0x3, 0xca, @string={0xca, 0x3, "1ec01ad997f87f473edd403fef01ead40093692207dfbc3c4fe37c7779522a625e40dde68d325367364e5f39e68744c126aecfc74b9904aa274aa17612b33b4c73468979e433829e91329e5c580229c668bbf4922dd6e26498d21cff2a23e71684e7e4e9f983aae6656f1e936cf46da5b7c36ec046da658c17b4e9d8e0289c54f4a1b68809ae484eae8d2c7fee7b380d1e8f805c241cdc6c0a56a3819af497e718e43748e6075951b40ae5beeb6536ba82d3cc6d4122d0928f12f55a91d1a8201bbad9ccd4917966"}}, &(0x7f0000000080)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x1, [@generic={0x33, 0x10, 0x2, "31603018ca3d11ed94adc7da4529e6796b378da707997ef684e4b5023a5c34cbc063400f4dde270dc527a811fcab28f6"}]}}, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x18, 0x4, 0x0, "d4fd42d5", "6e57bfde"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf2, 0x80, 0xfc, 0x4, 0xf2, 0x8001, 0x1bd6}}}, &(0x7f0000000840)={0x44, &(0x7f0000000340)={0x40, 0xc, 0xe0, "966c8a23e2aff9fb5136b16b1a90b777cf3ed2cada87d762637a82a1ca2dc0d3cad2a84c95e36613420bfa0945d9535eda38c7c90632cfc46f6b9d1eb2329f4aad400768a6e7ce7d35e53559e94a97f2ad49826adc900458a242da374c4dd027f30b5a3ca861ffa7d6eff04f92ce1cbadf6ea4e31c214c62e1c12dad17b10189b15ef26b1c2a90b879bc9fd1dfc752b775e3af54fff902818123c74250b6528845fa40726c0e7923d7fea0df772cc840fe7d8dfaddc1e60017342775c81ffadf2594ae5b86ed26e184cb054d30359d807371712fdc7d387dce4d421ea41ec9ac"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x14}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x20, 0x80}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x9}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0xe4}, &(0x7f0000000600)={0x40, 0xb, 0x2, "08d4"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x8b}, &(0x7f0000000680)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x0, &(0x7f0000000700)={0x40, 0x19, 0x2, "41ad"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x9}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) 4m25.422725653s ago: executing program 32 (id=209): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRES64, @ANYRESDEC=r0, @ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xb1, &(0x7f0000000140)=""/177, 0x41000, 0xaa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3fc, 0x7, 0xfffffffd, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x40, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x9, 0x20000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1, 0x7], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x2, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x7, 0xc0800000, 0x0, 0x10000, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x3], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000300)={0x18, &(0x7f0000000000)={0x40, 0x3, 0x3e, {0x3e, 0x1a, "d31cee0b3d3d9e67dee919f1b76552cbc53ad82007bfba049bb7c2ea0340c18ae7b65410740a09960633ac762e9c24a53fc9260f6fc068c485f7d31b"}}, &(0x7f00000001c0)={0x0, 0x3, 0xca, @string={0xca, 0x3, "1ec01ad997f87f473edd403fef01ead40093692207dfbc3c4fe37c7779522a625e40dde68d325367364e5f39e68744c126aecfc74b9904aa274aa17612b33b4c73468979e433829e91329e5c580229c668bbf4922dd6e26498d21cff2a23e71684e7e4e9f983aae6656f1e936cf46da5b7c36ec046da658c17b4e9d8e0289c54f4a1b68809ae484eae8d2c7fee7b380d1e8f805c241cdc6c0a56a3819af497e718e43748e6075951b40ae5beeb6536ba82d3cc6d4122d0928f12f55a91d1a8201bbad9ccd4917966"}}, &(0x7f0000000080)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x1, [@generic={0x33, 0x10, 0x2, "31603018ca3d11ed94adc7da4529e6796b378da707997ef684e4b5023a5c34cbc063400f4dde270dc527a811fcab28f6"}]}}, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x18, 0x4, 0x0, "d4fd42d5", "6e57bfde"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf2, 0x80, 0xfc, 0x4, 0xf2, 0x8001, 0x1bd6}}}, &(0x7f0000000840)={0x44, &(0x7f0000000340)={0x40, 0xc, 0xe0, "966c8a23e2aff9fb5136b16b1a90b777cf3ed2cada87d762637a82a1ca2dc0d3cad2a84c95e36613420bfa0945d9535eda38c7c90632cfc46f6b9d1eb2329f4aad400768a6e7ce7d35e53559e94a97f2ad49826adc900458a242da374c4dd027f30b5a3ca861ffa7d6eff04f92ce1cbadf6ea4e31c214c62e1c12dad17b10189b15ef26b1c2a90b879bc9fd1dfc752b775e3af54fff902818123c74250b6528845fa40726c0e7923d7fea0df772cc840fe7d8dfaddc1e60017342775c81ffadf2594ae5b86ed26e184cb054d30359d807371712fdc7d387dce4d421ea41ec9ac"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x14}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x20, 0x80}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x9}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0xe4}, &(0x7f0000000600)={0x40, 0xb, 0x2, "08d4"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x8b}, &(0x7f0000000680)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x0, &(0x7f0000000700)={0x40, 0x19, 0x2, "41ad"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x9}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) 9.211534456s ago: executing program 3 (id=765): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x7e, &(0x7f00000010c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @local, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@rand_addr, 0x4e210000}]}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private, 0x4}, {@multicast2}, {@dev}]}]}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000001f0000000200000022bf000001000000", @ANYRES32, @ANYRES32, @ANYRES64=r2], 0x50) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x401, r3, 0x0, 0xa002a0}, 0x38) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000b00)={0x0, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)=[{}]}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 8.569674001s ago: executing program 2 (id=768): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) r1 = syz_open_procfs(0x0, &(0x7f00000028c0)='net/ip6_flowlabel\x00') writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a45322, &(0x7f00000003c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000019080)=0x30) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xd4) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x8017, &(0x7f0000000400)=ANY=[@ANYBLOB="fc198b4afdb2fa847472616e733d76697274696f2c63616368653d726561646168656164"]) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 7.31488479s ago: executing program 3 (id=771): syz_clone(0xe280, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="5bb86bfba4bbaaaaaaaaaa2908004500005c00000000042f90800a010101e000000120010b1cc92887c7067e000006000000c309000000c06026fe83810e0fda3ce7499c032f101721b7a72a513d485fe06268d452057ee6a24bad4ff5"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x400, &(0x7f0000000140)=ANY=[@ANYRESOCT=0x0]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) getrlimit(0x4, &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) getpid() r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_io_uring_setup(0x2f90, &(0x7f0000000080)={0x0, 0x91d9, 0x3010, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) unshare(0x8000280) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 7.043471868s ago: executing program 3 (id=772): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) getsockname$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000280)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setrlimit(0x6, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000, 0x80000004000080, 0x8000000, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x6, 0xd4, 0x8, 0x63, 0x200002000001, 0xf2f, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x6, 0x3, 0x400000000, 0x6, 0xc], 0x80a0000}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x0) socket(0x2, 0x80805, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7ff}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100100020010ac0524020000000000010902240001000080080904004504030002"], 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x1, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) readv(r6, &(0x7f0000001240), 0x0) 7.026871636s ago: executing program 0 (id=773): syz_clone(0xe280, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="5bb86bfba4bbaaaaaaaaaa2908004500005c00000000042f90800a010101e000000120010b1cc92887c7067e000006000000c309000000c06026fe83810e0fda3ce7499c032f101721b7a72a513d485fe06268d452057ee6a24bad4ff5"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x400, &(0x7f0000000140)=ANY=[@ANYRESOCT=0x0]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) getrlimit(0x4, &(0x7f0000000080)) sendmmsg(0xffffffffffffffff, &(0x7f0000001940)=[{{&(0x7f0000000000)=@qipcrtr={0x2a, 0x4, 0x7fff}, 0x80, 0x0, 0x0, &(0x7f0000001c00)=[{0xc, 0x117, 0x400000}, {0xc, 0x10b, 0x81}], 0x18}}], 0x1, 0x45) getpid() r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_io_uring_setup(0x2f90, &(0x7f0000000080)={0x0, 0x91d9, 0x3010, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) unshare(0x8000280) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 6.676658185s ago: executing program 0 (id=774): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @local, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@rand_addr, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private, 0x4}, {@broadcast}, {@multicast2}, {@dev}]}]}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000001f0000000200000022bf000001000000", @ANYRES32, @ANYRES32, @ANYRES64=r2], 0x50) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x401, r3, 0x0, 0xa002a0}, 0x38) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000b00)={0x0, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000020000000000000000000822"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 6.675686447s ago: executing program 2 (id=775): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x1, [{0x3, 0x2, 0x58864b00}], '\x00'}, @datasec={0x4, 0x0, 0x0, 0xf, 0x3, [], "e0ea94"}]}, {0x0, [0x5f, 0x5f]}}, 0x0, 0x44, 0x0, 0x1}, 0x28) r0 = getpid() r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000200)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300800a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a68fbff9cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000000000000000000000084d6f31d5de024f", 0xc0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) unlink(&(0x7f00000000c0)='./file0\x00') pwritev2(r5, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x1}], 0x1, 0x5, 0xa, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={0x2c, r7, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x71a90f0fa04800ec}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r9, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) 6.480957019s ago: executing program 3 (id=776): syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) getpgrp(0x0) timer_gettime(0x0, 0x0) unshare(0x200) syz_80211_join_ibss(0x0, &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001740)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xc, 0xb9, &(0x7f0000000140)=""/185, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000120005f700000000004a000000000000", @ANYRES32=0x0, @ANYBLOB="1100000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000010028bd70000000000000000000", @ANYRES32=0x0, @ANYRES64=0x0], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x200088c4) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x28ca000, &(0x7f0000000340)=ANY=[]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) 5.426323316s ago: executing program 3 (id=778): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getpriority(0x1, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r2 = openat$qrtrtun(0xffffff9c, &(0x7f0000000240), 0x801) mmap$qrtrtun(&(0x7f000085a000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r2, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f00000000c0)={'nat\x00', 0x2, [{}, {}]}, 0x44) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRESHEX, @ANYRES16=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xf, &(0x7f00000003c0)=ANY=[@ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_setup(0x7f57, &(0x7f00000001c0)={0x0, 0x5623, 0x80, 0x3, 0x1fb}) unshare(0x6a040000) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) r5 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_setup(0x9, &(0x7f0000000b80)=0x0) io_submit(r6, 0x1, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, r5}]) write$uinput_user_dev(r5, 0x0, 0x0) close(r4) mmap(&(0x7f00005f7000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000080000000000000020"], 0x24, 0x0) 4.98152477s ago: executing program 2 (id=779): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @local, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@rand_addr, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private, 0x4}, {@broadcast}, {@multicast2}, {@dev}]}]}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000001f0000000200000022bf000001000000", @ANYRES32, @ANYRES32, @ANYRES64=r2], 0x50) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x401, r3, 0x0, 0xa002a0}, 0x38) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000b00)={0x0, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)=[{}]}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 4.701409361s ago: executing program 0 (id=780): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) getsockname$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000280)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setrlimit(0x6, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000, 0x80000004000080, 0x8000000, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x6, 0xd4, 0x8, 0x63, 0x200002000001, 0xf2f, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x6, 0x3, 0x400000000, 0x6, 0xc], 0x80a0000}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x0) socket(0x2, 0x80805, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7ff}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100100020010ac0524020000000000010902240001000080080904004504030002"], 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x1, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) readv(r6, &(0x7f0000001240), 0x0) 3.989902912s ago: executing program 4 (id=781): syz_clone(0xe280, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="5bb86bfba4bbaaaaaaaaaa2908004500005c00000000042f90800a010101e000000120010b1cc92887c7067e000006000000c309000000c06026fe83810e0fda3ce7499c032f101721b7a72a513d485fe06268d452057ee6a24bad4ff5"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x400, &(0x7f0000000140)=ANY=[@ANYRESOCT=0x0]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) getrlimit(0x4, &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) getpid() r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_io_uring_setup(0x2f90, &(0x7f0000000080)={0x0, 0x91d9, 0x3010, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) unshare(0x8000280) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.750188918s ago: executing program 2 (id=782): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x1, [{0x3, 0x2, 0x58864b00}], '\x00'}, @datasec={0x4, 0x0, 0x0, 0xf, 0x3, [], "e0ea94"}]}, {0x0, [0x5f, 0x5f]}}, 0x0, 0x44, 0x0, 0x1}, 0x28) r0 = getpid() r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000200)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300800a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a68fbff9cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000000000000000000000084d6f31d5de024f", 0xc0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) unlink(&(0x7f00000000c0)='./file0\x00') pwritev2(r5, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x1}], 0x1, 0x5, 0xa, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={0x2c, r7, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x71a90f0fa04800ec}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r9, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) 3.701772723s ago: executing program 4 (id=783): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) r1 = syz_open_procfs(0x0, &(0x7f00000028c0)='net/ip6_flowlabel\x00') writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a45322, &(0x7f00000003c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000019080)=0x30) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xd4) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x8017, &(0x7f0000000400)=ANY=[@ANYBLOB="fc198b4afdb2fa847472616e733d76697274696f2c63616368653d726561646168656164"]) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 3.55668765s ago: executing program 0 (id=784): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) getsockname$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000280)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setrlimit(0x6, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000, 0x80000004000080, 0x8000000, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x6, 0xd4, 0x8, 0x63, 0x200002000001, 0xf2f, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x6, 0x3, 0x400000000, 0x6, 0xc], 0x80a0000}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x0) socket(0x2, 0x80805, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7ff}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100100020010ac0524020000000000010902240001000080080904004504030002"], 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x1, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) readv(r6, &(0x7f0000001240), 0x0) 3.29855621s ago: executing program 4 (id=785): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x140) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)) mknodat$loop(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f0000000280)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="08000000dd0000000000000000c8d05300000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB], 0x50) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r3, 0x0, 0xa002a0}, 0x38) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x74}}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 2.392805082s ago: executing program 4 (id=786): socket$isdn_base(0x22, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x54, 0x5, 0x8, 0x8001, 0x0, 0x5, 0x1, 0xfffffe0000000001, 0xfa11, 0x2}, 0x0) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r6) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r7, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9d}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4c081}, 0x8800) sendto$unix(r6, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000180)=0x2) fcntl$setsig(r3, 0xa, 0x12) ppoll(&(0x7f0000000140)=[{r4, 0x8002}], 0x1, 0x0, 0x0, 0x0) r8 = dup2(r3, r4) fcntl$setown(r8, 0x8, r2) syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) tkill(r2, 0x13) r9 = socket(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5b, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3df], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x20000000) 2.392520796s ago: executing program 3 (id=787): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x1, [{0x3, 0x2, 0x58864b00}], '\x00'}, @datasec={0x4, 0x0, 0x0, 0xf, 0x3, [], "e0ea94"}]}, {0x0, [0x5f, 0x5f]}}, 0x0, 0x44, 0x0, 0x1}, 0x28) r0 = getpid() r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000200)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300800a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a68fbff9cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000000000000000000000084d6f31d5de024f", 0xc0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) unlink(&(0x7f00000000c0)='./file0\x00') pwritev2(r5, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x1}], 0x1, 0x5, 0xa, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={0x2c, r7, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x71a90f0fa04800ec}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r9, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) 2.383680261s ago: executing program 0 (id=794): sendto$inet(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x6, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = socket(0x2a, 0x2, 0x0) sendto(r3, 0x0, 0x0, 0x0, &(0x7f0000000500)=@l2tp={0x2, 0x0, @empty, 0x4}, 0x80) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x141, 0x0, 0x4}, 0x18) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x4}) bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x85c68e8ab9c77084, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, 0x0, 0x8, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x24000014) socket$nl_xfrm(0x10, 0x3, 0x6) gettid() setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) 1.981357643s ago: executing program 2 (id=788): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @local, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@rand_addr, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private, 0x4}, {@broadcast}, {@multicast2}, {@dev}]}]}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000001f0000000200000022bf000001000000", @ANYRES32, @ANYRES32, @ANYRES64=r2], 0x50) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x401, r3, 0x0, 0xa002a0}, 0x38) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000b00)={0x0, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000020000000000000000000822"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 1.644970021s ago: executing program 4 (id=789): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f0000000400), &(0x7f0000000480)='./file0\x00', 0x0, 0x8, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x40000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14fc29", 0xb) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r5, &(0x7f00000002c0)={'#! ', '', [{0x20, '\x0f\x10\t'}]}, 0x8) close(r5) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, 0x0, &(0x7f0000000200), 0x2, r7}, 0x38) 556.06841ms ago: executing program 2 (id=790): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x2000000, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[@ANYBLOB="20000000240000012ebd7000fbdbdf25027c00000cb9fd72c32d9e5e2fa29c79"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) socket$inet_icmp(0x2, 0x2, 0x1) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568da", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4848}, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x100000, 0xdddd1000, 0x0, 0x2, 0x81, 0x10, 0x3, 0x7, 0x0, 0x8, 0x9}, {0x8080000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x7, 0xbf}, {0xb000, 0x8080000, 0xc, 0x0, 0x27, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x40, 0x3}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x9, 0x9, 0xd, 0x8, 0xf, 0x4}, {0x80a0000, 0xeeee8000, 0xb, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3f, 0x6}, {0xb000, 0x0, 0x9, 0x76, 0x2, 0x1, 0x2, 0x80, 0x0, 0xff, 0x6}, {0xeeee8000, 0xeeee0000, 0x3, 0x4, 0x3, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x4}, {0x2, 0x50000, 0xc, 0x3, 0x0, 0x7, 0x9, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0x40000, 0x80f3}, 0xddf8ffd3, 0x0, 0x0, 0x110, 0xe, 0xf001, 0xd000, [0x80000004, 0x0, 0x10000, 0xfffffffffffdffff]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 572.563µs ago: executing program 0 (id=791): syz_clone(0xe280, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="5bb86bfba4bbaaaaaaaaaa2908004500005c00000000042f90800a010101e000000120010b1cc92887c7067e000006000000c309000000c06026fe83810e0fda3ce7499c032f101721b7a72a513d485fe06268d452057ee6a24bad4ff5"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x400, &(0x7f0000000140)=ANY=[@ANYRESOCT=0x0]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) getrlimit(0x4, &(0x7f0000000080)) sendmmsg(0xffffffffffffffff, &(0x7f0000001940)=[{{&(0x7f0000000000)=@qipcrtr={0x2a, 0x4, 0x7fff}, 0x80, 0x0, 0x0, &(0x7f0000001c00)=[{0xc, 0x117, 0x400000}, {0xc, 0x10b, 0x81}], 0x18}}], 0x1, 0x45) getpid() r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_io_uring_setup(0x2f90, &(0x7f0000000080)={0x0, 0x91d9, 0x3010, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) unshare(0x8000280) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=792): socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, 0x0, 0x0) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000001100), r4) socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r5, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x1}], 0x1, 0x5, 0xa, 0x14) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r6, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) pipe(&(0x7f0000000000)) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x14, 0x24, 0x101, 0x70bd25, 0xfffffffc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:51289' (ED25519) to the list of known hosts. [ 57.126973][ T5932] cgroup: Unknown subsys name 'net' [ 57.298008][ T5932] cgroup: Unknown subsys name 'cpuset' [ 57.305242][ T5932] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.616284][ T5932] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.818312][ T5948] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.825178][ T5959] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.829092][ T5959] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.833830][ T5951] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.836295][ T5959] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.837187][ T5961] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.838996][ T5959] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.844779][ T5959] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.845306][ T5955] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.847373][ T5959] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.851175][ T5955] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.855145][ T5955] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.855515][ T5948] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.858121][ T5951] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.858216][ T5955] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.859053][ T5955] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.859865][ T5955] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.870576][ T5951] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.875327][ T5951] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.878972][ T5951] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.182543][ T5954] chnl_net:caif_netlink_parms(): no params data found [ 63.232184][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 63.301413][ T5945] chnl_net:caif_netlink_parms(): no params data found [ 63.383958][ T5954] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.387671][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.391024][ T5954] bridge_slave_0: entered allmulticast mode [ 63.396258][ T5954] bridge_slave_0: entered promiscuous mode [ 63.445399][ T5954] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.448389][ T5954] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.451488][ T5954] bridge_slave_1: entered allmulticast mode [ 63.456740][ T5954] bridge_slave_1: entered promiscuous mode [ 63.472966][ T5953] chnl_net:caif_netlink_parms(): no params data found [ 63.479181][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.482405][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.485906][ T5949] bridge_slave_0: entered allmulticast mode [ 63.489992][ T5949] bridge_slave_0: entered promiscuous mode [ 63.495301][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.498527][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.501814][ T5949] bridge_slave_1: entered allmulticast mode [ 63.506703][ T5949] bridge_slave_1: entered promiscuous mode [ 63.537530][ T5954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.568835][ T5954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.590694][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.611181][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.614783][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.618256][ T5945] bridge_slave_0: entered allmulticast mode [ 63.621817][ T5945] bridge_slave_0: entered promiscuous mode [ 63.626340][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.629652][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.633662][ T5945] bridge_slave_1: entered allmulticast mode [ 63.637498][ T5945] bridge_slave_1: entered promiscuous mode [ 63.646620][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.700255][ T5954] team0: Port device team_slave_0 added [ 63.708958][ T5954] team0: Port device team_slave_1 added [ 63.722061][ T5953] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.724798][ T5953] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.727547][ T5953] bridge_slave_0: entered allmulticast mode [ 63.731259][ T5953] bridge_slave_0: entered promiscuous mode [ 63.746130][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.760505][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.771398][ T5953] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.774764][ T5953] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.777251][ T5953] bridge_slave_1: entered allmulticast mode [ 63.780350][ T5953] bridge_slave_1: entered promiscuous mode [ 63.794473][ T5949] team0: Port device team_slave_0 added [ 63.825548][ T5945] team0: Port device team_slave_0 added [ 63.829766][ T5949] team0: Port device team_slave_1 added [ 63.833162][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.836461][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.845710][ T5954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.853636][ T5953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.859595][ T5945] team0: Port device team_slave_1 added [ 63.879676][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.882115][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.891975][ T5954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.909294][ T5953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.956426][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.959733][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.972570][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.986719][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.990251][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.001239][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.008799][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.011882][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.022919][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.029772][ T5953] team0: Port device team_slave_0 added [ 64.032800][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.035113][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.045201][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.065385][ T5953] team0: Port device team_slave_1 added [ 64.088212][ T5954] hsr_slave_0: entered promiscuous mode [ 64.091793][ T5954] hsr_slave_1: entered promiscuous mode [ 64.117969][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.121039][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.132789][ T5953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.182493][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.185224][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.194074][ T5953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.206367][ T5945] hsr_slave_0: entered promiscuous mode [ 64.209602][ T5945] hsr_slave_1: entered promiscuous mode [ 64.212031][ T5945] debugfs: 'hsr0' already exists in 'hsr' [ 64.214575][ T5945] Cannot create hsr debugfs directory [ 64.239423][ T5949] hsr_slave_0: entered promiscuous mode [ 64.242940][ T5949] hsr_slave_1: entered promiscuous mode [ 64.246022][ T5949] debugfs: 'hsr0' already exists in 'hsr' [ 64.248703][ T5949] Cannot create hsr debugfs directory [ 64.367296][ T5953] hsr_slave_0: entered promiscuous mode [ 64.370075][ T5953] hsr_slave_1: entered promiscuous mode [ 64.372280][ T5953] debugfs: 'hsr0' already exists in 'hsr' [ 64.374313][ T5953] Cannot create hsr debugfs directory [ 64.657563][ T5954] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.664954][ T5954] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.670129][ T5954] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.683915][ T5954] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.724093][ T5949] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.735620][ T5949] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.748784][ T5949] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.766648][ T5949] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.855872][ T5945] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.861755][ T5945] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.873546][ T5945] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.896393][ T5945] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.914826][ T63] Bluetooth: hci1: command tx timeout [ 64.917705][ T63] Bluetooth: hci3: command tx timeout [ 64.923006][ T63] Bluetooth: hci2: command tx timeout [ 64.923058][ T5951] Bluetooth: hci0: command tx timeout [ 64.969290][ T5953] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.002245][ T5953] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.007119][ T5953] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.016814][ T5954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.022262][ T5953] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.056617][ T5954] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.085006][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.087424][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.091478][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.094030][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.107085][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.143651][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.190595][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.192952][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.216081][ T1247] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.218657][ T1247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.229345][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.272047][ T5945] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.295045][ T117] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.297767][ T117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.317005][ T5953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.320453][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.322920][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.340743][ T5953] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.369903][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.373191][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.400448][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.402861][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.462463][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.479949][ T5954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.534026][ T5949] veth0_vlan: entered promiscuous mode [ 65.540321][ T5949] veth1_vlan: entered promiscuous mode [ 65.563157][ T5954] veth0_vlan: entered promiscuous mode [ 65.572134][ T5949] veth0_macvtap: entered promiscuous mode [ 65.579235][ T5949] veth1_macvtap: entered promiscuous mode [ 65.585361][ T5954] veth1_vlan: entered promiscuous mode [ 65.603238][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.629728][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.638611][ T5953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.651662][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.662058][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.671193][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.674929][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.678146][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.689849][ T5954] veth0_macvtap: entered promiscuous mode [ 65.713554][ T5954] veth1_macvtap: entered promiscuous mode [ 65.720214][ T5945] veth0_vlan: entered promiscuous mode [ 65.748299][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.752806][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.761293][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.771957][ T5953] veth0_vlan: entered promiscuous mode [ 65.775525][ T5945] veth1_vlan: entered promiscuous mode [ 65.781965][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.809580][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.812126][ T5953] veth1_vlan: entered promiscuous mode [ 65.812267][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.817307][ T1149] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.820909][ T1149] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.839841][ T1149] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.843067][ T1149] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.872182][ T5949] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.882339][ T5945] veth0_macvtap: entered promiscuous mode [ 65.890093][ T5945] veth1_macvtap: entered promiscuous mode [ 65.897967][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.901182][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.963156][ T117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.968470][ T117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.976111][ T5953] veth0_macvtap: entered promiscuous mode [ 65.997616][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.002044][ T5953] veth1_macvtap: entered promiscuous mode [ 66.018236][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.068052][ T117] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.086910][ T117] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.098040][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.146573][ T117] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.150427][ T117] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.165411][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.180747][ T117] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.189844][ T117] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.206457][ T117] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.209879][ T117] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.241611][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.246725][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.282247][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.287234][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.412465][ T6037] ======================================================= [ 66.412465][ T6037] WARNING: The mand mount option has been deprecated and [ 66.412465][ T6037] and is ignored by this kernel. Remove the mand [ 66.412465][ T6037] option from the mount to silence this warning. [ 66.412465][ T6037] ======================================================= [ 66.435093][ T6037] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 66.482380][ T6037] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 66.486215][ T6037] overlayfs: failed to look up (tracing) for ino (-66) [ 66.604854][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.607849][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.651964][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.664056][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.002792][ T5951] Bluetooth: hci0: command tx timeout [ 67.004575][ T5951] Bluetooth: hci3: command tx timeout [ 67.006241][ T5951] Bluetooth: hci1: command tx timeout [ 67.008170][ T5951] Bluetooth: hci2: command tx timeout [ 69.063023][ T6062] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 69.065322][ T6062] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 69.072747][ T63] Bluetooth: hci2: command tx timeout [ 69.074594][ T63] Bluetooth: hci1: command tx timeout [ 69.076359][ T63] Bluetooth: hci3: command tx timeout [ 69.078225][ T63] Bluetooth: hci0: command tx timeout [ 69.079690][ T6062] vhci_hcd vhci_hcd.0: Device attached [ 69.417234][ T6061] Zero length message leads to an empty skb [ 70.000718][ T5957] usb 38-1: SetAddress Request (2) to port 0 [ 70.049102][ T5957] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 71.162747][ T63] Bluetooth: hci3: command tx timeout [ 71.165020][ T63] Bluetooth: hci1: command tx timeout [ 71.168164][ T5951] Bluetooth: hci0: command tx timeout [ 71.170986][ T5951] Bluetooth: hci2: command tx timeout [ 71.278384][ T6063] vhci_hcd: connection reset by peer [ 71.285896][ T6082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8'. [ 71.289874][ T1149] vhci_hcd vhci_hcd.0: stop threads [ 71.292441][ T1149] vhci_hcd vhci_hcd.0: release socket [ 71.296201][ T1149] vhci_hcd vhci_hcd.0: disconnect device [ 72.147199][ T6090] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 72.149522][ T6090] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 72.154855][ T6090] vhci_hcd vhci_hcd.0: Device attached [ 72.245540][ T6095] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 72.248444][ T6095] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 72.252173][ T6095] vhci_hcd vhci_hcd.0: Device attached [ 72.324189][ T6090] Illegal XDP return value 4294967294 on prog (id 3) dev N/A, expect packet loss! [ 72.433084][ T6095] wg2 speed is unknown, defaulting to 1000 [ 72.439786][ T6095] wg2 speed is unknown, defaulting to 1000 [ 72.443447][ T6095] wg2 speed is unknown, defaulting to 1000 [ 72.762965][ T6090] rdma_rxe: rxe_newlink: failed to add wg2 [ 72.852885][ T4469] usb 44-1: SetAddress Request (2) to port 0 [ 72.856100][ T4469] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 73.110404][ T6095] infiniband syz2: set active [ 73.111063][ T6036] wg2 speed is unknown, defaulting to 1000 [ 73.141967][ T6095] infiniband syz2: added wg2 [ 73.190799][ T6091] vhci_hcd: connection closed [ 73.193887][ T117] vhci_hcd vhci_hcd.0: stop threads [ 73.199443][ T117] vhci_hcd vhci_hcd.0: release socket [ 73.199570][ T117] vhci_hcd vhci_hcd.0: disconnect device [ 73.203204][ T6095] RDS/IB: syz2: added [ 73.207889][ T6095] smc: adding ib device syz2 with port count 1 [ 73.207942][ T6095] smc: ib device syz2 port 1 has no pnetid [ 73.209009][ T6036] wg2 speed is unknown, defaulting to 1000 [ 73.211096][ T6095] wg2 speed is unknown, defaulting to 1000 [ 73.241668][ T6096] vhci_hcd: connection reset by peer [ 73.247438][ T117] vhci_hcd vhci_hcd.3: stop threads [ 73.247482][ T117] vhci_hcd vhci_hcd.3: release socket [ 73.247648][ T117] vhci_hcd vhci_hcd.3: disconnect device [ 73.350025][ T6095] wg2 speed is unknown, defaulting to 1000 [ 73.460854][ T6095] wg2 speed is unknown, defaulting to 1000 [ 73.553278][ T6095] wg2 speed is unknown, defaulting to 1000 [ 73.803890][ T6113] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 75.152896][ T5957] usb 38-1: device descriptor read/8, error -110 [ 75.643213][ T5957] usb usb38-port1: attempt power cycle [ 76.197173][ T6127] process 'syz.2.14' launched './file0' with NULL argv: empty string added [ 76.723787][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.726647][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.791432][ T5957] usb usb38-port1: unable to enumerate USB device [ 76.816177][ T6128] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 76.818340][ T6128] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 76.831259][ T6128] vhci_hcd vhci_hcd.0: Device attached [ 77.662856][ T5957] usb 38-1: SetAddress Request (6) to port 0 [ 77.665800][ T5957] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 77.953064][ T4469] usb 44-1: device descriptor read/8, error -110 [ 78.054269][ T6141] netlink: 'syz.1.19': attribute type 178 has an invalid length. [ 78.179900][ T6142] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 78.182076][ T6142] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 78.215005][ T6142] vhci_hcd vhci_hcd.0: Device attached [ 78.510810][ T6130] vhci_hcd: connection reset by peer [ 78.523416][ T167] vhci_hcd vhci_hcd.0: stop threads [ 78.525763][ T167] vhci_hcd vhci_hcd.0: release socket [ 78.529380][ T167] vhci_hcd vhci_hcd.0: disconnect device [ 78.913007][ T4469] usb 44-1: SetAddress Request (3) to port 0 [ 78.915486][ T4469] usb 44-1: new SuperSpeed USB device number 3 using vhci_hcd [ 78.918155][ T6147] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 78.920485][ T6147] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 78.942724][ T6147] vhci_hcd vhci_hcd.0: Device attached [ 79.102277][ T6147] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 79.194618][ T6144] vhci_hcd: connection reset by peer [ 79.197121][ T46] vhci_hcd vhci_hcd.3: stop threads [ 79.198929][ T46] vhci_hcd vhci_hcd.3: release socket [ 79.202249][ T46] vhci_hcd vhci_hcd.3: disconnect device [ 79.272975][ T6036] usb 40-1: SetAddress Request (2) to port 0 [ 79.275898][ T6036] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 79.839248][ T6153] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 79.842588][ T6153] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 79.846655][ T6153] vhci_hcd vhci_hcd.0: Device attached [ 80.136631][ T6148] vhci_hcd: connection reset by peer [ 80.139411][ T46] vhci_hcd vhci_hcd.1: stop threads [ 80.143037][ T46] vhci_hcd vhci_hcd.1: release socket [ 80.146836][ T46] vhci_hcd vhci_hcd.1: disconnect device [ 80.212979][ T54] usb 42-1: SetAddress Request (2) to port 0 [ 80.215562][ T54] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 80.472814][ T6164] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 80.474958][ T6164] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 80.478666][ T6164] vhci_hcd vhci_hcd.0: Device attached [ 80.617697][ T6154] vhci_hcd: connection reset by peer [ 80.619820][ T167] vhci_hcd vhci_hcd.2: stop threads [ 80.621573][ T167] vhci_hcd vhci_hcd.2: release socket [ 80.623828][ T167] vhci_hcd vhci_hcd.2: disconnect device [ 80.899805][ T6173] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23'. [ 80.917005][ T6173] netlink: 56 bytes leftover after parsing attributes in process `syz.0.23'. [ 81.009385][ T6175] tipc: Started in network mode [ 81.011188][ T6175] tipc: Node identity ac1414aa, cluster identity 4711 [ 81.015134][ T6175] tipc: Enabled bearer , priority 10 [ 81.112069][ T6165] vhci_hcd: connection closed [ 81.113484][ T13] vhci_hcd vhci_hcd.3: stop threads [ 81.120062][ T13] vhci_hcd vhci_hcd.3: release socket [ 81.123565][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 82.144352][ T2298] tipc: Node number set to 2886997162 [ 82.832898][ T40] audit: type=1400 audit(1775691201.708:2): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=6183 comm="syz.0.27" [ 83.101763][ T5957] usb 38-1: device descriptor read/8, error -110 [ 84.101497][ T4469] usb 44-1: device descriptor read/8, error -110 [ 84.395683][ T6036] usb 40-1: device descriptor read/8, error -110 [ 84.398175][ T4469] usb usb44-port1: attempt power cycle [ 84.613986][ T5957] usb usb38-port1: attempt power cycle [ 84.715801][ T6204] warning: `syz.0.29' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 85.614345][ T6036] usb usb40-port1: attempt power cycle [ 85.617838][ T54] usb 42-1: device descriptor read/8, error -110 [ 85.893606][ T4469] usb usb44-port1: unable to enumerate USB device [ 85.896868][ T5957] usb usb38-port1: unable to enumerate USB device [ 86.013562][ T54] usb usb42-port1: attempt power cycle [ 86.173271][ T6036] usb usb40-port1: unable to enumerate USB device [ 87.726024][ T54] usb usb42-port1: unable to enumerate USB device [ 87.730140][ T29] cfg80211: failed to load regulatory.db [ 88.087692][ T6216] QAT: Invalid ioctl 21531 [ 89.327228][ T6234] syz.0.37 (6234): drop_caches: 2 [ 89.568578][ T2298] libceph: connect (1)[c::]:6789 error -101 [ 89.578069][ T2298] libceph: mon0 (1)[c::]:6789 connect error [ 89.592362][ T6222] ceph: No mds server is up or the cluster is laggy [ 89.760928][ T6222] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 90.383657][ T6247] syz.1.47 (6247): drop_caches: 2 [ 90.458520][ T6249] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 90.458574][ T6249] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 90.459102][ T6249] vhci_hcd vhci_hcd.0: Device attached [ 90.786694][ T6036] usb 38-1: SetAddress Request (10) to port 0 [ 90.792737][ T6036] usb 38-1: new SuperSpeed USB device number 10 using vhci_hcd [ 90.945396][ T6250] vhci_hcd: connection reset by peer [ 90.948461][ T167] vhci_hcd vhci_hcd.0: stop threads [ 90.951001][ T167] vhci_hcd vhci_hcd.0: release socket [ 90.954168][ T167] vhci_hcd vhci_hcd.0: disconnect device [ 91.950269][ T6256] wg2 speed is unknown, defaulting to 1000 [ 94.231696][ T6266] syz.2.41 (6266) used greatest stack depth: 19088 bytes left [ 95.894906][ T6036] usb 38-1: device descriptor read/8, error -110 [ 96.141631][ T6282] QAT: Invalid ioctl 21531 [ 96.646151][ T6036] usb usb38-port1: attempt power cycle [ 98.699232][ T6296] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 98.701718][ T6296] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 98.720902][ T6296] vhci_hcd vhci_hcd.0: Device attached [ 98.845663][ T6036] usb 38-1: SetAddress Request (13) to port 0 [ 98.845727][ T6036] usb 38-1: new SuperSpeed USB device number 13 using vhci_hcd [ 98.978299][ T6309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.51'. [ 98.987174][ T6309] netlink: 56 bytes leftover after parsing attributes in process `syz.2.51'. [ 100.628458][ T6297] vhci_hcd: connection reset by peer [ 100.644776][ T167] vhci_hcd vhci_hcd.0: stop threads [ 100.646771][ T167] vhci_hcd vhci_hcd.0: release socket [ 100.653759][ T167] vhci_hcd vhci_hcd.0: disconnect device [ 104.788278][ T6036] usb 38-1: device descriptor read/8, error -110 [ 105.305061][ T6036] usb usb38-port1: unable to enumerate USB device [ 108.664491][ T6377] 9pnet_virtio: no channels available for device syz [ 113.837638][ T6412] Bluetooth: MGMT ver 1.23 [ 115.814762][ T6433] netlink: 24 bytes leftover after parsing attributes in process `syz.0.80'. [ 116.256897][ T167] Bluetooth: hci4: Frame reassembly failed (-84) [ 116.260701][ T46] Bluetooth: hci4: Frame reassembly failed (-84) [ 117.156349][ T6443] input: syz0 as /devices/virtual/input/input5 [ 117.173624][ T6443] Device name cannot be null; rc = [-22] [ 117.382175][ T6450] 9pnet_virtio: no channels available for device syz [ 118.190567][ T6448] fuse: root generation should be zero [ 118.282805][ T5948] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 119.641973][ T6468] netlink: 24 bytes leftover after parsing attributes in process `syz.0.89'. [ 119.860710][ T6474] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 121.194693][ T40] audit: type=1326 audit(1775691239.318:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="syz.0.91" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701ef6c code=0x0 [ 122.302397][ T6484] input: syz0 as /devices/virtual/input/input6 [ 122.308334][ T6484] Device name cannot be null; rc = [-22] [ 129.019268][ T6532] netlink: 24 bytes leftover after parsing attributes in process `syz.1.104'. [ 129.043632][ T6532] binder: 6530:6532 ioctl 4018620d 0 returned -22 [ 129.835705][ T6542] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 129.837943][ T6542] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 129.857374][ T6542] vhci_hcd vhci_hcd.0: Device attached [ 130.234962][ T9] usb 42-1: SetAddress Request (6) to port 0 [ 130.237670][ T9] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 130.476927][ T6554] kAFS: unable to lookup cell '(' [ 130.502972][ T6554] kAFS: unable to lookup cell '(,c¾ûL' [ 130.563639][ T6554] wg2 speed is unknown, defaulting to 1000 [ 131.480693][ T6543] vhci_hcd: connection reset by peer [ 132.055961][ T6512] vhci_hcd vhci_hcd.2: stop threads [ 132.058489][ T6512] vhci_hcd vhci_hcd.2: release socket [ 132.064026][ T6512] vhci_hcd vhci_hcd.2: disconnect device [ 133.981133][ T6584] netlink: 24 bytes leftover after parsing attributes in process `syz.1.113'. [ 134.006073][ T6584] binder: 6583:6584 ioctl 4018620d 0 returned -22 [ 136.289732][ T9] usb 42-1: device descriptor read/8, error -110 [ 136.674508][ T9] usb usb42-port1: attempt power cycle [ 