last executing test programs: 1m56.180903641s ago: executing program 2 (id=754): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x2000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x4}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_EMATCHES={0x48, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x28, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x6, 0x3, [@TCF_META_TYPE_VAR="043f"]}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='3']}]}}]}]}]}}]}, 0x7c}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=@polexpire={0x218, 0x1b, 0x0, 0x70bd29, 0x25dfdbfb, {{{@in=@remote, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x4e24, 0x200, 0x4e23, 0x0, 0xa, 0x80, 0xe0, 0x5e, 0x0, 0xee00}, {0x6, 0x1000, 0x13, 0x8, 0x6, 0x3, 0x3ff, 0xe}, {0x400, 0x2000006, 0x5, 0x237}, 0x4, 0x6e6bb6, 0x0, 0x0, 0x1}}, [@algo_crypt={0x144, 0x2, {{'xts-twofish-3way\x00'}, 0x7e0, "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"}}, @srcaddr={0x14, 0xd, @in6=@empty}]}, 0x218}, 0x1, 0x0, 0x0, 0x10}, 0x800) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x5498a8b52a905021) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=']) 1m55.088487298s ago: executing program 2 (id=760): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000640)) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x45885, 0x80, 0x0, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x3516, 0x20000000, 0x0, 0x0, 0x0) 1m53.185874575s ago: executing program 2 (id=766): fsopen(0x0, 0x1) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000100)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0) 1m51.765751536s ago: executing program 2 (id=769): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}]}, 0x24}}, 0x0) 1m51.343262949s ago: executing program 2 (id=774): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) fcntl$setlease(r1, 0x400, 0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x10b8}, 0x200008c0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x28}}, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000540)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0x6}}, {{0xa, 0xfffe, 0x3fe00, @initdev={0xfe, 0x88, '\x00', 0xde, 0x0}, 0x3}}}, 0x108) 1m44.514644164s ago: executing program 2 (id=789): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80006f, 0x81501) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x4b5a9da54893e123, 0x3, 0x5, 0xffff}, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0}) 1m36.348727925s ago: executing program 1 (id=801): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0xe0, 0x4, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x7, 0x1, 0x1, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xf, 0x8, 0x2}}}}}]}}]}}, 0x0) 1m32.388397981s ago: executing program 1 (id=806): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 1m29.727259665s ago: executing program 1 (id=809): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x200001, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b38b000000000000000000070d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r1 = dup(0xffffffffffffffff) read$FUSE(r1, &(0x7f0000003c40)={0x2020}, 0xffffff0a) 1m29.060953151s ago: executing program 32 (id=789): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80006f, 0x81501) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x4b5a9da54893e123, 0x3, 0x5, 0xffff}, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0}) 1m29.004666992s ago: executing program 1 (id=811): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x10b8}, 0x200008c0) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x28}}, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0x6}}, {{0xa, 0xfffe, 0x3fe00, @initdev={0xfe, 0x88, '\x00', 0xde, 0x0}, 0x3}}}, 0x108) 1m27.96729721s ago: executing program 1 (id=814): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getsockname$unix(r0, &(0x7f0000000300)=@abs, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x1, 0x8001, 0x0, 0xb49, 0x200000000002, 0x9, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r2 = socket$netlink(0x10, 0x3, 0x15) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) recvmmsg(r2, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40010000, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r3 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0xfffffffe, 0x0, 0x30314742, 0x1, 0x0, 0x0, 0x3}}) readlinkat(0xffffffffffffffff, &(0x7f0000000140)='./mnt\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) epoll_create1(0x80000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, 0x0, &(0x7f0000000080)=0x98) socket$inet_udplite(0x2, 0x2, 0x88) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) 1m19.185171178s ago: executing program 1 (id=826): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000001000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00"/163]}, 0x11b) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r3, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448d5}, 0x8000002) 1m3.402981801s ago: executing program 33 (id=826): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000001000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00"/163]}, 0x11b) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r3, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448d5}, 0x8000002) 43.892783935s ago: executing program 0 (id=869): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB], 0x8) 43.452372216s ago: executing program 0 (id=870): syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 42.47137743s ago: executing program 0 (id=872): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getsockname$unix(r0, &(0x7f0000000300)=@abs, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x1, 0x8001, 0x0, 0xb49, 0x200000000002, 0x9, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r2 = socket$netlink(0x10, 0x3, 0x15) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) recvmmsg(r2, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40010000, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r3 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0xfffffffe, 0x0, 0x30314742, 0x1, 0x0, 0x0, 0x3}}) readlinkat(0xffffffffffffffff, &(0x7f0000000140)='./mnt\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) epoll_create1(0x80000) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_udplite(0x2, 0x2, 0x88) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) 38.824543428s ago: executing program 4 (id=876): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) creat(0x0, 0x168) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 38.446370499s ago: executing program 3 (id=877): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 36.396334129s ago: executing program 3 (id=878): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB], 0x8) 34.974417117s ago: executing program 3 (id=879): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340)={0x0, 0x16, 0x1, "ff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 34.043896546s ago: executing program 0 (id=880): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x408001, 0x0, 0xa, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x6000, @fd, 0x0, 0x20000003, 0x8020, 0x0, 0x1, {0x2}}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) munmap(&(0x7f000053c000/0x4000)=nil, 0x4000) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, &(0x7f0000000040)) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000070000000c00018008000600"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) syz_genetlink_get_family_id$ethtool(0x0, r2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x1040) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r9, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'sit0\x00', 0x4}, 0x18) 28.518857019s ago: executing program 0 (id=881): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udplite(0xa, 0x2, 0x88) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x2a, 0x2, 0x0) fsopen(&(0x7f00000007c0)='erofs\x00', 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) io_uring_enter(0xffffffffffffffff, 0x47bc, 0x273c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 27.925885244s ago: executing program 3 (id=882): socket(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x42080}, 0x24008081) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r4, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x80000, 0x2}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x42242, 0x73) socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x108, 0x0, 0x0, &(0x7f0000000200), 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write(0xffffffffffffffff, &(0x7f00000002c0)="0e0100120f0a00110001926c000000002e0c7000", 0x14) pwritev(r5, &(0x7f0000000400)=[{&(0x7f0000000040)='9', 0x1}, {0x0}], 0x2, 0xffffff01, 0xa) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000020301010000000020000000020000010800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x4000) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)=ANY=[@ANYRES16, @ANYRES64, @ANYRESHEX=0x0, @ANYRESOCT=r6, @ANYRESHEX=r1, @ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0x200048d0}, 0x88c4) socket$nl_netfilter(0x10, 0x3, 0xc) 27.925583288s ago: executing program 4 (id=883): r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xe, 0x8f82) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000440)={0x1, 0x0, {0x401, 0x7, 0x1012, 0x3, 0xa, 0x4, 0x1}}) 26.909620411s ago: executing program 0 (id=884): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004380)=@delchain={0x191c, 0x65, 0x0, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa}, {0x10, 0xe}, {0xfff1, 0xfffb}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}, @filter_kind_options=@f_route={{0xa}, {0x18e0, 0x2, [@TCA_ROUTE4_POLICE={0x834, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1d}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x7f, 0x4, 0xffffffff, 0xe, 0x20, 0x7ff, 0x7, 0x8, 0x2, 0x2, 0x1, 0x3, 0x7fffffff, 0x40, 0xfffc0000, 0x4, 0x4, 0x5, 0x2, 0x395a3a1c, 0x8, 0x101, 0x2, 0x20, 0x504, 0x7, 0x294, 0x9, 0x9, 0xfffff027, 0x4, 0xff, 0x8, 0x2, 0x5, 0x3, 0x800, 0x4, 0x1ff, 0x8, 0x4, 0x10000, 0x1, 0x1, 0x7, 0x57, 0x80000001, 0x7021, 0x29, 0xff, 0x2, 0x1, 0x4, 0x8, 0x0, 0x23, 0xffffffff, 0x40, 0x3, 0x7, 0x7, 0xeb02, 0x0, 0x618f, 0x8, 0x7a5, 0x6, 0x6b8, 0x0, 0x7, 0xffffff86, 0x4, 0x9, 0x7fffffff, 0xd, 0x1fd, 0x6, 0x3, 0x0, 0x2, 0x800, 0x5, 0x7ff, 0x2, 0x8, 0x400, 0x0, 0xffff, 0x325, 0x0, 0x5, 0xb, 0xaff, 0x2, 0x80000001, 0x8, 0xd, 0x9, 0x4, 0x771d, 0x9, 0xffffffff, 0x900000, 0xca, 0x1, 0x167, 0x7, 0x6, 0x7fff, 0x3, 0xffffffff, 0x3, 0x19, 0x5, 0x6, 0x80000000, 0x8, 0x0, 0x4, 0x0, 0x9, 0x7fffffff, 0x401, 0xd8, 0xffffffc0, 0x7, 0x1, 0x2, 0x9, 0x9, 0x401, 0x1, 0x7, 0x200, 0x240000, 0x0, 0xe, 0x1ff, 0x1, 0x9, 0x1, 0x2, 0x8, 0x6, 0x7, 0x4, 0x80000, 0x3, 0x7, 0x27, 0x5, 0x4, 0x4, 0x7, 0xffffffff, 0x4, 0xa, 0x400, 0xd, 0x8, 0x5, 0x9, 0xfff, 0x401, 0x3, 0xd6c, 0x1a, 0x10000, 0xfffffffd, 0x1, 0x3, 0xff, 0xf, 0x2, 0x9, 0x5, 0x8, 0x7, 0x8, 0x3, 0x0, 0x2819, 0x108, 0x5, 0x1, 0x1, 0x80000000, 0x6, 0x4, 0x9, 0x1, 0x9, 0x4, 0x2, 0xf, 0x7, 0xfffffff9, 0x3, 0x5, 0x85d1, 0xe, 0x1, 0xf20, 0x0, 0x3, 0x9, 0xc31, 0x5, 0x7ff, 0x3d3, 0xffffff7f, 0x4, 0x1a2a, 0x5, 0x9, 0x0, 0x9, 0xfffffff9, 0x2, 0x80000000, 0x7, 0x6, 0x3, 0x3, 0x9, 0x400, 0x2, 0x6, 0x510e, 0xfffffff7, 0x37, 0x0, 0x0, 0x5, 0x3, 0x9, 0x5, 0x2, 0xfffffff7, 0x8d, 0x7, 0xfffffc00, 0x71cc, 0x6, 0x7ff, 0x9, 0x0, 0x1000, 0x2, 0xaa0, 0x7, 0xc0, 0xfff, 0xd671, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x7f, 0x200, 0x9, 0xe885, 0xf4e1, 0xb5, 0xc, 0x8, 0x5, 0x880d, 0x9, 0x1, 0x200, 0x2, 0x7, 0x2, 0x682d905c, 0x9, 0x8, 0x7ff, 0x78, 0x1, 0x9, 0x36c6, 0x1, 0x0, 0x5, 0x70, 0x8, 0x4, 0x8, 0x6d482da6, 0x2, 0x2, 0x4, 0x9, 0x6, 0xff, 0x7ff, 0x1f, 0x80, 0x6, 0x6, 0x8, 0x80, 0x3, 0x0, 0x1000, 0x3, 0x5ed, 0x2090, 0x9, 0xffffffff, 0x4, 0x2, 0x3, 0x7, 0x6, 0x8000, 0x3, 0x81, 0x733488f3, 0x3aa, 0x3, 0x101, 0x5, 0x3, 0xffff8001, 0xa, 0x7, 0x6112, 0x7, 0x7, 0x8, 0x7fff, 0x69519570, 0x60, 0x4, 0x8, 0x8, 0x7fff, 0x80000001, 0x6, 0x87, 0x8, 0x1000, 0x6aa5, 0xfffffff8, 0xb4d6, 0x133d8258, 0x7d, 0x0, 0x6d6, 0x7f, 0xbe2, 0x8, 0x76, 0x3, 0x64, 0xfd6, 0xcf, 0xe, 0x7, 0x2, 0x7fffffff, 0xd, 0xfff, 0xfffffffc, 0x4, 0x5, 0x6, 0x0, 0x8, 0x4, 0x0, 0xff, 0x7, 0x5, 0x1a340, 0x0, 0x80, 0x2, 0x7ff, 0x8, 0x100, 0x7, 0x10000, 0x4, 0x8, 0x8, 0x2000000, 0x9, 0x60, 0x0, 0x4, 0x7fffffff, 0xd, 0x9, 0xe, 0x8, 0x9, 0x2, 0xe, 0x7ff, 0x9, 0x800, 0x7, 0x0, 0x4, 0x6, 0x2, 0x9, 0x10, 0xebe, 0x3, 0x4, 0x0, 0x9c8600, 0x4, 0x9, 0x1f11, 0x8, 0x8, 0xa8, 0xfce, 0x7fff, 0xfff, 0x9, 0xa, 0x5, 0x1, 0xffffffff, 0x401, 0x101, 0x9, 0x1, 0x8, 0x1, 0xcb3, 0xa7, 0x0, 0x7, 0x2, 0x10000000, 0x8, 0xfffffffc, 0x8001, 0x9, 0xffffffff, 0x401, 0x7, 0x4, 0x3, 0x5, 0x0, 0x1000, 0x5, 0x2, 0xda, 0xfffffff0, 0xba, 0x5, 0xb, 0x4, 0xe, 0x401, 0xfc2d, 0x1, 0xfff, 0x1000, 0x0, 0x9e1, 0x7, 0x10, 0x280000, 0xfffffffc, 0x3de, 0x4, 0x1, 0xfffffff9, 0x80000000, 0x7, 0x6, 0x7, 0x4, 0x7f, 0x7, 0x400, 0xffffffff, 0x81, 0x7fff, 0x6a, 0x6, 0x3, 0xa5c, 0x10001, 0xa6, 0x4, 0xfff, 0x6, 0x7, 0x5, 0x1, 0x8, 0x7, 0x24, 0x5, 0x9, 0x7, 0x0, 0x6, 0xffffffff, 0x7fff, 0xfffffffe, 0x80000000, 0x9]}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x2, 0xa}}, @TCA_ROUTE4_POLICE={0x10a0, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x80000001, 0x74, 0x80000001, 0x7fffffff, 0x9, 0x9, 0x5, 0x56, 0x6, 0x3ff, 0x2, 0x9, 0x2, 0xfffffff7, 0x9, 0x80000001, 0x3, 0x94, 0xf, 0x400, 0xffffffff, 0x9, 0xfffffff8, 0xdf, 0xb2b1, 0xa, 0x8, 0x8000, 0x7, 0x8, 0x8, 0x212c4404, 0x3, 0x3, 0x6, 0x7, 0x81, 0xffff8000, 0xffffffff, 0xdb, 0xb9a031b, 0x1ff, 0x8, 0x3, 0x6, 0xb7, 0x1, 0x2, 0xfc17, 0x6f, 0xd, 0x3, 0x4, 0x377, 0x80, 0x12000, 0x9, 0x3, 0x4, 0xb, 0x9, 0x9391, 0x3, 0xe, 0xdb, 0x7a70, 0x90, 0x9, 0x0, 0x3, 0x9, 0x3, 0xffffffff, 0x5, 0x1, 0x80000000, 0x9, 0x0, 0xffff86e5, 0x750a1cfd, 0x6, 0x9, 0x4, 0x0, 0xc, 0x3128, 0x6, 0x369, 0x1, 0xfffffeff, 0x8, 0x1, 0x1f, 0x9, 0x877d, 0xb, 0xff, 0x3, 0x9, 0x7270, 0x2, 0x1, 0x401, 0xd, 0x10001, 0x42, 0x65, 0x3, 0x7, 0xfffffff7, 0x3, 0x4, 0x1ff, 0x4, 0x80000001, 0x9ac, 0xff, 0x4, 0x8, 0x5, 0x7, 0x4, 0x6, 0xc11, 0x9, 0x7557, 0x5, 0x53, 0x1, 0x4, 0x36f, 0xf, 0x1, 0x8e8c, 0xc, 0x80, 0x7, 0x6, 0x0, 0x0, 0x7f, 0x84, 0x0, 0x7fff, 0x2, 0xffffffff, 0x2, 0x40, 0x5, 0x6, 0xe54, 0x10, 0x8, 0x9, 0x4, 0x2, 0xffffffb9, 0x9, 0x7, 0x6, 0x18, 0x100, 0x6, 0x5, 0x1, 0xfffffff9, 0x9, 0x9, 0x4, 0x80, 0xfffffff9, 0x5, 0x5, 0xfffffffd, 0x8001, 0x0, 0x7f, 0x101, 0x10000, 0xfa0c, 0x0, 0xfffffed7, 0x4, 0xe22, 0xfffffff3, 0x1000, 0x5, 0x5, 0x77e, 0x8, 0x6, 0x8, 0x1, 0x1, 0xc98, 0x100, 0xfffffeff, 0xffff, 0xfffffffd, 0x9, 0x1000, 0x4, 0x3f3c6f69, 0x5, 0xd44, 0x0, 0xa7, 0x7, 0xfffffff9, 0x5, 0x0, 0x9, 0x4, 0x80000000, 0x1, 0x7fffffff, 0x2, 0x3, 0x7, 0x2, 0x5, 0x5192f303, 0x5, 0x8, 0xf61c, 0xf7e, 0x2, 0x3ff, 0x3ff, 0x8001, 0x4, 0x9, 0xfffffffc, 0x1000, 0x5, 0x4, 0x40d070f, 0x2, 0xa3b8, 0x7687, 0x8001, 0x1, 0x3, 0xbec, 0x4, 0x9, 0xffffe389, 0x0, 0xf, 0xc, 0x7fffffff, 0x3, 0x0, 0xc212, 0xffff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc, 0x80, 0x1000, 0xaa, 0x101, 0x2, 0x5, 0xa, 0x2, 0xdc2a, 0x5, 0x9, 0x1, 0x4104, 0x6, 0x6, 0xffffffff, 0xffff, 0x4, 0x0, 0x7, 0x7, 0x2, 0x6, 0x7, 0x2, 0x6, 0x80000001, 0x7ff, 0x80000001, 0xc, 0x5, 0xffff7fff, 0x2, 0x4, 0x8000, 0x2, 0x3, 0x3, 0xfffffffe, 0x7, 0xa6d2, 0x3, 0x2, 0xef6, 0x6, 0x3, 0x5, 0x23, 0x0, 0x5, 0x6, 0x8, 0x2, 0x1, 0x9, 0x0, 0xffff, 0x1, 0x10000, 0xbfff, 0x9, 0x4, 0x4, 0x3, 0x5, 0xfff, 0x2, 0x7ff, 0x7, 0xd, 0x3f3dc15c, 0x6, 0x1ff, 0x1cb, 0x3, 0x7f, 0x1, 0x9, 0x0, 0x9, 0x2, 0x1000, 0xd61, 0xfffffff1, 0x7f, 0x4, 0x5, 0xffffffff, 0x8, 0x2, 0x4, 0x5, 0x0, 0x7, 0xfffffffd, 0x6, 0x7b105329, 0x2, 0x1, 0x4, 0x5, 0x0, 0x3, 0x2, 0xb178, 0x7, 0x3, 0x1, 0xa, 0x4, 0x5, 0x3, 0x2, 0x5, 0x1, 0x3, 0x1, 0x6f2, 0x10000, 0x8, 0xc, 0x5b0a, 0x4, 0x8, 0x0, 0x6, 0x9, 0x0, 0x9, 0x6, 0x1, 0x3835, 0x56a, 0xa0, 0x80000000, 0x0, 0x7, 0xb, 0x1000, 0x7, 0x2, 0x800, 0x6, 0x3, 0x2, 0x5, 0x8, 0x4, 0x3, 0x7, 0x6, 0xfffffffd, 0x2, 0x7fff, 0xa0000, 0xffffffff, 0x8, 0x7, 0xfffffff9, 0xfffffff9, 0xb8, 0x1, 0x401, 0x1, 0x400, 0xfff, 0x5, 0x7, 0xfa, 0x2, 0x40, 0xffffffff, 0x7ff, 0x2, 0x0, 0x9, 0x0, 0x101, 0xd, 0x5, 0x20000000, 0x5, 0x1, 0x7fff, 0x800, 0x8, 0x62, 0x4, 0xc02, 0x5, 0x4, 0x7, 0x7, 0x2, 0xc, 0x9, 0x4, 0x1b1, 0xe2d, 0x9, 0x6, 0x7, 0x6, 0x0, 0xffff44e6, 0x100, 0xffff414b, 0xfff, 0x5, 0xa9df, 0x2, 0x6, 0x4, 0xf, 0x9, 0x100, 0xf04, 0xa, 0x100, 0x9, 0x1ff, 0x4, 0xffff, 0x2, 0x56, 0x7fffffff, 0x6, 0xd, 0x7f, 0x6, 0x0, 0x97d0, 0x0, 0x7ffffffd, 0x5, 0x6, 0x1, 0x9, 0xc, 0x0, 0x8, 0x9, 0xf, 0x7ff, 0xffe00000, 0x8, 0x8000, 0xa60, 0xe257, 0x30000000, 0xee8, 0x8c, 0x1, 0x0, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0x10000000, 0x6, 0xfffff6c3, 0x0, {0x78, 0x0, 0x6, 0x1, 0x3, 0x9}, {0x3, 0x1, 0x5, 0xfeff, 0x1, 0xe39d}, 0x0, 0xb}}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x5, 0x4, 0xfff, 0x7, 0x1, 0xedf, 0x0, 0x80000001, 0x8, 0x24, 0xd, 0xdcb3, 0x5, 0x5, 0xbc, 0x8001, 0x400, 0x5f, 0x40, 0x8, 0x9, 0x6, 0x3, 0x1, 0x1d8d, 0x69, 0xe, 0x4, 0x6ea3be4d, 0x6, 0x3, 0x2, 0x81, 0x4, 0x8, 0x2ec, 0x10001, 0x2, 0x3, 0x988, 0x40, 0x8, 0x8, 0x6, 0x3, 0xa, 0x4, 0x71de, 0x9, 0x3, 0x10, 0x5, 0x61e, 0x9, 0xfffffff7, 0x0, 0x9, 0x80000000, 0x7fffffff, 0x10000, 0x7, 0x5, 0x1000, 0xd2, 0xffff143c, 0x5, 0x5, 0xa, 0x5, 0x5, 0x10000, 0x2, 0x7, 0x2, 0x4d4b, 0xd, 0x4, 0xffffffff, 0x400, 0x1, 0x3, 0x0, 0x9, 0x7, 0x10000, 0x5, 0x2, 0x1, 0x1, 0xaa, 0x3, 0x10, 0x100, 0x80000001, 0x6fabe463, 0x4f, 0x1000, 0x9, 0x8, 0xfffffff8, 0x5, 0x5, 0x2, 0xffffffff, 0x6, 0xfffffffe, 0x10, 0x5, 0x157, 0x4, 0x4, 0x8, 0x5, 0xd3, 0x2a0, 0x9, 0x6, 0x10000, 0xff, 0x1, 0x6, 0x401, 0x9b34, 0x2, 0x5, 0x4c, 0x9, 0x7fff, 0x9, 0x0, 0x4, 0x4, 0x9, 0x6, 0x8, 0xfffffff9, 0x4, 0x10, 0x101, 0x0, 0xffffffb7, 0x3, 0x8616, 0x5, 0x800, 0x7f, 0x3, 0x6, 0x0, 0x8, 0xbf2, 0x101, 0x49, 0x1, 0x10001, 0x6, 0x5, 0x521, 0x4, 0x5, 0xc08, 0x8, 0x0, 0x6, 0x0, 0xa, 0x8, 0x1ae8, 0x100, 0x80000000, 0x5, 0xffffff04, 0x9e, 0x2, 0x8, 0x6, 0x1ff, 0x10000, 0xffffffff, 0x6, 0x19b, 0xa, 0xffff, 0x8, 0xa3, 0x7ff, 0xedda, 0x2, 0x1, 0x6, 0x52, 0x1000, 0x7, 0x7, 0x8, 0x9, 0x9, 0xa, 0x5, 0x80000001, 0x1000, 0x6, 0x7baf, 0xfffffff9, 0x7, 0xfffffff8, 0x80000001, 0x1, 0x7, 0x5f3, 0x8, 0x7f, 0x7, 0x3, 0xa, 0x3195, 0x7, 0x3, 0x3, 0x6, 0x53ae, 0x9, 0x3, 0x3, 0x2, 0x9, 0x8, 0x3eb, 0x9, 0x2e2b, 0x8, 0xffffff6e, 0x9, 0x9, 0x2003, 0x23d, 0x80000001, 0x1, 0xffffffff, 0x4, 0x43, 0x3083, 0x7, 0x0, 0x8, 0x7, 0x9, 0x70, 0x7, 0x0, 0x6, 0x40400, 0x10, 0x3ff, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x7, 0xc, 0x5, 0x80, {0x60, 0x2, 0x8, 0x2, 0x7fff, 0xa}, {0x13, 0x0, 0x1, 0x7, 0x115, 0x69f}, 0x1000, 0x7}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x37f, 0x673, 0x400, 0x8, 0xffff0001, 0x0, 0x6, 0x6, 0x8, 0x7ff, 0x82d, 0x7, 0xffff, 0x80, 0x7, 0x3ff, 0x384, 0x6, 0x401, 0x8d, 0xbb, 0xd, 0x9, 0x9, 0x100, 0x7fff, 0x7, 0x2, 0xfffffffb, 0x800007, 0x8001, 0x6, 0x3ff, 0x7, 0x7, 0x1, 0x2, 0x7, 0x7, 0x3, 0x7, 0xfffffff7, 0xf28, 0x8, 0x66f, 0x8, 0x1, 0x8, 0x0, 0xc, 0x7, 0x6, 0xe, 0x8, 0x5, 0x5, 0x3, 0x1, 0x37, 0x6, 0x10, 0x4, 0x19, 0xd59c, 0x2, 0x20000000, 0x0, 0xf, 0xb472, 0x0, 0x4, 0xd4, 0x3, 0x7fffffff, 0x5, 0x65e, 0x80000000, 0x7f, 0x4, 0xf, 0x9f4, 0x0, 0x9, 0xffff, 0xff800000, 0x802, 0xfffffffc, 0x8000, 0xe7, 0x3, 0xa61, 0x7, 0xc, 0xfff, 0xfffffffd, 0x7, 0x5, 0x1b, 0x2, 0x1, 0x200, 0x3, 0xac8e, 0x3ff, 0xeea2, 0x6, 0x8, 0x3ff, 0x6, 0x3, 0xa, 0x0, 0x5, 0x7, 0x1, 0x5, 0x7, 0x3ff, 0x1, 0x4, 0x6, 0x2, 0x3, 0x2baa, 0x1b, 0x0, 0x5, 0xffffff2f, 0x1ff, 0x7fffffff, 0x401, 0x4, 0x10d82ba1, 0xb1, 0x2, 0x7, 0xa9, 0x9, 0x10, 0x0, 0x7, 0x6, 0xfffffff7, 0x7, 0x7, 0x81, 0x7, 0xab4, 0x400, 0x80, 0xd5, 0x1ff, 0x9b, 0x80, 0xbdc9, 0xe, 0x6, 0x6, 0x5, 0x400, 0x800, 0x27, 0x8, 0xd, 0xffffffff, 0x8, 0x9, 0x9, 0x4000, 0x3, 0x1, 0x800, 0x10001, 0xa, 0x100, 0xf57, 0xfffffff8, 0x14, 0x4, 0xe4d3, 