last executing test programs: 21.85044715s ago: executing program 0 (id=251): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x3d6d9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="180000009287000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b70200001400a400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000002feffff720af0fff8ffffff71a4f0ff000000007110000000000000e5000500000000004704000001ed00000f030000000000001d44000000000000620a00fe040026ca7203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350844ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) 17.926950756s ago: executing program 0 (id=261): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) mkdir(0x0, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 15.852112652s ago: executing program 0 (id=270): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(r1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={0x0, 0x0, 0x37}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={r5, 0x20, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}}, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x6e22, 0x0, @empty, 0xc70}, 0x1c) getsockopt$sock_buf(r6, 0x1, 0x1a, &(0x7f0000000380)=""/185, &(0x7f0000000440)=0xb9) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES8=r1, @ANYRES32=r4, @ANYRESHEX=r0, @ANYRES64], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r7, 0x1, 0x31, &(0x7f0000001600), 0x4) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000005000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 12.987153383s ago: executing program 0 (id=274): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x4800) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb", 0x9, 0x8040, 0x0, 0x0) 11.106543759s ago: executing program 2 (id=279): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x1, 0x0, 0x0, 0x80, 0x5}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f00000002c0)={0x48, 0x1, 0x0, 0x0, 0x9, 0x82000}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000007c0)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1004000}) userfaultfd(0x801) r0 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r0) socket$nl_route(0x10, 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f00000000c0)={0x5, 0x0, [{0x9c7, 0x0, 0x4}, {0x922}, {0xad7, 0x0, 0x8001}, {0xadd, 0x0, 0x200000000002}, {0x865, 0x0, 0x100000000}]}) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r3 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r3, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000180)=ANY=[], 0xe) sendfile(r3, r3, &(0x7f0000001000), 0xffff) set_mempolicy(0x6005, 0x0, 0x4) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 8.961728422s ago: executing program 2 (id=282): mprotect(&(0x7f000015e000/0x1000)=nil, 0x1000, 0x0) io_uring_setup(0x1b7b, 0x0) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat$vim2m(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f00000007c0)={0x2, @pix_mp={0x0, 0x0, 0x33524742, 0x0, 0x2, [{}, {}, {}, {0x1}, {0x3}, {0x0, 0xfffffffc}]}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003700)=ANY=[@ANYBLOB="84010000100001002bbd7000fffffffffc010000000000000000000000000000ac1414bb0000000000000000000000000000ecdf000002000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x184}, 0x1, 0x0, 0x0, 0x1}, 0x4050) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x2, 0x101}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000008c0)={r4, 0xf60, "195258353ec43653ebbcc9c85ca4d48c3e6dabd74897b285c475e740345deea1abbaa0518952656c30aee56b418ab915828a39f672120566a43ea3db5fdbc9de744d2bbc536bdd61291e1397608874c8f5a5693f71eedcde3d5c83820ae3d40e7195c7e6dd4bf8502891934a396e724344a7f57ebe2ac8557fa34242dd6e61c0b19ee41ce021ed1d5084ea4d4de801dadf1c06e697448d943c8642636a0c300dc4e9c3f0bc0a808e2793c5e79345ba16a243ebe4af5e39354b222f2dc57f51d566c32975aa1b1412cfdc9d147ae1ff088a114aa510b171f88f83257286a7abd85b46ce060b35dbd2d7ab3440ef9cf400bb0651046ae1521aa9725c7e55fec51c66ab6833a12e0dd7aefe7402ec03147deac10f9c098284704f881fcb35c428ef3120a3ec519b3af34cb1a28f318aa8766e63f021aa1974e0c475609ff74450444e9efd39b4b3b30bba410c45a10ef8ba497784ad6aca831731d4166bf8768e63984dfa3c43c1e783c4b0bc0134ea6949e70ce9ab9c029f786df4ae4d44158d36c345b850fff02182c2ae3cbbd2f8693b1b25dcbbe0fa01437fd3800ea41576b51257dc0a0706462e01dfea40a5916cd03a91925c0e5ddaff9c3b7ec58603076b9c97000890213872b6da09a92f9858ffb9050fd825804d6681a4b98be2bad925b5d59439644118be65ebdbac8939347a573d5bfaabdd899abf92d5b90109cbd0daeed1d3c8916267fe061079657ff9a0bb65874748e132befd59cde8021a4bd86ff3ca0c99b051a7cf9eb6f7211e6151eeb06b46661b85f46205c55a6b50ffa1d009e4c34f63f0a285ca7bd5cff98cf006c4a2a1666fd9fc955bb835075663110ca2acc272a01d6fd3fa9d7210cd03cdd0432542d3f646acf9acf0f15e228b1504885d73fd016fd0265260efd7fe2a10c1fc3c2b620556c6c0668a9c979cd6dd8946e22f26be5b2a62926be19619de6b5b7b964df8e4e4838a8562f4247a9fde6502786fa707ae03912f86b834f8464b139215be335977b816f91ce71890590a9d9d22f0fa129e9eeb6bf20674e495b942bcbc2c7ef2d65545a74f45b9b946f8631b2d18042b6bb02d847968febc1f6e14c6d2813201c7ad8a2e33d5f9b6546064e4da32625df3019a9b6e47ca0223d6eab999dabd0aa9e02af4103c9eccf6bc97bdb7767c42ed5da09745b4f75f51baa7220e4fa5a27d9915e249d0d49415f29b6ef844d0744788fb0a5ea5391cd44ed31b3eb645f6106cf7f2c6d23738bc34ed743077dd0de9935e9c3c227b0799fa79f4aa078d72e1334587f25734284279aebe36f1de16111008cdab2bab8f5620540ef44cfaa9d58dff79fe6458247d76b955b8d90ee067a934478696df8dc387ea4fad1472477f1bf8407ccacdc12f0a91cce214af54db396653b4eedf81cc742f7a5802eafb561d716c79971bea99a7101ec7c432c420d8352fe7f4d72589808af6773c75df2b08ecac4aff6b0528bc0514ce63a26a747d8793d7636e52b50d6674bdffb3b0c375a653265102a427d8ac7ef3fd1bd6c90ecc06a19976d2474efaf3b7625405dcacef755047bec2302ba879f6d6e007097c9f255cae50cd35d15823b54126023344e1c9f260c085f443419d27d766969de00bade9e7f19889aae559ba969263024c9823f6a7727ba96a045db8f96a7d1567fdc15cc151c018493e51609d61b713a66cc103b2820ea162c200d166ed1819a8889cec0e315bf24eb9de978bd0558c60562538e5b96aa3c70f47c2ab15e217a66d583054c9f8d1f106cef74519061b9ca0f1ef4b8ab65e55bb12aa7ec04626b8b0dd4d10b1f956f523a76bbfa81747ab5e97240c6e7604ef8202661f4323e3bc3772647ef8b2513b4f1ad302bd1a238a77a47aeff3c75c53ab8864b712514eafe0985a9a35985d699568ab71eff12c0eb61b4c5a53bccbaa69280bbc8dc0b5093169de4f04de3144f27bfb28d8a7b593abd3fb5565a52e99b53255189e1a04cde05010bc62e35bdefdda77e5e21077c8d51bea87b4e75521679dd037d880c0a2e4ded8ee07c335518c12ac5d9ce8172a4a4792305567b3b3b836963011a83f0eb0ca663cce565d747e00b7165cfd85109b4e6f2347ed90dfc2e9567599bae8ebfd9247b3ec52651cbcba4e501df7155c2d5fb0647c0b7180b03dbfd55c2a17236a4b1c9adae1d6b364af5ea42895d32531ae41a5352e700f4adb807aa00fc07bf2e42e039932feee3e3016d866c23edbfcb43d314028bce307322f825799548add2b925971bf3c8ccd038b4eb3686fc01b5a307685cf3f6e885c2cde360fca613e9e102380dc3d55a1e165809cb8c8a1b57c694a552c9b3658c1df9e934c253d2683376aa71bb2940d733108c8628faa2107a113608abc075df0d892bcab1e44cf76b5615afb3650151fff243cb42db018352596b137efdeca82e98d65a565b750a6f5e2fe8b380cd66e78bc3344ed21d7a32b27c1c3999e11a5d81eadfadd90be853660bbd09876397d80e9d99b06810ef439ba2f95bc697975b3b9cd335f131e8a2101259455afd210da208c6fd183e46dfd9fa97b4399b435164bbc413e5cc21dbd7201277c2aeee26751cf2d7016a12acae76e3dfa0e3501db2cba7e69ac342d08062a1219c3b1fe7749887235f47bcd771d10d015f79e78824b95da211f9d686ae170dbc46315f41cd5f67dbb28f862aa7f9a84ccc0580701a8a38075001419fa61fca767ea512bc39cb8b6d69ce1a1732a32036e5e1c712a445a161170437ca1d6abbef4516f0962c884e8bad5601bd1081e25a6a07920dc8de5f1be5f19f6842975e27ce15ac6aac1351a39108b4cfb5b872d24ee3e2b8616d73712cd71e85f8e0a1ca29679888bba2e25c2b2aca90deb4811f1001309b459699a3eeb5fe6e2407e64e7497b26d350a2e55da95ab0bb7768d9480de66840ecc8cc7d814e4ba9ccf507f0c19a6b4c73494252d9ab3141046091073f134557000bb8186da9e8deb73ad359b7c88451f824d0db960ce49185129b93c90170d4d374a0959f3f986751fee68379a7fd1caae169ff53cede0ea00fe0eb0e3f966ebce4b6f9ad0d276644b199720af06ee0676be25c72b5524b3b8ab98a6f1c81ae1a350d40b3c874fbe4ea6e8f3c61a7c0deacc9d72cca73f227a6eb2d7cae9ce898d74f49f973703f51e55b7b4781dea17946ae9374db8240d9551019d5a339643d0e5a575f93c2b6a3763ac1326170344f7966e234d412fbc018c6240087521b47664c699229610a67e77e610620132ef10e974a5620857d93786e43b1cb64b338f5079dae4f5092ba02a0e51e7b5e257331b5ed55247a726b908fa501677289f96d27d2105fe292fcd5f80740bd942e319c123a2761e2a20d4df73cd32c7c3e1f2c84e3f9212de5b71a684b65d9db9061434524790c3d3711cd427f38afbe49d9ec20c5c2718c500fc78c0adaf0a6e73eea55cd9ad7d70ed481aba7a80ccb9b9ae5d48e909fbe59754da37d3c6e94cb378c6a01bc813f910bb4ff662eb4e3f356b8cee97495355462036a4e4371ca71de169377425c1defdad6b11bd34e828645f9bcaea88ed6e43d80bdfb6b0166d51df4e4f7380106ede8a6e498dea48cb48e658ad626b076e9a77f0d189309ea1aa02f2021c9adfa6a288c8d1eda27fca013e2ccf6644ca4aff375f44f9e787626e8532e1728fa4bab19e7278e244a0275fdab43835f3d84087d8832261f89f32cb71e30da7eba6ccdda0ec6f81a4a72ed97cbdbfd990e442321723440b8f900cce005892d3ea9dca44e91627532ce1ac8592dc1c772c5b60a2c18bd0419a3fb31921b3efa70f3b291b0a0cecc1e1f48a7f3f602c37783b68f49a8da636f2d5dc4c06bc06b9a7531436c11e06d7ead43683fd7220a4154e99190f238790e2bd18ed5bfb821b752a3d56443ef798dd9df87569510408469c261a17349bc0c422eeaf227552e63fbda116ef70b2d18ecaf810a2a3498c0acfdead7573621f986656a61573db7a19aa29d8f92ac8ac630f183f2ef7919953aed4c4f8408d5a0b9c976e7c17641d1e78d7e05048fc9f2d7dcb43443aa8eabebb1ee2153a95af0947e51ee638e77587239452044ac32ad71a53a920488c204dfc4d3b45970cd182d7863fb2e16311e1f8bd79b8fb6e60c1dac38c2e8a2387d8e3b97a7ee7781f191f48ef90f1b16ecec37229abcbebf6c8c2df59fbaee4f595286af66a9a70f89b24d7a43053129255925c3dc40e5ae90ec6c7cf0444fba8cc75ae85dd45d46475a3ea4ab85fb9c177e8cfa5fd2717128cc74ab7af5857a9243a3b29df04dc96a34c11e71ac63ab185c7897e34d1af2c8d7ddc9d0c6b5e6ce21554f5f1274479cacb7e60d752bf119ff3e089fd6be64d6dd79bb232f40b14cd7ee05a1f9e1f0fb91a2d0998567bb75b22ac72201a0db24233f0e6fa3701fcfa7cccbffc3fffaca59acf9a8193ae390b1d89a9506eb87fe7c480cb7783ab428cf5be0c42e5c403c988c466ab3265270fe4aed6042774bf415ce8c46c8247a7ec3ce7f4d8fdf545e8244958bf000cb33c83a557ece7d9bcbf406f13a3d937a5471f5b4abcce2de495fb8e513cf956c09c52060bd2ca1c259fba0e5451e03cb37697c473510809ea790b84d817a728d63696ca87ac04a8f15612297d16c4d6e61ce89b9131cd68b1523fe07c7b9eff66e44d454526cbc6ce9b2dbb514746fda2eceebc140bdb08a1f259b9e359132505bff65c1614080f3f4df15f7be307f6c460291cefad84fcc90a86b4f7bdb50f804efad534890736fc9db19f965aac5eb253814cb3a6bbdac1d530e3236c5d2d41aa9b93bc20af017e77adab724dcb1fb908d9caff2cc28e50d64e7a964f42fdc4eca6dea7371b823712d1b7e35e4cdbb8c5d4a997168181804bd8bb64dbc09f6620c41d383dc59d12b3a3678d8367fabb6e4b75ca827286e2f4a45f555c8b5ebec8db616f857ff9050ee9a4be99b92994cce99d4b92dfabaf0d15e9c135c5021eac34018d6ecf68cbb54c97a3524b2ef1c9f011397f1413b2009f01ca7ec83395b98f02375d2dc421742189dc2b5084849f4f33bfdfa7b461f372d1fba459d94345491c702256b40778ca28ce2844bbf18b6e8c395be86c74d3283c07cbacc97ebd2fdf0a16c4978990553e6440056e23ca7a14a449659dda38bf98ba5c855dd489ed0f719555d8583fb1ddef8ecaba0f56ff9184d36528dc49f61e82c4fcecbfacf953c86b031fec387200ad9a5a57cb33dd00ee45461b3b513fdb5039c9f436eb6246d9b11443c3b44ccfb5abedbd99d2ed7419782d7242bd834de91131a0f5c8f7f4c6394af27ea7857fc6e8f7dddbb476e7b4455983b28dc3405ff10ed029796bbf9173179eed0bf5da46438d7cee5b9428ea7b540540f00e9556b35efe6b856f47fe1158c0c2f27fb2a593a67d7aa504d9cf057b025a2d0282c6c5722110e6954b1689fbdd541bf1c723dbe10d5feb19bc7d882c313d02fd924065412af29845e6283e04d9c2970ca552dc9282d65758b110d78f85f9b980c1b9f34f6c42711fcf3b70003438f"}, &(0x7f0000001900)=0xf68) fchdir(r3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r5, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r5, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x9, 0x1}, 0x9, 0x42, &(0x7f00000001c0)="34ae728ae070ebe19bd3dcaa9b8c2a10de48411b22b60188059ba1563f58512a6c0445c069a65dc5b4dccd7027f4241e8050ef1644389ffc8442aa790be0d14c95a144e5aca988aed414f28959950e5de0cae1a226f3b98ba90eccb499ab0788e2962fdbba6473a8887405d4e5f9", 0x6e, 0x5, 0xfffffffe, 0x0, 0x8, 0x4, 0x0}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12001, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r7 = io_uring_setup(0x344c, &(0x7f0000000080)={0x0, 0xbf6e, 0x0, 0x7, 0x0, 0x0, r6}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r7, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 8.919591979s ago: executing program 3 (id=283): sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = fanotify_init(0xf00, 0x1) fanotify_mark(r1, 0x105, 0x40009965, r0, 0x0) dup3(r0, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r2, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB], 0x16) r3 = accept(r2, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x28, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x5f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x4) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) 7.4938796s ago: executing program 3 (id=286): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f000000d640)={0x0, 0x0, &(0x7f000000d600)={&(0x7f00000005c0)=@newtaction={0x4e4, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_ipt={0x168, 0x10, 0x0, 0x0, {{0x8}, {0x80, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x4e, 