136.861588][ T6604] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 136.926709][ T6604] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 136.931984][ T6604] overlayfs: failed to look up (tracing) for ino (-66) [ 137.331694][ T9] usb usb42-port1: unable to enumerate USB device [ 138.092262][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.095081][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.082089][ T6512] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 141.666860][ T6634] input: syz0 as /devices/virtual/input/input7 [ 141.675440][ T6634] Device name cannot be null; rc = [-22] [ 141.792749][ T5948] Bluetooth: hci4: command 0x1003 tx timeout [ 141.926427][ T5951] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 142.443608][ T6645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.127'. [ 142.548721][ T6645] wg2 speed is unknown, defaulting to 1000 [ 143.297151][ T6653] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 143.299400][ T6653] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 143.311038][ T6653] vhci_hcd vhci_hcd.0: Device attached [ 143.576421][ T6656] vhci_hcd: connection closed [ 143.576760][ T12] vhci_hcd vhci_hcd.2: stop threads [ 143.581728][ T12] vhci_hcd vhci_hcd.2: release socket [ 143.584750][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 143.602792][ T6036] usb 42-1: enqueue for inactive port 0 [ 144.123289][ T6036] usb usb42-port1: attempt power cycle [ 144.627589][ T6677] kAFS: unable to lookup cell '(' [ 144.636154][ T4469] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 144.651655][ T6677] kAFS: unable to lookup cell '(,c¾ûL' [ 144.731806][ T6677] wg2 speed is unknown, defaulting to 1000 [ 145.241200][ T6036] usb usb42-port1: unable to enumerate USB device [ 145.338764][ T4469] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.624271][ T4469] usb 8-1: config 0 interface 0 altsetting 69 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 145.630024][ T4469] usb 8-1: config 0 interface 0 has no altsetting 0 [ 145.632597][ T4469] usb 8-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 145.645670][ T4469] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.662789][ T4469] usb 8-1: config 0 descriptor?? [ 145.676446][ T4469] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input8 [ 146.310829][ T5334] bcm5974 8-1:0.0: could not read from device [ 146.319171][ T5334] bcm5974 8-1:0.0: could not read from device [ 146.333357][ T5334] bcm5974 8-1:0.0: could not read from device [ 146.429491][ T5334] bcm5974 8-1:0.0: could not read from device [ 146.438363][ T4469] usb 8-1: USB disconnect, device number 2 [ 146.443187][ T5947] bcm5974 8-1:0.0: could not read from device [ 146.446372][ T5334] bcm5974 8-1:0.0: could not read from device [ 147.623102][ T6693] input: syz0 as /devices/virtual/input/input10 [ 147.627343][ T6693] Device name cannot be null; rc = [-22] [ 147.786860][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 147.802146][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 149.924155][ T6712] input: syz0 as /devices/virtual/input/input11 [ 155.981757][ T6761] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 155.983864][ T6761] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 155.986952][ T6761] vhci_hcd vhci_hcd.0: Device attached [ 156.014820][ T6761] random: crng reseeded on system resumption [ 156.457124][ T6761] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 156.477309][ T6765] trusted_key: syz.3.148 sent an empty control message without MSG_MORE. [ 156.593370][ T6036] usb 44-1: SetAddress Request (6) to port 0 [ 156.595587][ T6036] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 157.108206][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 157.134328][ T6512] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 157.318508][ T6762] vhci_hcd: connection reset by peer [ 157.321068][ T167] vhci_hcd vhci_hcd.3: stop threads [ 157.323701][ T167] vhci_hcd vhci_hcd.3: release socket [ 157.328014][ T167] vhci_hcd vhci_hcd.3: disconnect device [ 159.162695][ T5951] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 159.162900][ T5948] Bluetooth: hci4: command 0x1003 tx timeout [ 159.835260][ T6793] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 159.838525][ T6793] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 159.845684][ T6793] vhci_hcd vhci_hcd.0: Device attached [ 160.123062][ T4469] usb 38-1: SetAddress Request (14) to port 0 [ 160.143289][ T4469] usb 38-1: new SuperSpeed USB device number 14 using vhci_hcd [ 160.404525][ T6794] vhci_hcd: connection reset by peer [ 160.407664][ T60] vhci_hcd vhci_hcd.0: stop threads [ 160.409702][ T60] vhci_hcd vhci_hcd.0: release socket [ 160.412377][ T60] vhci_hcd vhci_hcd.0: disconnect device [ 160.855856][ T6804] input: syz0 as /devices/virtual/input/input12 [ 161.633096][ T6036] usb 44-1: device descriptor read/8, error -110 [ 161.756248][ T5947] udevd[5947]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 161.808310][ T5947] udevd[5947]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 162.038170][ T6036] usb usb44-port1: attempt power cycle [ 162.616901][ T6036] usb usb44-port1: unable to enumerate USB device [ 164.121081][ T6822] netlink: 'syz.2.163': attribute type 10 has an invalid length. [ 165.233983][ T4469] usb 38-1: device descriptor read/8, error -110 [ 168.995562][ T4469] usb usb38-port1: attempt power cycle [ 169.423329][ T6850] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 169.470837][ T6850] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 169.474232][ T6850] overlayfs: failed to look up (tracing) for ino (-66) [ 170.359022][ T4469] usb usb38-port1: unable to enumerate USB device [ 170.912483][ T6856] input: syz0 as /devices/virtual/input/input13 [ 171.593325][ T5951] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 176.469742][ T6902] input: syz0 as /devices/virtual/input/input14 [ 177.713019][ T6910] netlink: 'syz.3.179': attribute type 4 has an invalid length. [ 178.348227][ T6911] netlink: 'syz.3.179': attribute type 4 has an invalid length. [ 178.378229][ T6903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.180'. [ 178.510391][ T6903] wg2 speed is unknown, defaulting to 1000 [ 179.279628][ T6922] netlink: 'syz.1.185': attribute type 10 has an invalid length. [ 182.330111][ T6958] input: syz0 as /devices/virtual/input/input15 [ 184.638466][ T6964] netlink: 'syz.3.195': attribute type 10 has an invalid length. [ 184.873056][ T6972] netlink: 24 bytes leftover after parsing attributes in process `syz.0.198'. [ 184.875533][ T6965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.196'. [ 185.993128][ T34] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 186.195697][ T5952] Bluetooth: hci2: command 0x0406 tx timeout [ 186.201703][ T34] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.270183][ T34] usb 5-1: config 0 interface 0 altsetting 69 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 186.272794][ T5951] Bluetooth: hci1: command 0x0406 tx timeout [ 186.276898][ T5948] Bluetooth: hci0: command 0x0406 tx timeout [ 186.276936][ T5955] Bluetooth: hci3: command 0x0406 tx timeout [ 186.292847][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 186.302027][ T34] usb 5-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 186.315042][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.372010][ T34] usb 5-1: config 0 descriptor?? [ 186.447686][ T34] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input16 [ 187.252828][ T5334] bcm5974 5-1:0.0: could not read from device [ 187.265846][ T34] usb 5-1: USB disconnect, device number 2 [ 187.266918][ T5334] bcm5974 5-1:0.0: could not read from device [ 187.662875][ T2298] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 187.823862][ T2298] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 187.828229][ T2298] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.831810][ T2298] usb 7-1: Product: syz [ 187.834276][ T2298] usb 7-1: Manufacturer: syz [ 187.836656][ T2298] usb 7-1: SerialNumber: syz [ 187.850877][ T2298] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 187.895094][ T2298] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 189.061446][ T7029] input: syz0 as /devices/virtual/input/input18 [ 189.589686][ T7037] netlink: 24 bytes leftover after parsing attributes in process `syz.0.211'. [ 189.905793][ T7028] bridge_slave_0: left allmulticast mode [ 189.928514][ T7028] bridge_slave_0: left promiscuous mode [ 189.950603][ T7028] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.089571][ T7028] bridge_slave_1: left allmulticast mode [ 190.122464][ T7028] bridge_slave_1: left promiscuous mode [ 190.153558][ T7028] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.251687][ T7028] bond0: (slave bond_slave_0): Releasing backup interface [ 190.332371][ T7028] bond0: (slave bond_slave_1): Releasing backup interface [ 190.453311][ T7028] team0: Port device team_slave_0 removed [ 190.465796][ T7028] team0: Port device team_slave_1 removed [ 190.473383][ T7028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.476071][ T7028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.504909][ T7028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.507736][ T7028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.526770][ T7028] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 190.573464][ T29] wg2 speed is unknown, defaulting to 1000 [ 191.095166][ T6030] usb 7-1: USB disconnect, device number 2 [ 191.104421][ T2298] usb 7-1: Service connection timeout for: 256 [ 191.106474][ T2298] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 191.109695][ T2298] ath9k_htc: Failed to initialize the device [ 191.113164][ T6030] usb 7-1: ath9k_htc: USB layer deinitialized [ 198.070413][ T6103] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 198.768330][ T6103] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.786234][ T6103] usb 7-1: config 0 interface 0 altsetting 69 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 198.823462][ T6103] usb 7-1: config 0 interface 0 has no altsetting 0 [ 198.882559][ T6103] usb 7-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 199.476667][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.476787][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.717416][ T6103] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.740280][ T6103] usb 7-1: config 0 descriptor?? [ 199.804413][ T7077] netlink: 24 bytes leftover after parsing attributes in process `syz.3.220'. [ 200.743082][ T6103] usb 7-1: can't set config #0, error -71 [ 200.745778][ T6103] usb 7-1: USB disconnect, device number 3 [ 201.630887][ T7094] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 201.698573][ T7094] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 201.703396][ T7094] overlayfs: failed to look up (tracing) for ino (-66) [ 202.413172][ T7089] bridge_slave_0: left allmulticast mode [ 202.415088][ T7089] bridge_slave_0: left promiscuous mode [ 202.417267][ T7089] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.427803][ T7089] bridge_slave_1: left allmulticast mode [ 202.429735][ T7089] bridge_slave_1: left promiscuous mode [ 202.433055][ T7089] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.532808][ T7089] bond0: (slave bond_slave_0): Releasing backup interface [ 202.538795][ T7089] bond0: (slave bond_slave_1): Releasing backup interface [ 202.554285][ T7089] team0: Port device team_slave_0 removed [ 202.561258][ T7089] team0: Port device team_slave_1 removed [ 202.565526][ T7089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.568173][ T7089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.573654][ T7089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.577374][ T7089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.584789][ T7089] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 203.889197][ T5951] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 203.893699][ T5951] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 203.897275][ T5951] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 203.900955][ T5951] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 203.904290][ T5951] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 203.931583][ T7106] wg2 speed is unknown, defaulting to 1000 [ 204.211163][ T7106] chnl_net:caif_netlink_parms(): no params data found [ 204.404396][ T7106] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.407394][ T7106] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.410445][ T7106] bridge_slave_0: entered allmulticast mode [ 204.415172][ T7106] bridge_slave_0: entered promiscuous mode [ 204.421846][ T7106] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.425360][ T7106] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.429008][ T7106] bridge_slave_1: entered allmulticast mode [ 204.433189][ T7106] bridge_slave_1: entered promiscuous mode [ 204.477198][ T7106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.484696][ T7106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.500639][ T7106] team0: Port device team_slave_0 added [ 204.503928][ T7106] team0: Port device team_slave_1 added [ 204.520236][ T7106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.522420][ T7106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.531450][ T7106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.537734][ T7106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.540436][ T7106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.549017][ T7106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.574832][ T7106] hsr_slave_0: entered promiscuous mode [ 204.577400][ T7106] hsr_slave_1: entered promiscuous mode [ 204.579796][ T7106] debugfs: 'hsr0' already exists in 'hsr' [ 204.581889][ T7106] Cannot create hsr debugfs directory [ 205.118259][ T7106] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 205.469403][ T7106] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 205.471138][ T7126] netlink: 24 bytes leftover after parsing attributes in process `syz.2.229'. [ 205.480417][ T7106] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 205.490348][ T7106] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 205.528656][ T7124] binder: 7123:7124 ioctl c0306201 0 returned -14 [ 205.637244][ T7106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.675479][ T7106] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.758434][ T167] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.761553][ T167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.771269][ T167] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.774363][ T167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.960504][ T7106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.963014][ T5951] Bluetooth: hci4: command tx timeout [ 206.121582][ T7106] veth0_vlan: entered promiscuous mode [ 206.132308][ T7106] veth1_vlan: entered promiscuous mode [ 206.150305][ T7106] veth0_macvtap: entered promiscuous mode [ 206.159826][ T7106] veth1_macvtap: entered promiscuous mode [ 206.172348][ T7106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.188775][ T7106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.199465][ T789] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.204843][ T789] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.209788][ T789] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.213883][ T789] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.259882][ T6966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.262414][ T6966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.282182][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.286435][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.143373][ T6030] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 207.456022][ T6030] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.461493][ T6030] usb 5-1: config 0 interface 0 altsetting 69 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 207.538358][ T6030] usb 5-1: config 0 interface 0 has no altsetting 0 [ 207.574866][ T6030] usb 5-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 207.602747][ T6030] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.723905][ T6030] usb 5-1: config 0 descriptor?? [ 207.836746][ T6030] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input19 [ 208.021670][ T7166] ceph: No mds server is up or the cluster is laggy [ 208.025809][ T6103] libceph: connect (1)[c::]:6789 error -101 [ 208.032830][ T5951] Bluetooth: hci4: command tx timeout [ 208.042891][ T6103] libceph: mon0 (1)[c::]:6789 connect error [ 208.147317][ T7163] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 208.325609][ T7165] overlayfs: missing 'lowerdir' [ 208.837844][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.155039][ T5334] bcm5974 5-1:0.0: could not read from device [ 209.180766][ T6030] usb 5-1: USB disconnect, device number 3 [ 209.193363][ T7017] bcm5974 5-1:0.0: could not read from device [ 209.200915][ T5334] bcm5974 5-1:0.0: could not read from device [ 209.219805][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.631259][ T7171] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 209.671565][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.938658][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.112853][ T5951] Bluetooth: hci4: command tx timeout [ 210.333904][ T7191] netlink: 24 bytes leftover after parsing attributes in process `syz.2.237'. [ 210.409287][ T7197] binder: 7190:7197 ioctl c0306201 0 returned -14 [ 210.432157][ T46] bridge_slave_1: left allmulticast mode [ 210.439624][ T46] bridge_slave_1: left promiscuous mode [ 210.443210][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.450186][ T46] bridge_slave_0: left allmulticast mode [ 210.452520][ T46] bridge_slave_0: left promiscuous mode [ 210.455377][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.186093][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.204785][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.215180][ T46] bond0 (unregistering): Released all slaves [ 211.479825][ T46] tipc: Disabling bearer [ 211.588108][ T46] tipc: Left network mode [ 211.875048][ T7221] netlink: 'syz.0.241': attribute type 10 has an invalid length. [ 212.192910][ T5951] Bluetooth: hci4: command tx timeout [ 214.810989][ T46] hsr_slave_0: left promiscuous mode [ 214.814518][ T46] hsr_slave_1: left promiscuous mode [ 214.816907][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.819422][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.830707][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.835066][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.847881][ T46] veth1_macvtap: left promiscuous mode [ 214.849985][ T46] veth0_macvtap: left promiscuous mode [ 214.851896][ T46] veth1_vlan: left promiscuous mode [ 214.870607][ T46] veth0_vlan: left promiscuous mode [ 215.056439][ T46] team0 (unregistering): Port device team_slave_1 removed [ 215.066001][ T46] team0 (unregistering): Port device team_slave_0 removed [ 216.182923][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 216.863120][ T6103] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 217.097208][ T6103] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.128572][ T6103] usb 8-1: config 0 interface 0 altsetting 69 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 217.230350][ T6103] usb 8-1: config 0 interface 0 has no altsetting 0 [ 217.238209][ T167] Bluetooth: hci3: Frame reassembly failed (-84) [ 217.242322][ T167] Bluetooth: hci3: Frame reassembly failed (-84) [ 217.263564][ T6103] usb 8-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 217.286464][ T4469] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 217.302349][ T6103] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.370181][ T6103] usb 8-1: config 0 descriptor?? [ 217.488858][ T4469] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.509362][ T6103] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input21 [ 217.544586][ T4469] usb 7-1: config 0 interface 0 altsetting 69 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 217.796063][ T4469] usb 7-1: config 0 interface 0 has no altsetting 0 [ 217.798048][ T5334] bcm5974 8-1:0.0: could not read from device [ 217.799528][ T4469] usb 7-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 217.805148][ T4469] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.923285][ T6103] usb 8-1: USB disconnect, device number 3 [ 217.924498][ T5334] bcm5974 8-1:0.0: could not read from device [ 217.928042][ T4469] usb 7-1: config 0 descriptor?? [ 217.936975][ T4469] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input22 [ 218.154516][ T6103] usb 7-1: USB disconnect, device number 4 [ 218.154727][ T5334] bcm5974 7-1:0.0: could not read from device [ 218.172278][ T5962] bcm5974 7-1:0.0: could not read from device [ 218.183252][ T5334] bcm5974 7-1:0.0: could not read from device [ 219.242874][ T5951] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 219.821986][ T7283] netlink: 24 bytes leftover after parsing attributes in process `syz.0.250'. [ 219.869094][ T7283] binder: 7279:7283 ioctl c0306201 0 returned -14 [ 222.774056][ T7299] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 222.776380][ T7299] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 222.832851][ T7299] vhci_hcd vhci_hcd.0: Device attached [ 223.612837][ T6194] usb 44-1: SetAddress Request (10) to port 0 [ 223.615053][ T6194] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd [ 223.803106][ T829] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 223.868968][ T7304] vhci_hcd: connection reset by peer [ 223.873386][ T13] vhci_hcd vhci_hcd.3: stop threads [ 223.875579][ T13] vhci_hcd vhci_hcd.3: release socket [ 223.877968][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 223.904854][ T40] audit: type=1326 audit(1775691342.808:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.4.255" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 223.922740][ T40] audit: type=1326 audit(1775691342.808:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.4.255" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 224.028807][ T829] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.054810][ T829] usb 5-1: config 0 interface 0 altsetting 69 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 224.093167][ T829] usb 5-1: config 0 interface 0 has no altsetting 0 [ 224.099408][ T7313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.255'. [ 224.109804][ T7313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.255'. [ 224.138252][ T829] usb 5-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 224.159045][ T40] audit: type=1326 audit(1775691342.808:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.4.255" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 224.166755][ T40] audit: type=1326 audit(1775691342.808:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.4.255" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 224.175798][ T40] audit: type=1326 audit(1775691342.808:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.4.255" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 224.186409][ T40] audit: type=1326 audit(1775691342.818:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.4.255" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 224.197442][ T40] audit: type=1326 audit(1775691342.818:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.4.255" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 224.205647][ T40] audit: type=1326 audit(1775691342.818:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.4.255" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 224.213060][ T40] audit: type=1326 audit(1775691342.818:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.4.255" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 224.215298][ T829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.220232][ T40] audit: type=1326 audit(1775691342.818:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.4.255" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 224.386694][ T829] usb 5-1: config 0 descriptor?? [ 224.491486][ T829] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input23 [ 225.938138][ T5334] bcm5974 5-1:0.0: could not read from device [ 225.955775][ T829] usb 5-1: USB disconnect, device number 4 [ 225.962458][ T5947] bcm5974 5-1:0.0: could not read from device [ 226.294193][ T7353] netlink: 24 bytes leftover after parsing attributes in process `syz.4.260'. [ 226.371981][ T60] Bluetooth: hci3: Frame reassembly failed (-84) [ 226.385564][ T60] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 226.972909][ T6039] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 227.141886][ T6039] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.166007][ T6039] usb 9-1: config 0 interface 0 altsetting 69 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 227.210993][ T6039] usb 9-1: config 0 interface 0 has no altsetting 0 [ 227.249728][ T6039] usb 9-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 227.264603][ T6039] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.390956][ T6039] usb 9-1: config 0 descriptor?? [ 227.635854][ T6039] input: bcm5974 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input24 [ 228.442805][ T5951] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 228.672879][ T6194] usb 44-1: device descriptor read/8, error -110 [ 229.052743][ T5334] bcm5974 9-1:0.0: could not read from device [ 229.069646][ T5334] bcm5974 9-1:0.0: could not read from device [ 229.080974][ T6039] usb 9-1: USB disconnect, device number 2 [ 229.653097][ T9] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 229.806143][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.812797][ T9] usb 5-1: config 0 interface 0 altsetting 69 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 229.821036][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 229.826488][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 229.832484][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.841749][ T9] usb 5-1: config 0 descriptor?? [ 229.848813][ T9] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input25 [ 229.952231][ T6194] usb usb44-port1: attempt power cycle [ 230.162971][ T5334] bcm5974 5-1:0.0: could not read from device [ 230.193945][ T5334] bcm5974 5-1:0.0: could not read from device [ 230.197678][ T9] usb 5-1: USB disconnect, device number 5 [ 230.200263][ T5334] bcm5974 5-1:0.0: could not read from device [ 230.212872][ T5962] bcm5974 5-1:0.0: could not read from device [ 230.216803][ T5334] bcm5974 5-1:0.0: could not read from device [ 231.563214][ T6194] usb usb44-port1: unable to enumerate USB device [ 231.601174][ T7391] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 233.345661][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 233.881392][ T7410] netlink: 24 bytes leftover after parsing attributes in process `syz.4.269'. [ 234.457564][ T7426] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 234.459883][ T7426] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 234.493011][ T7426] vhci_hcd vhci_hcd.0: Device attached [ 234.525657][ T1149] Bluetooth: hci3: Frame reassembly failed (-84) [ 234.645733][ T7432] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 234.646046][ T7432] overlayfs: failed to set xattr on upper [ 234.646053][ T7432] overlayfs: ...falling back to redirect_dir=nofollow. [ 234.646059][ T7432] overlayfs: ...falling back to index=off. [ 234.646145][ T7432] overlayfs: ...falling back to uuid=null. [ 234.647829][ T7432] overlayfs: conflicting lowerdir path [ 234.687004][ T7432] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 234.956576][ T7432] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 234.959437][ T7432] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 234.963507][ T6103] usb 46-1: SetAddress Request (2) to port 0 [ 234.973200][ T7432] vhci_hcd vhci_hcd.0: Device attached [ 234.992142][ T6103] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 235.324485][ T6194] usb 38-1: SetAddress Request (18) to port 0 [ 235.331117][ T6194] usb 38-1: new SuperSpeed USB device number 18 using vhci_hcd [ 235.442827][ T50] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 235.491651][ T7428] vhci_hcd: connection reset by peer [ 235.500726][ T60] vhci_hcd vhci_hcd.4: stop threads [ 235.502652][ T60] vhci_hcd vhci_hcd.4: release socket [ 235.504795][ T60] vhci_hcd vhci_hcd.4: disconnect device [ 235.577356][ T7433] vhci_hcd: connection reset by peer [ 235.579893][ T167] vhci_hcd vhci_hcd.0: stop threads [ 235.581888][ T167] vhci_hcd vhci_hcd.0: release socket [ 235.584723][ T167] vhci_hcd vhci_hcd.0: disconnect device [ 236.593984][ T5955] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 236.748193][ T50] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.751692][ T50] usb 8-1: config 0 interface 0 altsetting 69 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 236.761603][ T50] usb 8-1: config 0 interface 0 has no altsetting 0 [ 236.769990][ T50] usb 8-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 236.775711][ T50] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.801758][ T7441] netlink: 16 bytes leftover after parsing attributes in process `syz.4.274'. [ 236.807822][ T50] usb 8-1: config 0 descriptor?? [ 236.848795][ T50] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input26 [ 237.012857][ T5334] bcm5974 8-1:0.0: could not read from device [ 237.016904][ T5334] bcm5974 8-1:0.0: could not read from device [ 237.024363][ T50] usb 8-1: USB disconnect, device number 4 [ 237.038105][ T5947] udevd[5947]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 237.918197][ T7459] netlink: 24 bytes leftover after parsing attributes in process `syz.2.279'. [ 239.365916][ T7447] netlink: 'syz.4.277': attribute type 10 has an invalid length. [ 240.123168][ T6103] usb 46-1: device descriptor read/8, error -110 [ 240.442746][ T6194] usb 38-1: device descriptor read/8, error -110 [ 240.689072][ T6103] usb usb46-port1: attempt power cycle [ 240.837369][ T60] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 241.655999][ T7483] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 241.658649][ T7483] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 241.662807][ T7483] vhci_hcd vhci_hcd.0: Device attached [ 242.033169][ T6194] usb 38-1: SetAddress Request (19) to port 0 [ 242.033226][ T6194] usb 38-1: new SuperSpeed USB device number 19 using vhci_hcd [ 242.189103][ T7490] netlink: 16 bytes leftover after parsing attributes in process `syz.3.285'. [ 242.282778][ T6103] usb usb46-port1: unable to enumerate USB device [ 242.842714][ T5951] Bluetooth: hci3: command 0x1003 tx timeout [ 242.843045][ T5955] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 243.038261][ T7484] vhci_hcd: connection reset by peer [ 243.040819][ T13] vhci_hcd vhci_hcd.0: stop threads [ 243.044084][ T13] vhci_hcd vhci_hcd.0: release socket [ 243.046187][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 243.336745][ T6030] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 243.518584][ T6030] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.534420][ T6030] usb 7-1: config 0 interface 0 altsetting 69 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 243.539344][ T6030] usb 7-1: config 0 interface 0 has no altsetting 0 [ 243.558383][ T6030] usb 7-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 243.563344][ T6030] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.644773][ T6030] usb 7-1: config 0 descriptor?? [ 243.886059][ T6030] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input27 [ 244.853315][ T5334] bcm5974 7-1:0.0: could not read from device [ 244.888235][ T5334] bcm5974 7-1:0.0: could not read from device [ 244.904400][ T6030] usb 7-1: USB disconnect, device number 6 [ 244.907860][ T5947] bcm5974 7-1:0.0: could not read from device [ 245.056204][ T7500] netlink: 24 bytes leftover after parsing attributes in process `syz.4.288'. [ 246.793454][ T50] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 246.947149][ T50] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.952194][ T50] usb 7-1: config 0 interface 0 altsetting 69 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 246.964459][ T50] usb 7-1: config 0 interface 0 has no altsetting 0 [ 246.971636][ T50] usb 7-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 246.983405][ T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.020785][ T50] usb 7-1: config 0 descriptor?? [ 247.072948][ T6194] usb 38-1: device descriptor read/8, error -110 [ 247.132343][ T50] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input28 [ 247.183388][ T6194] usb usb38-port1: attempt power cycle [ 247.276139][ T7525] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 247.278523][ T7525] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 247.728926][ T7525] vhci_hcd vhci_hcd.0: Device attached [ 247.780526][ T7525] random: crng reseeded on system resumption [ 247.983943][ T6194] usb usb38-port1: unable to enumerate USB device [ 247.994537][ T5957] usb 44-1: SetAddress Request (14) to port 0 [ 247.997411][ T5957] usb 44-1: new SuperSpeed USB device number 14 using vhci_hcd [ 248.184999][ T5334] bcm5974 7-1:0.0: could not read from device [ 248.201981][ T5334] bcm5974 7-1:0.0: could not read from device [ 248.209590][ T50] usb 7-1: USB disconnect, device number 7 [ 248.213272][ T5334] bcm5974 7-1:0.0: could not read from device [ 248.787331][ T7526] vhci_hcd: connection reset by peer [ 248.791298][ T789] vhci_hcd vhci_hcd.3: stop threads [ 248.796561][ T789] vhci_hcd vhci_hcd.3: release socket [ 248.798803][ T789] vhci_hcd vhci_hcd.3: disconnect device [ 248.816770][ T167] Bluetooth: hci3: Frame reassembly failed (-84) [ 248.827374][ T167] Bluetooth: hci3: Frame reassembly failed (-84) [ 249.361195][ T7540] netlink: 16 bytes leftover after parsing attributes in process `syz.4.296'. [ 250.832812][ T5955] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 250.832898][ T5951] Bluetooth: hci3: command 0x1003 tx timeout [ 250.996726][ T7553] netlink: 24 bytes leftover after parsing attributes in process `syz.2.299'. [ 251.065471][ T7556] overlayfs: missing 'lowerdir' [ 251.168095][ T6550] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 251.345825][ T6550] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.349343][ T6550] usb 9-1: config 0 interface 0 altsetting 69 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 251.354232][ T6550] usb 9-1: config 0 