0x8, 0x3ff8, 0x40, 0xf, 0x6, 0xfffffffe, 0x0, 0x1, 0x3, 0xfffffffc, 0x6, 0x4, 0xfffffffb, 0x8, 0xfffffff8, 0x4, 0xa1c, 0x5, 0x3, 0x10001, 0xb, 0x10000, 0x7fffffff, 0x4, 0x668, 0x10, 0x4, 0x1, 0x10000, 0x11a, 0x9, 0x140, 0x9, 0x3, 0x0, 0x1ff, 0x1, 0x8, 0x6, 0x9, 0x8, 0x5, 0x100, 0x0, 0x9, 0x5, 0x7, 0x9, 0x9, 0x4, 0x6, 0x4, 0x3ff, 0x4, 0x9, 0x8, 0x0, 0x4, 0x2, 0xfffffffc, 0x1a9, 0x3, 0x3ff, 0x8001, 0x48a8, 0x7a58, 0x6, 0x101, 0x4, 0x4, 0x4, 0x7, 0x9, 0x5, 0xf160, 0x1]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RATE64={0xc}]}]}}]}, 0x191c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020084) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000026c0)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xfff1, 0xfff3}, {0x5, 0xfff1}, {0x3, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x200008c2) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r11 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r11, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x4ebe5fdc5ca778fa}) socket(0x1d, 0x2, 0x6) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020}, 0x2020) 25.824988485s ago: executing program 4 (id=885): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x2000, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x4}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_EMATCHES={0x48, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x28, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x6, 0x3, [@TCF_META_TYPE_VAR="043f"]}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='3']}]}}]}]}]}}]}, 0x7c}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=@polexpire={0x218, 0x1b, 0x0, 0x70bd29, 0x25dfdbfb, {{{@in=@remote, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x4e24, 0x200, 0x4e23, 0x0, 0xa, 0x80, 0xe0, 0x5e, r6, 0xee00}, {0x6, 0x1000, 0x13, 0x8, 0x6, 0x3, 0x3ff, 0xe}, {0x400, 0x2000006, 0x5, 0x237}, 0x4, 0x6e6bb6, 0x0, 0x0, 0x1}}, [@algo_crypt={0x144, 0x2, {{'xts-twofish-3way\x00'}, 0x7e0, "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"}}, @srcaddr={0x14, 0xd, @in6=@empty}]}, 0x218}, 0x1, 0x0, 0x0, 0x10}, 0x800) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x5498a8b52a905021) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=']) 24.985167375s ago: executing program 3 (id=886): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = landlock_create_ruleset(&(0x7f0000000080)={0xd60b, 0x2}, 0x18, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x80) landlock_restrict_self(r2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_io_uring_setup(0x1238, &(0x7f0000000240)={0x0, 0x80fd, 0x80, 0x2, 0xabc}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r7, r3) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) dup(0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0xc1105511, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r8, 0x0, {}, 0xfd}, 0x18) socket$inet6(0xa, 0x80000, 0x200) r9 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$CEC_ADAP_S_LOG_ADDRS(r9, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0x9, "00000000020000000000002100", "00004702", "0300", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00"]}) 24.452182089s ago: executing program 4 (id=887): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x10, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x3d3}, &(0x7f0000000200)=0x0, &(0x7f0000000300)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) syz_io_uring_submit(r3, r2, 0x0) io_uring_enter(r0, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 20.498724128s ago: executing program 4 (id=888): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/partitions\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x49c, &(0x7f00000000c0)={0x0, 0x79ae, 0x3100, 0x8000, 0x3, 0x0, r0}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) 18.95644943s ago: executing program 4 (id=889): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, 0x0, 0x0) 16.323758378s ago: executing program 3 (id=890): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x85, &(0x7f0000000080)=""/4060, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_open_dev$ttys(0xc, 0x2, 0x1) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSTI(r3, 0x5412, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x141301) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x42, 0x4, 0x2e0, 0xffffffff, 0x98, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'vlan0\x00', {0xff}, {0xff}, 0x8, 0x0, 0x17}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0x10, "b630"}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x0, {0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x0, 0x8, [0xa, 0x25, 0x2a, 0xa, 0x13, 0xe, 0x29, 0x21, 0x38, 0x21, 0x40, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x1, 0x0, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffd}}}}, 0x340) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000206d044fc200000000000109022400010000000009040800010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000280)={0x2c, &(0x7f0000001180)=ANY=[@ANYBLOB="000005000000050093ffffff7f000000000000000000623bcc031948ee0624d73b7037f91be7bc0aa5772f26ca4e0ab79255cd14492944e445686eac3f7fb8d6153d84df63bc7fe075b15bfd01"], 0x0, 0x0, 0x0, 0x0}, 0x0) 9.043439387s ago: executing program 34 (id=884): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004380)=@delchain={0x191c, 0x65, 0x0, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa}, {0x10, 0xe}, {0xfff1, 0xfffb}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}, @filter_kind_options=@f_route={{0xa}, {0x18e0, 0x2, [@TCA_ROUTE4_POLICE={0x834, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1d}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x7f, 0x4, 0xffffffff, 0xe, 0x20, 0x7ff, 0x7, 0x8, 0x2, 0x2, 0x1, 0x3, 0x7fffffff, 0x40, 0xfffc0000, 0x4, 0x4, 0x5, 0x2, 0x395a3a1c, 0x8, 0x101, 0x2, 0x20, 0x504, 0x7, 0x294, 0x9, 0x9, 0xfffff027, 0x4, 0xff, 0x8, 0x2, 0x5, 0x3, 0x800, 0x4, 0x1ff, 0x8, 0x4, 0x10000, 0x1, 0x1, 0x7, 0x57, 0x80000001, 0x7021, 0x29, 0xff, 0x2, 0x1, 0x4, 0x8, 0x0, 0x23, 0xffffffff, 0x40, 0x3, 0x7, 0x7, 0xeb02, 0x0, 0x618f, 0x8, 0x7a5, 0x6, 0x6b8, 0x0, 0x7, 0xffffff86, 0x4, 0x9, 0x7fffffff, 0xd, 0x1fd, 0x6, 0x3, 0x0, 0x2, 0x800, 0x5, 0x7ff, 0x2, 0x8, 0x400, 0x0, 0xffff, 0x325, 0x0, 0x5, 0xb, 0xaff, 0x2, 0x80000001, 0x8, 0xd, 0x9, 0x4, 0x771d, 0x9, 0xffffffff, 0x900000, 0xca, 0x1, 0x167, 0x7, 0x6, 0x7fff, 0x3, 0xffffffff, 0x3, 0x19, 0x5, 0x6, 0x80000000, 0x8, 0x0, 0x4, 0x0, 0x9, 0x7fffffff, 0x401, 0xd8, 0xffffffc0, 0x7, 0x1, 0x2, 0x9, 0x9, 0x401, 0x1, 0x7, 0x200, 0x240000, 0x0, 0xe, 0x1ff, 0x1, 0x9, 0x1, 0x2, 0x8, 0x6, 0x7, 0x4, 0x80000, 0x3, 0x7, 0x27, 0x5, 0x4, 0x4, 0x7, 0xffffffff, 0x4, 0xa, 0x400, 0xd, 0x8, 0x5, 0x9, 0xfff, 0x401, 0x3, 0xd6c, 0x1a, 0x10000, 0xfffffffd, 0x1, 0x3, 0xff, 0xf, 0x2, 0x9, 0x5, 0x8, 0x7, 0x8, 0x3, 0x0, 0x2819, 0x108, 0x5, 0x1, 0x1, 0x80000000, 0x6, 0x4, 0x9, 0x1, 0x9, 0x4, 0x2, 0xf, 0x7, 0xfffffff9, 0x3, 0x5, 0x85d1, 0xe, 0x1, 0xf20, 0x0, 0x3, 0x9, 0xc31, 0x5, 0x7ff, 0x3d3, 0xffffff7f, 0x4, 0x1a2a, 0x5, 0x9, 0x0, 0x9, 0xfffffff9, 0x2, 0x80000000, 0x7, 0x6, 0x3, 0x3, 0x9, 0x400, 0x2, 0x6, 0x510e, 0xfffffff7, 0x37, 0x0, 0x0, 0x5, 0x3, 0x9, 0x5, 0x2, 0xfffffff7, 0x8d, 0x7, 0xfffffc00, 0x71cc, 0x6, 0x7ff, 0x9, 0x0, 0x1000, 0x2, 0xaa0, 0x7, 0xc0, 0xfff, 0xd671, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x7f, 0x200, 0x9, 0xe885, 0xf4e1, 0xb5, 0xc, 0x8, 0x5, 0x880d, 0x9, 0x1, 0x200, 0x2, 0x7, 0x2, 0x682d905c, 0x9, 0x8, 0x7ff, 0x78, 0x1, 0x9, 0x36c6, 0x1, 0x0, 0x5, 0x70, 0x8, 0x4, 0x8, 0x6d482da6, 0x2, 0x2, 0x4, 0x9, 0x6, 0xff, 0x7ff, 0x1f, 0x80, 0x6, 0x6, 0x8, 0x80, 0x3, 0x0, 0x1000, 0x3, 0x5ed, 0x2090, 0x9, 0xffffffff, 0x4, 0x2, 0x3, 0x7, 0x6, 0x8000, 0x3, 0x81, 0x733488f3, 0x3aa, 0x3, 0x101, 0x5, 0x3, 0xffff8001, 0xa, 0x7, 0x6112, 0x7, 0x7, 0x8, 0x7fff, 0x69519570, 0x60, 0x4, 0x8, 0x8, 0x7fff, 0x80000001, 0x6, 0x87, 0x8, 0x1000, 0x6aa5, 0xfffffff8, 0xb4d6, 0x133d8258, 0x7d, 0x0, 0x6d6, 0x7f, 0xbe2, 0x8, 0x76, 0x3, 0x64, 0xfd6, 0xcf, 0xe, 0x7, 0x2, 0x7fffffff, 0xd, 0xfff, 0xfffffffc, 0x4, 0x5, 0x6, 0x0, 0x8, 0x4, 0x0, 0xff, 0x7, 0x5, 0x1a340, 0x0, 0x80, 0x2, 0x7ff, 0x8, 0x100, 0x7, 0x10000, 0x4, 0x8, 0x8, 0x2000000, 0x9, 0x60, 0x0, 0x4, 0x7fffffff, 0xd, 0x9, 0xe, 0x8, 0x9, 0x2, 0xe, 0x7ff, 0x9, 0x800, 0x7, 0x0, 0x4, 0x6, 0x2, 0x9, 0x10, 0xebe, 0x3, 0x4, 0x0, 0x9c8600, 0x4, 0x9, 0x1f11, 0x8, 0x8, 0xa8, 0xfce, 0x7fff, 0xfff, 0x9, 0xa, 0x5, 0x1, 0xffffffff, 0x401, 0x101, 0x9, 0x1, 0x8, 0x1, 0xcb3, 0xa7, 0x0, 0x7, 0x2, 0x10000000, 0x8, 0xfffffffc, 0x8001, 0x9, 0xffffffff, 0x401, 0x7, 0x4, 0x3, 0x5, 0x0, 0x1000, 0x5, 0x2, 0xda, 0xfffffff0, 0xba, 0x5, 0xb, 0x4, 0xe, 0x401, 0xfc2d, 0x1, 0xfff, 0x1000, 0x0, 0x9e1, 0x7, 0x10, 0x280000, 0xfffffffc, 0x3de, 0x4, 0x1, 0xfffffff9, 0x80000000, 0x7, 0x6, 0x7, 0x4, 0x7f, 0x7, 0x400, 0xffffffff, 0x81, 0x7fff, 0x6a, 0x6, 0x3, 0xa5c, 0x10001, 0xa6, 0x4, 0xfff, 0x6, 0x7, 0x5, 0x1, 0x8, 0x7, 0x24, 0x5, 0x9, 0x7, 0x0, 0x6, 0xffffffff, 0x7fff, 0xfffffffe, 0x80000000, 0x9]}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x2, 0xa}}, @TCA_ROUTE4_POLICE={0x10a0, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x80000001, 0x74, 0x80000001, 0x7fffffff, 0x9, 0x9, 0x5, 0x56, 0x6, 0x3ff, 0x2, 0x9, 0x2, 0xfffffff7, 0x9, 0x80000001, 0x3, 0x94, 0xf, 0x400, 0xffffffff, 0x9, 0xfffffff8, 0xdf, 0xb2b1, 0xa, 0x8, 0x8000, 0x7, 0x8, 0x8, 0x212c4404, 0x3, 0x3, 0x6, 0x7, 0x81, 0xffff8000, 0xffffffff, 0xdb, 0xb9a031b, 0x1ff, 0x8, 0x3, 0x6, 0xb7, 0x1, 0x2, 0xfc17, 0x6f, 0xd, 0x3, 0x4, 0x377, 0x80, 0x12000, 0x9, 0x3, 0x4, 0xb, 0x9, 0x9391, 0x3, 0xe, 0xdb, 0x7a70, 0x90, 0x9, 0x0, 0x3, 0x9, 0x3, 0xffffffff, 0x5, 0x1, 0x80000000, 0x9, 0x0, 0xffff86e5, 0x750a1cfd, 0x6, 0x9, 0x4, 0x0, 0xc, 0x3128, 0x6, 0x369, 0x1, 0xfffffeff, 0x8, 0x1, 0x1f, 0x9, 0x877d, 0xb, 0xff, 0x3, 0x9, 0x7270, 0x2, 0x1, 0x401, 0xd, 0x10001, 0x42, 0x65, 0x3, 0x7, 0xfffffff7, 0x3, 0x4, 0x1ff, 0x4, 0x80000001, 0x9ac, 0xff, 0x4, 0x8, 0x5, 0x7, 0x4, 0x6, 0xc11, 0x9, 0x7557, 0x5, 0x53, 0x1, 0x4, 0x36f, 0xf, 0x1, 0x8e8c, 0xc, 0x80, 0x7, 0x6, 0x0, 0x0, 0x7f, 0x84, 0x0, 0x7fff, 0x2, 0xffffffff, 0x2, 0x40, 0x5, 0x6, 0xe54, 0x10, 0x8, 0x9, 0x4, 0x2, 0xffffffb9, 0x9, 0x7, 0x6, 0x18, 0x100, 0x6, 0x5, 0x1, 0xfffffff9, 0x9, 0x9, 0x4, 0x80, 0xfffffff9, 0x5, 0x5, 0xfffffffd, 0x8001, 0x0, 0x7f, 0x101, 0x10000, 0xfa0c, 0x0, 0xfffffed7, 0x4, 0xe22, 0xfffffff3, 0x1000, 0x5, 0x5, 0x77e, 0x8, 0x6, 0x8, 0x1, 0x1, 0xc98, 0x100, 0xfffffeff, 0xffff, 0xfffffffd, 0x9, 0x1000, 0x4, 0x3f3c6f69, 0x5, 0xd44, 0x0, 0xa7, 0x7, 0xfffffff9, 0x5, 0x0, 0x9, 0x4, 0x80000000, 0x1, 0x7fffffff, 0x2, 0x3, 0x7, 0x2, 0x5, 0x5192f303, 0x5, 0x8, 0xf61c, 0xf7e, 0x2, 0x3ff, 0x3ff, 0x8001, 0x4, 0x9, 0xfffffffc, 0x1000, 0x5, 0x4, 0x40d070f, 0x2, 0xa3b8, 0x7687, 0x8001, 0x1, 0x3, 0xbec, 0x4, 0x9, 0xffffe389, 0x0, 0xf, 0xc, 0x7fffffff, 0x3, 0x0, 0xc212, 0xffff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc, 0x80, 0x1000, 0xaa, 0x101, 0x2, 0x5, 0xa, 0x2, 0xdc2a, 0x5, 0x9, 0x1, 0x4104, 0x6, 0x6, 0xffffffff, 0xffff, 0x4, 0x0, 0x7, 0x7, 0x2, 0x6, 0x7, 0x2, 0x6, 0x80000001, 0x7ff, 0x80000001, 0xc, 0x5, 0xffff7fff, 0x2, 0x4, 0x8000, 0x2, 0x3, 0x3, 0xfffffffe, 0x7, 0xa6d2, 0x3, 0x2, 0xef6, 0x6, 0x3, 0x5, 0x23, 0x0, 0x5, 0x6, 0x8, 0x2, 0x1, 0x9, 0x0, 0xffff, 0x1, 0x10000, 0xbfff, 0x9, 0x4, 0x4, 0x3, 0x5, 0xfff, 0x2, 0x7ff, 0x7, 0xd, 0x3f3dc15c, 0x6, 0x1ff, 0x1cb, 0x3, 0x7f, 0x1, 0x9, 0x0, 0x9, 0x2, 0x1000, 0xd61, 0xfffffff1, 0x7f, 0x4, 0x5, 0xffffffff, 0x8, 0x2, 0x4, 0x5, 0x0, 0x7, 0xfffffffd, 0x6, 0x7b105329, 0x2, 0x1, 0x4, 0x5, 0x0, 0x3, 0x2, 0xb178, 0x7, 0x3, 0x1, 0xa, 0x4, 0x5, 0x3, 0x2, 0x5, 0x1, 0x3, 0x1, 0x6f2, 0x10000, 0x8, 0xc, 0x5b0a, 0x4, 0x8, 0x0, 0x6, 0x9, 0x0, 0x9, 0x6, 0x1, 0x3835, 0x56a, 0xa0, 0x80000000, 0x0, 0x7, 0xb, 0x1000, 0x7, 0x2, 0x800, 0x6, 0x3, 0x2, 0x5, 0x8, 0x4, 0x3, 0x7, 0x6, 0xfffffffd, 0x2, 0x7fff, 0xa0000, 0xffffffff, 0x8, 0x7, 0xfffffff9, 0xfffffff9, 0xb8, 0x1, 0x401, 0x1, 0x400, 0xfff, 0x5, 0x7, 0xfa, 0x2, 0x40, 0xffffffff, 0x7ff, 0x2, 0x0, 0x9, 0x0, 0x101, 0xd, 0x5, 0x20000000, 0x5, 0x1, 0x7fff, 0x800, 0x8, 0x62, 0x4, 0xc02, 0x5, 0x4, 0x7, 0x7, 0x2, 0xc, 0x9, 0x4, 0x1b1, 0xe2d, 0x9, 0x6, 0x7, 0x6, 0x0, 0xffff44e6, 0x100, 0xffff414b, 0xfff, 0x5, 0xa9df, 0x2, 0x6, 0x4, 0xf, 0x9, 0x100, 0xf04, 0xa, 0x100, 0x9, 0x1ff, 0x4, 0xffff, 0x2, 0x56, 0x7fffffff, 0x6, 0xd, 0x7f, 0x6, 0x0, 0x97d0, 0x0, 0x7ffffffd, 0x5, 0x6, 0x1, 0x9, 0xc, 0x0, 0x8, 0x9, 0xf, 0x7ff, 0xffe00000, 0x8, 0x8000, 0xa60, 0xe257, 0x30000000, 0xee8, 0x8c, 0x1, 0x0, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0x10000000, 0x6, 0xfffff6c3, 0x0, {0x78, 0x0, 0x6, 0x1, 0x3, 0x9}, {0x3, 0x1, 0x5, 0xfeff, 0x1, 0xe39d}, 0x0, 0xb}}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x5, 0x4, 0xfff, 0x7, 0x1, 0xedf, 0x0, 0x80000001, 0x8, 0x24, 0xd, 0xdcb3, 0x5, 0x5, 0xbc, 0x8001, 0x400, 0x5f, 0x40, 0x8, 0x9, 0x6, 0x3, 0x1, 0x1d8d, 0x69, 0xe, 0x4, 0x6ea3be4d, 0x6, 0x3, 0x2, 0x81, 0x4, 0x8, 0x2ec, 0x10001, 0x2, 0x3, 0x988, 0x40, 0x8, 0x8, 0x6, 0x3, 0xa, 0x4, 0x71de, 0x9, 0x3, 0x10, 0x5, 0x61e, 0x9, 0xfffffff7, 0x0, 0x9, 0x80000000, 0x7fffffff, 0x10000, 0x7, 0x5, 0x1000, 0xd2, 0xffff143c, 0x5, 0x5, 0xa, 0x5, 0x5, 0x10000, 0x2, 0x7, 0x2, 0x4d4b, 0xd, 0x4, 0xffffffff, 0x400, 0x1, 0x3, 0x0, 0x9, 0x7, 0x10000, 0x5, 0x2, 0x1, 0x1, 0xaa, 0x3, 0x10, 0x100, 0x80000001, 0x6fabe463, 0x4f, 0x1000, 0x9, 0x8, 0xfffffff8, 0x5, 0x5, 0x2, 0xffffffff, 0x6, 0xfffffffe, 0x10, 0x5, 0x157, 0x4, 0x4, 0x8, 0x5, 0xd3, 0x2a0, 0x9, 0x6, 0x10000, 0xff, 0x1, 0x6, 0x401, 0x9b34, 0x2, 0x5, 0x4c, 0x9, 0x7fff, 0x9, 0x0, 0x4, 0x4, 0x9, 0x6, 0x8, 0xfffffff9, 0x4, 0x10, 0x101, 0x0, 0xffffffb7, 0x3, 0x8616, 0x5, 0x800, 0x7f, 0x3, 0x6, 0x0, 0x8, 0xbf2, 0x101, 0x49, 0x1, 0x10001, 0x6, 0x5, 0x521, 0x4, 0x5, 0xc08, 0x8, 0x0, 0x6, 0x0, 0xa, 0x8, 0x1ae8, 0x100, 0x80000000, 0x5, 0xffffff04, 0x9e, 0x2, 0x8, 0x6, 0x1ff, 0x10000, 0xffffffff, 0x6, 0x19b, 0xa, 0xffff, 0x8, 0xa3, 0x7ff, 0xedda, 0x2, 0x1, 0x6, 0x52, 0x1000, 0x7, 0x7, 0x8, 0x9, 0x9, 0xa, 0x5, 0x80000001, 0x1000, 0x6, 0x7baf, 0xfffffff9, 0x7, 0xfffffff8, 0x80000001, 0x1, 0x7, 0x5f3, 0x8, 0x7f, 0x7, 0x3, 0xa, 0x3195, 0x7, 0x3, 0x3, 0x6, 0x53ae, 0x9, 0x3, 0x3, 0x2, 0x9, 0x8, 0x3eb, 0x9, 0x2e2b, 0x8, 0xffffff6e, 0x9, 0x9, 0x2003, 0x23d, 0x80000001, 0x1, 0xffffffff, 0x4, 0x43, 0x3083, 0x7, 0x0, 0x8, 0x7, 0x9, 0x70, 0x7, 0x0, 0x6, 0x40400, 0x10, 0x3ff, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x7, 0xc, 0x5, 0x80, {0x60, 0x2, 0x8, 0x2, 0x7fff, 0xa}, {0x13, 0x0, 0x1, 0x7, 0x115, 0x69f}, 0x1000, 0x7}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x37f, 0x673, 0x400, 0x8, 0xffff0001, 0x0, 0x6, 0x6, 0x8, 0x7ff, 0x82d, 0x7, 0xffff, 0x80, 0x7, 0x3ff, 0x384, 0x6, 0x401, 0x8d, 0xbb, 0xd, 0x9, 0x9, 0x100, 0x7fff, 0x7, 0x2, 0xfffffffb, 0x800007, 0x8001, 0x6, 0x3ff, 0x7, 0x7, 0x1, 0x2, 0x7, 0x7, 0x3, 0x7, 0xfffffff7, 0xf28, 0x8, 0x66f, 0x8, 0x1, 0x8, 0x0, 0xc, 0x7, 0x6, 0xe, 0x8, 0x5, 0x5, 0x3, 0x1, 0x37, 0x6, 0x10, 0x4, 0x19, 0xd59c, 0x2, 0x20000000, 0x0, 0xf, 0xb472, 0x0, 0x4, 0xd4, 0x3, 0x7fffffff, 0x5, 0x65e, 0x80000000, 0x7f, 0x4, 0xf, 0x9f4, 0x0, 0x9, 0xffff, 0xff800000, 0x802, 0xfffffffc, 0x8000, 0xe7, 0x3, 0xa61, 0x7, 0xc, 0xfff, 0xfffffffd, 0x7, 0x5, 0x1b, 0x2, 0x1, 0x200, 0x3, 0xac8e, 0x3ff, 0xeea2, 0x6, 0x8, 0x3ff, 0x6, 0x3, 0xa, 0x0, 0x5, 0x7, 0x1, 0x5, 0x7, 0x3ff, 0x1, 0x4, 0x6, 0x2, 0x3, 0x2baa, 0x1b, 0x0, 0x5, 0xffffff2f, 0x1ff, 0x7fffffff, 0x401, 0x4, 0x10d82ba1, 0xb1, 0x2, 0x7, 0xa9, 0x9, 0x10, 0x0, 0x7, 0x6, 0xfffffff7, 0x7, 0x7, 0x81, 0x7, 0xab4, 0x400, 0x80, 0xd5, 0x1ff, 0x9b, 0x80, 0xbdc9, 0xe, 0x6, 0x6, 0x5, 0x400, 0x800, 0x27, 0x8, 0xd, 0xffffffff, 0x8, 0x9, 0x9, 0x4000, 0x3, 0x1, 0x800, 0x10001, 0xa, 0x100, 0xf57, 0xfffffff8, 0x14, 0x4, 0xe4d3, 0x8, 0x3ff8, 0x40, 0xf, 0x6, 0xfffffffe, 0x0, 0x1, 0x3, 0xfffffffc, 0x6, 0x4, 0xfffffffb, 0x8, 0xfffffff8, 0x4, 0xa1c, 0x5, 0x3, 0x10001, 0xb, 0x10000, 0x7fffffff, 0x4, 0x668, 0x10, 0x4, 0x1, 0x10000, 0x11a, 0x9, 0x140, 0x9, 0x3, 0x0, 0x1ff, 0x1, 0x8, 0x6, 0x9, 0x8, 0x5, 0x100, 0x0, 0x9, 0x5, 0x7, 0x9, 0x9, 0x4, 0x6, 0x4, 0x3ff, 0x4, 0x9, 0x8, 0x0, 0x4, 0x2, 0xfffffffc, 0x1a9, 0x3, 0x3ff, 0x8001, 0x48a8, 0x7a58, 0x6, 0x101, 0x4, 0x4, 0x4, 0x7, 0x9, 0x5, 0xf160, 0x1]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RATE64={0xc}]}]}}]}, 0x191c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020084) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000026c0)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xfff1, 0xfff3}, {0x5, 0xfff1}, {0x3, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x200008c2) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r11 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r11, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x4ebe5fdc5ca778fa}) socket(0x1d, 0x2, 0x6) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020}, 0x2020) 3.653119868s ago: executing program 35 (id=889): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, 0x0, 0x0) 0s ago: executing program 36 (id=890): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x85, &(0x7f0000000080)=""/4060, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_open_dev$ttys(0xc, 0x2, 0x1) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSTI(r3, 0x5412, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x141301) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x42, 0x4, 0x2e0, 0xffffffff, 0x98, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'vlan0\x00', {0xff}, {0xff}, 0x8, 0x0, 0x17}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0x10, "b630"}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x0, {0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x0, 0x8, [0xa, 0x25, 0x2a, 0xa, 0x13, 0xe, 0x29, 0x21, 0x38, 0x21, 0x40, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x1, 0x0, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffd}}}}, 0x340) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000206d044fc200000000000109022400010000000009040800010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000280)={0x2c, &(0x7f0000001180)=ANY=[@ANYBLOB="000005000000050093ffffff7f000000000000000000623bcc031948ee0624d73b7037f91be7bc0aa5772f26ca4e0ab79255cd14492944e445686eac3f7fb8d6153d84df63bc7fe075b15bfd01"], 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.78' (ED25519) to the list of known hosts. [ 71.866568][ T5781] cgroup: Unknown subsys name 'net' [ 72.127242][ T5781] cgroup: Unknown subsys name 'cpuset' [ 72.193502][ T5781] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.773409][ T5781] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.709539][ T5804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.721269][ T5804] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.734300][ T5804] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.734950][ T5804] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.735869][ T5804] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.736287][ T5804] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.736732][ T5804] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.737331][ T5804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.740179][ T5804] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.740490][ T5804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.740684][ T5804] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.741507][ T5804] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.741889][ T5804] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.742285][ T5804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.759629][ T5807] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.772832][ T5807] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.783179][ T5807] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.786093][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.794009][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.796932][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.949891][ T5808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.952374][ T5808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.968943][ T5808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.970749][ T5808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.971462][ T5808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.663106][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 78.684652][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 78.778779][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 78.788560][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 78.919361][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 79.021067][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.022287][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.022620][ T5801] bridge_slave_0: entered allmulticast mode [ 79.026137][ T5801] bridge_slave_0: entered promiscuous mode [ 79.065629][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.065942][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.066051][ T5802] bridge_slave_0: entered allmulticast mode [ 79.067609][ T5802] bridge_slave_0: entered promiscuous mode [ 79.071226][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.071330][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.071433][ T5801] bridge_slave_1: entered allmulticast mode [ 79.074414][ T5801] bridge_slave_1: entered promiscuous mode [ 79.126346][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.126438][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.126804][ T5802] bridge_slave_1: entered allmulticast mode [ 79.128327][ T5802] bridge_slave_1: entered promiscuous mode [ 79.198778][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.198893][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.199041][ T5795] bridge_slave_0: entered allmulticast mode [ 79.200761][ T5795] bridge_slave_0: entered promiscuous mode [ 79.229508][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.229597][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.229733][ T5796] bridge_slave_0: entered allmulticast mode [ 79.231065][ T5796] bridge_slave_0: entered promiscuous mode [ 79.278743][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.278962][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.279080][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.279510][ T5795] bridge_slave_1: entered allmulticast mode [ 79.282020][ T5795] bridge_slave_1: entered promiscuous mode [ 79.323015][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.323106][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.323230][ T5796] bridge_slave_1: entered allmulticast mode [ 79.325095][ T5796] bridge_slave_1: entered promiscuous mode [ 79.355058][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.359272][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.401757][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.442413][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.443027][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.443400][ T5810] bridge_slave_0: entered allmulticast mode [ 79.445953][ T5810] bridge_slave_0: entered promiscuous mode [ 79.484103][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.484470][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.484597][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.485079][ T5810] bridge_slave_1: entered allmulticast mode [ 79.486477][ T5810] bridge_slave_1: entered promiscuous mode [ 79.490170][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.511552][ T5801] team0: Port device team_slave_0 added [ 79.545355][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.563499][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.855224][ T5802] team0: Port device team_slave_0 added [ 79.857045][ T5801] team0: Port device team_slave_1 added [ 79.901199][ T5802] team0: Port device team_slave_1 added [ 79.905049][ T5115] Bluetooth: hci1: command tx timeout [ 79.905161][ T5115] Bluetooth: hci2: command tx timeout [ 79.905224][ T5115] Bluetooth: hci0: command tx timeout [ 79.905291][ T5115] Bluetooth: hci3: command tx timeout [ 79.953065][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.997289][ T5795] team0: Port device team_slave_0 added [ 79.999649][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.018824][ T5796] team0: Port device team_slave_0 added [ 80.020033][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.020043][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.020056][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.035530][ T5795] team0: Port device team_slave_1 added [ 80.054829][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.054846][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.054870][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.059733][ T5796] team0: Port device team_slave_1 added [ 80.060538][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.060549][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.060573][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.062803][ T5808] Bluetooth: hci4: command tx timeout [ 80.098423][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.098440][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.098463][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.154216][ T5810] team0: Port device team_slave_0 added [ 80.188206][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.188222][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.188246][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.191411][ T5810] team0: Port device team_slave_1 added [ 80.252531][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.252548][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.252572][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.256485][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.256501][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.256524][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.295236][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.295252][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.295276][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.336771][ T5802] hsr_slave_0: entered promiscuous mode [ 80.338204][ T5802] hsr_slave_1: entered promiscuous mode [ 80.349592][ T5801] hsr_slave_0: entered promiscuous mode [ 80.350833][ T5801] hsr_slave_1: entered promiscuous mode [ 80.351767][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 80.351887][ T5801] Cannot create hsr debugfs directory [ 80.371207][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.371225][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.371248][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.402277][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.402294][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.402317][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.541259][ T5795] hsr_slave_0: entered promiscuous mode [ 80.542008][ T5795] hsr_slave_1: entered promiscuous mode [ 80.542518][ T5795] debugfs: 'hsr0' already exists in 'hsr' [ 80.542536][ T5795] Cannot create hsr debugfs directory [ 80.610369][ T5796] hsr_slave_0: entered promiscuous mode [ 80.611114][ T5796] hsr_slave_1: entered promiscuous mode [ 80.611644][ T5796] debugfs: 'hsr0' already exists in 'hsr' [ 80.611661][ T5796] Cannot create hsr debugfs directory [ 80.978589][ T5810] hsr_slave_0: entered promiscuous mode [ 80.979366][ T5810] hsr_slave_1: entered promiscuous mode [ 80.980531][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 80.980551][ T5810] Cannot create hsr debugfs directory [ 81.520835][ T5801] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.562157][ T5801] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.599158][ T5801] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.649397][ T5801] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.761778][ T807] cfg80211: failed to load regulatory.db [ 81.773759][ T5802] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.821013][ T5802] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.856321][ T5802] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.924861][ T5802] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.983945][ T5808] Bluetooth: hci3: command tx timeout [ 81.983975][ T5808] Bluetooth: hci0: command tx timeout [ 81.983994][ T5808] Bluetooth: hci2: command tx timeout [ 81.984022][ T5808] Bluetooth: hci1: command tx timeout [ 82.083214][ T5795] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.126650][ T5795] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.142878][ T5115] Bluetooth: hci4: command tx timeout [ 82.177326][ T5795] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.221098][ T5795] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.334689][ T5796] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.374035][ T5796] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.395771][ T5796] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.444719][ T5796] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.566404][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.578504][ T5810] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.626939][ T5810] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.661015][ T5810] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.699501][ T5810] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.778954][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.812619][ T1316] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.814423][ T1316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.840869][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.861902][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.861979][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.935466][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.968113][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.986968][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.987086][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.017901][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.017978][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.079358][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.109623][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.128002][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.128074][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.167200][ T3525] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.180017][ T3525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.247241][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.276039][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.312515][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.313392][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.372253][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.372615][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.446377][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.496217][ T1283] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.503095][ T1283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.568300][ T3525] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.568477][ T3525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.642215][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.787407][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.964497][ T5801] veth0_vlan: entered promiscuous mode [ 84.031403][ T5801] veth1_vlan: entered promiscuous mode [ 84.065850][ T5115] Bluetooth: hci1: command tx timeout [ 84.065882][ T5115] Bluetooth: hci2: command tx timeout [ 84.065902][ T5115] Bluetooth: hci0: command tx timeout [ 84.065922][ T5115] Bluetooth: hci3: command tx timeout [ 84.151943][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.222746][ T5808] Bluetooth: hci4: command tx timeout [ 84.255712][ T5801] veth0_macvtap: entered promiscuous mode [ 84.275586][ T5801] veth1_macvtap: entered promiscuous mode [ 84.287192][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.358691][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.378996][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.404626][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.426417][ T5795] veth0_vlan: entered promiscuous mode [ 84.448568][ T1130] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.461549][ T1130] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.472524][ T1130] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.487913][ T1130] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.490319][ T5795] veth1_vlan: entered promiscuous mode [ 84.622594][ T5796] veth0_vlan: entered promiscuous mode [ 84.640911][ T5802] veth0_vlan: entered promiscuous mode [ 84.732625][ T5796] veth1_vlan: entered promiscuous mode [ 84.762257][ T5802] veth1_vlan: entered promiscuous mode [ 84.793921][ T5810] veth0_vlan: entered promiscuous mode [ 84.823344][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.823367][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.853998][ T5795] veth0_macvtap: entered promiscuous mode [ 84.883165][ T5810] veth1_vlan: entered promiscuous mode [ 84.900358][ T5795] veth1_macvtap: entered promiscuous mode [ 84.911795][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.911815][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.985939][ T5796] veth0_macvtap: entered promiscuous mode [ 84.989885][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.992570][ T5802] veth0_macvtap: entered promiscuous mode [ 85.028689][ T5796] veth1_macvtap: entered promiscuous mode [ 85.034364][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.057879][ T5802] veth1_macvtap: entered promiscuous mode [ 85.083798][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.087076][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.090321][ T5810] veth0_macvtap: entered promiscuous mode [ 85.091419][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.099412][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.123165][ T5810] veth1_macvtap: entered promiscuous mode [ 85.166721][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.214841][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.277572][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.320124][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.398338][ T3525] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.411959][ T3525] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.432014][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.432097][ T3525] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.455926][ T3525] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.477174][ T3525] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.501756][ T3525] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.508436][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.520245][ T3525] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.595691][ T3525] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.601230][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.601249][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.645539][ T1108] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.705582][ T1108] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.721689][ T1108] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.812822][ T1108] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.010781][ T1283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.010802][ T1283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.143054][ T5808] Bluetooth: hci3: command tx timeout [ 86.143085][ T5808] Bluetooth: hci0: command tx timeout [ 86.143104][ T5808] Bluetooth: hci2: command tx timeout [ 86.143123][ T5808] Bluetooth: hci1: command tx timeout [ 86.199159][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.199180][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.312790][ T5115] Bluetooth: hci4: command tx timeout [ 86.338299][ T1130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.338320][ T1130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.260788][ T1283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.260810][ T1283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.522706][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 87.532737][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 87.542720][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 87.552708][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 87.562709][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 87.572718][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 87.582708][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 87.592711][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 87.602699][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 87.607198][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 89.179608][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.179628][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.235667][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.235686][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.437812][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.437832][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.642632][ T5942] process 'syz.2.12' launched '/dev/fd/9' with NULL argv: empty string added [ 91.324867][ T5946] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 91.361450][ T5945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.560039][ T5972] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.504514][ T5879] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 95.788234][ T5879] usb 1-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 95.788265][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.788284][ T5879] usb 1-1: Product: syz [ 95.788298][ T5879] usb 1-1: Manufacturer: syz [ 95.788311][ T5879] usb 1-1: SerialNumber: syz [ 95.877997][ T5879] usb 1-1: config 0 descriptor?? [ 97.033857][ T5879] usb 1-1: USB disconnect, device number 2 [ 101.984197][ T6041] kernel profiling enabled (shift: 9) [ 102.852804][ T5982] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 103.978690][ T5982] usb 2-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 103.978720][ T5982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.978739][ T5982] usb 2-1: Product: syz [ 103.978752][ T5982] usb 2-1: Manufacturer: syz [ 103.978765][ T5982] usb 2-1: SerialNumber: syz [ 104.059179][ T5982] usb 2-1: config 0 descriptor?? [ 104.081509][ T6046] netlink: 24 bytes leftover after parsing attributes in process `syz.0.44'. [ 104.484811][ T5872] usb 2-1: USB disconnect, device number 2 [ 109.224017][ T6087] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 116.939176][ T6147] netlink: 24 bytes leftover after parsing attributes in process `syz.2.70'. [ 117.806921][ T6150] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 122.554091][ T5982] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 122.750006][ T5982] usb 4-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 122.750037][ T5982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.750056][ T5982] usb 4-1: Product: syz [ 122.750072][ T5982] usb 4-1: Manufacturer: syz [ 122.750086][ T5982] usb 4-1: SerialNumber: syz [ 122.802967][ T5982] usb 4-1: config 0 descriptor?? [ 123.143375][ T5982] usb 4-1: USB disconnect, device number 2 [ 133.299187][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.300530][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.392754][ T6013] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 139.789373][ T6013] usb 1-1: Using ep0 maxpacket: 8 [ 140.254531][ T6013] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 140.254561][ T6013] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.254580][ T6013] usb 1-1: config 0 has no interface number 0 [ 140.254637][ T6013] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 140.254664][ T6013] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 140.254687][ T6013] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1023 [ 140.254711][ T6013] usb 1-1: config 0 interface 122 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 140.254732][ T6013] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 140.254753][ T6013] usb 1-1: config 0 interface 122 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 140.257472][ T6013] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 140.257501][ T6013] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.257520][ T6013] usb 1-1: Product: syz [ 140.257534][ T6013] usb 1-1: Manufacturer: syz [ 140.257548][ T6013] usb 1-1: SerialNumber: syz [ 140.503433][ T6013] usb 1-1: config 0 descriptor?? [ 140.506857][ T6275] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 140.507753][ T6275] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 140.977254][ T6275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.978397][ T6275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.025099][ T6275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.044695][ T6275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.051662][ T6275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.077230][ T6275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.084161][ T6275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.084644][ T6275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.125652][ T6275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.143199][ T6275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.147237][ T6013] usb 1-1: NFC: intf ffff888032e90000 id ffffffff8e53a6a0 [ 141.562469][ T6013] nfcmrvl 1-1:0.122: NFC: registered with nci successfully [ 141.630044][ T6013] usb 1-1: USB disconnect, device number 3 [ 141.658216][ T6013] usb 1-1: NFC: intf ffff888032e90000 [ 143.092603][ T6013] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 143.258755][ T6013] usb 4-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 143.258785][ T6013] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.258804][ T6013] usb 4-1: Product: syz [ 143.258816][ T6013] usb 4-1: Manufacturer: syz [ 143.258829][ T6013] usb 4-1: SerialNumber: syz [ 143.329456][ T6013] usb 4-1: config 0 descriptor?? [ 143.590180][ T5879] usb 4-1: USB disconnect, device number 3 [ 145.925722][ T6335] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 146.086609][ T6335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.129'. [ 146.833693][ T807] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 148.272911][ T807] usb 5-1: Using ep0 maxpacket: 8 [ 148.276000][ T807] usb 5-1: config 0 has an invalid interface number: 122 but max is 0 [ 148.276027][ T807] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.276044][ T807] usb 5-1: config 0 has no interface number 0 [ 148.276087][ T807] usb 5-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 148.276113][ T807] usb 5-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 148.276136][ T807] usb 5-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1023 [ 148.276159][ T807] usb 5-1: config 0 interface 122 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 148.276175][ T807] usb 5-1: config 0 interface 122 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 148.276195][ T807] usb 5-1: config 0 interface 122 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 148.279211][ T807] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 148.279240][ T807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.279258][ T807] usb 5-1: Product: syz [ 148.279272][ T807] usb 5-1: Manufacturer: syz [ 148.279286][ T807] usb 5-1: SerialNumber: syz [ 148.432526][ T807] usb 5-1: config 0 descriptor?? [ 148.439336][ T6341] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 148.439548][ T6341] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 149.558310][ T6341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.558812][ T6341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.560427][ T6341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.560909][ T6341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.598065][ T6341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.598570][ T6341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.600401][ T6341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.600867][ T6341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.625500][ T6341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.625970][ T6341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.661350][ T807] usb 5-1: NFC: intf ffff88802554a000 id ffffffff8e53a6a0 [ 149.707663][ T807] nfcmrvl 5-1:0.122: NFC: registered with nci successfully [ 149.739355][ T807] usb 5-1: USB disconnect, device number 2 [ 149.758610][ T807] usb 5-1: NFC: intf ffff88802554a000 [ 150.561164][ T6363] netlink: 12 bytes leftover after parsing attributes in process `syz.3.137'. [ 150.906749][ T6368] netlink: 24 bytes leftover after parsing attributes in process `syz.1.139'. [ 151.911534][ T6377] netlink: 28 bytes leftover after parsing attributes in process `syz.0.133'. [ 151.911549][ T6377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.133'. [ 154.234189][ T5982] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 154.402801][ T5982] usb 4-1: Using ep0 maxpacket: 8 [ 154.405665][ T5982] usb 4-1: config 0 has an invalid interface number: 122 but max is 0 [ 154.405691][ T5982] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.405710][ T5982] usb 4-1: config 0 has no interface number 0 [ 154.405757][ T5982] usb 4-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 154.405783][ T5982] usb 4-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 154.405806][ T5982] usb 4-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1023 [ 154.405829][ T5982] usb 4-1: config 0 interface 122 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 154.405850][ T5982] usb 4-1: config 0 interface 122 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 154.405871][ T5982] usb 4-1: config 0 interface 122 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 154.409054][ T5982] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 154.409088][ T5982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.409106][ T5982] usb 4-1: Product: syz [ 154.409120][ T5982] usb 4-1: Manufacturer: syz [ 154.409134][ T5982] usb 4-1: SerialNumber: syz [ 154.619771][ T5982] usb 4-1: config 0 descriptor?? [ 154.621123][ T6403] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 154.621293][ T6403] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 154.934343][ T6403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.934761][ T6403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.944890][ T6403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.945374][ T6403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.952116][ T6403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.952585][ T6403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.959266][ T6403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.959744][ T6403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.974537][ T6403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.975005][ T6403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.039251][ T5982] usb 4-1: NFC: intf ffff88802a6dc000 id ffffffff8e53a6a0 [ 155.087016][ T5982] nfcmrvl 4-1:0.122: NFC: registered with nci successfully [ 155.139676][ T5982] usb 4-1: USB disconnect, device number 4 [ 155.169394][ T5982] usb 4-1: NFC: intf ffff88802a6dc000 [ 157.080228][ T6445] KVM: debugfs: duplicate directory 6445-5 [ 158.582863][ T5879] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 158.833081][ T5879] usb 4-1: Using ep0 maxpacket: 8 [ 158.917296][ T5879] usb 4-1: config 0 has an invalid interface number: 122 but max is 0 [ 158.917475][ T5879] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.917614][ T5879] usb 4-1: config 0 has no interface number 0 [ 158.918460][ T5879] usb 4-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 158.918588][ T5879] usb 4-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 158.918726][ T5879] usb 4-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1023 [ 158.918809][ T5879] usb 4-1: config 0 interface 122 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 158.918979][ T5879] usb 4-1: config 0 interface 122 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 158.919084][ T5879] usb 4-1: config 0 interface 122 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 159.288874][ T5879] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 159.288903][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.288922][ T5879] usb 4-1: Product: syz [ 159.288937][ T5879] usb 4-1: Manufacturer: syz [ 159.288951][ T5879] usb 4-1: SerialNumber: syz [ 159.466425][ T5879] usb 4-1: config 0 descriptor?? [ 159.469082][ T6464] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 159.469195][ T6464] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 160.363472][ T6464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.363900][ T6464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.375148][ T6464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.380005][ T6464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.404714][ T6464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.405210][ T6464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.423716][ T6464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.424899][ T6464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.426425][ T6464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.426837][ T6464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.484182][ T5879] usb 4-1: NFC: intf ffff88803749c000 id ffffffff8e53a6a0 [ 160.530451][ T5879] nfcmrvl 4-1:0.122: NFC: registered with nci successfully [ 160.577449][ T5879] usb 4-1: USB disconnect, device number 5 [ 160.585933][ C0] Unknown status report in ack skb [ 160.597550][ T5879] usb 4-1: NFC: intf ffff88803749c000 [ 164.292781][ T44] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 165.499585][ T44] usb 5-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 165.499617][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.499636][ T44] usb 5-1: Product: syz [ 165.499650][ T44] usb 5-1: Manufacturer: syz [ 165.499664][ T44] usb 5-1: SerialNumber: syz [ 165.538930][ T44] usb 5-1: config 0 descriptor?? [ 165.657652][ T44] usb 5-1: USB disconnect, device number 3 [ 171.018081][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 171.244902][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 171.254511][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 171.254553][ T9] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 171.254583][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.301117][ T9] usb 5-1: config 0 descriptor?? [ 171.325423][ T6013] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 171.502901][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 171.529035][ T6013] usb 4-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 171.529065][ T6013] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.529084][ T6013] usb 4-1: Product: syz [ 171.529097][ T6013] usb 4-1: Manufacturer: syz [ 171.529111][ T6013] usb 4-1: SerialNumber: syz [ 171.550216][ T6013] usb 4-1: config 0 descriptor?? [ 171.665437][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 171.675239][ T9] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 171.675266][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.675284][ T9] usb 1-1: config 0 has no interface number 0 [ 171.675331][ T9] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 171.675357][ T9] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 171.675379][ T9] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1023 [ 171.675402][ T9] usb 1-1: config 0 interface 122 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 171.675422][ T9] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 171.675441][ T9] usb 1-1: config 0 interface 122 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 171.678242][ T9] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 171.678268][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.678287][ T9] usb 1-1: Product: syz [ 171.678300][ T9] usb 1-1: Manufacturer: syz [ 171.678313][ T9] usb 1-1: SerialNumber: syz [ 172.172421][ T44] usb 4-1: USB disconnect, device number 6 [ 172.189472][ T9] usb 1-1: config 0 descriptor?? [ 172.194859][ T6587] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 172.194985][ T6587] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 172.409911][ T6587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.410346][ T6587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.417935][ T6587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.418406][ T6587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.420424][ T6587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.421272][ T6587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.423511][ T6587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.423972][ T6587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.489200][ T9] usb 1-1: NFC: intf ffff888033c6a000 id ffffffff8e53a6a0 [ 172.551197][ T9] nfcmrvl 1-1:0.122: NFC: registered with nci successfully [ 172.584025][ T9] usb 1-1: USB disconnect, device number 4 [ 172.613205][ T9] usb 1-1: NFC: intf ffff888033c6a000 [ 176.470570][ T5867] usb 5-1: USB disconnect, device number 4 [ 177.703460][ T6640] virtio-fs: tag not found [ 181.822908][ T44] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 181.998664][ T44] usb 4-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 181.998694][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.998713][ T44] usb 4-1: Product: syz [ 181.998723][ T44] usb 4-1: Manufacturer: syz [ 181.998730][ T44] usb 4-1: SerialNumber: syz [ 182.025080][ T44] usb 4-1: config 0 descriptor?? [ 182.252368][ T807] usb 4-1: USB disconnect, device number 7 [ 182.943308][ T6684] virtio-fs: tag not found [ 194.614510][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.614575][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.093947][ T6788] syz.1.262 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 200.173762][ T6788] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 200.173779][ T6788] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 200.176902][ T6788] vhci_hcd vhci_hcd.0: Device attached [ 200.206541][ T6790] vhci_hcd: connection closed [ 200.211292][ T1108] vhci_hcd vhci_hcd.1: stop threads [ 200.211921][ T1108] vhci_hcd vhci_hcd.1: release socket [ 200.211977][ T1108] vhci_hcd vhci_hcd.1: disconnect device [ 201.592827][ T6782] Bluetooth: hci2: command 0x0406 tx timeout [ 201.663442][ T6782] Bluetooth: hci1: command 0x0406 tx timeout [ 201.827138][ T6782] Bluetooth: hci3: command 0x0406 tx timeout [ 201.851115][ T6782] Bluetooth: hci0: command 0x0406 tx timeout [ 201.852188][ T6782] Bluetooth: hci4: command 0x0406 tx timeout [ 205.967509][ T6843] netlink: 766 bytes leftover after parsing attributes in process `syz.1.278'. [ 207.684953][ T6858] netlink: 24 bytes leftover after parsing attributes in process `syz.2.281'. [ 208.522456][ T6854] Zero length message leads to an empty skb [ 208.671068][ T6861] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 211.822146][ T6892] netlink: 24 bytes leftover after parsing attributes in process `syz.3.294'. [ 214.551213][ T6912] netlink: 766 bytes leftover after parsing attributes in process `syz.0.303'. [ 215.076006][ T6924] netlink: 24 bytes leftover after parsing attributes in process `syz.0.306'. [ 219.089375][ T6953] netlink: 44 bytes leftover after parsing attributes in process `syz.2.318'. [ 219.716248][ T6959] netlink: 24 bytes leftover after parsing attributes in process `syz.4.319'. [ 222.153971][ T6975] netlink: 'syz.2.324': attribute type 11 has an invalid length. [ 222.581772][ T6978] netlink: 'syz.1.327': attribute type 1 has an invalid length. [ 222.784016][ T6978] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.863144][ T6982] macvlan2: entered promiscuous mode [ 222.863162][ T6982] macvlan2: entered allmulticast mode [ 222.864382][ T6982] bond1: entered promiscuous mode [ 222.864964][ T6982] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 223.064760][ T6990] netlink: 44 bytes leftover after parsing attributes in process `syz.3.330'. [ 223.133568][ T6982] bond1: left promiscuous mode [ 224.233661][ T7014] netlink: 24 bytes leftover after parsing attributes in process `syz.0.333'. [ 225.218548][ T6985] bond1: (slave ip6gretap1): making interface the new active one [ 225.228672][ T6985] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 225.384318][ T6986] macvlan2: entered promiscuous mode [ 225.384346][ T6986] macvlan2: entered allmulticast mode [ 225.386550][ T6986] bond1: entered promiscuous mode [ 225.386571][ T6986] ip6gretap1: entered promiscuous mode [ 225.784395][ T6986] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 225.784808][ T6986] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of ip6gretap1 [ 225.943915][ T6986] bond1: left promiscuous mode [ 225.943929][ T6986] ip6gretap1: left promiscuous mode [ 228.685956][ T7056] netlink: 24 bytes leftover after parsing attributes in process `syz.4.347'. [ 230.093295][ T7082] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 230.420145][ T5908] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 231.201170][ T5908] usb 5-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 231.201202][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.201221][ T5908] usb 5-1: Product: syz [ 231.201235][ T5908] usb 5-1: Manufacturer: syz [ 231.201248][ T5908] usb 5-1: SerialNumber: syz [ 231.253694][ T5908] usb 5-1: config 0 descriptor?? [ 231.695073][ T10] usb 5-1: USB disconnect, device number 5 [ 231.797020][ T7103] netlink: 24 bytes leftover after parsing attributes in process `syz.2.363'. [ 232.731001][ T7110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.366'. [ 236.528038][ T7172] random: crng reseeded on system resumption [ 239.953812][ T6013] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 240.119404][ T6013] usb 5-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 240.119435][ T6013] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.119454][ T6013] usb 5-1: Product: syz [ 240.119468][ T6013] usb 5-1: Manufacturer: syz [ 240.119482][ T6013] usb 5-1: SerialNumber: syz [ 240.205634][ T6013] usb 5-1: config 0 descriptor?? [ 240.425668][ T808] usb 5-1: USB disconnect, device number 6 [ 241.462851][ T6013] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 242.011261][ T6013] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 242.011294][ T6013] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.011313][ T6013] usb 5-1: Product: syz [ 242.011328][ T6013] usb 5-1: Manufacturer: syz [ 242.011341][ T6013] usb 5-1: SerialNumber: syz [ 242.474742][ T6013] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 242.474823][ T6013] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 243.828287][ T6013] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 243.828338][ T6013] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 243.829877][ T6013] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 243.905680][ T6013] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 243.934354][ T6013] usb 5-1: USB disconnect, device number 7 [ 244.456021][ T7273] netlink: 766 bytes leftover after parsing attributes in process `syz.0.423'. [ 245.256339][ T7283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.424'. [ 