last executing test programs: 17.297905745s ago: executing program 3 (id=859): openat$comedi(0xffffffffffffff9c, 0x0, 0x288200, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x400003, 0x800004, 0x7) lseek(0xffffffffffffffff, 0xe, 0x3) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)={0x2c, r0, 0x1, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x48]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0xc0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) r6 = socket$alg(0x26, 0x5, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f0000003240), 0x4000000000000e4, 0x0) 15.826060854s ago: executing program 3 (id=863): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) userfaultfd(0x801) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x61616f309f697a14) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000280)={0x24, @short}, 0xfffffffffffffe40) r5 = dup(0xffffffffffffffff) connect$802154_dgram(r5, &(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14) sendto$inet6(r5, 0x0, 0x0, 0x40dc880, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @local}, 0x1c) listen(0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x1) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) sync() ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x5}) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f00", @ANYRESDEC=r2, @ANYRESHEX=r4, @ANYRES64=r3], 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r7) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 11.077456926s ago: executing program 3 (id=879): syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x1000001, 0x5069f481, 0xfffe, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x20, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r2, &(0x7f00000000c0)='!', 0xb7f40, 0x407f0b00}]) 9.131285583s ago: executing program 0 (id=883): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@fragment={0x73, 0x0, 0x5, 0x1, 0x0, 0x1, 0x64}, 0x8) 9.023333756s ago: executing program 0 (id=884): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$uinput(0xffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = gettid() r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r4 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r4, 0x400, 0x1) mq_open(&(0x7f0000000780)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x136, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r6, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010026bd7000fedbdf250c00000008000300", @ANYRES32, @ANYBLOB="dca3ee3d489e6b59958dc5c12e4e5dca2c1279ae69b249b099a9eb7d204d7277063ac85aa063ddc7007c170b94a1da2259f9a8c3def3321e8c82c1bc08479fe5411859f7cedbab102d2d8f06097f094f0a0e2f9844041cab9b331f37511aa37bf79e073766ab1d18ffa5efced93c8fe2d4fc1000c2ba9536e4294ec510f74addd11162af3a8f48cff6888fd35741bdabbcec64ed18cb0891a7204b1c3e70bfce65d5b095feef69360128b26dc63ee24f03781b94e66084ad236e3f49d5160bf0c0c32c9a87659dbf7ec8a46ea5170ea0eaf67315aac871d25a70254cef2ca06897f642b94a7518cb7262"], 0x1c}, 0x1, 0x0, 0x0, 0x818}, 0x4000) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, 0x0, 0x240008c4) ioctl$UI_DEV_SETUP(r1, 0x405c5503, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newtaction={0x1600, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x15ec, 0x1, [@m_police={0x15e8, 0x1, 0x0, 0x0, {{0xb}, {0x14ec, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6937}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x10000000, 0xffffffff, 0x3, 0xffff, {0x94, 0x0, 0x5, 0x4, 0x6, 0xfffffff5}, {0x5, 0x2, 0xd2, 0xbcd0, 0x8, 0x7}, 0x2, 0x0, 0x7}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x3, 