interface 0 has no altsetting 0 [ 251.356561][ T6550] usb 9-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 251.359524][ T6550] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.366971][ T6550] usb 9-1: config 0 descriptor?? [ 251.378019][ T6550] input: bcm5974 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input29 [ 251.466847][ T7558] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 251.549850][ T7565] EXT4-fs (loop0): unable to read superblock [ 251.654893][ T7567] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 251.668215][ T5334] bcm5974 9-1:0.0: could not read from device [ 251.684054][ T5334] bcm5974 9-1:0.0: could not read from device [ 251.699704][ T6550] usb 9-1: USB disconnect, device number 3 [ 251.699917][ T5334] bcm5974 9-1:0.0: could not read from device [ 252.125903][ T7576] netlink: 24 bytes leftover after parsing attributes in process `syz.2.305'. [ 253.357173][ T5955] Bluetooth: Frame is too long (len 24, expected len 4) [ 253.378326][ T5957] usb 44-1: device descriptor read/8, error -110 [ 254.300901][ T7588] netlink: 24 bytes leftover after parsing attributes in process `syz.2.308'. [ 254.698025][ T60] Bluetooth: hci3: Frame reassembly failed (-84) [ 254.829148][ T5957] usb usb44-port1: attempt power cycle [ 255.834501][ T7603] overlayfs: missing 'lowerdir' [ 255.972570][ T7607] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 255.974762][ T7607] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 255.978079][ T7607] vhci_hcd vhci_hcd.0: Device attached [ 256.138717][ T7611] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 256.237206][ T5957] usb usb44-port1: unable to enumerate USB device [ 256.255262][ T6103] usb 46-1: SetAddress Request (6) to port 0 [ 256.274661][ T6103] usb 46-1: new SuperSpeed USB device number 6 using vhci_hcd [ 256.592809][ T5955] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 256.593026][ T5951] Bluetooth: hci3: command 0x1003 tx timeout [ 256.625417][ T7608] vhci_hcd: connection reset by peer [ 256.627774][ T6884] vhci_hcd vhci_hcd.4: stop threads [ 256.629921][ T6884] vhci_hcd vhci_hcd.4: release socket [ 256.639116][ T6884] vhci_hcd vhci_hcd.4: disconnect device [ 256.813101][ T7617] netlink: 24 bytes leftover after parsing attributes in process `syz.2.314'. [ 260.271428][ T7640] 9pnet_virtio: no channels available for device syz [ 260.915071][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.917265][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.193613][ T7657] overlayfs: missing 'lowerdir' [ 261.313206][ T6103] usb 46-1: device descriptor read/8, error -110 [ 261.555004][ T7659] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 261.644926][ T7664] 9pnet_virtio: no channels available for device syz [ 261.723333][ T6103] usb usb46-port1: attempt power cycle [ 261.774759][ T78] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 261.779717][ T78] Bluetooth: hci3: Frame reassembly failed (-84) [ 262.339343][ T6194] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 262.662738][ T6103] usb usb46-port1: unable to enumerate USB device [ 262.819029][ T6194] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.008838][ T6194] usb 7-1: config 0 interface 0 altsetting 69 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 263.021011][ T6194] usb 7-1: config 0 interface 0 has no altsetting 0 [ 263.041086][ T6194] usb 7-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 263.123033][ T6194] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.153770][ T6194] usb 7-1: config 0 descriptor?? [ 263.246684][ T6194] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input32 [ 263.459934][ T5334] bcm5974 7-1:0.0: could not read from device [ 263.466126][ T5334] bcm5974 7-1:0.0: could not read from device [ 263.477019][ T6194] usb 7-1: USB disconnect, device number 8 [ 263.477058][ T5334] bcm5974 7-1:0.0: could not read from device [ 263.712896][ T5955] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 265.755114][ T7685] netlink: 24 bytes leftover after parsing attributes in process `syz.0.332'. [ 267.297771][ T7714] 9pnet_virtio: no channels available for device syz [ 268.271948][ T13] Bluetooth: hci3: Frame reassembly failed (-84) [ 269.540236][ T5951] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 269.845192][ T7724] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 269.847325][ T7724] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 269.863647][ T7724] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 269.865613][ T7724] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 269.876934][ T7724] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 269.878919][ T7724] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 269.892932][ T7724] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 269.895212][ T7724] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 269.905475][ T7724] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 270.194435][ T7726] evm: overlay not supported [ 270.399441][ T7736] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 270.450138][ T7737] netlink: 24 bytes leftover after parsing attributes in process `syz.4.339'. [ 270.475444][ T7732] ceph: No mds server is up or the cluster is laggy [ 270.517434][ T6103] libceph: connect (1)[c::]:6789 error -101 [ 270.520234][ T6103] libceph: mon0 (1)[c::]:6789 connect error [ 271.872785][ T5955] Bluetooth: hci1: command 0x0406 tx timeout [ 271.872830][ T5951] Bluetooth: hci0: command 0x0406 tx timeout [ 271.952755][ T5951] Bluetooth: hci4: command 0x0c1a tx timeout [ 271.952798][ T5955] Bluetooth: hci2: command 0x0406 tx timeout [ 273.971075][ T5955] Bluetooth: hci1: command 0x0406 tx timeout [ 273.971289][ T5951] Bluetooth: hci0: command 0x0406 tx timeout [ 274.161962][ T5955] Bluetooth: hci2: command 0x0406 tx timeout [ 274.164492][ T5951] Bluetooth: hci4: command 0x0c1a tx timeout [ 275.018831][ T7774] netlink: 24 bytes leftover after parsing attributes in process `syz.0.349'. [ 275.273121][ T6030] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 276.070523][ T6030] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.074937][ T6030] usb 7-1: config 0 interface 0 altsetting 69 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 276.081774][ T6030] usb 7-1: config 0 interface 0 has no altsetting 0 [ 276.088825][ T6030] usb 7-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 276.100424][ T6030] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.192996][ T5951] Bluetooth: hci4: command 0x0c1a tx timeout [ 276.211753][ T6030] usb 7-1: config 0 descriptor?? [ 276.443125][ T6030] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input36 [ 276.865721][ T7786] program syz.4.348 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 277.078637][ T7793] x_tables: duplicate underflow at hook 1 [ 277.100489][ T7786] hub 8-0:1.0: USB hub found [ 277.105624][ T7786] hub 8-0:1.0: 1 port detected [ 277.422733][ T5334] bcm5974 7-1:0.0: could not read from device [ 277.442529][ T6030] usb 7-1: USB disconnect, device number 9 [ 277.442748][ T5947] bcm5974 7-1:0.0: could not read from device [ 277.448041][ T5334] bcm5974 7-1:0.0: could not read from device [ 281.919542][ T7821] netlink: 24 bytes leftover after parsing attributes in process `syz.3.358'. [ 282.589860][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 282.589875][ T40] audit: type=1326 audit(1775691401.438:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7833 comm="syz.2.360" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 282.617018][ T40] audit: type=1326 audit(1775691401.438:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7833 comm="syz.2.360" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 282.651425][ T40] audit: type=1326 audit(1775691401.438:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7833 comm="syz.2.360" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 282.670326][ T40] audit: type=1326 audit(1775691401.438:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7833 comm="syz.2.360" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 282.686265][ T40] audit: type=1326 audit(1775691401.438:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7833 comm="syz.2.360" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 282.705007][ T40] audit: type=1326 audit(1775691401.438:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7833 comm="syz.2.360" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 282.735693][ T40] audit: type=1326 audit(1775691401.448:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7833 comm="syz.2.360" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 282.756636][ T40] audit: type=1326 audit(1775691401.458:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7833 comm="syz.2.360" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 282.772232][ T40] audit: type=1326 audit(1775691401.468:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7833 comm="syz.2.360" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 282.787966][ T40] audit: type=1326 audit(1775691401.468:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7833 comm="syz.2.360" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 282.928696][ T7836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.360'. [ 282.963120][ T7836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.360'. [ 283.598944][ T7841] wg2 speed is unknown, defaulting to 1000 [ 283.826766][ T167] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 283.830318][ T789] Bluetooth: hci3: Frame reassembly failed (-84) [ 284.602746][ T9] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 284.865308][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.868855][ T9] usb 9-1: config 0 interface 0 altsetting 69 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 284.874151][ T9] usb 9-1: config 0 interface 0 has no altsetting 0 [ 284.877164][ T9] usb 9-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 284.880982][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.891724][ T9] usb 9-1: config 0 descriptor?? [ 284.991912][ T9] input: bcm5974 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input37 [ 285.216040][ T5334] bcm5974 9-1:0.0: could not read from device [ 285.228675][ T9] usb 9-1: USB disconnect, device number 4 [ 285.244628][ T5947] bcm5974 9-1:0.0: could not read from device [ 285.872911][ T5951] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 286.474587][ T7863] ceph: No mds server is up or the cluster is laggy [ 286.663058][ T7866] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 286.696422][ T6103] libceph: connect (1)[c::]:6789 error -101 [ 286.698753][ T6103] libceph: mon0 (1)[c::]:6789 connect error [ 286.702118][ T7869] netlink: 24 bytes leftover after parsing attributes in process `syz.3.367'. [ 288.223801][ T40] kauditd_printk_skb: 32 callbacks suppressed [ 288.223813][ T40] audit: type=1326 audit(1775691407.128:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.0.371" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 288.235091][ T40] audit: type=1326 audit(1775691407.138:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.0.371" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 288.249962][ T40] audit: type=1326 audit(1775691407.148:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.0.371" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 288.258996][ T40] audit: type=1326 audit(1775691407.148:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.0.371" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 288.268446][ T40] audit: type=1326 audit(1775691407.148:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.0.371" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 288.277284][ T40] audit: type=1326 audit(1775691407.148:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.0.371" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 288.331773][ T40] audit: type=1326 audit(1775691407.148:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.0.371" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 288.352736][ T40] audit: type=1326 audit(1775691407.148:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.0.371" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 288.395192][ T40] audit: type=1326 audit(1775691407.148:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.0.371" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 288.407397][ T40] audit: type=1326 audit(1775691407.148:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.0.371" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 288.479931][ T7891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.371'. [ 288.491672][ T7891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.371'. [ 290.351908][ T789] Bluetooth: hci3: Frame reassembly failed (-84) [ 290.360819][ T789] Bluetooth: hci3: Frame reassembly failed (-84) [ 292.353086][ T5955] Bluetooth: hci3: command 0x1003 tx timeout [ 292.620903][ T5951] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 293.225250][ T6194] libceph: connect (1)[c::]:6789 error -101 [ 293.227947][ T6194] libceph: mon0 (1)[c::]:6789 connect error [ 293.249222][ T7924] ceph: No mds server is up or the cluster is laggy [ 293.676432][ T7924] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 294.983139][ T7439] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 295.136080][ T7439] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.141559][ T7439] usb 7-1: config 0 interface 0 altsetting 69 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 295.148217][ T7439] usb 7-1: config 0 interface 0 has no altsetting 0 [ 295.155535][ T7439] usb 7-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 295.159972][ T7439] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.193314][ T7439] usb 7-1: config 0 descriptor?? [ 295.298730][ T7439] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input38 [ 296.089913][ T7963] 9pnet_virtio: no channels available for device syz [ 296.812920][ T6103] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 297.620124][ T5334] bcm5974 7-1:0.0: could not read from device [ 297.793155][ T5334] bcm5974 7-1:0.0: could not read from device [ 297.793761][ T7439] usb 7-1: USB disconnect, device number 10 [ 297.833539][ T5947] bcm5974 7-1:0.0: could not read from device [ 297.880059][ T6103] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.809904][ T6103] usb 9-1: config 0 interface 0 altsetting 69 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 298.817694][ T6103] usb 9-1: config 0 interface 0 has no altsetting 0 [ 298.831354][ T6103] usb 9-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 298.841247][ T6103] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.873735][ T6103] usb 9-1: config 0 descriptor?? [ 299.077535][ T6103] input: bcm5974 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input40 [ 300.242658][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 300.441978][ T5334] bcm5974 9-1:0.0: could not read from device [ 300.454144][ T5334] bcm5974 9-1:0.0: could not read from device [ 300.463605][ T5334] bcm5974 9-1:0.0: could not read from device [ 300.471245][ T6103] usb 9-1: USB disconnect, device number 5 [ 300.473751][ T5334] bcm5974 9-1:0.0: could not read from device [ 300.482229][ T5947] bcm5974 9-1:0.0: could not read from device [ 300.874056][ T789] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 300.878245][ T789] Bluetooth: hci3: Frame reassembly failed (-84) [ 301.428804][ T5955] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 301.561670][ T7997] 9pnet_virtio: no channels available for device ./bus [ 302.912911][ T5951] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 304.479441][ T8010] 9pnet_virtio: no channels available for device syz [ 305.448266][ T8017] 9pnet_virtio: no channels available for device syz [ 306.457896][ T8027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.396'. qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x7f000) [ 307.603486][ T1112] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 307.605725][ T1112] ata1: failed to read log page 10h (errno=-5) [ 307.607903][ T1112] ata1.00: exception Emask 0x1 SAct 0x4000 SErr 0x0 action 0x0 [ 307.610482][ T1112] ata1.00: irq_stat 0x40000008 [ 307.612050][ T1112] ata1.00: failed command: WRITE FPDMA QUEUED [ 307.614356][ T1112] ata1.00: cmd 61/f8:70:3e:ad:08/03:00:00:00:00/40 tag 14 ncq dma 520192 out [ 307.614356][ T1112] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 307.620112][ T1112] ata1.00: status: { DRDY } [ 307.622181][ T1112] ata1.00: error: { ABRT } [ 307.624605][ T1112] ata1.00: configured for UDMA/100 [ 307.626463][ T1112] ata1: EH complete [ 309.616576][ T8050] 9pnet_virtio: no channels available for device syz [ 310.402749][ T50] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 310.588557][ T50] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.599308][ T50] usb 9-1: config 0 interface 0 altsetting 69 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 310.605613][ T50] usb 9-1: config 0 interface 0 has no altsetting 0 [ 310.608123][ T50] usb 9-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 310.611131][ T50] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.619567][ T50] usb 9-1: config 0 descriptor?? [ 310.626769][ T50] input: bcm5974 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input42 [ 310.993900][ T8069] wg2 speed is unknown, defaulting to 1000 [ 311.567983][ T8069] 9p: Bad value for 'rfdno' [ 311.580558][ T8069] Mount JFS Failure: -22 [ 311.582075][ T8069] jfs_mount failed w/return code = -22 [ 311.772659][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 312.957514][ T5334] bcm5974 9-1:0.0: could not read from device [ 312.971282][ T5334] bcm5974 9-1:0.0: could not read from device [ 312.972269][ T50] usb 9-1: USB disconnect, device number 6 [ 312.980336][ T5334] bcm5974 9-1:0.0: could not read from device [ 313.796641][ T40] kauditd_printk_skb: 39 callbacks suppressed [ 313.796656][ T40] audit: type=1326 audit(1775691432.698:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.0.412" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 313.807721][ T40] audit: type=1326 audit(1775691432.698:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.0.412" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 313.817490][ T40] audit: type=1326 audit(1775691432.698:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.0.412" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 313.827201][ T40] audit: type=1326 audit(1775691432.698:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.0.412" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 313.830040][ T8090] pim6reg: entered allmulticast mode [ 313.837335][ T40] audit: type=1326 audit(1775691432.698:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.0.412" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 313.847705][ T40] audit: type=1326 audit(1775691432.698:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.0.412" exe="/syz-executor" sig=0 arch=40000003 syscall=369 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 313.857325][ T40] audit: type=1326 audit(1775691432.698:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.0.412" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 313.867930][ T40] audit: type=1326 audit(1775691432.698:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.0.412" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 313.878475][ T40] audit: type=1326 audit(1775691432.698:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.0.412" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 313.895273][ T40] audit: type=1326 audit(1775691432.698:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.0.412" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 313.910627][ T8092] netlink: 24 bytes leftover after parsing attributes in process `syz.4.413'. [ 315.312695][ T9] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 315.458534][ T8084] pim6reg: left allmulticast mode [ 315.639258][ T8106] 9pnet_virtio: no channels available for device syz [ 315.656428][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.820159][ T9] usb 9-1: config 0 interface 0 altsetting 69 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 315.824842][ T9] usb 9-1: config 0 interface 0 has no altsetting 0 [ 315.883105][ T8111] 9pnet_virtio: no channels available for device syz [ 316.816356][ T9] usb 9-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 316.819655][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.734002][ T9] usb 9-1: config 0 descriptor?? [ 318.036694][ T9] usb 9-1: can't set config #0, error -71 [ 318.040782][ T9] usb 9-1: USB disconnect, device number 7 [ 318.972948][ T829] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 319.146758][ T829] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.161172][ T829] usb 9-1: config 0 interface 0 altsetting 69 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 319.182695][ T829] usb 9-1: config 0 interface 0 has no altsetting 0 [ 319.185117][ T829] usb 9-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 319.188332][ T829] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.200524][ T829] usb 9-1: config 0 descriptor?? [ 319.441818][ T829] input: bcm5974 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input44 [ 320.394696][ T5334] bcm5974 9-1:0.0: could not read from device [ 320.406088][ T5334] bcm5974 9-1:0.0: could not read from device [ 320.407407][ T829] usb 9-1: USB disconnect, device number 8 [ 320.422937][ T5334] bcm5974 9-1:0.0: could not read from device [ 321.211783][ T8152] 9pnet_virtio: no channels available for device syz [ 321.688146][ T8160] netlink: 24 bytes leftover after parsing attributes in process `syz.2.429'. [ 322.074522][ T8165] ceph: No mds server is up or the cluster is laggy [ 322.081466][ T6194] libceph: connect (1)[c::]:6789 error -101 [ 322.088420][ T6194] libceph: mon0 (1)[c::]:6789 connect error [ 322.213877][ T8168] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 322.366111][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.368897][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.383907][ T829] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 322.481845][ T8170] block device autoloading is deprecated and will be removed. [ 322.570065][ T829] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.609530][ T829] usb 7-1: config 0 interface 0 altsetting 69 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 322.644923][ T829] usb 7-1: config 0 interface 0 has no altsetting 0 [ 322.665255][ T829] usb 7-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 322.673142][ T829] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.699291][ T8175] overlayfs: failed to clone upperpath [ 322.900557][ T829] usb 7-1: config 0 descriptor?? [ 322.952077][ T829] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input46 [ 323.434683][ T5334] bcm5974 7-1:0.0: could not read from device [ 324.520463][ T5334] bcm5974 7-1:0.0: could not read from device [ 324.529398][ T5334] bcm5974 7-1:0.0: could not read from device [ 324.529935][ T829] usb 7-1: USB disconnect, device number 11 [ 325.158524][ T8198] netlink: 24 bytes leftover after parsing attributes in process `syz.0.438'. [ 326.343102][ T8202] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 326.345202][ T8202] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 326.362090][ T8202] vhci_hcd vhci_hcd.0: Device attached [ 327.546695][ T5957] usb 42-1: SetAddress Request (14) to port 0 [ 327.549059][ T5957] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd [ 329.644831][ T8203] vhci_hcd: connection reset by peer [ 329.647414][ T789] vhci_hcd vhci_hcd.2: stop threads [ 329.649508][ T789] vhci_hcd vhci_hcd.2: release socket [ 329.652171][ T789] vhci_hcd vhci_hcd.2: disconnect device [ 332.602923][ T5957] usb 42-1: device descriptor read/8, error -110 [ 333.048852][ T5957] usb usb42-port1: attempt power cycle [ 334.033634][ T5957] usb usb42-port1: unable to enumerate USB device [ 335.546050][ T789] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 335.549109][ T789] Bluetooth: hci3: Frame reassembly failed (-84) [ 336.472671][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 336.962950][ T8308] 9pnet_virtio: no channels available for device syz [ 337.472877][ T5951] Bluetooth: hci3: command 0x1003 tx timeout [ 337.602885][ T5955] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 338.812765][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 340.695008][ T40] kauditd_printk_skb: 41 callbacks suppressed [ 340.695021][ T40] audit: type=1326 audit(1775691459.598:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8345 comm="syz.3.473" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 340.751882][ T40] audit: type=1326 audit(1775691459.598:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8345 comm="syz.3.473" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 340.758742][ T40] audit: type=1326 audit(1775691459.608:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8345 comm="syz.3.473" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 340.766230][ T40] audit: type=1326 audit(1775691459.608:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8345 comm="syz.3.473" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 340.782774][ T40] audit: type=1326 audit(1775691459.608:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8345 comm="syz.3.473" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 340.790340][ T40] audit: type=1326 audit(1775691459.608:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8345 comm="syz.3.473" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 340.802305][ T40] audit: type=1326 audit(1775691459.608:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8345 comm="syz.3.473" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 340.809153][ T40] audit: type=1326 audit(1775691459.608:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8345 comm="syz.3.473" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 340.816130][ T40] audit: type=1326 audit(1775691459.608:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8345 comm="syz.3.473" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 340.832762][ T40] audit: type=1326 audit(1775691459.608:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8345 comm="syz.3.473" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 340.874066][ T8350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.473'. [ 340.881419][ T8350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.473'. [ 349.462719][ T10] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 351.622868][ T6550] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 351.784640][ T6550] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.788397][ T6550] usb 7-1: config 0 interface 0 altsetting 69 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 351.792482][ T6550] usb 7-1: config 0 interface 0 has no altsetting 0 [ 351.797343][ T6550] usb 7-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 351.804959][ T6550] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.813423][ T6550] usb 7-1: config 0 descriptor?? [ 351.830581][ T6550] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input48 [ 352.032021][ T5334] bcm5974 7-1:0.0: could not read from device [ 352.037540][ T5334] bcm5974 7-1:0.0: could not read from device [ 352.050685][ T5334] bcm5974 7-1:0.0: could not read from device [ 352.054054][ T5334] bcm5974 7-1:0.0: could not read from device [ 352.056845][ T5334] bcm5974 7-1:0.0: could not read from device [ 352.062196][ T6550] usb 7-1: USB disconnect, device number 13 [ 353.997036][ T8480] x_tables: duplicate underflow at hook 1 [ 354.580112][ T5955] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 356.938401][ T8525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.516'. [ 357.617033][ T8534] netlink: 12 bytes leftover after parsing attributes in process `syz.3.518'. [ 363.304676][ T8601] 9pnet_virtio: no channels available for device syz [ 364.687654][ T8612] overlayfs: missing 'lowerdir' [ 365.830057][ T8615] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 372.768395][ T8668] netlink: 'syz.4.547': attribute type 7 has an invalid length. [ 372.772168][ T8668] netlink: 'syz.4.547': attribute type 8 has an invalid length. [ 373.231117][ T8673] overlayfs: missing 'lowerdir' [ 374.159942][ T8680] netlink: 28 bytes leftover after parsing attributes in process `syz.2.550'. [ 376.669861][ T8723] overlayfs: missing 'lowerdir' [ 380.105891][ T40] kauditd_printk_skb: 41 callbacks suppressed [ 380.105905][ T40] audit: type=1326 audit(1775691499.008:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8761 comm="syz.2.572" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709ef6c code=0x0 [ 383.797032][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.800266][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.457881][ T8832] wg2 speed is unknown, defaulting to 1000 [ 390.232757][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 408.014970][ T9021] netlink: 12 bytes leftover after parsing attributes in process `syz.2.625'. [ 417.133900][ T9089] wg2 speed is unknown, defaulting to 1000 [ 417.273108][ T40] audit: type=1326 audit(1775691536.088:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9077 comm="syz.3.639" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x50000 [ 417.285445][ T40] audit: type=1326 audit(1775691536.088:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9077 comm="syz.3.639" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x50000 [ 417.295936][ T40] audit: type=1326 audit(1775691536.088:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9077 comm="syz.3.639" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x50000 [ 417.306026][ T40] audit: type=1326 audit(1775691536.088:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9077 comm="syz.3.639" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x50000 [ 417.320258][ T40] audit: type=1326 audit(1775691536.088:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9077 comm="syz.3.639" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x50000 [ 417.331726][ T40] audit: type=1326 audit(1775691536.088:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9077 comm="syz.3.639" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x50000 [ 417.344496][ T40] audit: type=1326 audit(1775691536.088:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9077 comm="syz.3.639" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x50000 [ 417.358000][ T40] audit: type=1326 audit(1775691536.088:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9077 comm="syz.3.639" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x50000 [ 417.367980][ T40] audit: type=1326 audit(1775691536.088:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9077 comm="syz.3.639" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x50000 [ 417.377526][ T40] audit: type=1326 audit(1775691536.088:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9077 comm="syz.3.639" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x50000 [ 423.492775][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 424.947200][ T9165] netlink: 28 bytes leftover after parsing attributes in process `syz.3.654'. [ 426.558724][ T9194] netlink: 'syz.0.660': attribute type 7 has an invalid length. [ 426.562248][ T9194] netlink: 'syz.0.660': attribute type 8 has an invalid length. [ 426.785167][ T9200] netlink: 24 bytes leftover after parsing attributes in process `syz.4.662'. [ 427.842520][ T5955] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 429.869653][ T9247] netlink: 24 bytes leftover after parsing attributes in process `syz.4.672'. [ 430.155365][ T40] kauditd_printk_skb: 318 callbacks suppressed [ 430.155383][ T40] audit: type=1326 audit(1775691549.058:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9253 comm="syz.4.674" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 430.170990][ T40] audit: type=1326 audit(1775691549.068:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9253 comm="syz.4.674" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 430.183336][ T40] audit: type=1326 audit(1775691549.078:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9253 comm="syz.4.674" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 430.196107][ T40] audit: type=1326 audit(1775691549.078:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9253 comm="syz.4.674" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 430.247453][ T9257] pim6reg: entered allmulticast mode [ 430.266624][ T40] audit: type=1326 audit(1775691549.078:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9253 comm="syz.4.674" exe="/syz-executor" sig=0 arch=40000003 syscall=369 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 430.276267][ T40] audit: type=1326 audit(1775691549.078:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9253 comm="syz.4.674" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 430.286214][ T40] audit: type=1326 audit(1775691549.078:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9253 comm="syz.4.674" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 430.299534][ T40] audit: type=1326 audit(1775691549.088:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9253 comm="syz.4.674" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 430.352182][ T40] audit: type=1326 audit(1775691549.098:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9253 comm="syz.4.674" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 430.366125][ T40] audit: type=1326 audit(1775691549.098:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9253 comm="syz.4.674" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 430.839413][ T9253] pim6reg: left allmulticast mode [ 432.272513][ T9291] overlayfs: missing 'lowerdir' [ 432.336726][ T9294] netlink: 24 bytes leftover after parsing attributes in process `syz.3.684'. [ 433.958150][ T9309] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 434.401891][ T9329] overlayfs: failed to clone lowerpath [ 434.522513][ T9328] pim6reg: entered allmulticast mode [ 435.140916][ T9323] pim6reg: left allmulticast mode [ 435.490249][ T9343] netlink: 24 bytes leftover after parsing attributes in process `syz.3.693'. [ 435.860130][ T9353] overlayfs: missing 'lowerdir' [ 436.448756][ T9362] netlink: 72 bytes leftover after parsing attributes in process `syz.4.696'. [ 436.641428][ T9359] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 