247.469361][ T7300] tmpfs: Bad value for 'nr_inodes' [ 248.052670][ T7304] netlink: 24 bytes leftover after parsing attributes in process `syz.2.431'. [ 250.153097][ T7315] netlink: 766 bytes leftover after parsing attributes in process `syz.3.435'. [ 253.852101][ T7343] input: syz0 as /devices/virtual/input/input5 [ 254.290815][ T7354] netlink: 24 bytes leftover after parsing attributes in process `syz.0.444'. [ 256.113549][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.113614][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.347416][ T7377] tmpfs: Bad value for 'nr_inodes' [ 259.016013][ T7399] netlink: 24 bytes leftover after parsing attributes in process `syz.2.462'. [ 263.395431][ T7427] macvtap1: entered promiscuous mode [ 263.395857][ T7427] macvtap1: entered allmulticast mode [ 263.401014][ T7427] dummy0: entered promiscuous mode [ 263.401040][ T7427] dummy0: entered allmulticast mode [ 263.421701][ T7427] team0: Device macvtap1 failed to register rx_handler [ 263.482846][ T7427] dummy0: left allmulticast mode [ 263.483195][ T7427] dummy0: left promiscuous mode [ 264.365901][ T808] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 264.499153][ T7439] netlink: 24 bytes leftover after parsing attributes in process `syz.0.477'. [ 265.425323][ T808] usb 4-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 265.425354][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.425373][ T808] usb 4-1: Product: syz [ 265.425387][ T808] usb 4-1: Manufacturer: syz [ 265.425400][ T808] usb 4-1: SerialNumber: syz [ 265.441525][ T808] usb 4-1: config 0 descriptor?? [ 265.670705][ T807] usb 4-1: USB disconnect, device number 8 [ 267.641877][ T7467] tmpfs: Bad value for 'nr_inodes' [ 269.762830][ T808] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 269.945534][ T808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.945567][ T808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.945589][ T808] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 269.945628][ T808] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 269.945650][ T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.030372][ T808] usb 4-1: config 0 descriptor?? [ 270.777823][ T7483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.778352][ T7483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.787706][ T808] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 271.860085][ T7512] macvtap1: entered promiscuous mode [ 271.860112][ T7512] macvtap1: entered allmulticast mode [ 271.860565][ T7512] dummy0: entered promiscuous mode [ 271.860583][ T7512] dummy0: entered allmulticast mode [ 271.989875][ T7512] team0: Device macvtap1 failed to register rx_handler [ 272.043242][ T808] usb 4-1: reset high-speed USB device number 9 using dummy_hcd [ 272.274547][ T7512] dummy0: left allmulticast mode [ 272.274813][ T7512] dummy0: left promiscuous mode [ 274.113054][ T5872] usb 4-1: USB disconnect, device number 9 [ 281.934932][ T7587] macvtap1: entered promiscuous mode [ 281.934961][ T7587] macvtap1: entered allmulticast mode [ 281.935437][ T7587] dummy0: entered promiscuous mode [ 281.935455][ T7587] dummy0: entered allmulticast mode [ 281.937646][ T7587] team0: Device macvtap1 failed to register rx_handler [ 282.008619][ T7587] dummy0: left allmulticast mode [ 282.019883][ T7587] dummy0: left promiscuous mode [ 285.069944][ T7630] program syz.1.535 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 287.826620][ T5879] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 287.980471][ T5879] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 288.014957][ T5879] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 288.014988][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 288.015008][ T5879] usb 1-1: Product: syz [ 288.015022][ T5879] usb 1-1: Manufacturer: syz [ 288.015036][ T5879] usb 1-1: SerialNumber: syz [ 288.313724][ T5879] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 289.064146][ T7630] syz.1.535 (7630): drop_caches: 2 [ 290.438812][ T10] usb 1-1: USB disconnect, device number 5 [ 290.614937][ T10] usblp0: removed [ 291.041467][ T7675] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 294.876826][ T7713] random: crng reseeded on system resumption [ 297.616299][ T7734] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 303.948087][ T5982] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 304.122980][ T5982] usb 4-1: Using ep0 maxpacket: 16 [ 304.125944][ T5982] usb 4-1: config 0 has no interfaces? [ 304.129060][ T5982] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 304.129089][ T5982] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 304.129107][ T5982] usb 4-1: Manufacturer: syz [ 304.155156][ T5982] usb 4-1: config 0 descriptor?? [ 306.530252][ T7787] macvtap1: entered promiscuous mode [ 306.530269][ T7787] macvtap1: entered allmulticast mode [ 306.530520][ T7787] dummy0: entered promiscuous mode [ 306.530531][ T7787] dummy0: entered allmulticast mode [ 306.531619][ T7787] team0: Device macvtap1 failed to register rx_handler [ 306.589537][ T7791] random: crng reseeded on system resumption [ 306.648266][ T7787] dummy0: left allmulticast mode [ 306.648450][ T7787] dummy0: left promiscuous mode [ 308.286303][ T37] audit: type=1326 audit(1770455723.797:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7799 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677785aeb9 code=0x7ffc0000 [ 308.286354][ T37] audit: type=1326 audit(1770455723.797:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7799 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677785aeb9 code=0x7ffc0000 [ 308.286391][ T37] audit: type=1326 audit(1770455723.797:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7799 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f677781b78e code=0x7ffc0000 [ 308.286428][ T37] audit: type=1326 audit(1770455723.807:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7799 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677785aeb9 code=0x7ffc0000 [ 308.286466][ T37] audit: type=1326 audit(1770455723.807:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7799 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677785aeb9 code=0x7ffc0000 [ 308.286503][ T37] audit: type=1326 audit(1770455723.817:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7799 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f677781b78e code=0x7ffc0000 [ 308.286539][ T37] audit: type=1326 audit(1770455723.817:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7799 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677785aeb9 code=0x7ffc0000 [ 308.286575][ T37] audit: type=1326 audit(1770455723.817:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7799 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677785aeb9 code=0x7ffc0000 [ 308.286612][ T37] audit: type=1326 audit(1770455723.817:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7799 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f677785aeb9 code=0x7ffc0000 [ 308.286648][ T37] audit: type=1326 audit(1770455723.817:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7799 comm="syz.0.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677785aeb9 code=0x7ffc0000 [ 308.572792][ T5879] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 309.026613][ T5879] usb 1-1: Using ep0 maxpacket: 32 [ 309.426265][ T5879] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 309.426292][ T5879] usb 1-1: config 0 has no interface number 0 [ 309.426382][ T5879] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.426407][ T5879] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.426445][ T5879] usb 1-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 309.426467][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.058200][ T5879] usb 1-1: config 0 descriptor?? [ 310.189456][ T5872] usb 4-1: USB disconnect, device number 10 [ 312.242800][ T5982] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 312.332827][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 312.408555][ T5982] usb 4-1: unable to get BOS descriptor or descriptor too short [ 312.412186][ T5982] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 312.440506][ T5982] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 312.440537][ T5982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.440556][ T5982] usb 4-1: Product: syz [ 312.440569][ T5982] usb 4-1: Manufacturer: syz [ 312.440583][ T5982] usb 4-1: SerialNumber: syz [ 312.523105][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 312.561300][ T31] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 312.561330][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.561349][ T31] usb 2-1: Product: syz [ 312.561362][ T31] usb 2-1: Manufacturer: syz [ 312.561375][ T31] usb 2-1: SerialNumber: syz [ 312.891952][ T31] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 313.019419][ T5982] usb 4-1: reset high-speed USB device number 11 using dummy_hcd [ 313.101163][ T31] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 313.131991][ T31] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 313.132140][ T31] usb 2-1: media controller created [ 314.349200][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 315.525689][ T5982] usb 4-1: USB disconnect, device number 11 [ 315.956823][ T7841] macvtap1: entered promiscuous mode [ 315.956839][ T7841] macvtap1: entered allmulticast mode [ 315.957088][ T7841] dummy0: entered promiscuous mode [ 315.957099][ T7841] dummy0: entered allmulticast mode [ 315.958596][ T7841] team0: Device macvtap1 failed to register rx_handler [ 316.024575][ T7841] dummy0: left allmulticast mode [ 316.026583][ T7841] dummy0: left promiscuous mode [ 316.095932][ T31] zl10353_read_register: readreg error (reg=127, ret==-71) [ 316.156324][ T5879] usb 1-1: can't set config #0, error -110 [ 316.216460][ T31] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 316.265703][ T31] usb 2-1: USB disconnect, device number 3 [ 316.349195][ T5982] usb 1-1: USB disconnect, device number 6 [ 316.370556][ T7845] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 317.269219][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.269287][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.980794][ T7873] random: crng reseeded on system resumption [ 320.072793][ T807] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 320.234879][ T807] usb 2-1: unable to get BOS descriptor or descriptor too short [ 320.236950][ T807] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 320.239445][ T807] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 320.239462][ T807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.239472][ T807] usb 2-1: Product: syz [ 320.239479][ T807] usb 2-1: Manufacturer: syz [ 320.239486][ T807] usb 2-1: SerialNumber: syz [ 320.282862][ T31] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 320.731221][ T7888] macvtap1: entered promiscuous mode [ 320.731247][ T7888] macvtap1: entered allmulticast mode [ 320.731658][ T7888] dummy0: entered promiscuous mode [ 320.731675][ T7888] dummy0: entered allmulticast mode [ 320.733632][ T7888] team0: Device macvtap1 failed to register rx_handler [ 320.765765][ T31] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 320.765793][ T31] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 320.765811][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 320.765860][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 320.765886][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 320.768878][ T31] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 320.768906][ T31] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 320.768925][ T31] usb 4-1: Product: syz [ 320.768937][ T31] usb 4-1: Manufacturer: syz [ 320.883873][ T31] cdc_wdm 4-1:1.0: skipping garbage [ 320.883895][ T31] cdc_wdm 4-1:1.0: skipping garbage [ 320.896642][ T7888] dummy0: left allmulticast mode [ 320.896922][ T7888] dummy0: left promiscuous mode [ 320.925036][ T31] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 320.925069][ T31] cdc_wdm 4-1:1.0: Unknown control protocol [ 321.002795][ T807] usb 2-1: reset high-speed USB device number 4 using dummy_hcd [ 323.504964][ T807] usb 2-1: USB disconnect, device number 4 [ 323.752373][ T31] usb 4-1: USB disconnect, device number 12 [ 324.172759][ T31] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 324.477256][ T31] usb 4-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 324.477275][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.477285][ T31] usb 4-1: Product: syz [ 324.477293][ T31] usb 4-1: Manufacturer: syz [ 324.477300][ T31] usb 4-1: SerialNumber: syz [ 324.517067][ T31] usb 4-1: config 0 descriptor?? [ 324.768023][ T31] usb 4-1: USB disconnect, device number 13 [ 324.861399][ T7925] macvtap1: entered promiscuous mode [ 324.861429][ T7925] macvtap1: entered allmulticast mode [ 324.861948][ T7925] dummy0: entered promiscuous mode [ 324.861968][ T7925] dummy0: entered allmulticast mode [ 324.894878][ T7925] team0: Device macvtap1 failed to register rx_handler [ 324.994998][ T7925] dummy0: left allmulticast mode [ 324.996614][ T7925] dummy0: left promiscuous mode [ 326.132764][ T6013] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 326.295305][ T6013] usb 4-1: unable to get BOS descriptor or descriptor too short [ 326.296606][ T6013] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 326.302295][ T6013] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 326.302325][ T6013] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.302345][ T6013] usb 4-1: Product: syz [ 326.302359][ T6013] usb 4-1: Manufacturer: syz [ 326.302373][ T6013] usb 4-1: SerialNumber: syz [ 327.023299][ T6013] usb 4-1: reset high-speed USB device number 14 using dummy_hcd [ 327.648607][ T7953] random: crng reseeded on system resumption [ 328.257041][ T6013] usb 4-1: USB disconnect, device number 14 [ 328.393597][ T7961] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 328.995662][ T6013] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 329.321977][ T7973] loop5: detected capacity change from 0 to 4096 [ 329.371029][ T6013] usb 4-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 329.371048][ T6013] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.371058][ T6013] usb 4-1: Product: syz [ 329.371065][ T6013] usb 4-1: Manufacturer: syz [ 329.371072][ T6013] usb 4-1: SerialNumber: syz [ 329.383664][ T6013] usb 4-1: config 0 descriptor?? [ 329.599914][ T31] usb 4-1: USB disconnect, device number 15 [ 331.742998][ T6013] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 332.150294][ T6013] usb 3-1: unable to get BOS descriptor or descriptor too short [ 332.151606][ T6013] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 332.631875][ T6013] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 332.631908][ T6013] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.631928][ T6013] usb 3-1: Product: syz [ 332.631942][ T6013] usb 3-1: Manufacturer: syz [ 332.631956][ T6013] usb 3-1: SerialNumber: syz [ 333.042843][ T6013] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 333.511996][ T7993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.517231][ T7993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.674352][ T6013] usb 3-1: USB disconnect, device number 2 [ 335.017472][ T8031] random: crng reseeded on system resumption [ 340.356691][ T37] kauditd_printk_skb: 30 callbacks suppressed [ 340.366919][ T37] audit: type=1326 audit(1770455755.917:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8071 comm="syz.0.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677785aeb9 code=0x7ffc0000 [ 340.372725][ T37] audit: type=1326 audit(1770455755.917:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8071 comm="syz.0.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f677781b78e code=0x7ffc0000 [ 340.372764][ T37] audit: type=1326 audit(1770455755.927:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8071 comm="syz.0.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677785aeb9 code=0x7ffc0000 [ 340.377060][ T37] audit: type=1326 audit(1770455755.927:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8071 comm="syz.0.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677785aeb9 code=0x7ffc0000 [ 340.377109][ T37] audit: type=1326 audit(1770455755.927:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8071 comm="syz.0.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f677781b78e code=0x7ffc0000 [ 340.377146][ T37] audit: type=1326 audit(1770455755.927:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8071 comm="syz.0.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677785aeb9 code=0x7ffc0000 [ 340.377171][ T37] audit: type=1326 audit(1770455755.927:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8071 comm="syz.0.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f677785aeb9 code=0x7ffc0000 [ 340.377193][ T37] audit: type=1326 audit(1770455755.927:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8071 comm="syz.0.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677785aeb9 code=0x7ffc0000 [ 340.377213][ T37] audit: type=1326 audit(1770455755.927:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8071 comm="syz.0.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f677785aeb9 code=0x7ffc0000 [ 340.377237][ T37] audit: type=1326 audit(1770455755.927:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8071 comm="syz.0.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677785aeb9 code=0x7ffc0000 [ 340.662873][ T31] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 341.640546][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 341.752279][ T31] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 341.752304][ T31] usb 1-1: config 0 has no interface number 0 [ 341.752352][ T31] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.752377][ T31] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.752414][ T31] usb 1-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 341.752436][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.758372][ T31] usb 1-1: config 0 descriptor?? [ 342.663441][ T8089] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 345.336140][ T5879] usb 1-1: USB disconnect, device number 7 [ 346.498116][ T8133] random: crng reseeded on system resumption [ 349.692810][ T37] kauditd_printk_skb: 49 callbacks suppressed [ 349.702834][ T37] audit: type=1326 audit(1770455765.217:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8160 comm="syz.3.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e80e1aeb9 code=0x7ffc0000 [ 349.702890][ T37] audit: type=1326 audit(1770455765.217:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8160 comm="syz.3.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e80e1aeb9 code=0x7ffc0000 [ 349.702924][ T37] audit: type=1326 audit(1770455765.217:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8160 comm="syz.3.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1e80ddb78e code=0x7ffc0000 [ 349.702956][ T37] audit: type=1326 audit(1770455765.227:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8160 comm="syz.3.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e80e1aeb9 code=0x7ffc0000 [ 349.702990][ T37] audit: type=1326 audit(1770455765.227:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8160 comm="syz.3.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1e80ddb78e code=0x7ffc0000 [ 349.703022][ T37] audit: type=1326 audit(1770455765.227:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8160 comm="syz.3.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e80e1aeb9 code=0x7ffc0000 [ 349.703056][ T37] audit: type=1326 audit(1770455765.227:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8160 comm="syz.3.