0x6, {0xa, 'filter\x00', 0x3, 0xfff8, "949ec298184175de8a1e95208bef2ef794a87535d14bb3652ca7220928c1ad67e8a23993"}}]}, {0xc1, 0x6, "03ac80cfd1249ed89da4b4e064a88cf7888759ce3312d67bbeea01f7f6c9f491935443f306d713a8fb7047a5159129297f7f8246cb8a74f94a6549059e3355756d6a3c9c08443c0c8eb49f72da898b3e59e137ba1d39ee10f5852964dcc1ae09f1d79ea65067e3beb0581a644fa59e12b2067de4a4887357334fb4a634cd5ab42abcbd529744bfa42595e567d534650556ea0f7f71b5eef650e2e8cdf4b1c668d2fd7e7dc16cc6f733b8af68288997aaefbf7899a0ca19983cb564fa5b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x224, 0x10, 0x0, 0x0, {{0x8}, {0x1b8, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_TARG={0x115, 0x6, {0x5, 'mangle\x00', 0x9, 0x1, "df40ef633d7fced138f5c05243813154eb9224b7d5a879ba47f4028b9724e2b60c112dcd91ea539f0e3a16b2e5954251ab980ce67f154c0b80200c58cdc14f75a70c11cc414052ea9459cf769637ed068ff882ac2d0e22126b60eb4d7a9cb0d3f36a6d30c0ab19297cf9c07a89b323a4a1201ab4a49a94b154a08c5be2d1f3391293a93bd401285fe709aff41fd049f1e803792de03e2f1b279b3026314b09299a7c683f73fef9d127b0df60cf2a903597038b49f197c9001c02f0bd5f4461086c6e2cf499a7942ba43fca26f05fd1199e2adff158342408f86f38d442a5f16537093caee1d5f07717032d"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TARG={0x4e, 0x6, {0x0, 'security\x00', 0x8, 0x9, "971abd9e3af5c1bfd53060e4436fe09d360b2e2cd7229a795eaf74a4275a09505046cef4"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x45, 0x6, "8c92234b521ffe981dd0d4e10afaec6dbee0efcb56e1ef9170b1cd45cae808519866ce57200c79038bb552b2c395487ede6fb7b593fc117195f7c49f88670cc444"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x98, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x6d, 0x6, "316808d11baf2e7a87a1719cff1202295b3859aff61acafde2041d664c580c5a8c7b2ad459ffa172795ff364021113ef817bc4ad9a1d4059ec4674e9e80a395288a9cc0fa41ad0cbc5c7e84f16743929b5081efd398e27f286c48e14e20fe72b72cf113c0b3946f9d4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0x4c, 0x1c, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0x5c, 0x1, [@m_ipt={0x2c, 0x6, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ipt={0x2c, 0x20, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x4e4}, 0x1, 0x0, 0x0, 0x8004}, 0x880) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x6, 0xfffffffffffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.889791028s ago: executing program 2 (id=287): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x3d6d9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) capset(0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400a400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 5.980093596s ago: executing program 1 (id=288): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000240)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendmmsg(r0, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000400)="f2a3caf1952c87a38acd5773d122cb755867e6eb5188ea264a07a2f38b58c6338ec4f67c78fcd77e9f7d11fd8d50fb354b4d31782546bc2b3be2c5fbca0f7f7b57063937aff9c2d3f560c35c4303000000000000004d93d33bd26ec072165a8902b734f282d876c68369ee54253937a3db4200ecc2f177d174aa966e1ba47e88a8ed0e71dc51d3c7bee77a186d1e5a70c47a61455f269ee53bdfdc46dd854afbba774bac401cacb3c8c411724906a2d0761634e14d092dfdb6d91167d3076870743ad908e681", 0xc6}], 0x1}}, {{0x0, 0x0, &(0x7f0000004e80)=[{&(0x7f00000001c0)="27a1288636", 0x5}], 0x1}}], 0x2, 0x4000) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e7480000", 0xbb, 0x5e, 0x0, 0x0) 5.689567275s ago: executing program 4 (id=289): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) 5.544015888s ago: executing program 1 (id=290): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000cc0)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x200, 0x6, 0x2, 0x1, 0x9, 0xfff, 0xb, 0x80, 0x5, 0x40, 0xfffffa1e, 0xfffffff1, 0x44f, 0x3, 0xffffff80, 0x5, 0x9, 0x4, 0xfa, 0x4, 0x6dfd, 0x6, 0x9, 0x2, 0x8, 0x4, 0x1, 0x4bfe, 0xfffffffe, 0x8, 0x5, 0x6, 0x2, 0x502, 0x2, 0x5, 0x9, 0x0, 0x5d, 0x3, 0x1, 0x80000000, 0x10000, 0xd, 0x5, 0x7ff, 0x80, 0x3, 0x6, 0x6, 0x3, 0x7, 0x8001, 0x0, 0x8, 0x90b9, 0x400, 0x6, 0x6, 0x0, 0x76, 0x0, 0x520, 0x4, 0xd, 0x9, 0x6, 0x4, 0x8, 0xe, 0x8, 0x800, 0xff, 0x80000000, 0x40, 0x5, 0x6, 0x7, 0x0, 0xfffff3b4, 0x9, 0x1, 0x2, 0x9, 0x80000001, 0x7, 0x0, 0x1, 0x8001, 0xb, 0x14400, 0x2, 0x5, 0x138, 0x5, 0xffff, 0xff, 0x5, 0xffff, 0xffff957d, 0x4, 0x8, 0x1, 0x7, 0x9, 0xfffffffe, 0x0, 0x8, 0x4, 0x3, 0x38a, 0x1000, 0xffffff81, 0x57b, 0x1, 0x2, 0xfffffffd, 0xe, 0x67, 0x100, 0x7fff, 0xc8f, 0x2, 0x9, 0x4, 0x6, 0xe6, 0x7fffffff, 0x6, 0x42, 0xedd, 0x7, 0x5, 0x9, 0x7, 0x0, 0x8000, 0x2, 0xb8, 0xffffffff, 0x100, 0x5, 0x3, 0xffffff00, 0xc44, 0x7, 0x0, 0x6, 0x2, 0x7, 0x8, 0x40, 0x5c, 0x1, 0x2, 0x3db3, 0xfffffff2, 0x4, 0xff, 0x7, 0x2, 0xf, 0x8, 0x5, 0x8, 0x613e0320, 0x9c25, 0x8, 0xe, 0x2, 0x80, 0x77e7, 0xe, 0x10001, 0x80000000, 0x7, 0x8001, 0x9, 0x330, 0xfffffff8, 0x1, 0xffffffff, 0x9, 0x7, 0x10000, 0x8, 0x0, 0x1, 0x5, 0x54, 0xf, 0x7ff, 0x1, 0x40, 0x3, 0x9, 0x3, 0x4, 0x80000787, 0x7f, 0x7fffffff, 0x9a, 0xbc, 0xb, 0x29dd, 0x5, 0x9, 0x200008, 0xf6a, 0x0, 0x101, 0xfffffffb, 0x7, 0x9, 0x6, 0xe, 0x5, 0x3, 0x0, 0x0, 0x7, 0x3ed, 0x8, 0x1, 0x5, 0x1ff, 0x7496, 0x200, 0x0, 0x7fffffff, 0xffffffff, 0x200, 0x200, 0x1, 0x6, 0x0, 0x7, 0x5e, 0x6, 0x4, 0x100, 0x9, 0x5a, 0x9, 0x80, 0xc, 0x7fffffff, 0x7, 0x9, 0x1ff, 0x2, 0x3, 0xa65b, 0xbd, 0x200]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 5.542765202s ago: executing program 0 (id=291): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f000000d640)={0x0, 0x0, &(0x7f000000d600)={&(0x7f00000005c0)=@newtaction={0x4e8, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x478, 0x1, [@m_ipt={0x168, 0x10, 0x0, 0x0, {{0x8}, {0x80, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x4e, 0x6, {0xa, 'filter\x00', 0x3, 0xfff8, "949ec298184175de8a1e95208bef2ef794a87535d14bb3652ca7220928c1ad67e8a23993"}}]}, {0xc1, 0x6, "03ac80cfd1249ed89da4b4e064a88cf7888759ce3312d67bbeea01f7f6c9f491935443f306d713a8fb7047a5159129297f7f8246cb8a74f94a6549059e3355756d6a3c9c08443c0c8eb49f72da898b3e59e137ba1d39ee10f5852964dcc1ae09f1d79ea65067e3beb0581a644fa59e12b2067de4a4887357334fb4a634cd5ab42abcbd529744bfa42595e567d534650556ea0f7f71b5eef650e2e8cdf4b1c668d2fd7e7dc16cc6f733b8af68288997aaefbf7899a0ca19983cb564fa5b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x228, 0x10, 0x0, 0x0, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_TARG={0x115, 0x6, {0x5, 'mangle\x00', 0x9, 0x1, "df40ef633d7fced138f5c05243813154eb9224b7d5a879ba47f4028b9724e2b60c112dcd91ea539f0e3a16b2e5954251ab980ce67f154c0b80200c58cdc14f75a70c11cc414052ea9459cf769637ed068ff882ac2d0e22126b60eb4d7a9cb0d3f36a6d30c0ab19297cf9c07a89b323a4a1201ab4a49a94b154a08c5be2d1f3391293a93bd401285fe709aff41fd049f1e803792de03e2f1b279b3026314b09299a7c683f73fef9d127b0df60cf2a903597038b49f197c9001c02f0bd5f4461086c6e2cf499a7942ba43fca26f05fd1199e2adff158342408f86f38d442a5f16537093caee1d5f07717032d"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TARG={0x59, 0x6, {0x0, 'security\x00', 0x8, 0x9, "971abd9e3af5c1bfd53060e4436fe09d360b2e2cd7229a795eaf74a4275a09505046cef4f96f198c51e39933af8a7f"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x45, 0x6, "8c92234b521ffe981dd0d4e10afaec6dbee0efcb56e1ef9170b1cd45cae808519866ce57200c79038bb552b2c395487ede6fb7b593fc117195f7c49f88670cc444"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x98, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x6d, 0x6, "316808d11baf2e7a87a1719cff1202295b3859aff61acafde2041d664c580c5a8c7b2ad459ffa172795ff364021113ef817bc4ad9a1d4059ec4674e9e80a395288a9cc0fa41ad0cbc5c7e84f16743929b5081efd398e27f286c48e14e20fe72b72cf113c0b3946f9d4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0x4c, 0x1c, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0x5c, 0x1, [@m_ipt={0x2c, 0x6, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ipt={0x2c, 0x20, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x4e8}, 0x1, 0x0, 0x0, 0x8004}, 0x880) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x6, 0xfffffffffffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.255874624s ago: executing program 3 (id=292): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f000000d640)={0x0, 0x0, &(0x7f000000d600)={&(0x7f00000005c0)=@newtaction={0x550, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x50c, 0x1, [@m_ipt={0x190, 0x10, 0x0, 0x0, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x59, 0x6, {0xa, 'filter\x00', 0x3, 0xfff8, "949ec298184175de8a1e95208bef2ef794a87535d14bb3652ca7220928c1ad67e8a23993770ebef3da299dac295f1a"}}]}, {0xdd, 0x6, "03ac80cfd1249ed89da4b4e064a88cf7888759ce3312d67bbeea01f7f6c9f491935443f306d713a8fb7047a5159129297f7f8246cb8a74f94a6549059e3355756d6a3c9c08443c0c8eb49f72da898b3e59e137ba1d39ee10f5852964dcc1ae09f1d79ea65067e3beb0581a644fa59e12b2067de4a4887357334fb4a634cd5ab42abcbd529744bfa42595e567d534650556ea0f7f71b5eef650e2e8cdf4b1c668d2fd7e7dc16cc6f733b8af68288997aaefbf7899a0ca19983cb564fa5be768a31ab822d6c98aeef1a5fc9d6bcf7b9a1b88a94365931608d06f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x218, 0x10, 0x0, 0x0, {{0x8}, {0x1ac, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x107, 0x6, {0x5, 'mangle\x00', 0x9, 0x1, "df40ef633d7fced138f5c05243813154eb9224b7d5a879ba47f4028b9724e2b60c112dcd91ea539f0e3a16b2e5954251ab980ce67f154c0b80200c58cdc14f75a70c11cc414052ea9459cf769637ed068ff882ac2d0e22126b60eb4d7a9cb0d3f36a6d30c0ab19297cf9c07a89b323a4a1201ab4a49a94b154a08c5be2d1f3391293a93bd401285fe709aff41fd049f1e803792de03e2f1b279b3026314b09299a7c683f73fef9d127b0df60cf2a903597038b49f197c9001c02f0bd5f4461086c6e2cf499a7942ba43fca26f05fd1199e2adff158342408f86f38d442"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TARG={0x59, 0x6, {0x0, 'security\x00', 0x8, 0x9, "971abd9e3af5c1bfd53060e4436fe09d360b2e2cd7229a795eaf74a4275a09505046cef4f96f198c51e39933af8a7f"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x45, 0x6, "8c92234b521ffe981dd0d4e10afaec6dbee0efcb56e1ef9170b1cd45cae808519866ce57200c79038bb552b2c395487ede6fb7b593fc117195f7c49f88670cc444"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x4c, 0x1c, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ipt={0x114, 0x11, 0x0, 0x0, {{0x8}, {0x9c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x51, 0x6, {0x0, 'mangle\x00', 0x9, 0xfff7, "324c5880937062dd44953edc94d7272b4c88b39babcd9c65304f8a683018823a5e26ad479677a8"}}, @TCA_IPT_INDEX={0x8, 0x3, 0xa}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}]}, {0x51, 0x6, "5de6ccedd6ab8060663a7ac5c9ad021c362c7981b166af53b704aec6d76d313d14822b2107088a89b23b5d63a0c635c17fb34c2036b49f31fea2bdc79cb41fef7dfd6683a7307848c9275e08e0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}]}, {0x30, 0x1, [@m_ipt={0x2c, 0x6, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x550}, 0x1, 0x0, 0x0, 0x8004}, 0x880) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x6, 0xfffffffffffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) write$usbip_server(0xffffffffffffffff, &(0x7f00000004c0)=@ret_unlink={{0x4, 0x8, 0x0, 0x0, 0x3ff}, {0x80000001}}, 0x30) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.20284284s ago: executing program 4 (id=293): syz_usb_connect$cdc_ncm(0x6, 0x6f, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000402505a1a860000102030109025d00020105e00409f7052400d4137bf1aae76c4e53897209c4fffff5"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f00000001c0)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x7, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x6}, @initial, @device_b, @broadcast, {0x1, 0x1}}, @a_msdu=[{@device_a, @device_b}, {@broadcast, @broadcast, 0x3, "77c80f"}, {@device_a, @broadcast, 0x27, "84176599d9ebe735b6a38bfb8153a573d8999fc40f8e7e276f28a436018fee3156b4c127377457"}, {@broadcast, @broadcast, 0x5e, "b2b7f59ef76dd2fc5e34954e71366fade16ebf81c306c49f04beee4bfe08ef74d96590d2e5aa37a3120874b2e0bf4731a4915ed6ddb0a4133f4ae7014eae7a1e122877124d2c62295510b061d1e22667964bea9bbd6f1e4a4e2e20a862ce"}, {@broadcast, @broadcast, 0x5, "7c2eb8ce5a"}]}, 0xf4) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.432365505s ago: executing program 3 (id=294): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x80) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 4.232559941s ago: executing program 4 (id=295): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040000) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000040)={0xfffffff8, 0x0, '\x00', {0x0, @bt={0x6, 0x9f, 0x0, 0x2, 0x7, 0x8, 0x6, 0x11, 0x1, 0x5, 0x6, 0x983, 0x0, 0x10, 0x1c, 0x21, {0x5, 0x3}, 0x8, 0x5}}}) 4.206566259s ago: executing program 1 (id=296): sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = fanotify_init(0xf00, 0x1) fanotify_mark(r1, 0x105, 0x40009965, r0, 0x0) dup3(r0, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r2, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e1301"], 0x16) r3 = accept(r2, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x28, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x5f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x4) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) 