437.620378][ T9385] wg2 speed is unknown, defaulting to 1000 [ 437.704462][ T9388] netlink: 24 bytes leftover after parsing attributes in process `syz.4.702'. [ 438.381099][ T9387] 9p: Bad value for 'rfdno' [ 439.220053][ T9399] overlayfs: failed to clone upperpath [ 439.547742][ T9403] pim6reg: entered allmulticast mode [ 439.552718][ T40] kauditd_printk_skb: 68 callbacks suppressed [ 439.552732][ T40] audit: type=1326 audit(1775691558.428:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9396 comm="syz.2.703" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 439.561958][ T40] audit: type=1326 audit(1775691558.428:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9396 comm="syz.2.703" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 439.569464][ T40] audit: type=1326 audit(1775691558.428:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9396 comm="syz.2.703" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 439.587217][ T40] audit: type=1326 audit(1775691558.428:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9396 comm="syz.2.703" exe="/syz-executor" sig=0 arch=40000003 syscall=369 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 439.597362][ T40] audit: type=1326 audit(1775691558.428:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9396 comm="syz.2.703" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 439.610129][ T40] audit: type=1326 audit(1775691558.428:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9396 comm="syz.2.703" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 439.617833][ T40] audit: type=1326 audit(1775691558.428:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9396 comm="syz.2.703" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 439.669387][ T40] audit: type=1326 audit(1775691558.428:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9396 comm="syz.2.703" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 439.679318][ T40] audit: type=1326 audit(1775691558.428:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9396 comm="syz.2.703" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 439.687665][ T40] audit: type=1326 audit(1775691558.428:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9396 comm="syz.2.703" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 439.849810][ T9414] overlayfs: missing 'lowerdir' [ 440.183867][ T9396] pim6reg: left allmulticast mode [ 442.226222][ T9421] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 443.249015][ T9469] pim6reg: entered allmulticast mode [ 443.855325][ T9465] pim6reg: left allmulticast mode [ 444.057423][ T9486] overlayfs: missing 'lowerdir' [ 444.485201][ T9490] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 445.243052][ T9499] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 445.253905][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.256944][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.962014][ T9535] netlink: 16 bytes leftover after parsing attributes in process `syz.2.731'. [ 446.969802][ T9535] netlink: 28 bytes leftover after parsing attributes in process `syz.2.731'. [ 447.655476][ T9544] overlayfs: missing 'lowerdir' [ 448.155233][ T9547] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 448.928750][ T9568] Device name cannot be null; rc = [-22] [ 456.562767][ T9640] pim6reg: entered allmulticast mode [ 456.578465][ T40] kauditd_printk_skb: 51 callbacks suppressed [ 456.578479][ T40] audit: type=1326 audit(1775691575.448:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9637 comm="syz.3.754" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 456.606218][ T40] audit: type=1326 audit(1775691575.458:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9637 comm="syz.3.754" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 456.662737][ T40] audit: type=1326 audit(1775691575.458:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9637 comm="syz.3.754" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 456.672164][ T40] audit: type=1326 audit(1775691575.458:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9637 comm="syz.3.754" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 456.704420][ T40] audit: type=1326 audit(1775691575.458:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9637 comm="syz.3.754" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71c5cab code=0x7ffc0000 [ 456.724076][ T40] audit: type=1326 audit(1775691575.458:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9637 comm="syz.3.754" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 456.735126][ T40] audit: type=1326 audit(1775691575.458:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9637 comm="syz.3.754" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 456.747650][ T6194] libceph: connect (1)[c::]:6789 error -101 [ 456.750475][ T9628] ceph: No mds server is up or the cluster is laggy [ 456.754124][ T9642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.753'. [ 456.759061][ T6194] libceph: mon0 (1)[c::]:6789 connect error [ 456.842763][ T40] audit: type=1326 audit(1775691575.458:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9637 comm="syz.3.754" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 456.866152][ T40] audit: type=1326 audit(1775691575.458:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9637 comm="syz.3.754" exe="/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 456.881412][ T40] audit: type=1326 audit(1775691575.458:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9637 comm="syz.3.754" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 457.306280][ T9637] pim6reg: left allmulticast mode [ 458.752726][ T9693] 9p: Unknown Cache mode or invalid value fscac [ 461.803666][ T9728] overlayfs: missing 'lowerdir' [ 462.965676][ T9755] netlink: 72 bytes leftover after parsing attributes in process `syz.3.776'. [ 464.453940][ T9766] wg2 speed is unknown, defaulting to 1000 [ 465.797464][ T9795] overlayfs: missing 'lowerdir' [ 467.332371][ T40] kauditd_printk_skb: 33 callbacks suppressed [ 467.332390][ T40] audit: type=1326 audit(1775691586.228:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9802 comm="syz.0.794" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 467.348667][ T40] audit: type=1326 audit(1775691586.238:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9802 comm="syz.0.794" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 467.357207][ T40] audit: type=1326 audit(1775691586.238:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9802 comm="syz.0.794" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 467.364650][ T40] audit: type=1326 audit(1775691586.238:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9802 comm="syz.0.794" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 467.371897][ T40] audit: type=1326 audit(1775691586.238:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9802 comm="syz.0.794" exe="/syz-executor" sig=0 arch=40000003 syscall=369 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 467.380286][ T40] audit: type=1326 audit(1775691586.238:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9802 comm="syz.0.794" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 467.388567][ T40] audit: type=1326 audit(1775691586.238:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9802 comm="syz.0.794" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 467.396344][ T40] audit: type=1326 audit(1775691586.238:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9802 comm="syz.0.794" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 467.403702][ T40] audit: type=1326 audit(1775691586.238:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9802 comm="syz.0.794" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 467.411064][ T40] audit: type=1326 audit(1775691586.238:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9802 comm="syz.0.794" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 468.634290][ T9828] siw: device registration error -23 [ 468.639297][ T9828] smc: removing ib device syz2 [ 469.100111][ T9828] ------------[ cut here ]------------ [ 469.102022][ T9828] !xa_empty(&pool->xa) [ 469.102032][ T9828] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x46/0x60, CPU#0: syz.2.790/9828 [ 469.108350][ T9828] Modules linked in: [ 469.110042][ T9828] CPU: 0 UID: 0 PID: 9828 Comm: syz.2.790 Tainted: G L syzkaller #0 PREEMPT(full) [ 469.113705][ T9828] Tainted: [L]=SOFTLOCKUP [ 469.115277][ T9828] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 469.118578][ T9828] RIP: 0010:rxe_pool_cleanup+0x46/0x60 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 469.120483][ T9828] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 16 ac 50 f9 5b c3 cc cc cc cc e8 0b ac 50 f9 90 <0f> 0b 90 e8 02 ac 50 f9 5b c3 cc cc cc cc e8 37 48 bc f9 eb d0 0f [ 469.127744][ T9828] RSP: 0000:ffffc9000dd57190 EFLAGS: 00010246 [ 469.130441][ T9828] RAX: 0000000000080000 RBX: ffff8880296653b8 RCX: ffffc9000c9d1000 [ 469.133822][ T9828] RDX: 0000000000080000 RSI: ffffffff88b79775 RDI: ffff888029665438 [ 469.137160][ T9828] RBP: ffffffff88b5fa00 R08: 0000000000000005 R09: 0000000000000001 [ 469.140624][ T9828] R10: 0000000000000002 R11: 0000000000000000 R12: ffff8880296646b0 [ 469.143519][ T9828] R13: ffff888029663fe0 R14: ffff888029663fe0 R15: ffff888029665118 [ 469.146779][ T9828] FS: 0000000000000000(0000) GS:ffff888097140000(0063) knlGS:00000000f548db40 [ 469.150257][ T9828] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 469.153990][ T9828] CR2: 00000000f7257310 CR3: 000000004d6e1000 CR4: 0000000000352ef0 [ 469.157096][ T9828] Call Trace: [ 469.158431][ T9828] [ 469.159714][ T9828] rxe_dealloc+0x25/0xc0 [ 469.161504][ T9828] ib_dealloc_device+0x49/0x230 [ 469.163872][ T9828] __ib_unregister_device+0x396/0x480 [ 469.165820][ T9828] ib_unregister_device_and_put+0x5a/0x80 [ 469.168363][ T9828] nldev_dellink+0x226/0x320 [ 469.170578][ T9828] ? __pfx_nldev_dellink+0x10/0x10 [ 469.172973][ T9828] ? rcu_is_watching+0x12/0xc0 [ 469.175257][ T9828] ? apparmor_capable+0x1d7/0x4d0 [ 469.177501][ T9828] ? bpf_lsm_capable+0x9/0x10 [ 469.179540][ T9828] ? security_capable+0x80/0x260 [ 469.181601][ T9828] ? ns_capable+0xd2/0xf0 [ 469.183585][ T9828] ? __pfx_nldev_dellink+0x10/0x10 [ 469.185822][ T9828] rdma_nl_rcv_msg+0x38a/0x6e0 [ 469.188427][ T9828] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 469.191179][ T9828] ? __lock_acquire+0x4a5/0x2630 [ 469.193402][ T9828] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 469.196265][ T9828] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 469.199145][ T9828] ? netlink_deliver_tap+0x1ae/0xcc0 [ 469.201326][ T9828] netlink_unicast+0x5aa/0x870 [ 469.203404][ T9828] ? __pfx_netlink_unicast+0x10/0x10 [ 469.206071][ T9828] ? __pfx___might_resched+0x10/0x10 [ 469.208675][ T9828] netlink_sendmsg+0x8b0/0xda0 [ 469.210713][ T9828] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.213014][ T9828] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 469.215353][ T9828] ____sys_sendmsg+0x9e1/0xb70 [ 469.217516][ T9828] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.219645][ T9828] ? __pfx_____sys_sendmsg+0x10/0x10 [ 469.221369][ T9828] ? __pfx_futex_wake_mark+0x10/0x10 [ 469.223209][ T9828] ___sys_sendmsg+0x190/0x1e0 [ 469.224950][ T9828] ? __pfx____sys_sendmsg+0x10/0x10 [ 469.227013][ T9828] __sys_sendmsg+0x170/0x220 [ 469.228618][ T9828] ? __pfx___sys_sendmsg+0x10/0x10 [ 469.230273][ T9828] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 469.232169][ T9828] __do_fast_syscall_32+0xe3/0x8c0 [ 469.233921][ T9828] do_fast_syscall_32+0x32/0x70 [ 469.235835][ T9828] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 469.238452][ T9828] RIP: 0023:0xf709ef6c [ 469.239915][ T9828] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 469.246113][ T9828] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 469.249263][ T9828] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000800002c0 [ 469.252481][ T9828] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 469.255408][ T9828] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 469.258455][ T9828] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 469.260953][ T9828] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 469.263534][ T9828] [ 469.264614][ T9828] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 469.267357][ T9828] CPU: 0 UID: 0 PID: 9828 Comm: syz.2.790 Tainted: G L syzkaller #0 PREEMPT(full) [ 469.271239][ T9828] Tainted: [L]=SOFTLOCKUP [ 469.272778][ T9828] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 469.276313][ T9828] Call Trace: [ 469.277544][ T9828] [ 469.278531][ T9828] dump_stack_lvl+0x100/0x190 [ 469.280071][ T9828] vpanic+0x552/0x970 [ 469.281365][ T9828] ? __pfx_vpanic+0x10/0x10 [ 469.282893][ T9828] panic+0xd1/0xe0 [ 469.284221][ T9828] ? __pfx_panic+0x10/0x10 [ 469.285801][ T9828] check_panic_on_warn.cold+0x19/0x34 [ 469.287931][ T9828] ? rxe_pool_cleanup+0x46/0x60 [ 469.289722][ T9828] __warn.cold+0x191/0x348 [ 469.291492][ T9828] __report_bug+0x296/0x3d0 [ 469.293082][ T9828] ? rxe_pool_cleanup+0x46/0x60 [ 469.294767][ T9828] ? __pfx___report_bug+0x10/0x10 [ 469.296492][ T9828] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 469.298526][ T9828] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 469.300449][ T9828] ? __flush_workqueue+0x426/0x1200 [ 469.302213][ T9828] ? __mutex_unlock_slowpath+0x15c/0x790 [ 469.304210][ T9828] ? rxe_pool_cleanup+0x46/0x60 [ 469.306034][ T9828] report_bug+0xb2/0x220 [ 469.307782][ T9828] ? rxe_pool_cleanup+0x46/0x60 [ 469.309353][ T9828] handle_bug+0x16a/0x2a0 [ 469.310711][ T9828] exc_invalid_op+0x17/0x50 [ 469.312190][ T9828] asm_exc_invalid_op+0x1a/0x20 [ 469.313726][ T9828] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 469.315496][ T9828] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 16 ac 50 f9 5b c3 cc cc cc cc e8 0b ac 50 f9 90 <0f> 0b 90 e8 02 ac 50 f9 5b c3 cc cc cc cc e8 37 48 bc f9 eb d0 0f [ 469.322466][ T9828] RSP: 0000:ffffc9000dd57190 EFLAGS: 00010246 [ 469.324436][ T9828] RAX: 0000000000080000 RBX: ffff8880296653b8 RCX: ffffc9000c9d1000 [ 469.326997][ T9828] RDX: 0000000000080000 RSI: ffffffff88b79775 RDI: ffff888029665438 [ 469.329564][ T9828] RBP: ffffffff88b5fa00 R08: 0000000000000005 R09: 0000000000000001 [ 469.332192][ T9828] R10: 0000000000000002 R11: 0000000000000000 R12: ffff8880296646b0 [ 469.334961][ T9828] R13: ffff888029663fe0 R14: ffff888029663fe0 R15: ffff888029665118 [ 469.337826][ T9828] ? __pfx_rxe_dealloc+0x10/0x10 [ 469.339565][ T9828] ? rxe_pool_cleanup+0x45/0x60 [ 469.341202][ T9828] rxe_dealloc+0x25/0xc0 [ 469.342625][ T9828] ib_dealloc_device+0x49/0x230 [ 469.344302][ T9828] __ib_unregister_device+0x396/0x480 [ 469.346077][ T9828] ib_unregister_device_and_put+0x5a/0x80 [ 469.348454][ T9828] nldev_dellink+0x226/0x320 [ 469.350365][ T9828] ? __pfx_nldev_dellink+0x10/0x10 [ 469.352338][ T9828] ? rcu_is_watching+0x12/0xc0 [ 469.353974][ T9828] ? apparmor_capable+0x1d7/0x4d0 [ 469.355582][ T9828] ? bpf_lsm_capable+0x9/0x10 [ 469.357351][ T9828] ? security_capable+0x80/0x260 [ 469.359208][ T9828] ? ns_capable+0xd2/0xf0 [ 469.360588][ T9828] ? __pfx_nldev_dellink+0x10/0x10 [ 469.362239][ T9828] rdma_nl_rcv_msg+0x38a/0x6e0 [ 469.363854][ T9828] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 469.365593][ T9828] ? __lock_acquire+0x4a5/0x2630 [ 469.367413][ T9828] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 469.369927][ T9828] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 469.372354][ T9828] ? netlink_deliver_tap+0x1ae/0xcc0 [ 469.374108][ T9828] netlink_unicast+0x5aa/0x870 [ 469.375922][ T9828] ? __pfx_netlink_unicast+0x10/0x10 [ 469.378196][ T9828] ? __pfx___might_resched+0x10/0x10 [ 469.380173][ T9828] netlink_sendmsg+0x8b0/0xda0 [ 469.381745][ T9828] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.383565][ T9828] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 469.385551][ T9828] ____sys_sendmsg+0x9e1/0xb70 [ 469.387337][ T9828] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.389279][ T9828] ? __pfx_____sys_sendmsg+0x10/0x10 [ 469.391059][ T9828] ? __pfx_futex_wake_mark+0x10/0x10 [ 469.392761][ T9828] ___sys_sendmsg+0x190/0x1e0 [ 469.394257][ T9828] ? __pfx____sys_sendmsg+0x10/0x10 [ 469.395981][ T9828] __sys_sendmsg+0x170/0x220 [ 469.397720][ T9828] ? __pfx___sys_sendmsg+0x10/0x10 [ 469.399728][ T9828] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 469.401678][ T9828] __do_fast_syscall_32+0xe3/0x8c0 [ 469.403331][ T9828] do_fast_syscall_32+0x32/0x70 [ 469.404916][ T9828] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 469.406976][ T9828] RIP: 0023:0xf709ef6c [ 469.408351][ T9828] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 469.415121][ T9828] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 469.417817][ T9828] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000800002c0 [ 469.420390][ T9828] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 469.423103][ T9828] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 469.425911][ T9828] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 469.428743][ T9828] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 469.431453][ T9828] [ 469.433136][ T9828] Kernel Offset: disabled [ 469.434552][ T9828] Rebooting in 86400 seconds..