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e80e1aeb9 code=0x7ffc0000 [ 349.703091][ T37] audit: type=1326 audit(1770455765.227:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8160 comm="syz.3.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1e80e1aeb9 code=0x7ffc0000 [ 349.703124][ T37] audit: type=1326 audit(1770455765.227:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8160 comm="syz.3.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e80e1aeb9 code=0x7ffc0000 [ 349.703198][ T37] audit: type=1326 audit(1770455765.227:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8160 comm="syz.3.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f1e80e1aeb9 code=0x7ffc0000 [ 350.042930][ T807] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 350.192805][ T807] usb 4-1: Using ep0 maxpacket: 32 [ 350.276307][ T807] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 350.276376][ T807] usb 4-1: config 0 has no interface number 0 [ 350.276423][ T807] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.276447][ T807] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.276483][ T807] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 350.276502][ T807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.280726][ T807] usb 4-1: config 0 descriptor?? [ 350.954600][ T5872] IPVS: starting estimator thread 0... [ 351.083075][ T8178] IPVS: using max 16 ests per chain, 38400 per kthread [ 351.705287][ T8177] program syz.0.700 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 353.096217][ T807] usb 4-1: USB disconnect, device number 16 [ 354.391369][ T8206] random: crng reseeded on system resumption [ 355.202842][ T6013] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 355.331069][ T8213] Invalid option length (1040122) for dns_resolver key [ 355.372761][ T6013] usb 4-1: Using ep0 maxpacket: 16 [ 355.379259][ T6013] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.379290][ T6013] usb 4-1: config 0 interface 0 has no altsetting 0 [ 355.379323][ T6013] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 355.379344][ T6013] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.430809][ T6013] usb 4-1: config 0 descriptor?? [ 355.877095][ T6013] nzxt-smart2 0003:1E71:2009.0004: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 356.172904][ T6013] usb 4-1: USB disconnect, device number 17 [ 356.506719][ T8224] capability: warning: `syz.0.715' uses deprecated v2 capabilities in a way that may be insecure [ 357.369651][ T8223] syz.0.715 (8223) used greatest stack depth: 15368 bytes left [ 357.439871][ T8219] fido_id[8219]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 357.694424][ T8229] syzkaller1: entered promiscuous mode [ 357.694449][ T8229] syzkaller1: entered allmulticast mode [ 359.628407][ T8248] loop5: detected capacity change from 0 to 4096 [ 362.779022][ T8283] loop5: detected capacity change from 0 to 4096 [ 364.062837][ T808] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 364.212834][ T808] usb 2-1: Using ep0 maxpacket: 8 [ 364.214406][ T808] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 364.214443][ T808] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 364.214455][ T808] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 364.214467][ T808] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 364.214479][ T808] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 364.214507][ T808] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 364.214518][ T808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.458862][ T808] usb 2-1: usb_control_msg returned -32 [ 364.458907][ T808] usbtmc 2-1:16.0: can't read capabilities [ 364.832837][ T37] kauditd_printk_skb: 49 callbacks suppressed [ 364.832856][ T37] audit: type=1326 audit(1770455780.367:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8304 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad8f8aeb9 code=0x7ffc0000 [ 364.832898][ T37] audit: type=1326 audit(1770455780.367:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8304 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad8f8aeb9 code=0x7ffc0000 [ 364.832933][ T37] audit: type=1326 audit(1770455780.367:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8304 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7ad8f4b78e code=0x7ffc0000 [ 364.832976][ T37] audit: type=1326 audit(1770455780.377:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8304 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad8f8aeb9 code=0x7ffc0000 [ 364.833013][ T37] audit: type=1326 audit(1770455780.377:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8304 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad8f8aeb9 code=0x7ffc0000 [ 364.833050][ T37] audit: type=1326 audit(1770455780.377:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8304 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7ad8f4b78e code=0x7ffc0000 [ 364.833087][ T37] audit: type=1326 audit(1770455780.377:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8304 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad8f8aeb9 code=0x7ffc0000 [ 364.833124][ T37] audit: type=1326 audit(1770455780.377:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8304 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad8f8aeb9 code=0x7ffc0000 [ 364.833160][ T37] audit: type=1326 audit(1770455780.377:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8304 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7ad8f8aeb9 code=0x7ffc0000 [ 364.833193][ T37] audit: type=1326 audit(1770455780.377:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8304 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad8f8aeb9 code=0x7ffc0000 [ 365.082822][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 365.236652][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 365.258765][ T9] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 365.258792][ T9] usb 5-1: config 0 has no interface number 0 [ 365.258830][ T9] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.258844][ T9] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.258866][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 365.258878][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.263393][ T9] usb 5-1: config 0 descriptor?? [ 365.432155][ T8309] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 365.706366][ T10] usb 2-1: USB disconnect, device number 5 [ 367.185822][ T8328] loop5: detected capacity change from 0 to 4096 [ 368.976021][ T8344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.754'. [ 368.982095][ T8344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.754'. [ 368.985223][ T8344] 9p: Bad value for 'wfdno' [ 369.363570][ T6013] usb 5-1: USB disconnect, device number 8 [ 370.026416][ T8362] loop5: detected capacity change from 0 to 4096 [ 372.498809][ T8383] virtio-fs: tag not found [ 373.345507][ T8393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.770'. [ 373.347359][ T8393] netlink: 12 bytes leftover after parsing attributes in process `syz.4.770'. [ 373.349804][ T8393] 9p: Bad value for 'wfdno' [ 374.013077][ T807] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 374.198134][ T807] usb 2-1: Using ep0 maxpacket: 8 [ 374.215839][ T807] usb 2-1: unable to get BOS descriptor or descriptor too short [ 374.221298][ T807] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 374.221336][ T807] usb 2-1: can't read configurations, error -71 [ 375.812862][ T807] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 375.993505][ T807] usb 5-1: Using ep0 maxpacket: 16 [ 376.022309][ T807] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 376.022338][ T807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.022357][ T807] usb 5-1: Product: syz [ 376.022371][ T807] usb 5-1: Manufacturer: syz [ 376.022384][ T807] usb 5-1: SerialNumber: syz [ 377.316989][ T807] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 377.336180][ T807] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 377.336593][ T807] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 377.336643][ T807] usb 5-1: media controller created [ 377.397867][ T807] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 377.522465][ T807] zl10353_read_register: readreg error (reg=127, ret==-32) [ 377.865972][ T807] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 378.170805][ T807] usb 5-1: USB disconnect, device number 9 [ 378.261194][ T8432] virtio-fs: tag not found [ 378.753687][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.753765][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.661670][ T5982] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 379.795051][ T5982] usb 1-1: device descriptor read/64, error -71 [ 380.049510][ T5982] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 380.182829][ T5982] usb 1-1: device descriptor read/64, error -71 [ 380.293503][ T5982] usb usb1-port1: attempt power cycle [ 380.335558][ T6013] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 380.495654][ T6013] usb 4-1: Using ep0 maxpacket: 8 [ 380.500175][ T6013] usb 4-1: unable to get BOS descriptor or descriptor too short [ 380.516029][ T6013] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 380.516067][ T6013] usb 4-1: can't read configurations, error -71 [ 380.632846][ T5982] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 380.654742][ T5982] usb 1-1: device descriptor read/8, error -71 [ 380.982766][ T5982] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 381.003854][ T5982] usb 1-1: device descriptor read/8, error -71 [ 381.483431][ T5982] usb usb1-port1: unable to enumerate USB device [ 382.760878][ T8468] random: crng reseeded on system resumption [ 383.812866][ T5982] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 384.000776][ T5982] usb 1-1: Using ep0 maxpacket: 16 [ 384.020799][ T5982] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 384.020829][ T5982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.020847][ T5982] usb 1-1: Product: syz [ 384.020860][ T5982] usb 1-1: Manufacturer: syz [ 384.020873][ T5982] usb 1-1: SerialNumber: syz [ 384.328289][ T5982] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 384.377110][ T5982] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 384.377353][ T5982] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 384.377380][ T5982] usb 1-1: media controller created [ 384.516006][ T5982] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 384.602563][ T5982] zl10353_read_register: readreg error (reg=127, ret==-32) [ 384.737543][ T5982] dvb_usb_gl861 1-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 384.760371][ T5982] usb 1-1: USB disconnect, device number 12 [ 384.970191][ T8476] virtio-fs: tag not found [ 387.965119][ T8492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.799'. [ 387.969699][ T8492] netlink: 12 bytes leftover after parsing attributes in process `syz.4.799'. [ 387.972287][ T8492] 9p: Bad value for 'wfdno' [ 390.042829][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 390.292727][ T807] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 390.452797][ T807] usb 1-1: Using ep0 maxpacket: 16 [ 390.507874][ T807] usb 1-1: config 0 has no interfaces? [ 390.510609][ T807] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 390.510636][ T807] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 390.510655][ T807] usb 1-1: Manufacturer: syz [ 390.515778][ T807] usb 1-1: config 0 descriptor?? [ 390.572796][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 390.582041][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 390.583098][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 390.583130][ T10] usb 2-1: can't read configurations, error -71 [ 391.293938][ T5879] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 393.123989][ T5879] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 393.124015][ T5879] usb 5-1: config 0 has no interface number 0 [ 393.124054][ T5879] usb 5-1: config 0 interface 1 has no altsetting 0 [ 393.126243][ T5879] usb 5-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.5e [ 393.126277][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.126294][ T5879] usb 5-1: Product: syz [ 393.126306][ T5879] usb 5-1: Manufacturer: syz [ 393.126318][ T5879] usb 5-1: SerialNumber: syz [ 393.134929][ T5879] usb 5-1: config 0 descriptor?? [ 396.137932][ T6013] usb 1-1: USB disconnect, device number 13 [ 396.486162][ T5879] msi2500 5-1:0.1: Registered as swradio24 [ 396.486184][ T5879] msi2500 5-1:0.1: SDR API is still slightly experimental and functionality changes may follow [ 397.383793][ T5879] usb 5-1: USB disconnect, device number 10 [ 397.835024][ T8554] random: crng reseeded on system resumption [ 399.232821][ T6013] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 399.462746][ T6013] usb 1-1: Using ep0 maxpacket: 8 [ 399.465325][ T6013] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 399.465371][ T6013] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 399.465394][ T6013] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.877360][ T6013] usb 1-1: config 0 descriptor?? [ 400.030989][ T5115] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 400.052952][ T5115] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 400.058149][ T5115] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 401.071812][ T5115] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 401.072594][ T5115] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 401.248936][ T6013] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 402.210055][ T8565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.818'. [ 402.262328][ T8566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.818'. [ 402.309378][ T8566] 9p: Bad value for 'wfdno' [ 402.711771][ T9] usb 1-1: USB disconnect, device number 14 [ 403.263427][ T5115] Bluetooth: hci5: command tx timeout [ 403.464987][ T8570] netlink: 32 bytes leftover after parsing attributes in process `syz.4.820'. [ 405.352769][ T5115] Bluetooth: hci5: command tx timeout [ 407.541031][ T5115] Bluetooth: hci5: command tx timeout [ 409.208975][ T8588] macvtap1: entered promiscuous mode [ 409.209003][ T8588] macvtap1: entered allmulticast mode [ 409.209460][ T8588] dummy0: entered promiscuous mode [ 409.209478][ T8588] dummy0: entered allmulticast mode [ 409.211595][ T8588] team0: Device macvtap1 failed to register rx_handler [ 409.582921][ T5115] Bluetooth: hci5: command tx timeout [ 409.675987][ T8588] dummy0: left allmulticast mode [ 409.676452][ T8588] dummy0: left promiscuous mode [ 411.392857][ T44] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 411.410798][ T5908] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 411.555359][ T44] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 411.555386][ T44] usb 5-1: config 0 has no interface number 0 [ 411.555415][ T44] usb 5-1: config 0 interface 1 has no altsetting 0 [ 411.558259][ T44] usb 5-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.5e [ 411.558287][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.558306][ T44] usb 5-1: Product: syz [ 411.558320][ T44] usb 5-1: Manufacturer: syz [ 411.558333][ T44] usb 5-1: SerialNumber: syz [ 411.602800][ T5908] usb 4-1: Using ep0 maxpacket: 32 [ 411.628092][ T5908] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 411.628121][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.396470][ T44] usb 5-1: config 0 descriptor?? [ 414.396892][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 414.399240][ T44] usb 5-1: can't set config #0, error -32 [ 414.486888][ T5908] usb 4-1: config 0 descriptor?? [ 414.487508][ T5908] usb 4-1: can't set config #0, error -71 [ 414.507739][ T44] usb 5-1: USB disconnect, device number 11 [ 414.654698][ T5908] usb 4-1: USB disconnect, device number 20 [ 415.964415][ T8623] random: crng reseeded on system resumption [ 418.587677][ T8558] chnl_net:caif_netlink_parms(): no params data found [ 419.412977][ T44] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 420.007090][ T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.007116][ T44] usb 4-1: config 0 has no interfaces? [ 420.035242][ T44] usb 4-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 420.035260][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.035270][ T44] usb 4-1: Product: syz [ 420.035277][ T44] usb 4-1: Manufacturer: syz [ 420.035284][ T44] usb 4-1: SerialNumber: syz [ 420.079792][ T44] usb 4-1: config 0 descriptor?? [ 420.312856][ T44] usb 4-1: USB disconnect, device number 21 [ 420.364276][ T8558] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.385254][ T8558] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.385487][ T8558] bridge_slave_0: entered allmulticast mode [ 420.387987][ T8558] bridge_slave_0: entered promiscuous mode [ 420.528612][ T8558] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.528735][ T8558] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.528971][ T8558] bridge_slave_1: entered allmulticast mode [ 420.531549][ T8558] bridge_slave_1: entered promiscuous mode [ 421.527850][ T8558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.780078][ T8558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.123950][ T8558] team0: Port device team_slave_0 added [ 424.142379][ T8558] team0: Port device team_slave_1 added [ 424.793714][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 424.810600][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 424.813973][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 424.828704][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 424.837060][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 425.005785][ T8558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.005801][ T8558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.005824][ T8558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.199884][ T8558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.199901][ T8558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.199926][ T8558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.991317][ T5115] Bluetooth: hci2: command tx timeout [ 428.016781][ T8558] hsr_slave_0: entered promiscuous mode [ 428.018084][ T8558] hsr_slave_1: entered promiscuous mode [ 428.019083][ T8558] debugfs: 'hsr0' already exists in 'hsr' [ 428.019106][ T8558] Cannot create hsr debugfs directory [ 428.107840][ T8683] random: crng reseeded on system resumption [ 429.022825][ T5115] Bluetooth: hci2: command tx timeout [ 429.192883][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 429.302767][ T37] kauditd_printk_skb: 47 callbacks suppressed [ 429.303700][ T37] audit: type=1326 audit(1770455844.867:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8687 comm="syz.3.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e80e1aeb9 code=0x7ffc0000 [ 429.303746][ T37] audit: type=1326 audit(1770455844.867:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8687 comm="syz.3.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e80e1aeb9 code=0x7ffc0000 [ 429.312855][ T37] audit: type=1326 audit(1770455844.867:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8687 comm="syz.3.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1e80ddb78e code=0x7ffc0000 [ 429.312888][ T37] audit: type=1326 audit(1770455844.867:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8687 comm="syz.3.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e80e1aeb9 code=0x7ffc0000 [ 429.312910][ T37] audit: type=1326 audit(1770455844.867:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8687 comm="syz.3.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e80e1aeb9 code=0x7ffc0000 [ 429.312931][ T37] audit: type=1326 audit(1770455844.867:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8687 comm="syz.3.