last executing test programs: 27.629100583s ago: executing program 3 (id=1932): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket(0x28, 0x5, 0x0) setsockopt$inet6_udp_encap(r3, 0x28, 0x64, 0x0, 0xff08) 26.787826954s ago: executing program 4 (id=1935): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() bpf$ITER_CREATE(0xb, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$rds(0x15, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f00000001c0)=@get={0x1, &(0x7f0000000840)=""/248, 0x1}) 23.071949578s ago: executing program 1 (id=1941): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002700)=ANY=[], 0x1015, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x0, 0x1) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x34, r4, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xa000000}]}, 0x34}}, 0x0) 22.993975729s ago: executing program 4 (id=1942): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0xb2b, {0x1, 0x7, 0x0, '\x00', {0x1, 0x38c, 0x8, 0x8, r4, r5, 0xc000, '\x00', 0xe, 0xfffffffffffff2e0, 0x100000000, 0x6, {0x6, 0x6}, {0x20000000000004, 0xfffffffe}, {0x9, 0x8fc}, {0xf, 0xa04}, 0x4000004, 0x80000b, 0x5, 0x3}}}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) close(0x3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, r3, 0x2, 0x1, 0x4}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r7, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$unix(r9, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r11 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x4000000000000, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0x8, 0xfa04, 0xc8, 0x6c02, 0x1f8, 0x194, 0x194, 0x1f8, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0xff000000, 0xff000000, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6, 0x2, 0xc}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [0x4e23], 0x0, 0x1, 0xc2, 0x5}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xfbff}}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@unspec=@connmark={{0x30}, {0x3, 0xe}}, @common=@ah={{0x30}, {[0x1, 0x5]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x3, 0x2, 0x3, 0x7, 0x0, 0x4], 0x0, 0x7}, {0x3, [0x3, 0x0, 0x2, 0x0, 0x0, 0x1], 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) 22.596148647s ago: executing program 3 (id=1943): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000002c0)={0x7f, 0x0, 0x0, 0xb9ff, 0xa}) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x80, 0x0, 0x0, 0x20, '\b\x00\x00\x00\x00 \x00\x00\x00\x00\"\x00'}) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 21.773129449s ago: executing program 0 (id=1945): sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB=' '], 0x20}, 0x1, 0x0, 0x0, 0x24000044}, 0x40) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f"], 0x4b) 21.622443722s ago: executing program 4 (id=1946): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="20304e0000005f1ef0e597ec621a3d62655eebcfb34fb05033a2c48947020000000000000052708a67ccbf5545d7164bb064cc3335b5759ca7228427547b6c"], 0x0, 0x0, 0x0, 0x0, 0x0}) 21.373393823s ago: executing program 0 (id=1948): sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002100)=[{{0x0, 0x0, 0x0}, 0xf424}], 0x1, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="30e01b3981ddca14"], 0x1000f) 21.22154244s ago: executing program 0 (id=1949): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r5, &(0x7f0000000080), 0x2000011a) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) 21.051483123s ago: executing program 3 (id=1950): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r4], 0x54}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r7, @ANYBLOB="0174df"], 0x20}}, 0x0) 19.572167778s ago: executing program 3 (id=1952): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() bpf$ITER_CREATE(0xb, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$rds(0x15, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f00000001c0)=@get={0x1, &(0x7f0000000840)=""/248, 0x1}) 18.454489169s ago: executing program 1 (id=1953): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket(0x28, 0x5, 0x0) setsockopt$inet6_udp_encap(r3, 0x28, 0x64, 0x0, 0xff08) 18.111463794s ago: executing program 3 (id=1954): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}]}]}}]}, 0x40}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000054000380500000803e0001"], 0x80}}, 0x8000) 17.039781832s ago: executing program 1 (id=1955): syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40440) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c800"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x0, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200009, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0x7, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x8001, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x2, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x9, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x10006, 0xa, 0xffffffff, 0x80000000, 0x5, 0x2, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xf8a4, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 17.039283839s ago: executing program 4 (id=1956): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002300)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064daa2bac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb8a2defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35302d0acbab45c0973198291bb42b4cfcd3b0c272074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e1024a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b6732ced59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63dd4bac9e4d00645cd7b2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b4dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede57b9609e1f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d82dffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210749fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0feaed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d7a3be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1e14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a7a33a328137a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e557c1480c2a2a0efa221fc59054a48122b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4aae137ea3d29070ce3bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589acb484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca36507002b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8098fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b3", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0xb2b, {0x1, 0x7, 0x0, '\x00', {0x1, 0x38c, 0x8, 0x8, r4, r5, 0xc000, '\x00', 0xe, 0xfffffffffffff2e0, 0x100000000, 0x6, {0x6, 0x6}, {0x20000000000004, 0xfffffffe}, {0x9, 0x8fc}, {0xf, 0xa04}, 0x4000004, 0x80000b, 0x5, 0x3}}}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) close(0x3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, r3, 0x2, 0x1, 0x4}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r7, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$unix(r9, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r11 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x4000000000000, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0x8, 0xfa04, 0xc8, 0x6c02, 0x1f8, 0x194, 0x194, 0x1f8, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0xff000000, 0xff000000, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6, 0x2, 0xc}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [0x4e23], 0x0, 0x1, 0xc2, 0x5}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xfbff}}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@unspec=@connmark={{0x30}, {0x3, 0xe}}, @common=@ah={{0x30}, {[0x1, 0x5]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x3, 0x2, 0x3, 0x7, 0x0, 0x4], 0x0, 0x7}, {0x3, [0x3, 0x0, 0x2, 0x0, 0x0, 0x1], 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) 16.640617239s ago: executing program 0 (id=1957): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f00000000c0)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000380)="e8", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) shutdown(r0, 0x1) 15.899800799s ago: executing program 0 (id=1958): sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB=' '], 0x20}, 0x1, 0x0, 0x0, 0x24000044}, 0x40) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e"], 0x4b) 15.675730284s ago: executing program 2 (id=1959): sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002100)=[{{0x0, 0x0, 0x0}, 0xf424}], 0x1, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="30e01b3981ddca14"], 0x1000f) 15.665042866s ago: executing program 4 (id=1960): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000002c0)={0x7f, 0x0, 0x0, 0xb9ff, 0xa}) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x80, 0x0, 0x0, 0x20, '\b\x00\x00\x00\x00 \x00\x00\x00\x00\"\x00'}) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 15.471090971s ago: executing program 1 (id=1961): socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000002480), 0xce4, r0}, 0x38) 15.331072427s ago: executing program 2 (id=1962): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r4], 0x54}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r7, @ANYBLOB="0174df"], 0x20}}, 0x0) 15.223911494s ago: executing program 0 (id=1963): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002700)=ANY=[], 0x1015, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x0, 0x1) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x34, r4, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xa000000}]}, 0x34}}, 0x0) 15.08751083s ago: executing program 2 (id=1964): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() bpf$ITER_CREATE(0xb, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$rds(0x15, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f00000001c0)=@get={0x1, &(0x7f0000000840)=""/248, 0x1}) 14.66099969s ago: executing program 1 (id=1965): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 14.590913959s ago: executing program 4 (id=1966): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 13.347894824s ago: executing program 1 (id=1967): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r5, &(0x7f0000000080), 0x2000011a) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) 13.31835201s ago: executing program 2 (id=1968): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f00000000c0)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000380)="e8", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) shutdown(r0, 0x1) 13.13849631s ago: executing program 2 (id=1969): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xcc657405ba8b63ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1aa6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000140)={0x0, 0x1, 0x0, "ee471a55b5e2c266422ef07bbfd7a61e37466e060403bbd8115bd48970e86a02"}) add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff) openat$dsp(0xffffffffffffff9c, 0x0, 0x8041, 0x0) socket$netlink(0x10, 0x3, 0x0) 11.792958792s ago: executing program 2 (id=1970): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0xb2b, {0x1, 0x7, 0x0, '\x00', {0x1, 0x38c, 0x8, 0x8, r4, r5, 0xc000, '\x00', 0xe, 0xfffffffffffff2e0, 0x100000000, 0x6, {0x6, 0x6}, {0x20000000000004, 0xfffffffe}, {0x9, 0x8fc}, {0xf, 0xa04}, 0x4000004, 0x80000b, 0x5, 0x3}}}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) close(0x3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, r3, 0x2, 0x1, 0x4}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r7, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$unix(r9, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r11 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x4000000000000, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0x8, 0xfa04, 0xc8, 0x6c02, 0x1f8, 0x194, 0x194, 0x1f8, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0xff000000, 0xff000000, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6, 0x2, 0xc}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [0x4e23], 0x0, 0x1, 0xc2, 0x5}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xfbff}}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@unspec=@connmark={{0x30}, {0x3, 0xe}}, @common=@ah={{0x30}, {[0x1, 0x5]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x3, 0x2, 0x3, 0x7, 0x0, 0x4], 0x0, 0x7}, {0x3, [0x3, 0x0, 0x2, 0x0, 0x0, 0x1], 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) 11.13481529s ago: executing program 3 (id=1971): syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40440) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c800"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x0, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200009, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0x7, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x8001, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x2, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x9, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x10006, 0xa, 0xffffffff, 0x80000000, 0x5, 0x2, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xf8a4, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 0s ago: executing program 32 (id=1963): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002700)=ANY=[], 0x1015, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x0, 0x1) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x34, r4, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xa000000}]}, 0x34}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.3' (ED25519) to the list of known hosts. [ 86.670339][ T5786] cgroup: Unknown subsys name 'net' [ 86.891711][ T5786] cgroup: Unknown subsys name 'cpuset' [ 86.926302][ T5786] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.011557][ T5786] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.916452][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.918666][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.919442][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.920771][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.927348][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.992776][ T5804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.995058][ T5804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.011409][ T5804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.013847][ T5804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.014958][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.038944][ T5801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.056271][ T5807] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.060318][ T5807] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.085738][ T5807] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.101057][ T5807] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.152670][ T3120] cfg80211: failed to load regulatory.db [ 92.214286][ T5804] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.226148][ T5804] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.232664][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.239070][ T5804] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.262729][ T5804] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.262988][ T5804] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.263822][ T5804] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.287840][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.289715][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.293467][ T5114] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.043385][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 93.372735][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 93.432534][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 93.836929][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 93.843144][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.843250][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.843938][ T5798] bridge_slave_0: entered allmulticast mode [ 93.849682][ T5798] bridge_slave_0: entered promiscuous mode [ 93.860496][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 93.901611][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.901734][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.902090][ T5798] bridge_slave_1: entered allmulticast mode [ 93.903994][ T5798] bridge_slave_1: entered promiscuous mode [ 93.987129][ T5807] Bluetooth: hci0: command tx timeout [ 94.155751][ T5807] Bluetooth: hci2: command tx timeout [ 94.225716][ T5807] Bluetooth: hci1: command tx timeout [ 94.305787][ T5807] Bluetooth: hci3: command tx timeout [ 94.385865][ T5807] Bluetooth: hci4: command tx timeout [ 94.549371][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.567091][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.567374][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.567584][ T5802] bridge_slave_0: entered allmulticast mode [ 94.569627][ T5802] bridge_slave_0: entered promiscuous mode [ 94.687180][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.696411][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.696595][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.696822][ T5802] bridge_slave_1: entered allmulticast mode [ 94.699963][ T5802] bridge_slave_1: entered promiscuous mode [ 94.702813][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.702963][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.703246][ T5805] bridge_slave_0: entered allmulticast mode [ 94.708522][ T5805] bridge_slave_0: entered promiscuous mode [ 94.886691][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.886819][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.886986][ T5805] bridge_slave_1: entered allmulticast mode [ 94.888926][ T5805] bridge_slave_1: entered promiscuous mode [ 95.299434][ T5798] team0: Port device team_slave_0 added [ 95.490852][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.596799][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.597012][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.597209][ T5808] bridge_slave_0: entered allmulticast mode [ 95.599743][ T5808] bridge_slave_0: entered promiscuous mode [ 95.605055][ T5798] team0: Port device team_slave_1 added [ 95.639874][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.639966][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.640139][ T5810] bridge_slave_0: entered allmulticast mode [ 95.642044][ T5810] bridge_slave_0: entered promiscuous mode [ 95.648919][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.654232][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.654525][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.654680][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.654882][ T5808] bridge_slave_1: entered allmulticast mode [ 95.658978][ T5808] bridge_slave_1: entered promiscuous mode [ 95.800154][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.800293][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.800507][ T5810] bridge_slave_1: entered allmulticast mode [ 95.803402][ T5810] bridge_slave_1: entered promiscuous mode [ 95.909793][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.066935][ T5807] Bluetooth: hci0: command tx timeout [ 96.225813][ T5807] Bluetooth: hci2: command tx timeout [ 96.315736][ T5807] Bluetooth: hci1: command tx timeout [ 96.378178][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.378193][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.378213][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.395587][ T5807] Bluetooth: hci3: command tx timeout [ 96.465772][ T5807] Bluetooth: hci4: command tx timeout [ 96.481391][ T5802] team0: Port device team_slave_0 added [ 96.620881][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.621791][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.621807][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.621835][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.627265][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.630945][ T5802] team0: Port device team_slave_1 added [ 96.634332][ T5805] team0: Port device team_slave_0 added [ 96.641381][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.660857][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.748338][ T5805] team0: Port device team_slave_1 added [ 97.157641][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.157660][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.157687][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.308567][ T5808] team0: Port device team_slave_0 added [ 97.311110][ T5810] team0: Port device team_slave_0 added [ 97.312348][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.312364][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.312391][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.314973][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.314986][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.315007][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.430132][ T5808] team0: Port device team_slave_1 added [ 97.432247][ T5810] team0: Port device team_slave_1 added [ 97.445059][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.445080][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.445112][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.463384][ T5798] hsr_slave_0: entered promiscuous mode [ 97.465405][ T5798] hsr_slave_1: entered promiscuous mode [ 97.970691][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.970709][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.970728][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.972080][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.972105][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.972132][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.145820][ T5807] Bluetooth: hci0: command tx timeout [ 98.160998][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.161019][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.161050][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.162912][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.162928][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.162959][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.305791][ T5807] Bluetooth: hci2: command tx timeout [ 98.341113][ T5802] hsr_slave_0: entered promiscuous mode [ 98.342200][ T5802] hsr_slave_1: entered promiscuous mode [ 98.342995][ T5802] debugfs: 'hsr0' already exists in 'hsr' [ 98.343102][ T5802] Cannot create hsr debugfs directory [ 98.386104][ T5807] Bluetooth: hci1: command tx timeout [ 98.465747][ T5807] Bluetooth: hci3: command tx timeout [ 98.529262][ T5805] hsr_slave_0: entered promiscuous mode [ 98.530259][ T5805] hsr_slave_1: entered promiscuous mode [ 98.530973][ T5805] debugfs: 'hsr0' already exists in 'hsr' [ 98.530995][ T5805] Cannot create hsr debugfs directory [ 98.545678][ T5807] Bluetooth: hci4: command tx timeout [ 99.183212][ T5808] hsr_slave_0: entered promiscuous mode [ 99.185326][ T5808] hsr_slave_1: entered promiscuous mode [ 99.188913][ T5808] debugfs: 'hsr0' already exists in 'hsr' [ 99.188944][ T5808] Cannot create hsr debugfs directory [ 99.284718][ T5810] hsr_slave_0: entered promiscuous mode [ 99.286930][ T5810] hsr_slave_1: entered promiscuous mode [ 99.288370][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 99.288401][ T5810] Cannot create hsr debugfs directory [ 100.225908][ T5807] Bluetooth: hci0: command tx timeout [ 100.385912][ T5807] Bluetooth: hci2: command tx timeout [ 100.465686][ T5807] Bluetooth: hci1: command tx timeout [ 100.532324][ T5798] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.546089][ T5807] Bluetooth: hci3: command tx timeout [ 100.568395][ T5798] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.602296][ T5798] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.627770][ T5807] Bluetooth: hci4: command tx timeout [ 100.634541][ T5798] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.762537][ T5802] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.805484][ T5802] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.856724][ T5802] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 100.901509][ T5802] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 100.997108][ T5805] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.047881][ T5805] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.107990][ T5805] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.167715][ T5805] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.322804][ T5808] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.363138][ T5808] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.395755][ T5808] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.441134][ T5808] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.599250][ T5810] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 101.639015][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.640134][ T5810] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 101.678946][ T5810] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 101.716539][ T5810] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 101.833954][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.861946][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.881388][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.881916][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.931356][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.931503][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.983703][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.006832][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.034773][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.035405][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.081236][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.081385][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.138334][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.169622][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.185144][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.185298][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.234066][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.234217][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.310631][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.344067][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.373784][ T3181] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.373931][ T3181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.446614][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.446777][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.512785][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.561506][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.561685][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.618940][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.619108][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.682452][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.974643][ T5798] veth0_vlan: entered promiscuous mode [ 103.045257][ T5798] veth1_vlan: entered promiscuous mode [ 103.149100][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.226759][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.273348][ T5798] veth0_macvtap: entered promiscuous mode [ 103.310928][ T5798] veth1_macvtap: entered promiscuous mode [ 103.400539][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.417637][ T5802] veth0_vlan: entered promiscuous mode [ 103.425225][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.442351][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.458712][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.490714][ T5805] veth0_vlan: entered promiscuous mode [ 103.502183][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.522929][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.537962][ T5802] veth1_vlan: entered promiscuous mode [ 103.540430][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.560737][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.640291][ T5805] veth1_vlan: entered promiscuous mode [ 103.964681][ T5802] veth0_macvtap: entered promiscuous mode [ 103.971441][ T5808] veth0_vlan: entered promiscuous mode [ 103.985372][ T1010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.985394][ T1010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.031482][ T5802] veth1_macvtap: entered promiscuous mode [ 104.046665][ T5805] veth0_macvtap: entered promiscuous mode [ 104.091553][ T5808] veth1_vlan: entered promiscuous mode [ 104.105007][ T5805] veth1_macvtap: entered promiscuous mode [ 104.124982][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.125004][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.152410][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.186541][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.227400][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.249287][ T5810] veth0_vlan: entered promiscuous mode [ 104.251301][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.258675][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.265290][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.266593][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.278250][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.333223][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.335425][ T5810] veth1_vlan: entered promiscuous mode [ 104.355256][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.359570][ T5808] veth0_macvtap: entered promiscuous mode [ 104.364423][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.372915][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.452453][ T5808] veth1_macvtap: entered promiscuous mode [ 104.792817][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.900048][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.900071][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.905106][ T5810] veth0_macvtap: entered promiscuous mode [ 104.919423][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.983086][ T5810] veth1_macvtap: entered promiscuous mode [ 105.024110][ T68] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.038503][ T68] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.057533][ T68] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.061625][ T1010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.061645][ T1010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.073409][ T68] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.309653][ T1010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.309676][ T1010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.370975][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.627379][ T1010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.627402][ T1010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.638000][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.599830][ T5924] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7'. [ 106.621964][ T68] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.627039][ T5924] Zero length message leads to an empty skb [ 106.646512][ T68] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.692767][ T68] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.697285][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.697309][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.750157][ T68] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.743205][ T5940] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 109.069092][ T5947] netlink: 'syz.0.11': attribute type 29 has an invalid length. [ 109.132162][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.132184][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.276641][ T5950] netlink: 'syz.0.11': attribute type 29 has an invalid length. [ 109.558352][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.558375][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.770985][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.771008][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.427254][ T5991] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.786331][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.786534][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.026738][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.035060][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.400163][ T6011] syz.1.34 uses obsolete (PF_INET,SOCK_PACKET) [ 114.017412][ T6021] netlink: 24 bytes leftover after parsing attributes in process `syz.0.38'. [ 115.885570][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.261316][ T6076] tipc: Started in network mode [ 119.261349][ T6076] tipc: Node identity aaaaaaaaaa16, cluster identity 4711 [ 119.262183][ T6076] tipc: Enabled bearer , priority 10 [ 120.333111][ T991] tipc: Node number set to 12364458 [ 122.895566][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 123.135614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 128.545608][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 129.636511][ T6180] netlink: 16 bytes leftover after parsing attributes in process `syz.2.97'. [ 130.027720][ T6187] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 130.996690][ T6186] netlink: 24 bytes leftover after parsing attributes in process `syz.2.99'. [ 132.642273][ T6207] netlink: 20 bytes leftover after parsing attributes in process `syz.4.106'. [ 133.085609][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 133.086753][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 135.693136][ T6235] netlink: 48 bytes leftover after parsing attributes in process `syz.2.113'. [ 136.180696][ T6245] netlink: 20 bytes leftover after parsing attributes in process `syz.4.117'. [ 137.941471][ T6267] netlink: 48 bytes leftover after parsing attributes in process `syz.3.125'. [ 138.237836][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.237932][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.312036][ T6274] netlink: 24 bytes leftover after parsing attributes in process `syz.0.129'. [ 138.396077][ T6276] netlink: 20 bytes leftover after parsing attributes in process `syz.0.131'. [ 138.583725][ T6280] fuse: Bad value for 'fd' [ 140.000704][ T6298] netlink: 36 bytes leftover after parsing attributes in process `syz.2.136'. [ 140.603592][ T6312] netlink: 24 bytes leftover after parsing attributes in process `syz.2.141'. [ 141.152464][ T6325] netlink: 20 bytes leftover after parsing attributes in process `syz.0.143'. [ 142.043930][ T6328] fuse: Bad value for 'fd' [ 142.320944][ T6338] netlink: 'syz.0.151': attribute type 13 has an invalid length. [ 142.600658][ T6344] netlink: 36 bytes leftover after parsing attributes in process `syz.3.153'. [ 142.796441][ T6338] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.807383][ T6338] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.227361][ T6350] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 143.473360][ T6338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.493376][ T6338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.160578][ T6357] netlink: 20 bytes leftover after parsing attributes in process `syz.1.156'. [ 145.715395][ T3181] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.739070][ T3181] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.739126][ T3181] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.739167][ T3181] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.387655][ T6391] netlink: 20 bytes leftover after parsing attributes in process `syz.1.167'. [ 149.550601][ T6400] netlink: 24 bytes leftover after parsing attributes in process `syz.2.169'. [ 149.688932][ T6403] netlink: 36 bytes leftover after parsing attributes in process `syz.4.173'. [ 152.798898][ T6425] sctp: [Deprecated]: syz.4.178 (pid 6425) Use of int in max_burst socket option. [ 152.798898][ T6425] Use struct sctp_assoc_value instead [ 153.549678][ T6432] netlink: 20 bytes leftover after parsing attributes in process `syz.2.180'. [ 154.605355][ T6437] capability: warning: `syz.1.183' uses deprecated v2 capabilities in a way that may be insecure [ 154.738385][ T6440] netlink: 24 bytes leftover after parsing attributes in process `syz.2.184'. [ 154.822369][ T6444] netlink: 24 bytes leftover after parsing attributes in process `syz.3.188'. [ 156.845923][ T5886] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 157.009807][ T6461] lo speed is unknown, defaulting to 1000 [ 157.010014][ T6461] lo speed is unknown, defaulting to 1000 [ 157.036420][ T6461] lo speed is unknown, defaulting to 1000 [ 157.044950][ T6461] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 157.084302][ T6461] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 157.154624][ T5886] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 157.154654][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.301085][ T5886] usb 5-1: config 0 descriptor?? [ 157.427189][ T5886] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 157.462737][ T6461] lo speed is unknown, defaulting to 1000 [ 157.494011][ T6461] lo speed is unknown, defaulting to 1000 [ 157.506317][ T6461] lo speed is unknown, defaulting to 1000 [ 157.516971][ T6461] lo speed is unknown, defaulting to 1000 [ 157.563051][ T991] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 157.676927][ T6461] lo speed is unknown, defaulting to 1000 [ 157.732067][ T5886] gp8psk: usb in 128 operation failed. [ 157.836168][ T991] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 157.836289][ T991] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 157.837829][ T991] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 157.837863][ T991] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 157.837959][ T991] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 157.837989][ T991] usb 3-1: config 0 interface 0 has no altsetting 0 [ 157.846406][ T991] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 157.846440][ T991] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 157.846462][ T991] usb 3-1: Product: syz [ 157.846534][ T991] usb 3-1: Manufacturer: syz [ 157.846550][ T991] usb 3-1: SerialNumber: syz [ 157.934418][ T5886] gp8psk: usb in 146 operation failed. [ 157.934440][ T5886] gp8psk: failed to get FW version [ 157.935578][ T5886] gp8psk: usb in 149 operation failed. [ 157.935594][ T5886] gp8psk: failed to get FPGA version [ 158.137371][ T991] usb 3-1: config 0 descriptor?? [ 158.161919][ T5886] gp8psk: usb out operation failed. [ 158.161952][ T5886] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 158.161995][ T5886] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 158.432379][ T6462] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 159.353101][ T991] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 159.368503][ T5886] usb 5-1: USB disconnect, device number 2 [ 159.471107][ T991] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 159.771372][ T991] usb 3-1: USB disconnect, device number 2 [ 159.804193][ T991] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 159.845720][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 159.972164][ T6490] netlink: 24 bytes leftover after parsing attributes in process `syz.4.199'. [ 160.054415][ T10] usb 2-1: config 0 has no interfaces? [ 160.062370][ T10] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 160.062399][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.062420][ T10] usb 2-1: Product: syz [ 160.062436][ T10] usb 2-1: Manufacturer: syz [ 160.062451][ T10] usb 2-1: SerialNumber: syz [ 160.082511][ T10] usb 2-1: config 0 descriptor?? [ 162.582616][ T5788] usb 2-1: USB disconnect, device number 2 [ 164.750717][ T10] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 165.889612][ T10] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 165.889661][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 165.889705][ T10] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 165.889733][ T10] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 165.889762][ T10] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 165.889790][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 165.892443][ T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 165.892465][ T10] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 165.892481][ T10] usb 2-1: Product: syz [ 165.892491][ T10] usb 2-1: Manufacturer: syz [ 165.892502][ T10] usb 2-1: SerialNumber: syz [ 166.044985][ T10] usb 2-1: config 0 descriptor?? [ 166.045634][ T5788] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 166.050348][ T6529] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 166.059817][ T10] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 166.417194][ T10] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 166.483552][ T5788] usb 4-1: config 0 has no interfaces? [ 167.295744][ T5788] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 167.295776][ T5788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.295796][ T5788] usb 4-1: Product: syz [ 167.295813][ T5788] usb 4-1: Manufacturer: syz [ 167.295829][ T5788] usb 4-1: SerialNumber: syz [ 167.307099][ T5807] Bluetooth: hci2: Unable to find connection for big 0x00 [ 167.353087][ T5788] usb 4-1: config 0 descriptor?? [ 169.065084][ T5886] usb 2-1: USB disconnect, device number 3 [ 169.088460][ T5886] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 170.208291][ T6578] netlink: 68 bytes leftover after parsing attributes in process `syz.2.230'. [ 173.119342][ T5886] usb 4-1: USB disconnect, device number 2 [ 173.620037][ T6601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.239'. [ 174.059776][ T6608] ALSA: mixer_oss: invalid OSS volume 'VMIX' [ 174.546361][ T6619] netlink: 16 bytes leftover after parsing attributes in process `syz.3.249'. [ 174.821918][ T6624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.252'. [ 176.992905][ T6649] lo speed is unknown, defaulting to 1000 [ 183.529890][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.280'. [ 184.311069][ T5807] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 184.311208][ T5807] Bluetooth: hci2: Injecting HCI hardware error event [ 184.312842][ T5807] Bluetooth: hci2: hardware error 0x00 [ 185.363923][ T6716] lo speed is unknown, defaulting to 1000 [ 185.815961][ T6723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.287'. [ 186.625735][ T5807] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 190.932885][ T6771] lo speed is unknown, defaulting to 1000 [ 198.588272][ T6852] lo speed is unknown, defaulting to 1000 [ 199.682538][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.682592][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.601655][ T6915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.354'. [ 207.069565][ T6949] lo speed is unknown, defaulting to 1000 [ 207.411660][ T6956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.369'. [ 212.189813][ T7003] usb usb8: usbfs: process 7003 (syz.3.386) did not claim interface 0 before use [ 212.902653][ T7013] lo speed is unknown, defaulting to 1000 [ 217.942696][ T5801] Bluetooth: hci0: command 0x0406 tx timeout [ 217.942745][ T5801] Bluetooth: hci3: command 0x0406 tx timeout [ 217.942771][ T5801] Bluetooth: hci1: command 0x0406 tx timeout [ 230.046635][ T5788] IPVS: starting estimator thread 0... [ 230.160891][ T7157] IPVS: using max 7 ests per chain, 16800 per kthread [ 242.316667][ T7264] netlink: 'syz.3.473': attribute type 3 has an invalid length. [ 243.008740][ T5807] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 246.737977][ T5807] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 246.818724][ C0] vkms_vblank_simulate: vblank timer overrun [ 247.759918][ T5807] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 247.760224][ T5807] Bluetooth: hci3: Injecting HCI hardware error event [ 247.762971][ T5804] Bluetooth: hci3: hardware error 0x00 [ 248.268361][ C0] vkms_vblank_simulate: vblank timer overrun [ 249.035095][ C0] vkms_vblank_simulate: vblank timer overrun [ 250.155780][ T5804] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 250.191403][ T7341] : entered promiscuous mode [ 250.619666][ C0] vkms_vblank_simulate: vblank timer overrun [ 250.789301][ T5804] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 250.789583][ T5804] Bluetooth: hci0: Injecting HCI hardware error event [ 250.792368][ T5804] Bluetooth: hci0: hardware error 0x00 [ 251.805888][ T7357] fuse: Bad value for 'fd' [ 252.486035][ T7364] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 253.055954][ T7366] autofs4:pid:7366:validate_dev_ioctl: path string terminator missing for cmd(0xc0189373) [ 254.416331][ T7379] syz.0.511 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 255.645587][ T5804] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 257.517073][ T7401] fuse: Bad value for 'fd' [ 260.374410][ T7419] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 261.276254][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.276340][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.928843][ T7444] usb usb8: usbfs: process 7444 (syz.3.531) did not claim interface 0 before use [ 264.256633][ T7453] binder: BINDER_SET_CONTEXT_MGR already set [ 264.256650][ T7453] binder: 7449:7453 ioctl 4018620d 2000000002c0 returned -16 [ 265.776112][ T7481] netlink: 32 bytes leftover after parsing attributes in process `syz.2.543'. [ 267.086872][ T7485] usb usb8: usbfs: process 7485 (syz.2.546) did not claim interface 0 before use [ 267.783487][ T7497] ALSA: mixer_oss: invalid OSS volume 'VMIX' [ 269.353551][ T5804] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 269.354159][ T5804] Bluetooth: hci4: Injecting HCI hardware error event [ 269.366374][ T5804] Bluetooth: hci4: hardware error 0x00 [ 269.399122][ T7507] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 270.231122][ T7509] netlink: 32 bytes leftover after parsing attributes in process `syz.0.556'. [ 273.207737][ T7533] fuse: Unknown parameter 'group_i00000000000000000000' [ 273.616648][ T7539] netlink: 'syz.0.569': attribute type 13 has an invalid length. [ 273.666622][ T5804] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 274.817327][ T7546] netlink: 32 bytes leftover after parsing attributes in process `syz.2.570'. [ 276.493861][ T7564] fuse: Unknown parameter 'group_i00000000000000000000' [ 276.631176][ T7566] ALSA: mixer_oss: invalid OSS volume 'VMIX' [ 277.191982][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.574'. [ 279.442760][ T7591] netlink: 20 bytes leftover after parsing attributes in process `syz.0.586'. [ 283.677342][ T7597] fuse: Unknown parameter 'group_i00000000000000000000' [ 286.253087][ T7619] netlink: 'syz.3.596': attribute type 13 has an invalid length. [ 286.253114][ T7619] netlink: 'syz.3.596': attribute type 27 has an invalid length. [ 286.552613][ T7626] fuse: Unknown parameter 'group_id00000000000000000000' [ 287.482061][ T7634] netlink: 20 bytes leftover after parsing attributes in process `syz.1.600'. [ 292.528039][ T7667] netlink: 'syz.3.611': attribute type 13 has an invalid length. [ 292.528068][ T7667] netlink: 'syz.3.611': attribute type 27 has an invalid length. [ 295.330856][ T7699] netlink: 'syz.2.625': attribute type 13 has an invalid length. [ 295.330884][ T7699] netlink: 28 bytes leftover after parsing attributes in process `syz.2.625'. [ 295.537292][ T7702] netlink: 20 bytes leftover after parsing attributes in process `syz.3.615'. [ 297.919966][ T7715] ALSA: mixer_oss: invalid OSS volume 'VMIX' [ 297.919990][ T7715] ALSA: mixer_oss: invalid OSS volume 'MON' [ 300.067425][ T7732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.633'. [ 300.771220][ T7743] syz.1.639 (7743) used greatest stack depth: 17688 bytes left [ 308.609046][ T7839] binder: 7837:7839 ioctl 4018620d 0 returned -22 [ 309.773116][ T7869] binder: 7868:7869 ioctl 4018620d 0 returned -22 [ 310.047392][ T7873] fuse: Unknown parameter 'group_i00000000000000000000' [ 314.775691][ T44] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 315.375642][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 315.383241][ T44] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 315.383275][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.383296][ T44] usb 4-1: Product: syz [ 315.383313][ T44] usb 4-1: Manufacturer: syz [ 315.383329][ T44] usb 4-1: SerialNumber: syz [ 315.487118][ T44] usb 4-1: config 0 descriptor?? [ 315.558554][ T44] usb 4-1: selecting invalid altsetting 3 [ 315.558583][ T44] comedi comedi5: could not set alternate setting 3 in high speed [ 315.558600][ T44] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 315.615151][ T44] usbdux 4-1:0.0: probe with driver usbdux failed with error -22 [ 315.728456][ T991] usb 4-1: USB disconnect, device number 3 [ 317.577183][ T7932] fuse: Bad value for 'fd' [ 322.607806][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.607886][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.145683][ T7978] netlink: 68 bytes leftover after parsing attributes in process `syz.4.724'. [ 323.295664][ T991] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 323.416656][ T7980] fuse: Bad value for 'fd' [ 323.478517][ T991] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 323.478549][ T991] usb 4-1: config 0 has no interface number 0 [ 323.482089][ T991] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 323.482123][ T991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.482146][ T991] usb 4-1: Product: syz [ 323.482161][ T991] usb 4-1: Manufacturer: syz [ 323.482189][ T991] usb 4-1: SerialNumber: syz [ 323.552902][ T991] usb 4-1: config 0 descriptor?? [ 323.757765][ T7984] binder: BINDER_SET_CONTEXT_MGR already set [ 323.757783][ T7984] binder: 7983:7984 ioctl 4018620d 2000000002c0 returned -16 [ 324.897327][ T991] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 325.065687][ T991] usb 4-1: USB disconnect, device number 4 [ 328.359759][ T8022] netlink: 68 bytes leftover after parsing attributes in process `syz.4.737'. [ 329.173527][ T8028] fuse: Unknown parameter 'use00000000000000000000' [ 331.203213][ T8051] netlink: 68 bytes leftover after parsing attributes in process `syz.4.751'. [ 331.519329][ T8055] netlink: 48 bytes leftover after parsing attributes in process `syz.3.753'. [ 331.713431][ T8061] lo speed is unknown, defaulting to 1000 [ 333.099159][ T8071] fuse: Unknown parameter 'use00000000000000000000' [ 333.319145][ T8076] netlink: 'syz.4.760': attribute type 1 has an invalid length. [ 333.319173][ T8076] netlink: 208 bytes leftover after parsing attributes in process `syz.4.760'. [ 333.319205][ T8076] netlink: 'syz.4.760': attribute type 1 has an invalid length. [ 333.319219][ T8076] netlink: 'syz.4.760': attribute type 2 has an invalid length. [ 335.056988][ T8105] debugfs: 'ttyS3' already exists in 'caif_serial' [ 335.161413][ T8112] fuse: Unknown parameter 'use00000000000000000000' [ 337.080012][ T8123] comedi comedi3: comedi_config --init_data is deprecated [ 340.504396][ T8143] netlink: 48 bytes leftover after parsing attributes in process `syz.3.779'. [ 341.109309][ T8159] fuse: Unknown parameter 'user_i00000000000000000000' [ 344.596130][ T8182] netlink: 68 bytes leftover after parsing attributes in process `syz.0.790'. [ 345.301637][ T8192] netlink: 48 bytes leftover after parsing attributes in process `syz.4.795'. [ 345.976822][ T8199] netlink: 36 bytes leftover after parsing attributes in process `syz.4.797'. [ 346.429278][ T8216] netlink: 'syz.0.806': attribute type 10 has an invalid length. [ 346.527147][ T8219] netlink: 48 bytes leftover after parsing attributes in process `syz.1.807'. [ 346.532679][ T8217] netlink: 68 bytes leftover after parsing attributes in process `syz.2.804'. [ 346.834078][ T8225] debugfs: 'ttyS3' already exists in 'caif_serial' [ 346.850339][ T8216] team0: Device ipvlan1 failed to register rx_handler [ 348.078637][ T8238] netlink: 36 bytes leftover after parsing attributes in process `syz.4.813'. [ 350.227590][ T8266] netlink: 68 bytes leftover after parsing attributes in process `syz.4.820'. [ 350.482063][ T8271] debugfs: 'ttyS3' already exists in 'caif_serial' [ 352.180032][ T8292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.210353][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.828'. [ 352.243710][ T8292] bond0: (slave rose0): Enslaving as an active interface with an up link [ 352.261417][ T8294] netlink: 'syz.0.828': attribute type 1 has an invalid length. [ 352.261445][ T8294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.828'. [ 352.591079][ T8301] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 352.930783][ T8318] netlink: 68 bytes leftover after parsing attributes in process `syz.2.833'. [ 354.519400][ T8336] debugfs: 'ttyS3' already exists in 'caif_serial' [ 354.715898][ T8342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.840'. [ 354.848925][ T8342] netlink: 'syz.3.840': attribute type 1 has an invalid length. [ 354.848958][ T8342] netlink: 12 bytes leftover after parsing attributes in process `syz.3.840'. [ 355.575914][ T8363] netlink: 68 bytes leftover after parsing attributes in process `syz.3.846'. [ 356.215618][ T44] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 356.223854][ T8387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.853'. [ 356.263025][ T8387] netlink: 'syz.1.853': attribute type 1 has an invalid length. [ 356.263052][ T8387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.853'. [ 356.399090][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 356.412944][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.413011][ T44] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 356.413039][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.448951][ T44] usb 3-1: config 0 descriptor?? [ 358.507216][ T44] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 358.507266][ T44] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 358.507294][ T44] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 358.507322][ T44] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 358.507350][ T44] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 358.514418][ T44] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 358.532520][ C1] usb 3-1: input irq status -75 received [ 358.917051][ T8411] netlink: 68 bytes leftover after parsing attributes in process `syz.0.859'. [ 358.967977][ T44] usb 3-1: USB disconnect, device number 3 [ 361.690548][ T8430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.866'. [ 361.791508][ T8430] netlink: 'syz.4.866': attribute type 1 has an invalid length. [ 361.791539][ T8430] netlink: 'syz.4.866': attribute type 2 has an invalid length. [ 361.796004][ T8432] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 362.824157][ T8442] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 363.254063][ T8451] netlink: 68 bytes leftover after parsing attributes in process `syz.2.871'. [ 364.917084][ T8474] fuse: Bad value for 'fd' [ 365.378843][ T8477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.881'. [ 365.378891][ T8477] netlink: 'syz.4.881': attribute type 1 has an invalid length. [ 365.378908][ T8477] netlink: 'syz.4.881': attribute type 2 has an invalid length. [ 367.287564][ T8491] netlink: 68 bytes leftover after parsing attributes in process `syz.4.885'. [ 368.487494][ T8499] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 368.990276][ T8513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.891'. [ 371.067740][ T8523] fuse: Bad value for 'fd' [ 371.133478][ T8527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.895'. [ 371.133524][ T8527] netlink: 'syz.0.895': attribute type 1 has an invalid length. [ 371.133539][ T8527] netlink: 'syz.0.895': attribute type 2 has an invalid length. [ 371.434807][ C1] vkms_vblank_simulate: vblank timer overrun [ 371.572900][ C1] vkms_vblank_simulate: vblank timer overrun [ 372.118946][ C1] vkms_vblank_simulate: vblank timer overrun [ 372.469581][ C1] vkms_vblank_simulate: vblank timer overrun [ 372.839849][ C1] vkms_vblank_simulate: vblank timer overrun [ 374.817063][ C1] vkms_vblank_simulate: vblank timer overrun [ 375.102104][ C1] vkms_vblank_simulate: vblank timer overrun [ 375.572429][ C1] vkms_vblank_simulate: vblank timer overrun [ 375.772622][ C1] vkms_vblank_simulate: vblank timer overrun [ 376.729533][ T8576] fuse: Bad value for 'fd' [ 376.998978][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.910'. [ 376.999025][ T8580] netlink: 'syz.0.910': attribute type 1 has an invalid length. [ 376.999040][ T8580] netlink: 'syz.0.910': attribute type 2 has an invalid length. [ 377.035713][ T991] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 377.163018][ T8582] netlink: 'syz.1.911': attribute type 1 has an invalid length. [ 377.163046][ T8582] netlink: 208 bytes leftover after parsing attributes in process `syz.1.911'. [ 377.163066][ T8582] netlink: 'syz.1.911': attribute type 1 has an invalid length. [ 377.163148][ T8582] netlink: 'syz.1.911': attribute type 2 has an invalid length. [ 377.398735][ T991] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 377.398765][ T991] usb 4-1: can't read configurations, error -61 [ 377.545688][ T991] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 377.767080][ T991] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 377.767111][ T991] usb 4-1: can't read configurations, error -61 [ 377.789540][ T991] usb usb4-port1: attempt power cycle [ 378.146881][ T991] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 382.089340][ T8607] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 383.002172][ T8616] fuse: Unknown parameter '0x0000000000000005' [ 383.267888][ T991] usb 4-1: device descriptor read/8, error -110 [ 383.525646][ T991] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 383.547553][ T991] usb 4-1: device descriptor read/8, error -32 [ 383.660388][ T991] usb usb4-port1: unable to enumerate USB device [ 383.765371][ T8626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.923'. [ 383.766527][ T8626] netlink: 'syz.0.923': attribute type 1 has an invalid length. [ 383.766546][ T8626] netlink: 'syz.0.923': attribute type 2 has an invalid length. [ 384.004446][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.004521][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.800864][ T8624] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 384.801415][ T8629] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 384.801553][ T8629] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 385.389004][ T8640] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 385.389024][ T8640] CIFS mount error: No usable UNC path provided in device string! [ 385.389024][ T8640] [ 385.389234][ T8640] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 385.630281][ T8645] binder: 8644:8645 ioctl 4018620d 0 returned -22 [ 385.778521][ T8652] fuse: Unknown parameter '0x0000000000000005' [ 386.164483][ T5807] Bluetooth: hci1: command 0x0406 tx timeout [ 386.309930][ T8662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.934'. [ 386.365347][ T8662] netlink: 'syz.2.934': attribute type 1 has an invalid length. [ 386.373629][ T8662] netlink: 'syz.2.934': attribute type 2 has an invalid length. [ 387.034019][ T8681] netlink: 64 bytes leftover after parsing attributes in process `syz.0.939'. [ 387.395597][ T44] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 387.695736][ T44] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 387.695766][ T44] usb 2-1: can't read configurations, error -61 [ 387.825650][ T44] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 388.013017][ T44] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 388.013046][ T44] usb 2-1: can't read configurations, error -61 [ 388.013378][ T44] usb usb2-port1: attempt power cycle [ 388.180987][ T8698] fuse: Unknown parameter '0x0000000000000005' [ 388.226226][ T5807] Bluetooth: hci1: command 0x0406 tx timeout [ 388.485641][ T44] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 388.564545][ T44] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 388.564581][ T44] usb 2-1: can't read configurations, error -61 [ 388.735604][ T44] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 388.786431][ T8700] syz.4.944 (8700) used greatest stack depth: 15512 bytes left [ 388.820273][ T44] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 388.820302][ T44] usb 2-1: can't read configurations, error -61 [ 388.820623][ T44] usb usb2-port1: unable to enumerate USB device [ 393.616552][ T8744] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 397.144067][ T8765] netlink: 64 bytes leftover after parsing attributes in process `syz.4.960'. [ 397.346866][ T8771] netlink: 'syz.2.965': attribute type 1 has an invalid length. [ 397.346889][ T8771] netlink: 'syz.2.965': attribute type 2 has an invalid length. [ 398.518274][ C1] vkms_vblank_simulate: vblank timer overrun [ 399.131450][ C1] vkms_vblank_simulate: vblank timer overrun [ 400.605743][ C1] vkms_vblank_simulate: vblank timer overrun [ 401.121486][ T8794] netlink: 148 bytes leftover after parsing attributes in process `syz.2.972'. [ 401.126125][ T8794] netlink: 116 bytes leftover after parsing attributes in process `syz.2.972'. [ 401.126176][ T8794] netlink: 24 bytes leftover after parsing attributes in process `syz.2.972'. [ 401.153031][ C1] vkms_vblank_simulate: vblank timer overrun [ 401.700212][ C1] vkms_vblank_simulate: vblank timer overrun [ 402.271902][ T8804] netlink: 'syz.1.977': attribute type 1 has an invalid length. [ 402.271925][ T8804] netlink: 'syz.1.977': attribute type 2 has an invalid length. [ 403.446383][ T8806] ÿ: renamed from bond_slave_0 (while UP) [ 406.122809][ T8844] netlink: 148 bytes leftover after parsing attributes in process `syz.2.986'. [ 406.898355][ T5804] Bluetooth: hci1: command 0x0406 tx timeout [ 407.406613][ T8854] netlink: 'syz.0.989': attribute type 1 has an invalid length. [ 407.406641][ T8854] netlink: 'syz.0.989': attribute type 2 has an invalid length. [ 408.116776][ T8864] netlink: 64 bytes leftover after parsing attributes in process `syz.0.990'. [ 409.216603][ T8875] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 410.384497][ T8897] netlink: 'syz.1.1001': attribute type 1 has an invalid length. [ 410.384521][ T8897] netlink: 'syz.1.1001': attribute type 2 has an invalid length. [ 410.638318][ T8896] process 'syz.3.1000' launched './file2' with NULL argv: empty string added [ 412.441653][ T8911] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 413.301816][ T8916] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 413.481122][ T8907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1006'. [ 415.049872][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.318819][ T8938] netlink: 'syz.3.1014': attribute type 1 has an invalid length. [ 415.318842][ T8938] netlink: 'syz.3.1014': attribute type 2 has an invalid length. [ 415.703078][ T8943] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1013'. [ 419.021399][ T8977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1027'. [ 419.314246][ T8984] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1025'. [ 419.704485][ T8996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1026'. [ 420.265084][ T9000] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1031'. [ 422.602548][ T9020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1036'. [ 422.602625][ T9020] bridge_slave_1: left allmulticast mode [ 422.602642][ T9020] bridge_slave_1: left promiscuous mode [ 422.602956][ T9020] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.746742][ T9020] bridge_slave_0: left allmulticast mode [ 422.746766][ T9020] bridge_slave_0: left promiscuous mode [ 422.746983][ T9020] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.900427][ T9023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1038'. [ 423.139164][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.177001][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.220181][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.365668][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.716183][ C1] vkms_vblank_simulate: vblank timer overrun [ 425.069482][ C1] vkms_vblank_simulate: vblank timer overrun [ 425.305733][ C1] vkms_vblank_simulate: vblank timer overrun [ 425.464043][ T9060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1046'. [ 426.296107][ T9053] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1049'. [ 426.473486][ T9064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1050'. [ 428.208394][ T9089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1060'. [ 429.714188][ T9095] netlink: 'syz.1.1063': attribute type 1 has an invalid length. [ 429.774018][ T9100] 9pnet_fd: Insufficient options for proto=fd [ 429.896324][ T9095] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 429.904218][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 429.960907][ T9095] 8021q: adding VLAN 0 to HW filter on device bond1 [ 430.288199][ T1010] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 431.530377][ T9133] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1071'. [ 431.533678][ T9133] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1071'. [ 431.533727][ T9133] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1071'. [ 434.825621][ T10] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 434.951355][ T9168] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 435.445227][ T10] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 435.445276][ T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 435.445321][ T10] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 435.445350][ T10] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 435.445606][ T10] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 435.445637][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 435.523043][ T10] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 435.523076][ T10] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 435.523099][ T10] usb 3-1: Product: syz [ 435.523115][ T10] usb 3-1: Manufacturer: syz [ 435.523131][ T10] usb 3-1: SerialNumber: syz [ 435.639095][ T10] usb 3-1: config 0 descriptor?? [ 435.645903][ T9161] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 435.686551][ T10] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 435.716330][ T10] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 436.276439][ T9179] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1083'. [ 436.276883][ T9179] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1083'. [ 436.276925][ T9179] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1083'. [ 438.564934][ T9] usb 3-1: USB disconnect, device number 4 [ 438.571603][ T9] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 438.760213][ T9188] fuse: Unknown parameter 'group_id00000000000000000000' [ 438.958405][ T9184] smc: net device bond0 applied user defined pnetid SYZ2 [ 440.546590][ T9222] fuse: Bad value for 'user_id' [ 440.546609][ T9222] fuse: Bad value for 'user_id' [ 441.977352][ T9240] binder: 9239:9240 ioctl c0306201 0 returned -14 [ 443.530841][ T9259] fuse: Bad value for 'user_id' [ 443.531001][ T9259] fuse: Bad value for 'user_id' [ 445.557946][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.558037][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.913815][ T9279] binder: BINDER_SET_CONTEXT_MGR already set [ 446.913834][ T9279] binder: 9278:9279 ioctl 4018620d 2000000002c0 returned -16 [ 448.945522][ T6003] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 449.075734][ T6003] usb 4-1: device descriptor read/64, error -71 [ 449.475519][ T6003] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 450.784502][ T6003] usb 4-1: device descriptor read/64, error -71 [ 450.941051][ T6003] usb usb4-port1: attempt power cycle [ 451.110872][ T9315] syz.1.1134 (9315): drop_caches: 2 [ 451.275585][ T6003] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 451.306262][ T6003] usb 4-1: device descriptor read/8, error -71 [ 451.705523][ T6003] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 451.761528][ T6003] usb 4-1: device descriptor read/8, error -71 [ 451.797082][ T9338] fuse: Bad value for 'fd' [ 451.866458][ T6003] usb usb4-port1: unable to enumerate USB device [ 452.873547][ T85] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.055547][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 454.195748][ T10] usb 3-1: device descriptor read/64, error -71 [ 454.435680][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 454.565532][ T10] usb 3-1: device descriptor read/64, error -71 [ 454.621704][ T9372] fuse: Bad value for 'fd' [ 454.676155][ T10] usb usb3-port1: attempt power cycle [ 455.275589][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 455.296295][ T10] usb 3-1: device descriptor read/8, error -71 [ 455.309655][ T9379] binder: BINDER_SET_CONTEXT_MGR already set [ 455.309674][ T9379] binder: 9377:9379 ioctl 4018620d 2000000002c0 returned -16 [ 455.528387][ T9382] netlink: 'syz.3.1156': attribute type 1 has an invalid length. [ 455.537266][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 455.556560][ T10] usb 3-1: device descriptor read/8, error -71 [ 455.628852][ T9385] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 455.665980][ T10] usb usb3-port1: unable to enumerate USB device [ 456.298286][ T9397] binder: BINDER_SET_CONTEXT_MGR already set [ 456.298302][ T9397] binder: 9396:9397 ioctl 4018620d 2000000002c0 returned -16 [ 456.491861][ T9406] fuse: Bad value for 'fd' [ 456.760053][ T9412] netlink: 'syz.2.1169': attribute type 1 has an invalid length. [ 456.896959][ T9413] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 460.609187][ T9444] fuse: Bad value for 'fd' [ 460.648560][ T9438] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 468.776135][ T9499] fuse: Bad value for 'fd' [ 470.905221][ T5804] Bluetooth: hci1: command 0x0406 tx timeout [ 471.605108][ T9507] delete_channel: no stack [ 473.515267][ T9538] netlink: 1060 bytes leftover after parsing attributes in process `syz.0.1205'. [ 475.767823][ T5878] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 476.046152][ T5878] usb 3-1: no configurations [ 476.046175][ T5878] usb 3-1: can't read configurations, error -22 [ 476.306785][ T5878] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 476.526415][ T5878] usb 3-1: no configurations [ 476.526431][ T5878] usb 3-1: can't read configurations, error -22 [ 476.526945][ T5878] usb usb3-port1: attempt power cycle [ 476.690362][ T9571] netlink: 1060 bytes leftover after parsing attributes in process `syz.1.1216'. [ 476.985569][ T5878] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 477.008244][ T5878] usb 3-1: no configurations [ 477.008266][ T5878] usb 3-1: can't read configurations, error -22 [ 477.285329][ T5878] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 477.944042][ T5878] usb 3-1: no configurations [ 477.944062][ T5878] usb 3-1: can't read configurations, error -22 [ 477.960631][ T5878] usb usb3-port1: unable to enumerate USB device [ 480.045680][ T5885] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 480.216401][ T5885] usb 4-1: config 0 has no interfaces? [ 480.232362][ T5885] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 480.232395][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.232415][ T5885] usb 4-1: Product: syz [ 480.232430][ T5885] usb 4-1: Manufacturer: syz [ 480.232444][ T5885] usb 4-1: SerialNumber: syz [ 480.310972][ T5885] usb 4-1: config 0 descriptor?? [ 480.681123][ T9607] netlink: 1060 bytes leftover after parsing attributes in process `syz.2.1227'. [ 484.636227][ T5885] usb 4-1: USB disconnect, device number 13 [ 485.452777][ T9643] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 486.005266][ T5885] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 486.073815][ T5885] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 487.585582][ T44] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 487.745325][ T44] usb 4-1: config 0 has no interfaces? [ 487.750737][ T44] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 487.750767][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.750788][ T44] usb 4-1: Product: syz [ 487.750803][ T44] usb 4-1: Manufacturer: syz [ 487.750818][ T44] usb 4-1: SerialNumber: syz [ 487.800089][ T44] usb 4-1: config 0 descriptor?? [ 493.461313][ T5885] usb 4-1: USB disconnect, device number 14 [ 493.887362][ T9710] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 498.371421][ T9733] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 498.373684][ T9733] block device autoloading is deprecated and will be removed. [ 503.877963][ T6003] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 503.917821][ T6003] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 506.461371][ T9818] fuse: Unknown parameter 'use00000000000000000000' [ 508.780488][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 508.782286][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 510.626479][ T9749] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 510.676035][ T9749] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 510.831463][ T9863] fuse: Unknown parameter 'use00000000000000000000' [ 511.053824][ T9867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1302'. [ 511.053894][ T9867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1302'. [ 511.053911][ T9867] netlink: 58 bytes leftover after parsing attributes in process `syz.1.1302'. [ 513.056402][ T9900] fuse: Unknown parameter 'use00000000000000000000' [ 513.439250][ T9905] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1314'. [ 513.439278][ T9905] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1314'. [ 513.439293][ T9905] netlink: 58 bytes leftover after parsing attributes in process `syz.4.1314'. [ 513.817039][ T5878] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 513.849827][ T5878] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 516.769675][ T5878] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 516.886687][ T9930] fuse: Unknown parameter 'user_i00000000000000000000' [ 516.922473][ T5878] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 516.922530][ T5878] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 516.922590][ T5878] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 516.922619][ T5878] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 516.922646][ T5878] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 516.922675][ T5878] usb 5-1: config 0 interface 0 has no altsetting 0 [ 516.933043][ T5878] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 516.933079][ T5878] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 516.933104][ T5878] usb 5-1: Product: syz [ 516.933122][ T5878] usb 5-1: Manufacturer: syz [ 516.933139][ T5878] usb 5-1: SerialNumber: syz [ 516.954415][ T5878] usb 5-1: config 0 descriptor?? [ 516.958177][ T9924] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 517.019278][ T5878] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 517.024518][ T5878] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 517.975748][ T5886] usb 5-1: USB disconnect, device number 3 [ 518.940855][ T5886] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 520.291198][ T9970] fuse: Unknown parameter 'user_i00000000000000000000' [ 523.319263][ T5807] Bluetooth: hci1: command 0x0406 tx timeout [ 524.125477][ T5886] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 524.275475][ T5886] usb 2-1: Using ep0 maxpacket: 32 [ 524.278173][ T5886] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 524.278200][ T5886] usb 2-1: config 0 has no interface number 0 [ 524.281565][ T5886] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=2c.d8 [ 524.281596][ T5886] usb 2-1: New USB device strings: Mfr=193, Product=2, SerialNumber=3 [ 524.281619][ T5886] usb 2-1: Product: syz [ 524.281635][ T5886] usb 2-1: Manufacturer: syz [ 524.281650][ T5886] usb 2-1: SerialNumber: syz [ 524.351384][ T5886] usb 2-1: config 0 descriptor?? [ 524.548116][ T5886] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 524.548163][ T5886] usb 2-1: selecting invalid altsetting 1 [ 524.548180][ T5886] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 524.640993][ T5886] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 524.641696][ T5886] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 524.641786][ T5886] usb 2-1: media controller created [ 524.702744][ T5886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 524.763669][ T5886] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 524.763773][ T5886] zl10353_read_register: readreg error (reg=127, ret==-71) [ 524.785113][ T5886] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 524.859825][ T5886] usb 2-1: USB disconnect, device number 8 [ 528.490393][T10024] trusted_key: syz.3.1350 sent an empty control message without MSG_MORE. [ 528.858494][ T6003] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 528.953213][ T6003] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 536.144332][ T44] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 536.321206][ T44] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 536.881993][ T5788] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 537.468482][ T5788] usb 3-1: Using ep0 maxpacket: 8 [ 537.689901][T10093] lo speed is unknown, defaulting to 1000 [ 539.615579][ T5788] usb 3-1: unable to get BOS descriptor or descriptor too short [ 539.619424][ T5788] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 539.619466][ T5788] usb 3-1: can't read configurations, error -71 [ 541.417241][T10136] debugfs: 'ttyS3' already exists in 'caif_serial' [ 542.365576][T10156] fuse: Bad value for 'fd' [ 543.200727][ T5788] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 543.228584][ T5788] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 545.940474][T10183] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1394'. [ 547.350999][T10193] debugfs: 'ttyS3' already exists in 'caif_serial' [ 547.616208][T10197] fuse: Bad value for 'fd' [ 548.201092][T10204] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 553.021850][ T5878] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 553.795977][ T5878] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 553.884419][T10239] fuse: Bad value for 'fd' [ 554.797003][T10241] debugfs: 'ttyS3' already exists in 'caif_serial' [ 557.319988][T10282] ======================================================= [ 557.319988][T10282] WARNING: The mand mount option has been deprecated and [ 557.319988][T10282] and is ignored by this kernel. Remove the mand [ 557.319988][T10282] option from the mount to silence this warning. [ 557.319988][T10282] ======================================================= [ 566.298634][ T5886] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 566.582785][ T5886] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 566.582910][ T5886] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 566.582952][ T5886] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 566.582978][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.646003][ T5886] usb 3-1: config 0 descriptor?? [ 567.629458][T10386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1444'. [ 567.683952][ T5885] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 567.702696][ T5885] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 568.312518][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.312702][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.506081][ T5885] usb 3-1: USB disconnect, device number 15 [ 568.605259][T10399] binder: 10397:10399 ioctl c0306201 0 returned -14 [ 569.204587][T10407] debugfs: 'ttyS3' already exists in 'caif_serial' [ 573.068033][T10441] binder: BINDER_SET_CONTEXT_MGR already set [ 573.068050][T10441] binder: 10440:10441 ioctl 4018620d 2000000002c0 returned -16 [ 581.547175][T10537] netlink: 'syz.4.1483': attribute type 1 has an invalid length. [ 581.827870][T10537] 8021q: adding VLAN 0 to HW filter on device bond1 [ 581.944273][T10541] bond1: (slave geneve2): making interface the new active one [ 583.034564][T10541] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 585.392017][T10583] tipc: Started in network mode [ 585.392191][T10583] tipc: Node identity 4, cluster identity 4711 [ 585.392236][T10583] tipc: Node number set to 4 [ 589.971479][T10619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1507'. [ 590.257357][T10619] veth0_macvtap: left promiscuous mode [ 592.794335][ T5807] Bluetooth: hci1: command 0x0406 tx timeout [ 599.123607][T10717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1538'. [ 599.123637][T10717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1538'. [ 599.123654][T10717] netlink: 50 bytes leftover after parsing attributes in process `syz.1.1538'. [ 599.815775][T10728] netlink: 'syz.1.1546': attribute type 1 has an invalid length. [ 599.815802][T10728] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1546'. [ 602.037729][T10767] netlink: 'syz.3.1560': attribute type 1 has an invalid length. [ 602.037762][T10767] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1560'. [ 603.150579][T10789] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1566'. [ 603.178063][T10789] netlink: 'syz.2.1566': attribute type 1 has an invalid length. [ 603.434297][T10789] 8021q: adding VLAN 0 to HW filter on device bond2 [ 603.582596][T10790] bond2: (slave geneve2): making interface the new active one [ 603.590374][T10790] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 604.540509][T10802] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 604.540910][T10802] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 608.399260][T10848] netlink: 'syz.1.1584': attribute type 1 has an invalid length. [ 608.646138][T10854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1586'. [ 611.708345][T10881] netlink: 'syz.1.1596': attribute type 1 has an invalid length. [ 611.708362][T10881] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1596'. [ 613.027733][T10890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1598'. [ 613.029797][T10891] netlink: 'syz.0.1599': attribute type 1 has an invalid length. [ 616.239525][T10934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1606'. [ 617.888053][T10932] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1611'. [ 618.585488][ T991] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 618.792847][ C0] vkms_vblank_simulate: vblank timer overrun [ 618.807819][ T991] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 618.807864][ T991] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 618.807885][ T991] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 618.807944][ T991] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 618.807973][ T991] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 618.810528][ T991] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 618.810558][ T991] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 618.810580][ T991] usb 4-1: Product: syz [ 618.810595][ T991] usb 4-1: Manufacturer: syz [ 618.908731][ T991] cdc_wdm 4-1:1.0: skipping garbage [ 618.908754][ T991] cdc_wdm 4-1:1.0: skipping garbage [ 618.986832][ C0] vkms_vblank_simulate: vblank timer overrun [ 619.011292][ T991] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 619.011329][ T991] cdc_wdm 4-1:1.0: Unknown control protocol [ 619.062708][T10967] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1625'. [ 619.062786][T10967] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1625'. [ 619.062804][T10967] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1625'. [ 619.182222][ T5878] usb 4-1: USB disconnect, device number 15 [ 619.919047][T10988] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1632'. [ 621.299920][ C0] vkms_vblank_simulate: vblank timer overrun [ 622.004587][T11007] binder: 11006:11007 ioctl c0306201 0 returned -14 [ 622.447806][T11014] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1643'. [ 623.080557][ C0] vkms_vblank_simulate: vblank timer overrun [ 623.375458][ C0] vkms_vblank_simulate: vblank timer overrun [ 623.680632][ C0] vkms_vblank_simulate: vblank timer overrun [ 623.796419][ C0] vkms_vblank_simulate: vblank timer overrun [ 624.077442][ C0] vkms_vblank_simulate: vblank timer overrun [ 624.146825][T11020] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1646'. [ 625.261036][T11050] netlink: 'syz.2.1657': attribute type 1 has an invalid length. [ 625.560263][ C0] vkms_vblank_simulate: vblank timer overrun [ 625.898902][ C0] vkms_vblank_simulate: vblank timer overrun [ 626.119499][ C0] vkms_vblank_simulate: vblank timer overrun [ 628.074017][ C0] vkms_vblank_simulate: vblank timer overrun [ 628.320794][T11062] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1661'. [ 628.571950][T11077] binder: 11075:11077 ioctl c0306201 0 returned -14 [ 629.012103][T11088] netlink: 'syz.2.1671': attribute type 1 has an invalid length. [ 629.125533][ C0] vkms_vblank_simulate: vblank timer overrun [ 629.126568][ T44] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 629.275443][ T44] usb 2-1: device descriptor read/64, error -71 [ 629.544797][T11101] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1673'. [ 629.545425][ T44] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 629.650136][ C0] vkms_vblank_simulate: vblank timer overrun [ 629.823197][ C0] vkms_vblank_simulate: vblank timer overrun [ 629.833714][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.833801][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.874918][ T44] usb 2-1: device descriptor read/64, error -71 [ 630.011553][ C0] vkms_vblank_simulate: vblank timer overrun [ 630.811939][ T44] usb usb2-port1: attempt power cycle [ 631.306493][ C0] vkms_vblank_simulate: vblank timer overrun [ 631.802352][ C0] vkms_vblank_simulate: vblank timer overrun [ 631.889480][ T44] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 632.006778][ T44] usb 2-1: device descriptor read/8, error -71 [ 632.255836][ T44] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 632.349645][ T44] usb 2-1: device descriptor read/8, error -71 [ 632.464274][ T44] usb usb2-port1: unable to enumerate USB device [ 632.774299][ C0] vkms_vblank_simulate: vblank timer overrun [ 632.902025][ C0] vkms_vblank_simulate: vblank timer overrun [ 633.195186][ C0] vkms_vblank_simulate: vblank timer overrun [ 634.017248][ C0] vkms_vblank_simulate: vblank timer overrun [ 634.153952][T11138] netlink: 'syz.1.1683': attribute type 1 has an invalid length. [ 634.890533][ C0] vkms_vblank_simulate: vblank timer overrun [ 635.947871][T11162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1691'. [ 