4.071780932s ago: executing program 0 (id=297): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x482, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) unshare(0x0) r2 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000180)=@ethtool_sset_info={0x37, 0x9, 0xdffffffffffffffa}}) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x80}}, 0x10) r4 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='source', &(0x7f0000000300)='\\\\\xe9\x838\x9d<\f\x91\b\xab\xe6\xfc\xf8\xbf\x82]\xdf\x12\xb5\xb1\a\xd4$\xae$\x91&6n @\xf4\xd6A\xdb\xd7B\xc5\x13@\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\f\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xae\xc3j\xa4v\xefw\x96\\\\//\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010102}, 0x10) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x42, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080046000034000000000102907800000000e00003008830d48ad204907800030c58451c00000065010e4e24000c00000000ac141444"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002"], 0xa4}}, 0x40810) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="000000000000000014001a80100004800c0006"], 0x34}}, 0x8080) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) mmap(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x2000002, 0x38011, r0, 0x0) 2.646224413s ago: executing program 1 (id=298): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f000000d640)={0x0, 0x0, &(0x7f000000d600)={&(0x7f00000005c0)=@newtaction={0x5e0, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x59c, 0x1, [@m_ipt={0x178, 0x10, 0x0, 0x0, {{0x8}, {0x74, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x42, 0x6, {0xa, 'filter\x00', 0x3, 0xfff8, "949ec298184175de8a1e95208bef2ef794a87535d14bb365"}}]}, {0xdd, 0x6, "03ac80cfd1249ed89da4b4e064a88cf7888759ce3312d67bbeea01f7f6c9f491935443f306d713a8fb7047a5159129297f7f8246cb8a74f94a6549059e3355756d6a3c9c08443c0c8eb49f72da898b3e59e137ba1d39ee10f5852964dcc1ae09f1d79ea65067e3beb0581a644fa59e12b2067de4a4887357334fb4a634cd5ab42abcbd529744bfa42595e567d534650556ea0f7f71b5eef650e2e8cdf4b1c668d2fd7e7dc16cc6f733b8af68288997aaefbf7899a0ca19983cb564fa5be768a31ab822d6c98aeef1a5fc9d6bcf7b9a1b88a94365931608d06f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x228, 0x10, 0x0, 0x0, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x115, 0x6, {0x5, 'mangle\x00', 0x9, 0x1, "df40ef633d7fced138f5c05243813154eb9224b7d5a879ba47f4028b9724e2b60c112dcd91ea539f0e3a16b2e5954251ab980ce67f154c0b80200c58cdc14f75a70c11cc414052ea9459cf769637ed068ff882ac2d0e22126b60eb4d7a9cb0d3f36a6d30c0ab19297cf9c07a89b323a4a1201ab4a49a94b154a08c5be2d1f3391293a93bd401285fe709aff41fd049f1e803792de03e2f1b279b3026314b09299a7c683f73fef9d127b0df60cf2a903597038b49f197c9001c02f0bd5f4461086c6e2cf499a7942ba43fca26f05fd1199e2adff158342408f86f38d442a5f16537093caee1d5f07717032d"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TARG={0x59, 0x6, {0x0, 'security\x00', 0x8, 0x9, "971abd9e3af5c1bfd53060e4436fe09d360b2e2cd7229a795eaf74a4275a09505046cef4f96f198c51e39933af8a7f"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x45, 0x6, "8c92234b521ffe981dd0d4e10afaec6dbee0efcb56e1ef9170b1cd45cae808519866ce57200c79038bb552b2c395487ede6fb7b593fc117195f7c49f88670cc444"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x98, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x6e, 0x6, "316808d11baf2e7a87a1719cff1202295b3859aff61acafde2041d664c580c5a8c7b2ad459ffa172795ff364021113ef817bc4ad9a1d4059ec4674e9e80a395288a9cc0fa41ad0cbc5c7e84f16743929b5081efd398e27f286c48e14e20fe72b72cf113c0b3946f9d4c3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0x4c, 0x1c, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ipt={0x114, 0x11, 0x0, 0x0, {{0x8}, {0x9c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x51, 0x6, {0x0, 'mangle\x00', 0x9, 0xfff7, "324c5880937062dd44953edc94d7272b4c88b39babcd9c65304f8a683018823a5e26ad479677a8"}}, @TCA_IPT_INDEX={0x8, 0x3, 0xa}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}]}, {0x52, 0x6, "5de6ccedd6ab8060663a7ac5c9ad021c362c7981b166af53b704aec6d76d313d14822b2107088a89b23b5d63a0c635c17fb34c2036b49f31fea2bdc79cb41fef7dfd6683a7307848c9275e08e06c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}]}, {0x30, 0x1, [@m_ipt={0x2c, 0x6, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x5e0}, 0x1, 0x0, 0x0, 0x8004}, 0x880) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x6, 0xfffffffffffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) write$usbip_server(0xffffffffffffffff, &(0x7f00000004c0)=@ret_unlink={{0x4, 0x8, 0x0, 0x0, 0x3ff}, {0x80000001}}, 0x30) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.196439282s ago: executing program 4 (id=299): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="58bc", @ANYRES16, @ANYBLOB="080029bd7000fddbdf25080000004400038008000300030000000800"], 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31032fbd7000fddbdf250800000008000300", @ANYRES32=r2, @ANYBLOB="05002d0001000000080006"], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000084) 2.029887458s ago: executing program 2 (id=300): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$inet(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0xfffffffffffffc9e}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') socket$nl_route(0x10, 0x3, 0x0) socket(0x15, 0x5, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.950761186s ago: executing program 3 (id=301): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x3d6d9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r2, 0x0, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000092870000000000000000000018", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400a400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r6, 0xffffffffffffffff, 0x3a, 0x0, @val=@tcx}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000", @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(= \x00', @ANYRES16=r8, @ANYBLOB="01002cbd7000fddbdf253800000008000300", @ANYRES32, @ANYBLOB="0c0058000100000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 1.852922982s ago: executing program 4 (id=302): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f000000d640)={0x0, 0x0, &(0x7f000000d600)={&(0x7f00000005c0)=@newtaction={0x4e4, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_ipt={0x168, 0x10, 0x0, 0x0, {{0x8}, {0x80, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x4e, 0x6, {0xa, 'filter\x00', 0x3, 0xfff8, "949ec298184175de8a1e95208bef2ef794a87535d14bb3652ca7220928c1ad67e8a23993"}}]}, {0xc1, 0x6, "03ac80cfd1249ed89da4b4e064a88cf7888759ce3312d67bbeea01f7f6c9f491935443f306d713a8fb7047a5159129297f7f8246cb8a74f94a6549059e3355756d6a3c9c08443c0c8eb49f72da898b3e59e137ba1d39ee10f5852964dcc1ae09f1d79ea65067e3beb0581a644fa59e12b2067de4a4887357334fb4a634cd5ab42abcbd529744bfa42595e567d534650556ea0f7f71b5eef650e2e8cdf4b1c668d2fd7e7dc16cc6f733b8af68288997aaefbf7899a0ca19983cb564fa5b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x224, 0x10, 0x0, 0x0, {{0x8}, {0x1b8, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_TARG={0x115, 0x6, {0x5, 'mangle\x00', 0x9, 0x1, "df40ef633d7fced138f5c05243813154eb9224b7d5a879ba47f4028b9724e2b60c112dcd91ea539f0e3a16b2e5954251ab980ce67f154c0b80200c58cdc14f75a70c11cc414052ea9459cf769637ed068ff882ac2d0e22126b60eb4d7a9cb0d3f36a6d30c0ab19297cf9c07a89b323a4a1201ab4a49a94b154a08c5be2d1f3391293a93bd401285fe709aff41fd049f1e803792de03e2f1b279b3026314b09299a7c683f73fef9d127b0df60cf2a903597038b49f197c9001c02f0bd5f4461086c6e2cf499a7942ba43fca26f05fd1199e2adff158342408f86f38d442a5f16537093caee1d5f07717032d"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TARG={0x4e, 0x6, {0x0, 'security\x00', 0x8, 0x9, "971abd9e3af5c1bfd53060e4436fe09d360b2e2cd7229a795eaf74a4275a09505046cef4"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x45, 0x6, "8c92234b521ffe981dd0d4e10afaec6dbee0efcb56e1ef9170b1cd45cae808519866ce57200c79038bb552b2c395487ede6fb7b593fc117195f7c49f88670cc444"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x98, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x6d, 0x6, "316808d11baf2e7a87a1719cff1202295b3859aff61acafde2041d664c580c5a8c7b2ad459ffa172795ff364021113ef817bc4ad9a1d4059ec4674e9e80a395288a9cc0fa41ad0cbc5c7e84f16743929b5081efd398e27f286c48e14e20fe72b72cf113c0b3946f9d4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0x4c, 0x1c, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0x5c, 0x1, [@m_ipt={0x2c, 0x6, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ipt={0x2c, 0x20, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x4e4}, 0x1, 0x0, 0x0, 0x8004}, 0x880) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x6, 0xfffffffffffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 423.449423ms ago: executing program 3 (id=303): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x4800) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb", 0x9, 0x8040, 0x0, 0x0) 334.860388ms ago: executing program 1 (id=304): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000340), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000000c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000500)={r3, 0x1ff, 0x0, 0xffffffff, 0x3, [0x0, 0x0, 0x0, 0x0], [0x7fdfffff, 0x0, 0x0, 0x4], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffe, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r4, r5, 0x0, r5], [0x2b8, 0x1], [0x0, 0x1]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000002000)=[0x0], 0x0, 0x0, 0x0, 0x1}) 317.075362ms ago: executing program 2 (id=305): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f000000d640)={0x0, 0x0, &(0x7f000000d600)={&(0x7f00000005c0)=@newtaction={0x550, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x50c, 0x1, [@m_ipt={0x190, 0x10, 0x0, 0x0, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x59, 0x6, {0xa, 'filter\x00', 0x3, 0xfff8, "949ec298184175de8a1e95208bef2ef794a87535d14bb3652ca7220928c1ad67e8a23993770ebef3da299dac295f1a"}}]}, {0xdd, 0x6, "03ac80cfd1249ed89da4b4e064a88cf7888759ce3312d67bbeea01f7f6c9f491935443f306d713a8fb7047a5159129297f7f8246cb8a74f94a6549059e3355756d6a3c9c08443c0c8eb49f72da898b3e59e137ba1d39ee10f5852964dcc1ae09f1d79ea65067e3beb0581a644fa59e12b2067de4a4887357334fb4a634cd5ab42abcbd529744bfa42595e567d534650556ea0f7f71b5eef650e2e8cdf4b1c668d2fd7e7dc16cc6f733b8af68288997aaefbf7899a0ca19983cb564fa5be768a31ab822d6c98aeef1a5fc9d6bcf7b9a1b88a94365931608d06f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x218, 0x10, 0x0, 0x0, {{0x8}, {0x1ac, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x107, 0x6, {0x5, 'mangle\x00', 0x9, 0x1, "df40ef633d7fced138f5c05243813154eb9224b7d5a879ba47f4028b9724e2b60c112dcd91ea539f0e3a16b2e5954251ab980ce67f154c0b80200c58cdc14f75a70c11cc414052ea9459cf769637ed068ff882ac2d0e22126b60eb4d7a9cb0d3f36a6d30c0ab19297cf9c07a89b323a4a1201ab4a49a94b154a08c5be2d1f3391293a93bd401285fe709aff41fd049f1e803792de03e2f1b279b3026314b09299a7c683f73fef9d127b0df60cf2a903597038b49f197c9001c02f0bd5f4461086c6e2cf499a7942ba43fca26f05fd1199e2adff158342408f86f38d442"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TARG={0x59, 0x6, {0x0, 'security\x00', 0x8, 0x9, "971abd9e3af5c1bfd53060e4436fe09d360b2e2cd7229a795eaf74a4275a09505046cef4f96f198c51e39933af8a7f"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x45, 0x6, "8c92234b521ffe981dd0d4e10afaec6dbee0efcb56e1ef9170b1cd45cae808519866ce57200c79038bb552b2c395487ede6fb7b593fc117195f7c49f88670cc444"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x4c, 0x1c, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ipt={0x114, 0x11, 0x0, 0x0, {{0x8}, {0x9c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x51, 0x6, {0x0, 'mangle\x00', 0x9, 0xfff7, "324c5880937062dd44953edc94d7272b4c88b39babcd9c65304f8a683018823a5e26ad479677a8"}}, @TCA_IPT_INDEX={0x8, 0x3, 0xa}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}]}, {0x51, 0x6, "5de6ccedd6ab8060663a7ac5c9ad021c362c7981b166af53b704aec6d76d313d14822b2107088a89b23b5d63a0c635c17fb34c2036b49f31fea2bdc79cb41fef7dfd6683a7307848c9275e08e0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}]}, {0x30, 0x1, [@m_ipt={0x2c, 0x6, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x550}, 0x1, 0x0, 0x0, 0x8004}, 0x880) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x6, 0xfffffffffffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) write$usbip_server(0xffffffffffffffff, &(0x7f00000004c0)=@ret_unlink={{0x4, 0x8, 0x0, 0x0, 0x3ff}, {0x80000001}}, 0x30) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 201.570724ms ago: executing program 4 (id=306): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040000) socket$can_j1939(0x1d, 0x2, 0x7) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000040)={0xfffffff8, 0x0, '\x00', {0x0, @bt={0x6, 0x9f, 0x0, 0x2, 0x7, 0x8, 0x6, 0x11, 0x1, 0x5, 0x6, 0x983, 0x0, 0x10, 0x1c, 0x21, {0x5, 0x3}, 0x8, 0x5}}}) 1.092415ms ago: executing program 2 (id=307): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$inet(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 0s ago: executing program 1 (id=308): sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = fanotify_init(0xf00, 0x1) fanotify_mark(r1, 0x105, 0x40009965, r0, 0x0) dup3(r0, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r2, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e1301"], 0x16) r3 = accept(r2, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x28, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x5f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x4) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.179' (ED25519) to the list of known hosts. [ 83.893499][ T5591] cgroup: Unknown subsys name 'net' [ 84.115660][ T5591] cgroup: Unknown subsys name 'cpuset' [ 84.190148][ T5591] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.095345][ T5591] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.775116][ T42] cfg80211: failed to load regulatory.db [ 90.052457][ T4919] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.055381][ T4919] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.057093][ T4919] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.072838][ T4919] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.073625][ T4919] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.076898][ T4919] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.082662][ T4919] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.084602][ T5616] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.087818][ T4919] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.120106][ T5616] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.131568][ T5609] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.141432][ T5609] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.142024][ T5609] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.142501][ T5609] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.144646][ T5616] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.144963][ T5616] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.149441][ T5609] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.168254][ T5623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.172570][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.173313][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.173697][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.174545][ T5623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.176909][ T5612] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.178210][ T5612] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.220370][ T5613] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.249739][ T59] Bluetooth: hci3: command tx timeout [ 92.249887][ T59] Bluetooth: hci0: command tx timeout [ 92.319668][ T5614] Bluetooth: hci2: command tx timeout [ 92.319801][ T5614] Bluetooth: hci1: command tx timeout [ 92.410063][ T59] Bluetooth: hci4: command tx timeout [ 92.863445][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.864316][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.864771][ T5605] bridge_slave_0: entered allmulticast mode [ 92.866408][ T5605] bridge_slave_0: entered promiscuous mode [ 92.913653][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.913765][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.914062][ T5607] bridge_slave_0: entered allmulticast mode [ 92.915553][ T5607] bridge_slave_0: entered promiscuous mode [ 92.917553][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.917695][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.918229][ T5605] bridge_slave_1: entered allmulticast mode [ 92.922179][ T5605] bridge_slave_1: entered promiscuous mode [ 92.982991][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.983127][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.983306][ T5607] bridge_slave_1: entered allmulticast mode [ 92.985122][ T5607] bridge_slave_1: entered promiscuous mode [ 93.024026][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.024161][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.024324][ T5606] bridge_slave_0: entered allmulticast mode [ 93.026236][ T5606] bridge_slave_0: entered promiscuous mode [ 93.029349][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.029494][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.033037][ T5604] bridge_slave_0: entered allmulticast mode [ 93.035565][ T5604] bridge_slave_0: entered promiscuous mode [ 93.081235][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.081356][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.081520][ T5603] bridge_slave_0: entered allmulticast mode [ 93.084349][ T5603] bridge_slave_0: entered promiscuous mode [ 93.089776][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.089903][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.090383][ T5606] bridge_slave_1: entered allmulticast mode [ 93.094144][ T5606] bridge_slave_1: entered promiscuous mode [ 93.095736][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.095853][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.096003][ T5604] bridge_slave_1: entered allmulticast mode [ 93.098855][ T5604] bridge_slave_1: entered promiscuous mode [ 93.130416][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.131834][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.131974][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.132127][ T5603] bridge_slave_1: entered allmulticast mode [ 93.135218][ T5603] bridge_slave_1: entered promiscuous mode [ 93.185780][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.195018][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.241345][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.366851][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.370561][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.415446][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.418304][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.422210][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.446922][ T5605] team0: Port device team_slave_0 added [ 93.451997][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.485066][ T5607] team0: Port device team_slave_0 added [ 93.488354][ T5605] team0: Port device team_slave_1 added [ 93.534113][ T5607] team0: Port device team_slave_1 added [ 93.562341][ T5606] team0: Port device team_slave_0 added [ 93.565568][ T5604] team0: Port device team_slave_0 added [ 93.597254][ T5603] team0: Port device team_slave_0 added [ 93.599403][ T5606] team0: Port device team_slave_1 added [ 93.606770][ T5604] team0: Port device team_slave_1 added [ 93.625337][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.625348][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.625363][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.629302][ T5603] team0: Port device team_slave_1 added [ 93.676487][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.676502][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.676525][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.679479][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.679491][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.679513][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.745307][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.745323][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.745346][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.786822][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.786838][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.786860][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.789208][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.789220][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.789242][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.814854][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.814869][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.814891][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.819011][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.819024][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.819045][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.824037][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.824050][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.824073][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.828560][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.828573][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.828595][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.981149][ T5605] hsr_slave_0: entered promiscuous mode [ 93.982623][ T5605] hsr_slave_1: entered promiscuous mode [ 94.038997][ T5607] hsr_slave_0: entered promiscuous mode [ 94.041589][ T5607] hsr_slave_1: entered promiscuous mode [ 94.042649][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 94.042746][ T5607] Cannot create hsr debugfs directory [ 94.144471][ T5604] hsr_slave_0: entered promiscuous mode [ 94.145472][ T5604] hsr_slave_1: entered promiscuous mode [ 94.146014][ T5604] debugfs: 'hsr0' already exists in 'hsr' [ 94.146030][ T5604] Cannot create hsr debugfs directory [ 94.175095][ T5606] hsr_slave_0: entered promiscuous mode [ 94.175975][ T5606] hsr_slave_1: entered promiscuous mode [ 94.176527][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 94.176545][ T5606] Cannot create hsr debugfs directory [ 94.187405][ T5603] hsr_slave_0: entered promiscuous mode [ 94.188734][ T5603] hsr_slave_1: entered promiscuous mode [ 94.193395][ T5603] debugfs: 'hsr0' already exists in 'hsr' [ 94.193419][ T5603] Cannot create hsr debugfs directory [ 94.319737][ T59] Bluetooth: hci0: command tx timeout [ 94.319769][ T59] Bluetooth: hci3: command tx timeout [ 94.399739][ T5614] Bluetooth: hci1: command tx timeout [ 94.399776][ T5614] Bluetooth: hci2: command tx timeout [ 94.479766][ T59] Bluetooth: hci4: command tx timeout [ 95.297631][ T5605] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.351810][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.354643][ T5605] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.384769][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.388989][ T5605] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.416250][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.435669][ T5605] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.472889][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.588917][ T5604] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.617419][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.628899][ T5604] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.662322][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.664215][ T5604] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.713796][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.735177][ T5604] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.765544][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.871837][ T5607] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.906564][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.915427][ T5607] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.943476][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.946698][ T5607] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.984436][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.009852][ T5607] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.042699][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.179434][ T5606] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.205802][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.219342][ T5606] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.253072][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.273916][ T5606] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.303179][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.335990][ T5606] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.366617][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.400318][ T59] Bluetooth: hci3: command tx timeout [ 96.400353][ T59] Bluetooth: hci0: command tx timeout [ 96.452587][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.479926][ T5614] Bluetooth: hci2: command tx timeout [ 96.479962][ T5614] Bluetooth: hci1: command tx timeout [ 96.519216][ T5603] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.555702][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.560584][ T59] Bluetooth: hci4: command tx timeout [ 96.575941][ T5603] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.605506][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.609099][ T5603] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.645138][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.660265][ T5603] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.703132][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.732110][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.776046][ T1323] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.776416][ T1323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.812059][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.842696][ T157] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.845608][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.942116][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.002236][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.005990][ T1323] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.006117][ T1323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.048090][ T1323] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.048207][ T1323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.132337][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.185269][ T168] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.185348][ T168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.194996][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.272915][ T168] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.273073][ T168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.364730][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.403696][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.428986][ T1323] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.429099][ T1323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.515636][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.515784][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.636203][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.687731][ T1392] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.687955][ T1392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.825801][ T2319] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.831172][ T2319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.479710][ T59] Bluetooth: hci0: command tx timeout [ 98.479746][ T59] Bluetooth: hci3: command tx timeout [ 98.560988][ T5614] Bluetooth: hci1: command tx timeout [ 98.561022][ T5614] Bluetooth: hci2: command tx timeout [ 98.641563][ T59] Bluetooth: hci4: command tx timeout [ 98.738677][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.844651][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.144323][ T5605] veth0_vlan: entered promiscuous mode [ 99.284405][ T5605] veth1_vlan: entered promiscuous mode [ 99.314848][ T5604] veth0_vlan: entered promiscuous mode [ 99.429153][ T5604] veth1_vlan: entered promiscuous mode [ 99.463202][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.572309][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.595765][ T5605] veth0_macvtap: entered promiscuous mode [ 99.646124][ T5605] veth1_macvtap: entered promiscuous mode [ 99.667371][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.787758][ T5604] veth0_macvtap: entered promiscuous mode [ 99.830052][ T5604] veth1_macvtap: entered promiscuous mode [ 99.889058][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.936119][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.995282][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.995777][ T5606] veth0_vlan: entered promiscuous mode [ 99.999112][ T1323] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.025543][ T2319] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.049270][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.053711][ T2319] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.065422][ T2319] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.153792][ T5606] veth1_vlan: entered promiscuous mode [ 100.156054][ T1431] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.178346][ T1431] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.179425][ T5603] veth0_vlan: entered promiscuous mode [ 100.185830][ T1431] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.234261][ T1431] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.402533][ T5603] veth1_vlan: entered promiscuous mode [ 100.647647][ T1431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.647669][ T1431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.719120][ T5606] veth0_macvtap: entered promiscuous mode [ 100.786495][ T5607] veth0_vlan: entered promiscuous mode [ 100.808545][ T5606] veth1_macvtap: entered promiscuous mode [ 100.828352][ T1431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.828382][ T1431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.899007][ T5603] veth0_macvtap: entered promiscuous mode [ 100.909189][ T5607] veth1_vlan: entered promiscuous mode [ 100.926087][ T1392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.926108][ T1392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.944236][ T5603] veth1_macvtap: entered promiscuous mode [ 100.977622][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.044204][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.067752][ T1392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.067773][ T1392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.115867][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.123391][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.134438][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.137880][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.150758][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.185222][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.362373][ T168] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.372079][ T5607] veth0_macvtap: entered promiscuous mode [ 101.385938][ T168] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.387972][ T168] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.390407][ T168] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.503689][ T5607] veth1_macvtap: entered promiscuous mode [ 102.168174][ T1392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.168198][ T1392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.180671][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.322481][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.345509][ T5735] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 102.384223][ T1392] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.387151][ T1392] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.395100][ T1392] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.427997][ T1392] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.574179][ T5735] usb 2-1: Using ep0 maxpacket: 16 [ 102.601084][ T5735] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.601146][ T5735] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 102.601174][ T5735] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 102.601196][ T5735] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 102.601219][ T5735] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.604118][ T5735] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 102.604148][ T5735] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 102.604167][ T5735] usb 2-1: Manufacturer: syz [ 102.673978][ T1392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.673999][ T1392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.777084][ T5735] usb 2-1: config 0 descriptor?? [ 103.427165][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.427187][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.472176][ T5735] rc_core: IR keymap rc-hauppauge not found [ 103.472196][ T5735] Registered IR keymap rc-empty [ 103.511403][ T5735] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 103.528151][ T5735] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 103.562083][ T5735] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 103.588754][ T5735] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5 [ 103.713200][ T5735] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 103.730825][ T5735] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 103.751253][ T5735] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 103.770644][ T5735] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 103.791174][ T5735] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 103.810332][ T5735] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 103.829801][ T5735] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 103.850693][ T5735] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 103.879925][ T5735] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 103.890255][ T5735] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 104.066639][ T5735] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 104.066665][ T5735] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 104.106250][ T1323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.106270][ T1323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.165226][ T5735] usb 2-1: USB disconnect, device number 2 [ 104.442084][ T5815] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.264547][ T5817] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 107.309425][ T5824] ipvlan2: entered allmulticast mode [ 107.309514][ T5824] batadv_slave_1: entered allmulticast mode [ 107.443726][ T5824] batman_adv: batadv0: Adding interface: ipvlan2 [ 107.443799][ T5824] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.443873][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.443930][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.443998][ T5824] batman_adv: batadv0: Interface activated: ipvlan2 [ 108.502691][ T1026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.502707][ T1026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.789283][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.789305][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.549569][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.569576][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.639570][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.649570][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.659577][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.669568][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.679570][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.719572][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.729582][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.739573][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.887280][ T5832] syzkaller0: entered promiscuous mode [ 110.887307][ T5832] syzkaller0: entered allmulticast mode [ 110.957491][ T5838] fuse: Unknown parameter 'user_i00000000000000000000' [ 113.190120][ T5743] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 113.385294][ T5743] usb 3-1: Using ep0 maxpacket: 32 [ 113.403348][ T5743] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 113.433539][ T5743] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 113.433569][ T5743] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.433588][ T5743] usb 3-1: Product: syz [ 113.433602][ T5743] usb 3-1: Manufacturer: syz [ 113.433615][ T5743] usb 3-1: SerialNumber: syz [ 113.687339][ T5743] usb 3-1: config 0 descriptor?? [ 113.935690][ T5743] usb 3-1: no audio or video endpoints found [ 114.153448][ T5743] usb 3-1: USB disconnect, device number 2 [ 114.293883][ T5858] Zero length message leads to an empty skb [ 116.723381][ T5877] syzkaller0: entered promiscuous mode [ 116.723411][ T5877] syzkaller0: entered allmulticast mode [ 117.415877][ T5882] fuse: Unknown parameter 'user_i00000000000000000000' [ 118.585906][ T5884] tipc: Started in network mode [ 118.585940][ T5884] tipc: Node identity 328788be9c0f, cluster identity 4711 [ 118.587301][ T5884] tipc: Enabled bearer , priority 0 [ 118.709439][ T5876] tipc: Resetting bearer [ 119.036109][ T5876] tipc: Disabling bearer [ 121.008051][ T5895] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 123.899665][ T5910] binder: 5909:5910 ioctl 4018620d 0 returned -22 [ 132.998615][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.998719][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.212033][ T5962] openvswitch: netlink: EtherType 50a is less than min 600 [ 134.553651][ T5966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.558329][ T5964] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 135.149748][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 136.265717][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 136.265748][ T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 136.265772][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 136.265785][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.309241][ T5970] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 136.394499][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 138.939472][ T9] usb 1-1: USB disconnect, device number 2 [ 141.698912][ T6027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.490247][ T6065] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 148.119415][ T6072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.407658][ T6090] ceph: No mds server is up or the cluster is laggy [ 150.442760][ T5735] libceph: connect (1)[c::]:6789 error -101 [ 150.462903][ T5735] libceph: mon0 (1)[c::]:6789 connect error [ 152.474231][ T6107] syzkaller0: entered promiscuous mode [ 152.474259][ T6107] syzkaller0: entered