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1e80ddb78e code=0x7ffc0000 [ 429.312962][ T37] audit: type=1326 audit(1770455844.867:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8687 comm="syz.3.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e80e1aeb9 code=0x7ffc0000 [ 429.312982][ T37] audit: type=1326 audit(1770455844.867:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8687 comm="syz.3.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1e80e1aeb9 code=0x7ffc0000 [ 429.313002][ T37] audit: type=1326 audit(1770455844.867:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8687 comm="syz.3.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e80e1aeb9 code=0x7ffc0000 [ 429.313027][ T37] audit: type=1326 audit(1770455844.877:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8687 comm="syz.3.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f1e80e1aeb9 code=0x7ffc0000 [ 429.465441][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.465498][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 429.465521][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.484948][ T9] usb 5-1: config 0 descriptor?? [ 429.517781][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 430.017815][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 430.023870][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 430.038442][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 430.039282][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 430.040838][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 430.041849][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 430.042838][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 430.043926][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 430.577217][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 430.577832][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 430.579965][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 430.580445][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 430.581004][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 430.581873][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 430.582336][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 431.081270][ T9] pwc: Registered as video103. [ 431.102832][ T5115] Bluetooth: hci2: command tx timeout [ 431.154674][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 431.394453][ T9] usb 5-1: USB disconnect, device number 12 [ 433.183103][ T5115] Bluetooth: hci2: command tx timeout [ 437.733209][ T8665] chnl_net:caif_netlink_parms(): no params data found [ 439.192900][ T8558] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 439.736327][ T8558] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 440.179820][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.179887][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.242259][ T8558] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 441.159545][ T8558] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 441.882783][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 442.462799][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 442.466731][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 442.466778][ T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 442.466800][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.570639][ T9] usb 4-1: config 0 descriptor?? [ 442.900004][ T9] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 443.010735][ T8744] random: crng reseeded on system resumption [ 444.795380][ T5872] usb 4-1: USB disconnect, device number 22 [ 445.673379][ T8665] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.673506][ T8665] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.673747][ T8665] bridge_slave_0: entered allmulticast mode [ 445.676303][ T8665] bridge_slave_0: entered promiscuous mode [ 445.863710][ T8665] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.863836][ T8665] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.864072][ T8665] bridge_slave_1: entered allmulticast mode [ 445.866633][ T8665] bridge_slave_1: entered promiscuous mode [ 446.557719][ T8665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.969719][ T8665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.769042][ T8665] team0: Port device team_slave_0 added [ 450.635825][ T8665] team0: Port device team_slave_1 added [ 450.713082][ T5879] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 451.109534][ T5879] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.109589][ T5879] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 451.109611][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.145804][ T5879] usb 4-1: config 0 descriptor?? [ 451.590795][ T5879] pwc: Askey VC010 type 2 USB webcam detected. [ 452.337384][ T5879] pwc: recv_control_msg error -32 req 02 val 2b00 [ 453.022894][ T5879] pwc: recv_control_msg error -32 req 02 val 2700 [ 453.039774][ T5879] pwc: recv_control_msg error -32 req 02 val 2c00 [ 453.040480][ T5879] pwc: recv_control_msg error -32 req 04 val 1000 [ 453.042463][ T5879] pwc: recv_control_msg error -32 req 04 val 1300 [ 453.075437][ T5879] pwc: recv_control_msg error -32 req 04 val 1400 [ 453.083145][ T5879] pwc: recv_control_msg error -32 req 02 val 2000 [ 455.843602][ T5879] pwc: recv_control_msg error -71 req 04 val 1500 [ 455.849177][ T5879] pwc: recv_control_msg error -71 req 02 val 2500 [ 455.849646][ T5879] pwc: recv_control_msg error -71 req 02 val 2400 [ 455.850133][ T5879] pwc: recv_control_msg error -71 req 02 val 2600 [ 455.850655][ T5879] pwc: recv_control_msg error -71 req 02 val 2900 [ 455.851105][ T5879] pwc: recv_control_msg error -71 req 02 val 2800 [ 455.851773][ T5879] pwc: recv_control_msg error -71 req 04 val 1100 [ 455.852205][ T5879] pwc: recv_control_msg error -71 req 04 val 1200 [ 455.933151][ T5879] pwc: Registered as video103. [ 455.937071][ T5879] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 456.006527][ T5879] usb 4-1: USB disconnect, device number 23 [ 457.962539][ T8665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.962839][ T8665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.963026][ T8665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.263193][ T8665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.263211][ T8665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.263235][ T8665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.763268][ T8793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.885'. [ 459.768154][ T8793] 9p: Bad value for 'wfdno' [ 460.394524][ T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 460.399789][ T61] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 460.402904][ T61] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 460.450446][ T61] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 460.456089][ T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 460.626293][ T8665] hsr_slave_0: entered promiscuous mode [ 460.628792][ T8665] hsr_slave_1: entered promiscuous mode [ 460.741992][ T8665] debugfs: 'hsr0' already exists in 'hsr' [ 460.742019][ T8665] Cannot create hsr debugfs directory [ 462.782798][ T5115] Bluetooth: hci6: command tx timeout [ 464.863264][ T5115] Bluetooth: hci6: command tx timeout [ 466.942795][ T5115] Bluetooth: hci6: command tx timeout [ 468.992576][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 468.992593][ T37] audit: type=1326 audit(1770455884.557:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8813 comm="syz.3.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e80e1aeb9 code=0x7ffc0000 [ 469.023047][ T5115] Bluetooth: hci6: command tx timeout [ 469.054358][ T37] audit: type=1326 audit(1770455884.607:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8813 comm="syz.3.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1e80ddb78e code=0x7ffc0000 [ 469.124748][ T37] audit: type=1326 audit(1770455884.687:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8813 comm="syz.3.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e80e1aeb9 code=0x7ffc0000 [ 469.124793][ T37] audit: type=1326 audit(1770455884.687:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8813 comm="syz.3.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e80e1aeb9 code=0x7ffc0000 [ 469.213543][ T37] audit: type=1326 audit(1770455884.787:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8813 comm="syz.3.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1e80e1aeb9 code=0x7ffc0000 [ 469.216677][ T37] audit: type=1326 audit(1770455884.787:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8813 comm="syz.3.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e80e1aeb9 code=0x7ffc0000 [ 469.285212][ T37] audit: type=1326 audit(1770455884.787:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8813 comm="syz.3.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e80e1aeb9 code=0x7ffc0000 [ 469.490965][ T37] audit: type=1326 audit(1770455885.037:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8813 comm="syz.3.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f1e80e1aeb9 code=0x7ffc0000 [ 469.491020][ T37] audit: type=1326 audit(1770455885.037:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8813 comm="syz.3.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e80e1aeb9 code=0x7ffc0000 [ 469.491057][ T37] audit: type=1326 audit(1770455885.037:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8813 comm="syz.3.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e80e1aeb9 code=0x7ffc0000 [ 470.018988][ T8816] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 475.432869][ T8816] usb 4-1: device descriptor read/64, error -110 [ 475.932868][ T8816] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 481.152809][ T8816] usb 4-1: device descriptor read/64, error -110 [ 481.302957][ T8816] usb usb4-port1: attempt power cycle [ 481.742932][ T8816] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 481.796407][ T8816] usb 4-1: device descriptor read/8, error -32 [ 482.110349][ T8816] raw-gadget.0 gadget.3: failed to queue resume event [ 482.358396][ T8816] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 482.468077][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 482.468212][ T8816] usb 4-1: device descriptor read/8, error -32 [ 482.704896][ T8816] raw-gadget.0 gadget.3: failed to queue suspend event [ 482.800493][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 483.029048][ T8816] usb usb4-port1: unable to enumerate USB device [ 483.035828][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 483.054722][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 483.090470][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 483.091261][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 484.191485][ T8815] raw-gadget.0 gadget.3: failed to queue disconnect event [ 484.215342][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 484.251511][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 484.253213][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 484.263075][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 484.307438][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 484.941725][ T5115] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 485.062933][ T5115] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 485.183255][ T5115] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 485.204568][ T5115] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 485.439214][ T5115] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 485.542481][ T5115] Bluetooth: hci1: command tx timeout [ 487.013157][ T5115] Bluetooth: hci5: command tx timeout [ 487.582806][ T5115] Bluetooth: hci1: command tx timeout [ 488.152832][ T5115] Bluetooth: hci7: command tx timeout [ 489.025792][ T5115] Bluetooth: hci5: command tx timeout [ 489.059285][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 489.075029][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 489.095457][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 489.101151][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 489.101959][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 489.702938][ T5115] Bluetooth: hci1: command tx timeout [ 490.222777][ T5115] Bluetooth: hci7: command tx timeout [ 491.103026][ T5115] Bluetooth: hci5: command tx timeout [ 491.262923][ T5115] Bluetooth: hci0: command tx timeout [ 491.742918][ T5115] Bluetooth: hci1: command tx timeout [ 492.303731][ T5115] Bluetooth: hci7: command tx timeout [ 493.183214][ T5115] Bluetooth: hci5: command tx timeout [ 493.368798][ T5115] Bluetooth: hci0: command tx timeout [ 494.382772][ T5115] Bluetooth: hci7: command tx timeout [ 495.304732][ T8792] chnl_net:caif_netlink_parms(): no params data found [ 495.422796][ T5115] Bluetooth: hci0: command tx timeout [ 497.582881][ T5115] Bluetooth: hci0: command tx timeout [ 498.762976][ T8792] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.763113][ T8792] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.763378][ T8792] bridge_slave_0: entered allmulticast mode [ 498.851656][ T8792] bridge_slave_0: entered promiscuous mode [ 499.198179][ T8792] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.222869][ T8792] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.223149][ T8792] bridge_slave_1: entered allmulticast mode [ 499.239318][ T8792] bridge_slave_1: entered promiscuous mode [ 499.278705][ T8824] chnl_net:caif_netlink_parms(): no params data found [ 500.050732][ T8828] chnl_net:caif_netlink_parms(): no params data found [ 500.462440][ T8792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.596217][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.596287][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.016804][ T8792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.394300][ T8792] team0: Port device team_slave_0 added [ 504.741696][ T8792] team0: Port device team_slave_1 added [ 504.813293][ T8831] chnl_net:caif_netlink_parms(): no params data found [ 506.228216][ T8824] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.228343][ T8824] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.228567][ T8824] bridge_slave_0: entered allmulticast mode [ 506.231059][ T8824] bridge_slave_0: entered promiscuous mode [ 506.263136][ T8835] chnl_net:caif_netlink_parms(): no params data found [ 506.675379][ T8792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.675397][ T8792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.675422][ T8792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.676268][ T8824] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.676416][ T8824] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.676637][ T8824] bridge_slave_1: entered allmulticast mode [ 506.680549][ T8824] bridge_slave_1: entered promiscuous mode [ 506.837701][ T8828] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.837862][ T8828] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.838114][ T8828] bridge_slave_0: entered allmulticast mode [ 506.882986][ T8828] bridge_slave_0: entered promiscuous mode [ 507.877873][ T8792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.877890][ T8792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.877915][ T8792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.234751][ T8828] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.240299][ T8828] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.240576][ T8828] bridge_slave_1: entered allmulticast mode [ 508.307933][ T8828] bridge_slave_1: entered promiscuous mode [ 509.028301][ T8824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.197943][ T8824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.125443][ T8828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.445874][ T8828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.123805][ T8792] hsr_slave_0: entered promiscuous mode [ 515.164032][ T8792] hsr_slave_1: entered promiscuous mode [ 515.165008][ T8792] debugfs: 'hsr0' already exists in 'hsr' [ 515.165032][ T8792] Cannot create hsr debugfs directory [ 515.168404][ T8824] team0: Port device team_slave_0 added [ 515.340593][ T8831] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.340740][ T8831] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.340955][ T8831] bridge_slave_0: entered allmulticast mode [ 515.343847][ T8831] bridge_slave_0: entered promiscuous mode [ 515.671112][ T8824] team0: Port device team_slave_1 added [ 515.679415][ T8835] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.679537][ T8835] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.679803][ T8835] bridge_slave_0: entered allmulticast mode [ 515.682528][ T8835] bridge_slave_0: entered promiscuous mode [ 515.693128][ T8831] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.693285][ T8831] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.693540][ T8831] bridge_slave_1: entered allmulticast mode [ 515.695932][ T8831] bridge_slave_1: entered promiscuous mode [ 515.910546][ T8828] team0: Port device team_slave_0 added [ 515.920525][ T8835] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.920666][ T8835] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.920922][ T8835] bridge_slave_1: entered allmulticast mode [ 515.954869][ T8835] bridge_slave_1: entered promiscuous mode [ 517.587680][ T8828] team0: Port device team_slave_1 added [ 518.853898][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 518.897762][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 518.939994][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 518.942341][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 518.958992][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 519.223146][ T8824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.223163][ T8824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.223187][ T8824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.513992][ T8824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.514010][ T8824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.514034][ T8824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.520492][ T8831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.709822][ T8835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.785519][ T8831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.791920][ T8828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.791936][ T8828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.791960][ T8828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.856766][ T8835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.969416][ T8828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.969433][ T8828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.969458][ T8828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.079153][ T61] Bluetooth: hci2: command tx timeout [ 521.506192][ T8831] team0: Port device team_slave_0 added [ 523.103390][ T61] Bluetooth: hci2: command tx timeout [ 524.120535][ T8835] team0: Port device team_slave_0 added [ 524.195415][ T8831] team0: Port device team_slave_1 added [ 524.556785][ T8835] team0: Port device team_slave_1 added [ 525.548576][ T61] Bluetooth: hci2: command tx timeout [ 526.204198][ T8824] hsr_slave_0: entered promiscuous mode [ 526.213477][ T8824] hsr_slave_1: entered promiscuous mode [ 526.214460][ T8824] debugfs: 'hsr0' already exists in 'hsr' [ 526.214485][ T8824] Cannot create hsr debugfs directory [ 527.582917][ T61] Bluetooth: hci2: command tx timeout [ 528.727550][ T8828] hsr_slave_0: entered promiscuous mode [ 528.775188][ T8828] hsr_slave_1: entered promiscuous mode [ 528.776294][ T8828] debugfs: 'hsr0' already exists in 'hsr' [ 528.776317][ T8828] Cannot create hsr debugfs directory [ 528.779134][ T8831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.779146][ T8831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.779170][ T8831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.879509][ T8835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.879525][ T8835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.879550][ T8835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.257280][ T8831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.257298][ T8831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.257323][ T8831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.346195][ T8835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.346212][ T8835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.346237][ T8835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.648627][ T8831] hsr_slave_0: entered promiscuous mode [ 533.650070][ T8831] hsr_slave_1: entered promiscuous mode [ 533.651123][ T8831] debugfs: 'hsr0' already exists in 'hsr' [ 533.651145][ T8831] Cannot create hsr debugfs directory [ 533.754879][ T8835] hsr_slave_0: entered promiscuous mode [ 533.909540][ T8835] hsr_slave_1: entered promiscuous mode [ 533.925993][ T8835] debugfs: 'hsr0' already exists in 'hsr' [ 533.926031][ T8835] Cannot create hsr debugfs directory [ 541.944646][ T5115] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 541.950790][ T5115] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 541.969461][ T5115] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 542.032465][ T5115] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 542.052010][ T5115] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 544.269231][ T5115] Bluetooth: hci6: command tx timeout [ 544.806059][ T61] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 544.820450][ T8874] chnl_net:caif_netlink_parms(): no params data found [ 544.837149][ T61] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 544.839843][ T61] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 544.908642][ T61] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 544.921463][ T61] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 545.117768][ T8893] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 545.131874][ T8893] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 545.133623][ T8893] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 545.141099][ T8893] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 545.142464][ T8893] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 546.835073][ T8893] Bluetooth: hci6: command tx timeout [ 547.204197][ T61] Bluetooth: hci8: command tx timeout [ 548.862883][ T61] Bluetooth: hci9: command tx timeout [ 548.863358][ T61] Bluetooth: hci6: command tx timeout [ 548.985106][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 549.014707][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 549.039506][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 549.053290][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 549.079043][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 549.385849][ T61] Bluetooth: hci8: command tx timeout [ 550.952802][ T5115] Bluetooth: hci6: command tx timeout [ 550.952835][ T5115] Bluetooth: hci9: command tx timeout [ 551.472800][ T61] Bluetooth: hci8: command tx timeout [ 551.585116][ T61] Bluetooth: hci1: command tx timeout [ 553.042793][ T61] Bluetooth: hci9: command tx timeout [ 553.502772][ T61] Bluetooth: hci8: command tx timeout [ 553.673875][ T61] Bluetooth: hci1: command tx timeout [ 555.202847][ T61] Bluetooth: hci9: command tx timeout [ 555.744754][ T61] Bluetooth: hci1: command tx timeout [ 557.822810][ T61] Bluetooth: hci1: command tx timeout [ 563.030188][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.030272][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.761379][ T38] INFO: task syz.1.826:8588 blocked for more than 143 seconds. [ 563.761422][ T38] Not tainted syzkaller #0 [ 563.761433][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 563.761442][ T38] task:syz.1.826 state:D stack:16760 pid:8588 tgid:8587 ppid:5810 task_flags:0x400140 flags:0x00080002 [ 563.761498][ T38] Call Trace: [ 563.761508][ T38] [ 563.761521][ T38] __schedule+0x1472/0x4fe0 [ 563.761584][ T38] ? __pfx___schedule+0x10/0x10 [ 563.761616][ T38] rt_mutex_schedule+0x76/0xf0 [ 563.761637][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 563.761672][ T38] rt_mutex_slowlock+0x2dc/0x710 [ 563.761694][ T38] ? rt_mutex_slowlock+0x1fd/0x710 [ 563.761714][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 563.761743][ T38] ? rcu_barrier+0x4c/0x580 [ 563.761771][ T38] ? rcu_barrier+0x4c/0x580 [ 563.761798][ T38] ? rcu_barrier+0x4c/0x580 [ 563.761818][ T38] mutex_lock_nested+0x168/0x1d0 [ 563.761836][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 563.761859][ T38] rcu_barrier+0x4c/0x580 [ 563.761891][ T38] netdev_run_todo+0x2e0/0xde0 [ 563.761919][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 563.761939][ T38] ? rtnl_newlink+0x8a1/0x1be0 [ 563.761976][ T38] rtnl_newlink+0x16c7/0x1be0 [ 563.761996][ T38] ? kasan_save_track+0x3e/0x80 [ 563.762031][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 563.762076][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 563.762102][ T38] ? kasan_quarantine_put+0xbb/0x1f0 [ 563.762124][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 563.762149][ T38] ? nlmon_xmit+0xb0/0x100 [ 563.762172][ T38] ? kmem_cache_free+0x18d/0x8c0 [ 563.762193][ T38] ? nlmon_xmit+0xb0/0x100 [ 563.762226][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 563.762248][ T38] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 563.762268][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 563.762291][ T38] ? __dev_queue_xmit+0x27d/0x3990 [ 563.762322][ T38] ? __dev_queue_xmit+0x1eba/0x3990 [ 563.762340][ T38] ? netlink_unicast+0x805/0x9f0 [ 563.762360][ T38] ? netlink_sendmsg+0x813/0xb40 [ 563.762380][ T38] ? ____sys_sendmsg+0xa4e/0xac0 [ 563.762405][ T38] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 563.762442][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 563.762465][ T38] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 563.762492][ T38] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 563.762515][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 563.762536][ T38] ? ref_tracker_free+0x673/0x820 [ 563.762554][ T38] ? __copy_skb_header+0xa3/0x4a0 [ 563.762575][ T38] ? __pfx_ref_tracker_free+0x10/0x10 [ 563.762592][ T38] ? __skb_clone+0x63/0x7a0 [ 563.762620][ T38] netlink_rcv_skb+0x232/0x4b0 [ 563.762857][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 563.762886][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 563.762919][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 563.762949][ T38] netlink_unicast+0x831/0x9f0 [ 563.762979][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 563.763000][ T38] ? __alloc_skb+0x193/0x390 [ 563.763024][ T38] ? netlink_sendmsg+0x650/0xb40 [ 563.763045][ T38] ? skb_put+0x11b/0x210 [ 563.763066][ T38] netlink_sendmsg+0x813/0xb40 [ 563.763098][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 563.763128][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 563.763154][ T38] ____sys_sendmsg+0xa4e/0xac0 [ 563.763174][ T38] ? __might_fault+0xaf/0x130 [ 563.763204][ T38] ? __pfx_____sys_sendmsg+0x10/0x10 [ 563.763232][ T38] ? import_iovec+0x73/0xa0 [ 563.763258][ T38] ___sys_sendmsg+0x2a5/0x360 [ 563.763276][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 563.763309][ T38] ? __pfx____sys_sendmsg+0x10/0x10 [ 563.763335][ T38] ? futex_wake+0x4af/0x580 [ 563.763382][ T38] ? __fget_files+0x2a/0x420 [ 563.763400][ T38] ? __fget_files+0x3a6/0x420 [ 563.763431][ T38] __x64_sys_sendmsg+0x1c3/0x2a0 [ 563.763454][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 563.763483][ T38] ? rcu_is_watching+0x15/0xb0 [ 563.763517][ T38] do_syscall_64+0xe2/0xf80 [ 563.763540][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.763557][ T38] ? trace_irq_disable+0x37/0x100 [ 563.763579][ T38] ? clear_bhb_loop+0x60/0xb0 [ 563.763601][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.763619][ T38] RIP: 0033:0x7ff01e7caeb9 [ 563.763645][ T38] RSP: 002b:00007ff01ca26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 563.763665][ T38] RAX: ffffffffffffffda RBX: 00007ff01ea45fa0 RCX: 00007ff01e7caeb9 [ 563.763679][ T38] RDX: 0000000008000002 RSI: 0000200000000000 RDI: 0000000000000003 [ 563.763692][ T38] RBP: 00007ff01e838c1f R08: 0000000000000000 R09: 0000000000000000 [ 563.763704][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 563.763716][ T38] R13: 00007ff01ea46038 R14: 00007ff01ea45fa0 R15: 00007fff3c0edec8 [ 563.763747][ T38] [ 563.763795][ T38] [ 563.763795][ T38] Showing all locks held in the system: [ 563.763807][ T38] 2 locks held by rcuc/1/28: [ 563.763819][ T38] 5 locks held by ktimers/1/29: [ 563.763831][ T38] 1 lock held by khungtaskd/38: [ 563.763841][ T38] #0: ffffffff8dbc77c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 563.763893][ T38] 3 locks held by kworker/u8:2/43: [ 563.763904][ T38] #0: ffff88814cdbd938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 563.763948][ T38] #1: ffffc90000b57bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 563.763990][ T38] #2: ffffffff8ef3b8b8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 563.764037][ T38] 8 locks held by kworker/u8:3/58: [ 563.764057][ T38] 4 locks held by kworker/u8:8/1316: [ 563.764067][ T38] #0: ffff88801aad4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 563.764109][ T38] #1: ffffc90005017bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 563.764151][ T38] #2: ffffffff8ef2cf80 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xfe/0x7b0 [ 563.764197][ T38] #3: ffffffff8dbcdff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 563.764258][ T38] 2 locks held by getty/5554: [ 563.764268][ T38] #0: ffff88814d9620a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 563.764323][ T38] #1: ffffc90003e762e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 563.764374][ T38] 2 locks held by kworker/1:4/5872: [ 563.764385][ T38] 2 locks held by kworker/1:5/5879: [ 563.764395][ T38] #0: ffff88813fe55138 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 563.764435][ T38] #1: ffffc900059d7bc0 (key_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 563.764477][ T38] 1 lock held by syz.3.194/6567: [ 563.764487][ T38] #0: ffffffff8dbcdff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 563.764533][ T38] 1 lock held by syz.0.206/6613: [ 563.764543][ T38] #0: ffffffff8dbcdff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 563.764588][ T38] 1 lock held by syz-executor/8558: [ 563.764598][ T38] #0: ffffffff8dbcdff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 563.764644][ T38] 2 locks held by syz.1.826/8588: [ 563.764655][ T38] #0: ffffffff8f480328 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 563.764700][ T38] #1: ffffffff8dbcdff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 563.764748][ T38] 1 lock held by syz-executor/8665: [ 563.764758][ T38] #0: ffffffff8dbcdff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 563.764806][ T38] 3 locks held by kworker/u8:20/8768: [ 563.764817][ T38] #0: ffff88813fe69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 563.764863][ T38] #1: ffffc9001099fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 563.764905][ T38] #2: ffffffff8ef3b8b8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 563.764948][ T38] 1 lock held by syz.0.884/8787: [ 563.764958][ T38] #0: ffffffff8dbcdff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 563.765005][ T38] 1 lock held by syz-executor/8792: [ 563.765016][ T38] #0: ffffffff8dbcdff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 563.765063][ T38] 1 lock held by syz.4.889/8807: [ 563.765073][ T38] #0: ffffffff8dbcdff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 563.765120][ T38] 3 locks held by kworker/0:3/8816: [ 563.765130][ T38] 1 lock held by syz-executor/8824: [ 563.765141][ T38] #0: ffffffff8dbcdff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 563.765187][ T38] 1 lock held by syz-executor/8828: [ 563.765198][ T38] #0: ffffffff8dbcdff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 563.765245][ T38] 1 lock held by syz-executor/8831: [ 563.765256][ T38] #0: ffffffff8dbcdff0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 563.765319][ T38] 1 lock held by syz-executor/8835: [ 563.765333][ T38] 2 locks held by syz-executor/8874: [ 563.765344][ T38] #0: ffffffff8f47ffc8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 563.765389][ T38] #1: ffffffff8ef3b8b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 563.765436][ T38] 2 locks held by syz-executor/8881: [ 563.765446][ T38] #0: ffffffff8ef2cf80 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 563.765492][ T38] #1: ffffffff8ef3b8b8 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d7/0x840 [ 563.765542][ T38] 2 locks held by syz-executor/8889: [ 563.765551][ T38] #0: ffffffff8ef2cf80 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 563.765596][ T38] #1: ffffffff8ef3b8b8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 563.765645][ T38] 2 locks held by syz-executor/8891: [ 563.765655][ T38] #0: ffffffff8ef2cf80 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 563.765700][ T38] #1: ffffffff8ef3b8b8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 563.765748][ T38] 1 lock held by syz-executor/8895: [ 563.765758][ T38] #0: ffffffff8ef3b8b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 563.765805][ T38] [ 563.765810][ T38] ============================================= [ 563.765810][ T38] [ 563.765826][ T38] NMI backtrace for cpu 0 [ 563.765847][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 563.765868][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 563.765879][ T38] Call Trace: [ 563.765886][ T38] [ 563.765893][ T38] dump_stack_lvl+0xe8/0x150 [ 563.765917][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 563.765936][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 563.765957][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 563.765978][ T38] sys_info+0x135/0x170 [ 563.765994][ T38] watchdog+0xf90/0xfe0 [ 563.766022][ T38] ? watchdog+0x209/0xfe0 [ 563.766050][ T38] kthread+0x726/0x8b0 [ 563.766072][ T38] ? __pfx_watchdog+0x10/0x10 [ 563.766092][ T38] ? __pfx_kthread+0x10/0x10 [ 563.766109][ T38] ? rt_spin_unlock+0x14f/0x200 [ 563.766130][ T38] ? rt_spin_unlock+0x160/0x200 [ 563.766147][ T38] ? __pfx_kthread+0x10/0x10 [ 563.766167][ T38] ret_from_fork+0x51b/0xa40 [ 563.766188][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 563.766205][ T38] ? __switch_to+0xc82/0x1410 [ 563.766233][ T38] ? __pfx_kthread+0x10/0x10 [ 563.766255][ T38] ret_from_fork_asm+0x1a/0x30 [ 563.766292][ T38] [ 563.766305][ T38] Sending NMI from CPU 0 to CPUs 1: [ 563.766335][ C1] NMI backtrace for cpu 1 [ 563.766354][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 563.766371][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 563.766380][ C1] RIP: 0010:match_held_lock+0x2/0xb0 [ 563.766401][ C1] Code: 0f b9 3a 90 31 db 48 89 d8 5b 41 5e 41 5f e9 55 b9 03 00 cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 56 <53> bb 01 00 00 00 48 39 77 10 74 6a 81 7f 20 00 00 20 00 72 5f 48 [ 563.766414][ C1] RSP: 0018:ffffc90000a3f2f8 EFLAGS: 00000083 [ 563.766427][ C1] RAX: 0000000000000004 RBX: ffff88801cea29f8 RCX: 0000000000000046 [ 563.766437][ C1] RDX: 0000000000000100 RSI: ffffffff8dbc77c0 RDI: ffff88801cea29f8 [ 563.766448][ C1] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000100 [ 563.766457][ C1] R10: ffffc90000a3f510 R11: fffff52000147ea4 R12: 0000000000000246 [ 563.766468][ C1] R13: ffff88801cea1e40 R14: ffffffff8dbc77c0 R15: 0000000000000001 [ 563.766478][ C1] FS: 0000000000000000(0000) GS:ffff8881266c9000(0000) knlGS:0000000000000000 [ 563.766491][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 563.766501][ C1] CR2: 00007f9dd2f688e8 CR3: 000000000d9b4000 CR4: 00000000003526f0 [ 563.766515][ C1] Call Trace: [ 563.766521][ C1] [ 563.766527][ C1] lock_is_held_type+0x89/0x150 [ 563.766553][ C1] nft_do_chain+0x215/0x1990 [ 563.766572][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 563.766589][ C1] ? try_to_take_rt_mutex+0x840/0xb00 [ 563.766614][ C1] nft_do_chain_inet+0x29d/0x380 [ 563.766628][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 563.766646][ C1] ? NF_HOOK+0x9e/0x3c0 [ 563.766660][ C1] ? NF_HOOK+0x9e/0x3c0 [ 563.766674][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 563.766689][ C1] nf_hook_slow+0xc5/0x220 [ 563.766708][ C1] NF_HOOK+0x21f/0x3c0 [ 563.766723][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 563.766737][ C1] ? NF_HOOK+0x9e/0x3c0 [ 563.766751][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 563.766763][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 563.766779][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 563.766794][ C1] ? skb_dst+0x4f/0xd0 [ 563.766813][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 563.766829][ C1] NF_HOOK+0x336/0x3c0 [ 563.766843][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 563.766861][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 563.766876][ C1] ? NF_HOOK+0x9e/0x3c0 [ 563.766889][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 563.766904][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 563.766919][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 563.766933][ C1] ? process_backlog+0x271/0xc60 [ 563.766950][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 563.766964][ C1] process_backlog+0x569/0xc60 [ 563.766988][ C1] __napi_poll+0xae/0x530 [ 563.767005][ C1] net_rx_action+0x696/0xe00 [ 563.767022][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 563.767043][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 563.767067][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 563.767085][ C1] handle_softirqs+0x1de/0x640 [ 563.767102][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 563.767117][ C1] run_ktimerd+0x69/0x100 [ 563.767132][ C1] smpboot_thread_fn+0x541/0xa50 [ 563.767148][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 563.767165][ C1] kthread+0x726/0x8b0 [ 563.767182][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 563.767197][ C1] ? __pfx_kthread+0x10/0x10 [ 563.767211][ C1] ? rt_spin_unlock+0x14f/0x200 [ 563.767227][ C1] ? rt_spin_unlock+0x160/0x200 [ 563.767240][ C1] ? __pfx_kthread+0x10/0x10 [ 563.767256][ C1] ret_from_fork+0x51b/0xa40 [ 563.767271][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 563.767284][ C1] ? __switch_to+0xc82/0x1410 [ 563.767303][ C1] ? __pfx_kthread+0x10/0x10 [ 563.767319][ C1] ret_from_fork_asm+0x1a/0x30 [ 563.767342][ C1] [ 563.768339][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 563.768357][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 563.768378][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 563.768388][ T38] Call Trace: [ 563.768394][ T38] [ 563.768402][ T38] vpanic+0x1e0/0x670 [ 563.768428][ T38] panic+0xc5/0xd0 [ 563.768449][ T38] ? __pfx_panic+0x10/0x10 [ 563.768479][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 563.768503][ T38] watchdog+0xfda/0xfe0 [ 563.768530][ T38] ? watchdog+0x209/0xfe0 [ 563.768557][ T38] kthread+0x726/0x8b0 [ 563.768580][ T38] ? __pfx_watchdog+0x10/0x10 [ 563.768601][ T38] ? __pfx_kthread+0x10/0x10 [ 563.768619][ T38] ? rt_spin_unlock+0x14f/0x200 [ 563.768642][ T38] ? rt_spin_unlock+0x160/0x200 [ 563.768660][ T38] ? __pfx_kthread+0x10/0x10 [ 563.768682][ T38] ret_from_fork+0x51b/0xa40 [ 563.768702][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 563.768720][ T38] ? __switch_to+0xc82/0x1410 [ 563.768746][ T38] ? __pfx_kthread+0x10/0x10 [ 563.768767][ T38] ret_from_fork_asm+0x1a/0x30 [ 563.768803][ T38] [ 563.768953][ T38] Kernel Offset: disabled