635.948429][T11162] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1691'. [ 636.549580][ C0] vkms_vblank_simulate: vblank timer overrun [ 636.598783][ C0] vkms_vblank_simulate: vblank timer overrun [ 636.922251][ C0] vkms_vblank_simulate: vblank timer overrun [ 637.100357][ C0] vkms_vblank_simulate: vblank timer overrun [ 637.455455][ C0] vkms_vblank_simulate: vblank timer overrun [ 637.794992][ C0] vkms_vblank_simulate: vblank timer overrun [ 638.195453][ T6003] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 638.314908][ C0] vkms_vblank_simulate: vblank timer overrun [ 638.490491][ C0] vkms_vblank_simulate: vblank timer overrun [ 638.755446][ T6003] usb 5-1: device descriptor read/64, error -71 [ 639.075486][ T6003] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 639.237197][ T6003] usb 5-1: device descriptor read/64, error -71 [ 639.315809][T11192] netlink: 'syz.0.1699': attribute type 1 has an invalid length. [ 639.347566][ T6003] usb usb5-port1: attempt power cycle [ 640.590045][ T6003] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 640.795530][ T6003] usb 5-1: device not accepting address 6, error -71 [ 651.545426][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 651.675437][ T9] usb 3-1: device descriptor read/64, error -71 [ 651.938207][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 652.075446][ T9] usb 3-1: device descriptor read/64, error -71 [ 652.203764][ T9] usb usb3-port1: attempt power cycle [ 652.565489][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 652.671139][T11309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1735'. [ 653.350289][ T9] usb 3-1: device descriptor read/8, error -71 [ 653.721118][T11317] binder: 11316:11317 ioctl c0306201 0 returned -14 [ 655.905878][ T5807] Bluetooth: hci1: command 0x0406 tx timeout [ 656.853189][T11354] netlink: 'syz.4.1750': attribute type 1 has an invalid length. [ 657.952210][T11366] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.1754'. [ 659.475450][ T44] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 664.715633][ T44] usb 5-1: device descriptor read/64, error -110 [ 664.955564][ T44] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 665.085506][ T44] usb 5-1: device descriptor read/64, error -32 [ 665.195905][ T44] usb usb5-port1: attempt power cycle [ 665.795419][ T44] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 665.815753][ T44] usb 5-1: device descriptor read/8, error -32 [ 666.165445][ T44] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 666.186645][ T44] usb 5-1: device descriptor read/8, error -32 [ 666.305974][ T44] raw-gadget.0 gadget.4: failed to queue suspend event [ 666.306436][ T44] usb usb5-port1: unable to enumerate USB device [ 666.847467][T11413] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.1769'. [ 666.888784][T11360] raw-gadget.0 gadget.4: failed to queue disconnect event [ 667.886734][T11436] : entered promiscuous mode [ 668.894412][ C0] vkms_vblank_simulate: vblank timer overrun [ 669.266536][ C0] vkms_vblank_simulate: vblank timer overrun [ 669.976277][ T5878] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 670.129063][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.129099][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 670.129140][ T5878] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 670.129164][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.180153][ T5878] usb 3-1: config 0 descriptor?? [ 670.693592][ C0] vkms_vblank_simulate: vblank timer overrun [ 670.938503][ C0] vkms_vblank_simulate: vblank timer overrun [ 670.972731][ T5878] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 671.083170][ T5878] cp2112 0003:10C4:EA90.000B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 671.163411][ T5878] cp2112 0003:10C4:EA90.000B: Part Number: 0x82 Device Version: 0xFE [ 671.218171][T11460] netlink: 'syz.1.1783': attribute type 72 has an invalid length. [ 671.756260][T11450] cp2112 0003:10C4:EA90.000B: Error starting transaction: -38 [ 671.945554][ T44] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 671.963223][ C0] vkms_vblank_simulate: vblank timer overrun [ 671.964546][ T5878] cp2112 0003:10C4:EA90.000B: error reading lock byte: -71 [ 671.973168][ T5878] usb 3-1: USB disconnect, device number 20 [ 672.634608][ T44] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 672.634644][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.647122][ C0] vkms_vblank_simulate: vblank timer overrun [ 672.971315][ T44] usb 2-1: config 0 descriptor?? [ 672.996014][ T44] cp210x 2-1:0.0: cp210x converter detected [ 673.300661][ C0] vkms_vblank_simulate: vblank timer overrun [ 673.401464][ T44] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 673.401514][ T44] cp210x 2-1:0.0: querying part number failed [ 673.427187][ T44] usb 2-1: cp210x converter now attached to ttyUSB0 [ 673.620516][ C0] vkms_vblank_simulate: vblank timer overrun [ 674.279207][T11500] netlink: 'syz.0.1797': attribute type 72 has an invalid length. [ 674.781094][T11505] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 674.782080][T11505] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 674.797512][T11505] vhci_hcd vhci_hcd.0: Device attached [ 675.055682][ T9749] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 675.641399][T11507] vhci_hcd: connection closed [ 675.680173][T11508] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 675.684207][ T85] vhci_hcd: stop threads [ 675.715373][ T85] vhci_hcd: release socket [ 675.735410][ T85] vhci_hcd: disconnect device [ 675.781483][ T991] usb 2-1: USB disconnect, device number 13 [ 675.806621][ T991] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 675.807671][ T991] cp210x 2-1:0.0: device disconnected [ 679.159414][T11539] netlink: 'syz.0.1809': attribute type 72 has an invalid length. [ 680.856387][ T9749] vhci_hcd: vhci_device speed not set [ 684.968948][T11572] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1820'. [ 688.133104][T11604] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1831'. [ 690.073680][T11627] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1839'. [ 691.296509][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.296585][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.671494][T11628] tipc: Started in network mode [ 691.671762][T11628] tipc: Node identity 4, cluster identity 4711 [ 691.671839][T11628] tipc: Node number set to 4 [ 692.730105][T11643] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1843'. [ 694.886107][T11663] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 695.186455][T11669] netlink: 'syz.3.1851': attribute type 1 has an invalid length. [ 695.224155][T11666] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1851'. [ 695.272317][T11669] 8021q: adding VLAN 0 to HW filter on device bond2 [ 695.318137][T11666] bond2: (slave geneve2): making interface the new active one [ 695.323409][T11666] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 698.185693][ T5885] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 698.351628][ T5885] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 698.351652][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.392645][ T5885] usb 5-1: config 0 descriptor?? [ 698.409848][ T5885] cp210x 5-1:0.0: cp210x converter detected [ 698.678416][ T5885] usb 5-1: cp210x converter now attached to ttyUSB0 [ 701.228591][ T9749] usb 5-1: USB disconnect, device number 12 [ 701.258264][ T9749] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 701.262192][ T9749] cp210x 5-1:0.0: device disconnected [ 706.523953][ C0] vkms_vblank_simulate: vblank timer overrun [ 706.701294][ C0] vkms_vblank_simulate: vblank timer overrun [ 707.732325][ C0] vkms_vblank_simulate: vblank timer overrun [ 708.198096][ C0] vkms_vblank_simulate: vblank timer overrun [ 708.405756][ C0] vkms_vblank_simulate: vblank timer overrun [ 709.104034][ C0] vkms_vblank_simulate: vblank timer overrun [ 710.247402][ C0] vkms_vblank_simulate: vblank timer overrun [ 720.490762][ T5788] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 720.518454][ T5788] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 722.184516][T11970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1931'. [ 722.184545][T11970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1931'. [ 722.184561][T11970] netlink: 50 bytes leftover after parsing attributes in process `syz.0.1931'. [ 723.553603][T11984] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1937'. [ 723.567118][T11984] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1937'. [ 724.320208][T11988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1938'. [ 728.935389][ T44] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 729.269800][ T44] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 729.269843][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.315446][ T44] usb 5-1: config 0 descriptor?? [ 729.320898][ T44] cp210x 5-1:0.0: cp210x converter detected [ 729.768213][ T44] usb 5-1: cp210x converter now attached to ttyUSB0 [ 732.174332][ T5878] usb 5-1: USB disconnect, device number 13 [ 732.981663][ T5878] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 732.985152][ T5878] cp210x 5-1:0.0: device disconnected [ 734.460500][T12061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1954'. [ 736.295421][ T5885] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 736.753899][ T5885] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 736.753932][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.828094][ T5885] usb 5-1: config 0 descriptor?? [ 736.846089][ T5885] cp210x 5-1:0.0: cp210x converter detected [ 737.362316][ T5885] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 737.363746][ T5885] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -32 [ 737.363772][ T5885] cp210x 5-1:0.0: GPIO initialisation failed: -32 [ 738.237734][ T5885] usb 5-1: cp210x converter now attached to ttyUSB0 [ 738.241284][ T5885] usb 5-1: USB disconnect, device number 14 [ 738.280643][ T5885] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 738.282988][ T5885] cp210x 5-1:0.0: device disconnected [ 844.995254][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 844.995278][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5808/4:b..l P5165/1:b..l P3181/3:b..l [ 844.995350][ C0] rcu: (detected by 0, t=10502 jiffies, g=33561, q=372 ncpus=2) [ 844.995374][ C0] task:kworker/u8:10 state:R running task stack:22216 pid:3181 tgid:3181 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 844.995444][ C0] Workqueue: tipc_rcv tipc_conn_recv_work [ 844.995492][ C0] Call Trace: [ 844.995504][ C0] [ 844.995519][ C0] __schedule+0x16f3/0x4c20 [ 844.995578][ C0] ? __pfx___schedule+0x10/0x10 [ 844.995613][ C0] ? irqentry_exit+0x74/0x90 [ 844.995639][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 844.995670][ C0] ? preempt_schedule+0xae/0xc0 [ 844.995697][ C0] preempt_schedule_common+0x83/0xd0 [ 844.995724][ C0] preempt_schedule+0xae/0xc0 [ 844.995748][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 844.995771][ C0] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 844.995799][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 844.995826][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 844.995857][ C0] preempt_schedule_thunk+0x16/0x30 [ 844.995900][ C0] try_to_wake_up+0x82b/0x12b0 [ 844.995935][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 844.995975][ C0] autoremove_wake_function+0x17/0x100 [ 844.996008][ C0] __wake_up_common_lock+0x136/0x1e0 [ 844.996045][ C0] release_sock+0x183/0x210 [ 844.996066][ C0] ? release_sock+0x2f/0x210 [ 844.996090][ C0] tipc_recvmsg+0xb32/0x13c0 [ 844.996128][ C0] ? reacquire_held_locks+0x127/0x1d0 [ 844.996166][ C0] ? __pfx_tipc_recvmsg+0x10/0x10 [ 844.996212][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 844.996251][ C0] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 844.996282][ C0] ? security_socket_recvmsg+0x7e/0x2e0 [ 844.996314][ C0] ? __pfx_tipc_recvmsg+0x10/0x10 [ 844.996342][ C0] sock_recvmsg+0x229/0x270 [ 844.996381][ C0] tipc_conn_recv_work+0x27b/0x480 [ 844.996422][ C0] ? __pfx_tipc_conn_recv_work+0x10/0x10 [ 844.996471][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 844.996503][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 844.996528][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 844.996553][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 844.996582][ C0] process_scheduled_works+0xade/0x17b0 [ 844.996642][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 844.996689][ C0] worker_thread+0x8a0/0xda0 [ 844.996718][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 844.996755][ C0] ? __kthread_parkme+0x7b/0x200 [ 844.996796][ C0] kthread+0x711/0x8a0 [ 844.996833][ C0] ? __pfx_worker_thread+0x10/0x10 [ 844.996860][ C0] ? __pfx_kthread+0x10/0x10 [ 844.996889][ C0] ? rt_spin_unlock+0x150/0x200 [ 844.996915][ C0] ? rt_spin_unlock+0x161/0x200 [ 844.996933][ C0] ? __pfx_kthread+0x10/0x10 [ 844.996967][ C0] ret_from_fork+0x4b9/0x870 [ 844.996995][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 844.997030][ C0] ? __switch_to_asm+0x39/0x70 [ 844.997058][ C0] ? __switch_to_asm+0x33/0x70 [ 844.997085][ C0] ? __pfx_kthread+0x10/0x10 [ 844.997119][ C0] ret_from_fork_asm+0x1a/0x30 [ 844.997169][ C0] [ 844.997178][ C0] task:udevd state:R running task stack:24840 pid:5165 tgid:5165 ppid:1 task_flags:0x400140 flags:0x00080001 [ 844.997249][ C0] Call Trace: [ 844.997255][ C0] [ 844.997268][ C0] __schedule+0x16f3/0x4c20 [ 844.997297][ C0] ? try_to_take_rt_mutex+0x840/0xb00 [ 844.997341][ C0] ? __pfx___schedule+0x10/0x10 [ 844.997384][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 844.997414][ C0] preempt_schedule_irq+0xb5/0x150 [ 844.997439][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 844.997476][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 844.997514][ C0] irqentry_exit+0x6f/0x90 [ 844.997539][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 844.997562][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x97/0xa0 [ 844.997594][ C0] Code: 8d 51 28 4d 39 ca 77 22 89 ff 89 f6 49 ff c0 4c 89 02 48 c7 44 0a 08 05 00 00 00 48 89 7c 0a 10 48 89 74 0a 18 48 89 44 0a 20 14 fd 0a 09 cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 844.997613][ C0] RSP: 0018:ffffc90003b57778 EFLAGS: 00000293 [ 844.997631][ C0] RAX: ffffffff82326547 RBX: ffffffff82326517 RCX: ffff8880360b9e00 [ 