allmulticast mode [ 152.503837][ T6107] tipc: Enabled bearer , priority 0 [ 152.554630][ T6106] tipc: Resetting bearer [ 152.559467][ T6110] kvm: kvm [6109]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x6000000f0d6 [ 153.489763][ T6106] tipc: Disabling bearer [ 154.063702][ T5735] tipc: Node number set to 2928183486 [ 156.020713][ T6130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.500555][ T6142] openvswitch: netlink: EtherType 50a is less than min 600 [ 157.711531][ T6146] kvm: kvm [6145]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000033 [ 157.718057][ T6146] kvm: kvm [6145]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x6000000ff34 [ 157.718642][ T6146] kvm: kvm [6145]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc1) = 0x60000000005 [ 157.725223][ T6146] kvm: kvm [6145]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x6000000020e [ 157.728162][ T6146] kvm: kvm [6145]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x6000000000f [ 157.728589][ T6146] kvm: kvm [6145]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc1) = 0x60000000004 [ 157.735985][ T6146] kvm: kvm [6145]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000045 [ 157.766590][ T6146] kvm: kvm [6145]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x6000000023a [ 157.780978][ T4986] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 157.790061][ T6146] kvm: kvm [6145]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x6000000000d [ 157.825377][ T6146] kvm: kvm [6145]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000644 [ 157.999697][ T4986] usb 2-1: Using ep0 maxpacket: 16 [ 158.003411][ T4986] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 158.003438][ T4986] usb 2-1: config 1 has no interface number 0 [ 158.003488][ T4986] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 158.003521][ T4986] usb 2-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 158.003543][ T4986] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 158.003566][ T4986] usb 2-1: config 1 interface 105 has no altsetting 0 [ 158.007974][ T4986] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 158.008002][ T4986] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 158.008022][ T4986] usb 2-1: Product: syz [ 158.008036][ T4986] usb 2-1: Manufacturer: syz [ 158.008051][ T4986] usb 2-1: SerialNumber: syz [ 158.048037][ T6143] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 158.179700][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 158.277741][ T4986] aqc111 2-1:1.105: probe with driver aqc111 failed with error -22 [ 158.329680][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 158.331747][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.331801][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 158.331830][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 158.331851][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 158.331874][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.334405][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 158.334433][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 158.334453][ T9] usb 3-1: Manufacturer: syz [ 158.441202][ T9] usb 3-1: config 0 descriptor?? [ 158.739702][ T9] rc_core: IR keymap rc-hauppauge not found [ 158.739727][ T9] Registered IR keymap rc-empty [ 158.739900][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 158.767752][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 158.782403][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 158.804980][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input6 [ 158.857680][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 158.871768][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 158.892386][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 158.910018][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 158.930844][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 158.949734][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 158.969738][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 158.990117][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 159.009861][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 159.029694][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 159.348784][ T9] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 159.348812][ T9] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 160.007150][ T9] usb 3-1: USB disconnect, device number 3 [ 160.345161][ T5743] usb 2-1: USB disconnect, device number 3 [ 160.702160][ T6167] binder: 6166:6167 ioctl 4018620d 0 returned -22 [ 162.312236][ T6175] netlink: 36 bytes leftover after parsing attributes in process `syz.4.98'. [ 162.759298][ T6175] syz.4.98 (6175) used greatest stack depth: 18584 bytes left [ 164.558983][ T6190] openvswitch: netlink: EtherType 50a is less than min 600 [ 166.597371][ T6199] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 167.253403][ T6204] kvm: kvm [6203]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60c00000018 [ 168.007178][ T6204] kvm: kvm [6203]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60c00000018 [ 168.040735][ T6204] kvm: kvm [6203]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60c00000018 [ 169.066593][ T6223] binder: 6221:6223 ioctl 4018620d 0 returned -22 [ 171.797025][ T6243] openvswitch: netlink: EtherType 50a is less than min 600 [ 172.386870][ T6240] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 172.433614][ T6240] overlayfs: overlapping lowerdir path [ 172.569767][ T31] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 172.859691][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 172.866170][ T6257] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 172.866358][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 172.867859][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.867956][ T31] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 172.872112][ T31] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 172.872137][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.872154][ T31] usb 2-1: Product: syz [ 172.872167][ T31] usb 2-1: Manufacturer: syz [ 172.872179][ T31] usb 2-1: SerialNumber: syz [ 172.960099][ T42] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 173.144678][ T31] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 173.145622][ T31] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 173.219649][ T42] usb 1-1: Using ep0 maxpacket: 32 [ 173.222818][ T42] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 173.225951][ T42] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 173.225968][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.225980][ T42] usb 1-1: Product: syz [ 173.225988][ T42] usb 1-1: Manufacturer: syz [ 173.225996][ T42] usb 1-1: SerialNumber: syz [ 173.345315][ T6252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.362618][ T42] usb 1-1: config 0 descriptor?? [ 173.366911][ T6252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.581126][ T31] usb 2-1: 2:1 : can't get Cluster Descriptor [ 173.588513][ T42] usb 1-1: no audio or video endpoints found [ 173.720649][ T42] usb 1-1: USB disconnect, device number 3 [ 173.826628][ T31] usb 2-1: USB disconnect, device number 4 [ 174.158319][ T6265] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 176.496962][ T6269] kvm: kvm [6267]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60c00000018 [ 176.522744][ T6269] kvm: kvm [6267]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60c00000018 [ 176.551389][ T6269] kvm: kvm [6267]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60c00000018 [ 176.576810][ T6269] kvm: kvm [6267]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60c00000018 [ 176.603178][ T6269] kvm: kvm [6267]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60c00000018 [ 176.633428][ T6269] kvm: kvm [6267]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60c00000018 [ 176.692104][ T6269] kvm: kvm [6267]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60c00000018 [ 176.705868][ T6269] kvm: kvm [6267]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60c00000018 [ 176.719081][ T6269] kvm: kvm [6267]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60c00000018 [ 177.507104][ T6273] ceph: No mds server is up or the cluster is laggy [ 177.591984][ T5735] libceph: connect (1)[c::]:6789 error -101 [ 177.592201][ T5735] libceph: mon0 (1)[c::]:6789 connect error [ 178.101599][ T6283] netlink: 36 bytes leftover after parsing attributes in process `syz.3.128'. [ 179.395975][ T42] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 179.589611][ T42] usb 4-1: Using ep0 maxpacket: 32 [ 179.593490][ T42] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 179.618090][ T42] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 179.618118][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.618136][ T42] usb 4-1: Product: syz [ 179.618150][ T42] usb 4-1: Manufacturer: syz [ 179.618163][ T42] usb 4-1: SerialNumber: syz [ 179.733889][ T6302] openvswitch: netlink: EtherType 50a is less than min 600 [ 180.504916][ T42] usb 4-1: config 0 descriptor?? [ 180.647009][ T42] usb 4-1: no audio or video endpoints found [ 180.828908][ T42] usb 4-1: USB disconnect, device number 2 [ 180.885136][ T59] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 180.885162][ T59] CPU: 0 UID: 0 PID: 59 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 180.885187][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 180.885200][ T59] Workqueue: hci2 hci_rx_work [ 180.885234][ T59] Call Trace: [ 180.885243][ T59] [ 180.885251][ T59] dump_stack_lvl+0xe8/0x150 [ 180.885277][ T59] sysfs_create_dir_ns+0x271/0x2a0 [ 180.885307][ T59] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 180.885333][ T59] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 180.885366][ T59] ? rt_spin_unlock+0x160/0x200 [ 180.885392][ T59] kobject_add_internal+0x631/0xd10 [ 180.885420][ T59] kobject_add+0x163/0x240 [ 180.885444][ T59] ? __pfx_kobject_add+0x10/0x10 [ 180.885473][ T59] ? get_device_parent+0x370/0x3a0 [ 180.885497][ T59] device_add+0x408/0xbb0 [ 180.885520][ T59] hci_conn_add_sysfs+0xd5/0x210 [ 180.885551][ T59] le_conn_complete_evt+0x10e6/0x16b0 [ 180.885585][ T59] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 180.885609][ T59] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 180.885638][ T59] ? lockdep_hardirqs_on+0x7a/0x110 [ 180.885667][ T59] ? skb_pull_data+0xfb/0x200 [ 180.885692][ T59] hci_le_conn_complete_evt+0x187/0x470 [ 180.885731][ T59] hci_event_packet+0x659/0xef0 [ 180.885765][ T59] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 180.885788][ T59] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 180.885807][ T59] ? __pfx_hci_event_packet+0x10/0x10 [ 180.885833][ T59] ? rt_spin_unlock+0x14f/0x200 [ 180.885865][ T59] ? hci_send_to_monitor+0xe2/0x590 [ 180.885893][ T59] hci_rx_work+0x3ee/0x1040 [ 180.885928][ T59] ? process_scheduled_works+0xa70/0x1860 [ 180.885952][ T59] process_scheduled_works+0xb5d/0x1860 [ 180.886004][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 180.886031][ T59] ? assign_work+0x3d5/0x5e0 [ 180.886059][ T59] worker_thread+0xa53/0xfc0 [ 180.886110][ T59] kthread+0x388/0x470 [ 180.886136][ T59] ? __pfx_worker_thread+0x10/0x10 [ 180.886156][ T59] ? __pfx_kthread+0x10/0x10 [ 180.886183][ T59] ret_from_fork+0x514/0xb70 [ 180.886207][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 180.886229][ T59] ? __switch_to+0xc79/0x1410 [ 180.886262][ T59] ? __pfx_kthread+0x10/0x10 [ 180.886289][ T59] ret_from_fork_asm+0x1a/0x30 [ 180.886330][ T59] [ 180.886360][ T59] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 180.886400][ T59] Bluetooth: hci2: failed to register connection device [ 182.906601][ T6320] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 182.917751][ T5780] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 183.160185][ T5780] usb 2-1: Using ep0 maxpacket: 16 [ 183.266271][ T5780] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.266593][ T5780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 183.266659][ T5780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 183.266791][ T5780] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 183.266859][ T5780] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.396455][ T5780] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 183.396795][ T5780] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 183.396935][ T5780] usb 2-1: Manufacturer: syz [ 183.859667][ T5780] usb 2-1: config 0 descriptor?? [ 184.108237][ T6326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.140'. [ 185.194518][ T5780] rc_core: IR keymap rc-hauppauge not found [ 185.194539][ T5780] Registered IR keymap rc-empty [ 185.194705][ T5780] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 185.210496][ T5780] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 185.233353][ T5780] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 185.252695][ T5780] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7 [ 185.288850][ T5780] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 185.319038][ T5780] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 185.344538][ T5780] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 185.359899][ T5780] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 185.379922][ T5780] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 185.411819][ T5780] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 185.441184][ T5780] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 185.459686][ T5780] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 185.493464][ T5780] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 185.509725][ T5780] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 185.796283][ T5780] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 185.796311][ T5780] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 186.102839][ T6337] netlink: 36 bytes leftover after parsing attributes in process `syz.3.143'. [ 186.620936][ T5780] usb 2-1: USB disconnect, device number 5 [ 186.822053][ T6326] syz.2.140 (6326) used greatest stack depth: 18568 bytes left [ 188.224227][ T5614] Bluetooth: hci2: command 0x0406 tx timeout [ 188.721674][ T59] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 188.721703][ T59] CPU: 1 UID: 0 PID: 59 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 188.721728][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 188.721742][ T59] Workqueue: hci3 hci_rx_work [ 188.721779][ T59] Call Trace: [ 188.721788][ T59] [ 188.721797][ T59] dump_stack_lvl+0xe8/0x150 [ 188.721827][ T59] sysfs_create_dir_ns+0x271/0x2a0 [ 188.721862][ T59] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 188.721891][ T59] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 188.721932][ T59] ? rt_spin_unlock+0x160/0x200 [ 188.721962][ T59] kobject_add_internal+0x631/0xd10 [ 188.721996][ T59] kobject_add+0x163/0x240 [ 188.722026][ T59] ? __pfx_kobject_add+0x10/0x10 [ 188.722058][ T59] ? get_device_parent+0x370/0x3a0 [ 188.722087][ T59] device_add+0x408/0xbb0 [ 188.722114][ T59] hci_conn_add_sysfs+0xd5/0x210 [ 188.722159][ T59] le_conn_complete_evt+0x10e6/0x16b0 [ 188.722201][ T59] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 188.722227][ T59] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 188.722261][ T59] ? lockdep_hardirqs_on+0x7a/0x110 [ 188.722296][ T59] ? skb_pull_data+0xfb/0x200 [ 188.722326][ T59] hci_le_conn_complete_evt+0x187/0x470 [ 188.722360][ T59] hci_event_packet+0x659/0xef0 [ 188.722400][ T59] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 188.722426][ T59] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 188.722448][ T59] ? __pfx_hci_event_packet+0x10/0x10 [ 188.722479][ T59] ? rt_spin_unlock+0x14f/0x200 [ 188.722517][ T59] ? hci_send_to_monitor+0xe2/0x590 [ 188.722548][ T59] hci_rx_work+0x3ee/0x1040 [ 188.722589][ T59] ? process_scheduled_works+0xa70/0x1860 [ 188.722616][ T59] process_scheduled_works+0xb5d/0x1860 [ 188.722677][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 188.722709][ T59] ? assign_work+0x3d5/0x5e0 [ 188.722739][ T59] worker_thread+0xa53/0xfc0 [ 188.722798][ T59] kthread+0x388/0x470 [ 188.722828][ T59] ? __pfx_worker_thread+0x10/0x10 [ 188.722850][ T59] ? __pfx_kthread+0x10/0x10 [ 188.722880][ T59] ret_from_fork+0x514/0xb70 [ 188.722909][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 188.722934][ T59] ? __switch_to+0xc79/0x1410 [ 188.722970][ T59] ? __pfx_kthread+0x10/0x10 [ 188.723000][ T59] ret_from_fork_asm+0x1a/0x30 [ 188.723048][ T59] [ 188.723879][ T59] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 188.723924][ T59] Bluetooth: hci3: failed to register connection device [ 192.905895][ T6374] netlink: 20 bytes leftover after parsing attributes in process `syz.3.152'. [ 192.998884][ T6374] vlan2: entered promiscuous mode [ 192.998910][ T6374] gretap0: entered promiscuous mode [ 194.274099][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.274184][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.531498][ T6393] netlink: 36 bytes leftover after parsing attributes in process `syz.0.157'. [ 195.660515][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 196.092133][ T5614] Bluetooth: hci3: command 0x0406 tx timeout [ 196.449598][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 196.452675][ T10] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 196.452701][ T10] usb 2-1: config 0 has no interface number 0 [ 196.459145][ T10] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 196.459174][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.459195][ T10] usb 2-1: Product: syz [ 196.459209][ T10] usb 2-1: Manufacturer: syz [ 196.459223][ T10] usb 2-1: SerialNumber: syz [ 196.613452][ T10] usb 2-1: config 0 descriptor?? [ 196.661711][ T10] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 197.296652][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 197.328646][ T10] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 197.369032][ T10] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 197.422072][ T10] usb 2-1: USB disconnect, device number 6 [ 197.505864][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 197.598091][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 197.611509][ T10] quatech2 2-1:0.51: device disconnected [ 197.985888][ T6408] openvswitch: netlink: EtherType 50a is less than min 600 [ 201.064920][ T6424] netlink: 20 bytes leftover after parsing attributes in process `syz.0.166'. [ 201.091398][ T6424] vlan2: entered promiscuous mode [ 201.091421][ T6424] gretap0: entered promiscuous mode [ 203.214897][ T6447] netlink: 36 bytes leftover after parsing attributes in process `syz.2.171'. [ 206.429721][ T5742] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 206.589612][ T5742] usb 1-1: Using ep0 maxpacket: 32 [ 206.618658][ T5742] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 206.662401][ T5742] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 206.662432][ T5742] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.662452][ T5742] usb 1-1: Product: syz [ 206.662466][ T5742] usb 1-1: Manufacturer: syz [ 206.662480][ T5742] usb 1-1: SerialNumber: syz [ 206.679040][ T6468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.176'. [ 206.765170][ T5742] usb 1-1: config 0 descriptor?? [ 206.863353][ T5742] usb 1-1: no audio or video endpoints found [ 207.151906][ T5742] usb 1-1: USB disconnect, device number 4 [ 212.665597][ T6511] netlink: 20 bytes leftover after parsing attributes in process `syz.0.189'. [ 214.219659][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 214.369591][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 214.372489][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 214.376301][ T9] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 214.376329][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.376350][ T9] usb 4-1: Product: syz [ 214.376364][ T9] usb 4-1: Manufacturer: syz [ 214.376378][ T9] usb 4-1: SerialNumber: syz [ 214.395307][ T9] usb 4-1: config 0 descriptor?? [ 214.417710][ T9] usb 4-1: no audio or video endpoints found [ 214.693994][ T6527] openvswitch: netlink: EtherType 50a is less than min 600 [ 215.019883][ T9] usb 4-1: USB disconnect, device number 3 [ 216.265149][ T6536] syzkaller0: entered promiscuous mode [ 216.265179][ T6536] syzkaller0: entered allmulticast mode [ 217.566446][ T5616] Bluetooth: hci3: command 0x0406 tx timeout [ 217.566487][ T5616] Bluetooth: hci0: command 0x0406 tx timeout [ 217.566509][ T5616] Bluetooth: hci2: command 0x0406 tx timeout [ 217.566542][ T5616] Bluetooth: hci1: command 0x0406 tx timeout [ 217.566561][ T5616] Bluetooth: hci4: command 0x0406 tx timeout [ 217.674800][ T6552] tipc: Started in network mode [ 217.674831][ T6552] tipc: Node identity c6bf996ce772, cluster identity 4711 [ 217.675026][ T6552] tipc: Enabled bearer , priority 0 [ 217.713843][ T6543] tipc: Started in network mode [ 217.713874][ T6543] tipc: Node identity dabed133cc83, cluster identity 4711 [ 217.714194][ T6543] tipc: Enabled bearer , priority 0 [ 217.757437][ T6535] tipc: Resetting bearer [ 217.956751][ T6535] tipc: Disabling bearer [ 218.407648][ T6556] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 218.677811][ T6541] tipc: Disabling bearer [ 219.651924][ T5728] tipc: Node number set to 373150003 [ 219.657756][ T6562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.202'. [ 219.749936][ T6562] vlan2: entered promiscuous mode [ 219.749960][ T6562] gretap0: entered promiscuous mode [ 221.844679][ T5743] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 223.470202][ T6577] Bluetooth: MGMT ver 1.23 [ 223.816744][ T5743] usb 1-1: device not accepting address 5, error -71 [ 225.581386][ T6599] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 226.523732][ T6604] ipvlan2: entered allmulticast mode [ 226.523747][ T6604] batadv_slave_1: entered allmulticast mode [ 226.557310][ T6604] batman_adv: batadv0: Adding interface: ipvlan2 [ 226.557323][ T6604] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.557339][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.557355][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.557364][ T6604] batman_adv: batadv0: Interface activated: ipvlan2 [ 226.675634][ T6606] syzkaller0: entered promiscuous mode [ 226.675653][ T6606] syzkaller0: entered allmulticast mode [ 226.893320][ T6607] tipc: Enabled bearer , priority 0 [ 226.930177][ T6605] tipc: Resetting bearer [ 228.392818][ T6605] tipc: Disabling bearer [ 228.739804][ T5743] tipc: Node number set to 567122284 [ 230.210382][ T5780] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 230.748174][ T6632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.221'. [ 230.959660][ T5780] usb 1-1: Using ep0 maxpacket: 32 [ 230.964348][ T5780] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 230.964378][ T5780] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.856754][ T5780] usb 1-1: config 0 descriptor?? [ 232.235255][ T5780] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 232.325253][ T5780] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 232.328017][ T5780] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 232.328111][ T5780] usb 1-1: media controller created [ 232.573508][ T5780] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 233.699867][ T5780] az6027: usb out operation failed. (-71) [ 233.702833][ T5780] az6027: usb out operation failed. (-71) [ 233.702851][ T5780] stb0899_attach: Driver disabled by Kconfig [ 233.702860][ T5780] az6027: no front-end attached [ 233.702860][ T5780] [ 233.706813][ T5780] az6027: usb out operation failed. (-71) [ 233.706831][ T5780] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 233.734014][ T5780] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 233.738766][ T5780] dvb-usb: schedule remote query interval to 400 msecs. [ 233.738792][ T5780] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 233.752544][ T5780] usb 1-1: USB disconnect, device number 7 [ 234.903958][ T6654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.228'. [ 234.930749][ T6654] vlan2: entered promiscuous mode [ 234.930771][ T6654] gretap0: entered promiscuous mode [ 235.680822][ T6658] binder: 6657:6658 ioctl 4018620d 0 returned -22 [ 235.681421][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 235.735094][ T5780] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 235.862153][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 235.864066][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.864096][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 236.129057][ T9] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 236.129091][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.129111][ T9] usb 2-1: Product: syz [ 236.129125][ T9] usb 2-1: Manufacturer: syz [ 236.129140][ T9] usb 2-1: SerialNumber: syz [ 236.219033][ T9] usb 2-1: selecting invalid altsetting 1 [ 236.240135][ T9] usb 2-1: unit 6 not found! [ 236.492753][ T9] usb 2-1: 2:0: cannot get min/max values for control 1 (id 2) [ 241.281186][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 241.284415][ T9] usb 2-1: USB disconnect, device number 7 [ 242.634169][ T5825] udevd[5825]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 242.952691][ T6688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.237'. [ 245.925939][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 246.031133][ T822] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 246.264696][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 246.291385][ T9] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 246.291415][ T9] usb 3-1: config 0 has no interface number 0 [ 247.136837][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 247.136870][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.136890][ T9] usb 3-1: Product: syz [ 247.136905][ T9] usb 3-1: Manufacturer: syz [ 247.136918][ T9] usb 3-1: SerialNumber: syz [ 247.202115][ T822] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 