844.997647][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 844.997660][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 844.997673][ C0] R10: dffffc0000000000 R11: ffffed1027fc683c R12: 1ffff9200076af57 [ 844.997690][ C0] R13: ffff88803bf3f810 R14: ffff88803bf3f130 R15: dffffc0000000000 [ 844.997710][ C0] ? dput+0x37/0x2b0 [ 844.997741][ C0] ? dput+0x67/0x2b0 [ 844.997777][ C0] ? dput+0x53/0x2b0 [ 844.997804][ C0] dput+0x67/0x2b0 [ 844.997834][ C0] step_into+0x319/0xf20 [ 844.997870][ C0] ? kernfs_dop_revalidate+0x3fc/0x5d0 [ 844.997902][ C0] ? up_read+0x23/0x40 [ 844.997924][ C0] ? kernfs_dop_revalidate+0x3fc/0x5d0 [ 844.997949][ C0] ? __pfx_step_into+0x10/0x10 [ 844.997981][ C0] ? lookup_fast+0x3ec/0x5b0 [ 844.998021][ C0] link_path_walk+0x77b/0xea0 [ 844.998074][ C0] path_lookupat+0x97/0x430 [ 844.998118][ C0] filename_lookup+0x212/0x570 [ 844.998150][ C0] ? vfs_fstatat+0x43/0x170 [ 844.998179][ C0] ? __x64_sys_newfstatat+0x116/0x190 [ 844.998217][ C0] ? __pfx_filename_lookup+0x10/0x10 [ 844.998288][ C0] ? __might_fault+0xb0/0x130 [ 844.998330][ C0] vfs_statx+0xf8/0x550 [ 844.998369][ C0] ? __pfx_vfs_statx+0x10/0x10 [ 844.998398][ C0] ? strncpy_from_user+0x150/0x290 [ 844.998437][ C0] ? getname_flags+0x1e5/0x540 [ 844.998473][ C0] vfs_fstatat+0x118/0x170 [ 844.998507][ C0] __x64_sys_newfstatat+0x116/0x190 [ 844.998540][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 844.998568][ C0] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 844.998639][ C0] ? do_syscall_64+0xbe/0xfa0 [ 844.998669][ C0] do_syscall_64+0xfa/0xfa0 [ 844.998694][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 844.998719][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.998741][ C0] ? clear_bhb_loop+0x60/0xb0 [ 844.998768][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.998790][ C0] RIP: 0033:0x7f650e23fb0a [ 844.998817][ C0] RSP: 002b:00007ffef3ddfbf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 844.998838][ C0] RAX: ffffffffffffffda RBX: 00007ffef3de0090 RCX: 00007f650e23fb0a [ 844.998854][ C0] RDX: 00007ffef3ddfc00 RSI: 00007ffef3de0090 RDI: 00000000ffffff9c [ 844.998869][ C0] RBP: 000055593258b910 R08: 0000000000000000 R09: 0000000000000001 [ 844.998883][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffef3ddfc90 [ 844.998897][ C0] R13: 00000000000000fe R14: 00005558f4a63be0 R15: 00007ffef3de0790 [ 844.998933][ C0] [ 844.998940][ C0] task:syz-executor state:R running task stack:18736 pid:5808 tgid:5808 ppid:5796 task_flags:0x400140 flags:0x00080000 [ 844.998999][ C0] Call Trace: [ 844.999006][ C0] [ 844.999019][ C0] __schedule+0x16f3/0x4c20 [ 844.999048][ C0] ? try_to_take_rt_mutex+0x840/0xb00 [ 844.999092][ C0] ? __pfx___schedule+0x10/0x10 [ 844.999118][ C0] ? __lock_acquire+0xab9/0xd20 [ 844.999161][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 844.999191][ C0] preempt_schedule_irq+0xb5/0x150 [ 844.999216][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 844.999256][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 844.999293][ C0] irqentry_exit+0x6f/0x90 [ 844.999317][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 844.999341][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x40/0x80 [ 844.999370][ C0] Code: 07 10 81 e6 00 00 ff 00 ba 00 01 00 00 23 91 4c 0b 00 00 89 d7 09 f7 74 11 85 f6 75 39 85 d2 74 35 83 b9 14 16 00 00 00 74 2c <8b> 91 f0 15 00 00 83 fa 02 75 21 48 8b 91 f8 15 00 00 48 8b 32 48 [ 844.999387][ C0] RSP: 0018:ffffc90004d3f3a8 EFLAGS: 00000246 [ 844.999405][ C0] RAX: ffffffff8226ba82 RBX: 80000000375c5007 RCX: ffff888039ca9e00 [ 844.999421][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 844.999434][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 844.999446][ C0] R10: dffffc0000000000 R11: fffff940001bae29 R12: dffffc0000000000 [ 844.999467][ C0] R13: ffff8880287758e0 R14: ffff88803bb273d0 R15: ffff88803b8cae00 [ 844.999493][ C0] ? __page_table_check_ptes_set+0x22/0x2f0 [ 844.999530][ C0] ? page_table_check_set+0x51d/0x730 [ 844.999556][ C0] __page_table_check_ptes_set+0x22/0x2f0 [ 844.999584][ C0] ? page_table_check_set+0x18d/0x730 [ 844.999610][ C0] ? vm_normal_page+0xbe/0x1a0 [ 844.999635][ C0] copy_pmd_range+0x4790/0x7950 [ 844.999679][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 844.999731][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 844.999772][ C0] ? do_raw_spin_lock+0x121/0x290 [ 844.999815][ C0] copy_page_range+0xaff/0x1170 [ 844.999877][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 844.999898][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 844.999932][ C0] ? dup_mmap+0xf10/0x1ae0 [ 844.999972][ C0] dup_mmap+0xf5b/0x1ae0 [ 845.000035][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 845.000085][ C0] ? mm_init+0xc26/0xe20 [ 845.000119][ C0] copy_mm+0x13c/0x4b0 [ 845.000149][ C0] ? copy_process+0x979/0x3ae0 [ 845.000175][ C0] copy_process+0x1704/0x3ae0 [ 845.000202][ C0] ? wp_page_reuse+0x4db/0x840 [ 845.000233][ C0] ? copy_process+0x979/0x3ae0 [ 845.000289][ C0] ? __pfx_copy_process+0x10/0x10 [ 845.000343][ C0] kernel_clone+0x224/0x7c0 [ 845.000376][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 845.000434][ C0] __x64_sys_clone+0x18b/0x1e0 [ 845.000469][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 845.000519][ C0] ? do_user_addr_fault+0xc85/0x1380 [ 845.000550][ C0] ? do_syscall_64+0xbe/0xfa0 [ 845.000581][ C0] do_syscall_64+0xfa/0xfa0 [ 845.000605][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 845.000630][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.000652][ C0] ? clear_bhb_loop+0x60/0xb0 [ 845.000679][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.000699][ C0] RIP: 0033:0x7f57fa3e5613 [ 845.000716][ C0] RSP: 002b:00007ffc4d92f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 845.000737][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f57fa3e5613 [ 845.000752][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 845.000765][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 845.000778][ C0] R10: 000055557de8c7d0 R11: 0000000000000246 R12: 0000000000000000 [ 845.000792][ C0] R13: 000055557de9f590 R14: 00000000000b343a R15: 00007ffc4d92f1d0 [ 845.000828][ C0] [ 845.000837][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g33561 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 845.000860][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=25737 [ 845.000872][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g33561 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 845.000896][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 845.000907][ C0] rcu: RCU grace-period kthread stack dump: [ 845.000914][ C0] task:rcu_preempt state:I stack:26384 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00080000 [ 845.000976][ C0] Call Trace: [ 845.000983][ C0] [ 845.000996][ C0] __schedule+0x16f3/0x4c20 [ 845.001044][ C0] ? __lock_acquire+0xab9/0xd20 [ 845.001074][ C0] ? __pfx___schedule+0x10/0x10 [ 845.001116][ C0] ? schedule+0x91/0x360 [ 845.001143][ C0] schedule+0x165/0x360 [ 845.001169][ C0] schedule_timeout+0x12b/0x270 [ 845.001193][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 845.001218][ C0] ? __pfx_process_timeout+0x10/0x10 [ 845.001253][ C0] ? prepare_to_swait_event+0x341/0x380 [ 845.001287][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 845.001328][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 845.001359][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 845.001385][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 845.001413][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 845.001446][ C0] ? finish_swait+0xcd/0x1f0 [ 845.001476][ C0] rcu_gp_kthread+0x99/0x390 [ 845.001509][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 845.001540][ C0] ? __kthread_parkme+0x7b/0x200 [ 845.001569][ C0] ? __kthread_parkme+0x1a1/0x200 [ 845.001606][ C0] kthread+0x711/0x8a0 [ 845.001641][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 845.001671][ C0] ? __pfx_kthread+0x10/0x10 [ 845.001701][ C0] ? rt_spin_unlock+0x150/0x200 [ 845.001726][ C0] ? rt_spin_unlock+0x161/0x200 [ 845.001744][ C0] ? __pfx_kthread+0x10/0x10 [ 845.001778][ C0] ret_from_fork+0x4b9/0x870 [ 845.001807][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 845.001841][ C0] ? __switch_to_asm+0x39/0x70 [ 845.001869][ C0] ? __switch_to_asm+0x33/0x70 [ 845.001897][ C0] ? __pfx_kthread+0x10/0x10 [ 845.001930][ C0] ret_from_fork_asm+0x1a/0x30 [ 845.001978][ C0] [ 845.001986][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 845.001996][ C0] Sending NMI from CPU 0 to CPUs 1: [ 845.002030][ C1] NMI backtrace for cpu 1 [ 845.002062][ C1] CPU: 1 UID: 0 PID: 12097 Comm: syz.1.1967 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 845.002087][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 845.002098][ C1] RIP: 0010:__lock_acquire+0x5f2/0xd20 [ 845.002123][ C1] Code: 41 38 c5 76 1a e8 ee 09 e1 02 48 8b 3c 24 85 c0 74 0d 83 3d b3 ef 5b 0d 00 0f 84 1a 05 00 00 83 7c 24 0c 00 0f 84 a9 00 00 00 <41> 8b 46 20 66 85 c0 0f 88 8d 00 00 00 65 8b 0d 26 06 2a 10 a9 00 [ 845.002138][ C1] RSP: 0018:ffffc900063af030 EFLAGS: 00000002 [ 845.002153][ C1] RAX: 00000000ffffff05 RBX: 0000000000000001 RCX: 0000000000000001 [ 845.002164][ C1] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffff888032353c00 [ 845.002176][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff81843291 [ 845.002187][ C1] R10: dffffc0000000000 R11: ffffed1029a9b861 R12: 00000000ffffff05 [ 845.002201][ C1] R13: 0000000000000001 R14: ffff888032354788 R15: ffff8880323547a8 [ 845.002213][ C1] FS: 00007f739759d6c0(0000) GS:ffff888126ccb000(0000) knlGS:0000000000000000 [ 845.002228][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 845.002239][ C1] CR2: 00007f8eed0d7ff8 CR3: 000000004a046000 CR4: 00000000003526f0 [ 845.002255][ C1] Call Trace: [ 845.002262][ C1] [ 845.002273][ C1] ? __local_bh_disable_ip+0xa1/0x540 [ 845.002293][ C1] lock_acquire+0x120/0x360 [ 845.002316][ C1] ? __local_bh_disable_ip+0xa1/0x540 [ 845.002343][ C1] ? rt_spin_trylock_bh+0x26/0x2f0 [ 845.002360][ C1] __local_bh_disable_ip+0xc5/0x540 [ 845.002380][ C1] ? __local_bh_disable_ip+0xa1/0x540 [ 845.002401][ C1] ? tipc_sk_lookup+0xb5/0x920 [ 845.002428][ C1] ? __local_bh_disable_ip+0xa1/0x540 [ 845.002447][ C1] ? rt_spin_trylock_bh+0x26/0x2f0 [ 845.002464][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 845.002484][ C1] ? tipc_sk_lookup+0x817/0x920 [ 845.002512][ C1] ? tipc_sk_lookup+0xb5/0x920 [ 845.002540][ C1] ? __pfx_tipc_sk_lookup+0x10/0x10 [ 845.002565][ C1] ? rt_spin_unlock+0x150/0x200 [ 845.002581][ C1] ? rt_spin_trylock_bh+0x26/0x2f0 [ 845.002597][ C1] rt_spin_trylock_bh+0x33/0x2f0 [ 845.002613][ C1] ? rt_spin_unlock+0x161/0x200 [ 845.002630][ C1] tipc_sk_rcv+0x45f/0x2d20 [ 845.002657][ C1] ? get_page_from_freelist+0x28d9/0x2960 [ 845.002692][ C1] ? tipc_sk_rcv+0x23c/0x2d20 [ 845.002727][ C1] ? __pfx_tipc_sk_rcv+0x10/0x10 [ 845.002771][ C1] tipc_node_xmit+0x1e4/0xe40 [ 845.002794][ C1] ? rcu_is_watching+0x15/0xb0 [ 845.002822][ C1] ? rcu_is_watching+0x15/0xb0 [ 845.002850][ C1] ? __pfx_tipc_node_xmit+0x10/0x10 [ 845.002872][ C1] ? __pfx__copy_from_iter+0x10/0x10 [ 845.002894][ C1] ? __build_skb_around+0x262/0x3f0 [ 845.002915][ C1] ? tipc_msg_build+0x400/0xcf0 [ 845.002939][ C1] ? tipc_msg_build+0x474/0xcf0 [ 845.002970][ C1] ? tipc_sk_filtering+0x13c/0x510 [ 845.002988][ C1] __tipc_sendstream+0xb09/0x1290 [ 845.003037][ C1] ? __pfx___tipc_sendstream+0x10/0x10 [ 845.003057][ C1] ? rt_spin_unlock+0x150/0x200 [ 845.003072][ C1] ? __pfx_woken_wake_function+0x10/0x10 [ 845.003101][ C1] ? lock_sock_nested+0xdd/0x130 [ 845.003129][ C1] tipc_sendstream+0x55/0x70 [ 845.003148][ C1] ? __pfx_tipc_sendstream+0x10/0x10 [ 845.003167][ C1] __sock_sendmsg+0x219/0x270 [ 845.003196][ C1] sock_write_iter+0x27f/0x370 [ 845.003222][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 845.003252][ C1] ? __pfx_futex_wait+0x10/0x10 [ 845.003283][ C1] vfs_write+0x5d5/0xb40 [ 845.003307][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 845.003332][ C1] ? __pfx_vfs_write+0x10/0x10 [ 845.003357][ C1] ? __fget_files+0x2a/0x420 [ 845.003386][ C1] ksys_write+0x14b/0x260 [ 845.003408][ C1] ? __pfx_ksys_write+0x10/0x10 [ 845.003431][ C1] ? do_syscall_64+0xbe/0xfa0 [ 845.003454][ C1] do_syscall_64+0xfa/0xfa0 [ 845.003473][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 845.003494][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.003511][ C1] ? clear_bhb_loop+0x60/0xb0 [ 845.003531][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.003548][ C1] RIP: 0033:0x7f739935eec9 [ 845.003564][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 845.003578][ C1] RSP: 002b:00007f739759d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 845.003595][ C1] RAX: ffffffffffffffda RBX: 00007f73995b6090 RCX: 00007f739935eec9 [ 845.003608][ C1] RDX: 000000002000011a RSI: 0000200000000080 RDI: 0000000000000009 [ 845.003620][ C1] RBP: 00007f73993e1f91 R08: 0000000000000000 R09: 0000000000000000 [ 845.003631][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 845.003641][ C1] R13: 00007f73995b6128 R14: 00007f73995b6090 R15: 00007ffc56752598 [ 845.003663][ C1] [ 865.007449][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 865.007525][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 SYZFAIL: failed to send rpc fd=3 want=1208 sent=0 n=-1 (errno 32: Broken pipe) [ 870.194352][ T3181] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.422446][ T3181] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.618686][ T3181] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.820856][ T3181] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.105810][ T3181] bridge_slave_1: left allmulticast mode [ 871.106012][ T3181] bridge_slave_1: left promiscuous mode [ 871.110522][ T3181] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.192508][ T3181] bridge_slave_0: left allmulticast mode [ 871.192538][ T3181] bridge_slave_0: left promiscuous mode [ 871.192818][ T3181] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.296228][ T3181] bond1 (unregistering): (slave geneve2): Releasing active interface [ 873.355983][ T3181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 873.416153][ T3181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 873.438482][ T3181] bond0 (unregistering): Released all slaves [ 874.239850][ T3181] bond1 (unregistering): Released all slaves [ 874.359823][ T3181] : left promiscuous mode