247.202147][ T822] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 247.202169][ T822] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.202197][ T822] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 247.202220][ T822] usb 2-1: config 1 has no interface number 0 [ 247.202270][ T822] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 247.202293][ T822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.207571][ T9] usb 3-1: config 0 descriptor?? [ 247.337349][ T9] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 247.395443][ T822] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 247.537097][ T822] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 247.537912][ T822] snd_usb_pod 2-1:1.1: invalid control EP [ 247.537929][ T822] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 247.597798][ T822] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 247.598477][ T822] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 248.009044][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 248.020060][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 248.158438][ T6731] openvswitch: netlink: EtherType 50a is less than min 600 [ 248.879265][ T6713] dvmrp0: entered allmulticast mode [ 248.898775][ T6729] syz_tun: entered allmulticast mode [ 248.907165][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 248.976524][ T9] usb 3-1: USB disconnect, device number 4 [ 249.255808][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 249.330672][ T822] usb 2-1: USB disconnect, device number 8 [ 249.348830][ T6735] dvmrp0: left allmulticast mode [ 249.605596][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 249.606988][ T9] quatech2 3-1:0.51: device disconnected [ 250.783737][ T822] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 250.941292][ T822] usb 5-1: Using ep0 maxpacket: 16 [ 250.966362][ T822] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 250.966391][ T822] usb 5-1: config 128 has 0 interfaces, different from the descriptor's value: 1 [ 251.004341][ T822] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 251.004374][ T822] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 251.004394][ T822] usb 5-1: Product: syz [ 251.004409][ T822] usb 5-1: Manufacturer: syz [ 251.004423][ T822] usb 5-1: SerialNumber: syz [ 251.512426][ T6749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.539688][ T6749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.608048][ T822] usb 5-1: USB disconnect, device number 2 [ 252.661360][ T6770] syzkaller0: entered promiscuous mode [ 252.661387][ T6770] syzkaller0: entered allmulticast mode [ 252.687350][ T6770] tipc: Started in network mode [ 252.687381][ T6770] tipc: Node identity babc2473efe8, cluster identity 4711 [ 252.687574][ T6770] tipc: Enabled bearer , priority 0 [ 253.005329][ T6769] tipc: Resetting bearer [ 253.164455][ T6769] tipc: Disabling bearer [ 253.329408][ T6777] netlink: 'syz.1.260': attribute type 12 has an invalid length. [ 253.329433][ T6777] netlink: 'syz.1.260': attribute type 29 has an invalid length. [ 253.329446][ T6777] netlink: 148 bytes leftover after parsing attributes in process `syz.1.260'. [ 253.355413][ T6777] netlink: 'syz.1.260': attribute type 1 has an invalid length. [ 253.355433][ T6777] netlink: 11 bytes leftover after parsing attributes in process `syz.1.260'. [ 253.357171][ T6779] netlink: 'syz.1.260': attribute type 12 has an invalid length. [ 253.357191][ T6779] netlink: 'syz.1.260': attribute type 29 has an invalid length. [ 253.357204][ T6779] netlink: 148 bytes leftover after parsing attributes in process `syz.1.260'. [ 253.357222][ T6779] netlink: 'syz.1.260': attribute type 1 has an invalid length. [ 253.357235][ T6779] netlink: 11 bytes leftover after parsing attributes in process `syz.1.260'. [ 256.451000][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.451076][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.956751][ T6818] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 258.980157][ T6817] IPVS: stopping master sync thread 6818 ... [ 260.826594][ T6833] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 260.852897][ T6832] IPVS: stopping master sync thread 6833 ... [ 262.494818][ T6844] netlink: 148 bytes leftover after parsing attributes in process `syz.2.282'. [ 265.900052][ T6870] syzkaller0: entered promiscuous mode [ 265.900080][ T6870] syzkaller0: entered allmulticast mode [ 266.027494][ T6870] tipc: Enabled bearer , priority 0 [ 266.042341][ T6875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.118953][ T6869] tipc: Resetting bearer [ 266.392635][ T6869] tipc: Disabling bearer [ 268.749637][ T9] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 268.934971][ T9] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 268.935002][ T9] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 268.935031][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.935050][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 268.935069][ T9] usb 1-1: config 1 has no interface number 0 [ 268.935118][ T9] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 268.935139][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.964184][ T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 269.194528][ T9] snd_usb_pod 1-1:1.1: endpoint not available, using fallback values [ 269.206010][ T9] snd_usb_pod 1-1:1.1: invalid control EP [ 269.206029][ T9] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 269.235359][ T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 269.236009][ T9] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 269.461361][ T6887] dvmrp0: entered allmulticast mode [ 269.495546][ T5614] Bluetooth: hci0: command 0x0406 tx timeout [ 270.089431][ T6887] syz_tun: entered allmulticast mode [ 270.200842][ T5728] usb 1-1: USB disconnect, device number 8 [ 270.217114][ T6886] dvmrp0: left allmulticast mode [ 271.162775][ T6886] ------------[ cut here ]------------ [ 271.162791][ T6886] kcov->t != t [ 271.162798][ T6886] WARNING: kernel/kcov.c:483 at kcov_task_exit+0xf5/0x160, CPU#0: syz.0.297/6886 [ 271.162841][ T6886] Modules linked in: [ 271.162864][ T6886] CPU: 0 UID: 0 PID: 6886 Comm: syz.0.297 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 271.162893][ T6886] Tainted: [L]=SOFTLOCKUP [ 271.162901][ T6886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 271.162913][ T6886] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 271.162937][ T6886] Code: 10 00 00 48 8b bb 90 00 00 00 e8 f6 ce 55 00 48 89 df 5b 41 5e 41 5f e9 c9 8f 5b 00 7c 1c 5b 41 5e 41 5f e9 8d e7 5a 09 cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 3b 80 59 09 48 89 df be 03 00 [ 271.162954][ T6886] RSP: 0018:ffffc9001bc07d20 EFLAGS: 00010202 [ 271.162981][ T6886] RAX: 762e17f65a321a00 RBX: ffff8880255f3700 RCX: 0000000000000000 [ 271.162998][ T6886] RDX: 000000003371b556 RSI: ffffffff8ba75cc0 RDI: 00000000ffffffff [ 271.163013][ T6886] RBP: ffffc9001bc07e78 R08: ffffffff8b1deb60 R09: ffffffff8dfc8100 [ 271.163028][ T6886] R10: dffffc0000000000 R11: fffffbfff1f10e1f R12: dffffc0000000000 [ 271.163044][ T6886] R13: 0000000000000000 R14: ffff8880255f3708 R15: ffff88802fc15c40 [ 271.163058][ T6886] FS: 00005555929c8500(0000) GS:ffff888126187000(0000) knlGS:0000000000000000 [ 271.163077][ T6886] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 271.163091][ T6886] CR2: 00007f3592a4a540 CR3: 00000000290a2000 CR4: 00000000003526f0 [ 271.163112][ T6886] Call Trace: [ 271.163120][ T6886] [ 271.163133][ T6886] do_exit+0x150/0x22c0 [ 271.163164][ T6886] ? lockdep_hardirqs_on+0x7a/0x110 [ 271.163199][ T6886] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 271.163233][ T6886] ? reacquire_held_locks+0x104/0x190 [ 271.163264][ T6886] ? rt_spin_lock+0x1e0/0x400 [ 271.163290][ T6886] ? __pfx_do_exit+0x10/0x10 [ 271.163319][ T6886] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 271.163359][ T6886] ? rt_spin_unlock+0x160/0x200 [ 271.163390][ T6886] do_group_exit+0x21b/0x2d0 [ 271.163446][ T6886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.163472][ T6886] __x64_sys_exit_group+0x3f/0x40 [ 271.163500][ T6886] x64_sys_call+0x221a/0x2240 [ 271.163525][ T6886] do_syscall_64+0x174/0x580 [ 271.163557][ T6886] ? trace_irq_disable+0x3b/0x140 [ 271.163583][ T6886] ? clear_bhb_loop+0x40/0x90 [ 271.163611][ T6886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.163631][ T6886] RIP: 0033:0x7fef0feece59 [ 271.163652][ T6886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.163668][ T6886] RSP: 002b:00007ffe18f1da98 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 271.163690][ T6886] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fef0feece59 [ 271.163704][ T6886] RDX: 00007fef0f149000 RSI: 0000000000000000 RDI: 0000000000000000 [ 271.163718][ T6886] RBP: 00007ffe18f1dafc R08: 0000000000000000 R09: 00000000000927c0 [ 271.163731][ T6886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000038 [ 271.163743][ T6886] R13: 00000000000927c0 R14: 000000000004108f R15: 00007ffe18f1db50 [ 271.163776][ T6886] [ 271.163787][ T6886] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 271.163804][ T6886] CPU: 0 UID: 0 PID: 6886 Comm: syz.0.297 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 271.163831][ T6886] Tainted: [L]=SOFTLOCKUP [ 271.163839][ T6886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 271.163850][ T6886] Call Trace: [ 271.163859][ T6886] [ 271.163867][ T6886] vpanic+0x56c/0xa60 [ 271.163895][ T6886] ? __pfx__printk+0x10/0x10 [ 271.163925][ T6886] ? __pfx_vpanic+0x10/0x10 [ 271.163948][ T6886] ? is_bpf_text_address+0x292/0x2b0 [ 271.163983][ T6886] ? is_bpf_text_address+0x26/0x2b0 [ 271.164021][ T6886] panic+0xc5/0xd0 [ 271.164047][ T6886] ? __pfx_panic+0x10/0x10 [ 271.164093][ T6886] __warn+0x315/0x4c0 [ 271.164123][ T6886] ? kcov_task_exit+0xf5/0x160 [ 271.164147][ T6886] ? kcov_task_exit+0xf5/0x160 [ 271.164171][ T6886] __report_bug+0x29a/0x540 [ 271.164209][ T6886] ? kcov_task_exit+0xf5/0x160 [ 271.164233][ T6886] ? __pfx___report_bug+0x10/0x10 [ 271.164263][ T6886] ? lockdep_hardirqs_on+0x7a/0x110 [ 271.164296][ T6886] ? irqentry_exit+0x218/0x8b0 [ 271.164335][ T6886] ? kcov_task_exit+0xf7/0x160 [ 271.164364][ T6886] ? kcov_task_exit+0xf5/0x160 [ 271.164387][ T6886] report_bug+0x16a/0x220 [ 271.164419][ T6886] ? kcov_task_exit+0xf5/0x160 [ 271.164439][ T6886] ? kcov_task_exit+0xf7/0x160 [ 271.164461][ T6886] handle_bug+0x9c/0x200 [ 271.164483][ T6886] exc_invalid_op+0x1a/0x50 [ 271.164507][ T6886] asm_exc_invalid_op+0x1a/0x20 [ 271.164528][ T6886] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 271.164550][ T6886] Code: 10 00 00 48 8b bb 90 00 00 00 e8 f6 ce 55 00 48 89 df 5b 41 5e 41 5f e9 c9 8f 5b 00 7c 1c 5b 41 5e 41 5f e9 8d e7 5a 09 cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 3b 80 59 09 48 89 df be 03 00 [ 271.164567][ T6886] RSP: 0018:ffffc9001bc07d20 EFLAGS: 00010202 [ 271.164585][ T6886] RAX: 762e17f65a321a00 RBX: ffff8880255f3700 RCX: 0000000000000000 [ 271.164600][ T6886] RDX: 000000003371b556 RSI: ffffffff8ba75cc0 RDI: 00000000ffffffff [ 271.164615][ T6886] RBP: ffffc9001bc07e78 R08: ffffffff8b1deb60 R09: ffffffff8dfc8100 [ 271.164630][ T6886] R10: dffffc0000000000 R11: fffffbfff1f10e1f R12: dffffc0000000000 [ 271.164645][ T6886] R13: 0000000000000000 R14: ffff8880255f3708 R15: ffff88802fc15c40 [ 271.164668][ T6886] ? rt_spin_lock+0x1e0/0x400 [ 271.164706][ T6886] do_exit+0x150/0x22c0 [ 271.164735][ T6886] ? lockdep_hardirqs_on+0x7a/0x110 [ 271.164767][ T6886] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 271.164799][ T6886] ? reacquire_held_locks+0x104/0x190 [ 271.164831][ T6886] ? rt_spin_lock+0x1e0/0x400 [ 271.164857][ T6886] ? __pfx_do_exit+0x10/0x10 [ 271.164885][ T6886] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 271.164923][ T6886] ? rt_spin_unlock+0x160/0x200 [ 271.164953][ T6886] do_group_exit+0x21b/0x2d0 [ 271.164995][ T6886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.165020][ T6886] __x64_sys_exit_group+0x3f/0x40 [ 271.165050][ T6886] x64_sys_call+0x221a/0x2240 [ 271.165076][ T6886] do_syscall_64+0x174/0x580 [ 271.165108][ T6886] ? trace_irq_disable+0x3b/0x140 [ 271.165134][ T6886] ? clear_bhb_loop+0x40/0x90 [ 271.165161][ T6886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.165183][ T6886] RIP: 0033:0x7fef0feece59 [ 271.165202][ T6886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.165219][ T6886] RSP: 002b:00007ffe18f1da98 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 271.165239][ T6886] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fef0feece59 [ 271.165253][ T6886] RDX: 00007fef0f149000 RSI: 0000000000000000 RDI: 0000000000000000 [ 271.165267][ T6886] RBP: 00007ffe18f1dafc R08: 0000000000000000 R09: 00000000000927c0 [ 271.165280][ T6886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000038 [ 271.165293][ T6886] R13: 00000000000927c0 R14: 000000000004108f R15: 00007ffe18f1db50 [ 271.165328][ T6886] [ 271.165485][ T6886] Kernel Offset: disabled