0x400, 0x7f, 0x1, 0xa, 0xfffffffb, 0xe, 0x8, 0x8, 0x0, 0x8, 0xd, 0x81f6, 0xfffffff9, 0x6, 0x4, 0x6, 0x10, 0x7, 0x0, 0x9, 0xf81a, 0x400, 0x0, 0x4, 0x56, 0x1, 0x6, 0x7f, 0x7, 0xfffffff7, 0x0, 0x7, 0xffff8000, 0x3, 0x11, 0xbd59, 0x9, 0x30000, 0x9, 0x2, 0x8, 0x5, 0x9, 0x80000001, 0xfffffff7, 0x7, 0x5, 0xfffffffb, 0x5, 0xa8e0, 0x9, 0xf91, 0xf795, 0xbb1, 0x3, 0x8, 0xc0000000, 0x7, 0x4, 0xa7d, 0x53d1, 0xffff, 0x9, 0x7, 0x6, 0x8, 0x40, 0x800, 0x1, 0x6, 0x8, 0x9, 0x6, 0x1, 0x7fff, 0x4, 0xeb1, 0x200, 0x400, 0x6, 0x9, 0x9, 0x2, 0x8000, 0xffffffff, 0x7fff, 0x6, 0x10000, 0x0, 0x1, 0x2, 0x7b1b, 0xfffffff5, 0x1, 0x0, 0x100, 0x0, 0x0, 0xfff, 0x44c, 0x3, 0x8, 0x7, 0x3, 0x80000001, 0x9, 0xfffffffb, 0x3, 0x0, 0x1, 0x2, 0x0, 0x7, 0x7, 0xf, 0x1, 0x6, 0x10, 0x0, 0x4, 0x3d, 0x3, 0x300000, 0x5, 0x3, 0xfff, 0x5, 0x4, 0x401, 0x200, 0x1, 0x9, 0xffffff3a, 0x3, 0x5, 0x1, 0x9, 0x1, 0xfffffffb, 0x30, 0xfffffff6, 0x5, 0x10000, 0x2, 0xfffff864, 0x401, 0x0, 0x3, 0x8, 0x3, 0x4, 0x1, 0xb5aa, 0x9, 0xf, 0x7, 0x1ff, 0xc34, 0x6, 0x1, 0x3, 0xf, 0x200, 0x3, 0x1, 0x3, 0x0, 0x7, 0x4, 0xc, 0x0, 0x3, 0xd35, 0x3, 0x90f, 0x7ff, 0x4, 0x7, 0x81, 0x5, 0x7, 0x10000, 0x1044, 0x4, 0x2, 0x684, 0xaa, 0x5, 0x3, 0x8000, 0xa, 0x81, 0x3ff, 0x600, 0x1, 0x3, 0x6, 0x265a, 0xe, 0x6, 0x2, 0x7, 0x80, 0x5, 0xfff, 0x9, 0x5, 0x0, 0x9, 0x8, 0x9, 0xd903, 0x3, 0x3, 0x800, 0x3, 0x5, 0x8, 0x4f3, 0x2, 0x6, 0x101, 0x8001, 0x100, 0x9, 0xd0e, 0xff, 0xd2, 0x8, 0x1, 0x7, 0x4, 0x2, 0x5, 0x9, 0x7, 0xc, 0x4, 0xc, 0xab4, 0x9, 0x10000, 0x5, 0xea, 0x7, 0x0, 0x6b0, 0xfffffffd, 0x435, 0x1000, 0x4, 0x9b1, 0x57965bd6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x4, 0xb1b, 0x7fffffff, 0x67, 0x10001, 0x100, 0xf6, 0xbd, 0x929, 0x802, 0x1, 0x2f3, 0x7017, 0x0, 0x200, 0xc, 0x2, 0x4c3c3e26, 0x7fff, 0x64, 0x10, 0xc, 0x7, 0xbcf0, 0xc38, 0x726, 0x9, 0x9, 0x0, 0xfffffff8, 0x1fb, 0x73, 0x7, 0x8000, 0xfffffff1, 0xffffffff, 0xffffd81c, 0xa05, 0x6, 0x5, 0x6, 0xfffffffd, 0x2, 0x0, 0x6, 0x5, 0x8, 0xc, 0x40, 0xb, 0xfffffffa, 0x1, 0x9, 0x49da962, 0x77, 0x255d, 0x8fa, 0x8, 0x2, 0x3ff, 0x7fffffff, 0xd, 0x1, 0xd, 0x5, 0x8, 0x40, 0x80000001, 0x0, 0x3, 0x200, 0x7a8, 0xf, 0x80000000, 0x9, 0xff, 0x101, 0x0, 0x0, 0x6, 0x1, 0x6, 0x6, 0x80, 0xfff, 0x7, 0x8, 0x9, 0xfff, 0x1, 0xa91, 0x6b7c919c, 0x4, 0x8, 0x402, 0x7fffffff, 0x7fffffff, 0x2, 0x5, 0x7f, 0xd, 0x9, 0x0, 0x6, 0x5, 0x7, 0xffff, 0x2, 0x40, 0x7, 0x3, 0x1db, 0x7fff, 0x5, 0xfffffff8, 0xfea9, 0x3, 0xfff, 0xd90, 0xfffffff9, 0x80000000, 0x8001, 0x1, 0x2, 0x8, 0x100, 0x92c1, 0xc, 0xb, 0x4, 0x7, 0x7, 0x1, 0x2, 0xc0000000, 0xf, 0x2, 0x4, 0x2, 0x7f, 0xfffffffb, 0xfffffffc, 0x101, 0x4, 0x100, 0x3486b8d1, 0x1, 0x0, 0x2, 0x2d8aefcf, 0x9, 0x8001, 0x8001, 0x80, 0x1000009, 0x6f, 0x7, 0x2, 0x1ff, 0x0, 0x4, 0x8, 0x8, 0x8000, 0x2, 0x7, 0xfffffffc, 0x4, 0x3, 0xf, 0xb5ed328, 0x33fd, 0x8, 0x6, 0x2, 0x1, 0x4, 0x8, 0xfffffc01, 0x4, 0x40, 0xffffffff, 0xa, 0x8, 0xffffffff, 0x81, 0x8, 0x7, 0x0, 0x8, 0x0, 0x279, 0x7e, 0x10000, 0x10001, 0x6, 0xabf, 0x100, 0x7, 0x5, 0x0, 0x1, 0x8, 0x4, 0x1, 0x0, 0x7, 0xfffffff8, 0x4, 0x8, 0xf, 0xdf2a, 0x4, 0x9, 0x100, 0x9, 0x9c3, 0x80, 0x3, 0x3, 0xc7d, 0x3, 0xff5, 0xc9, 0x4, 0x7, 0x2, 0x3, 0xbe, 0x40, 0x651ad871, 0x9, 0x9, 0x92, 0x7, 0x7, 0x0, 0x2, 0x7fff, 0x200, 0x193c, 0x8, 0x9, 0x40, 0x9, 0xd759, 0x8, 0xfffffffb, 0x7f, 0xff, 0x8001, 0x1, 0x1b013939, 0x80, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffff044e, 0x80, 0xacf, 0x9, 0x308, 0x6, 0x8243, 0x1, 0x5, 0x4, 0x6, 0x8, 0x6, 0x8, 0x7, 0x0, 0x2, 0xc245, 0x9, 0x10000, 0xce, 0xea14, 0x5c, 0x9, 0x4, 0x8, 0x9, 0x6, 0x101, 0xbf4, 0x2, 0x1, 0x27, 0x7, 0x0, 0x1, 0x3, 0xfffffffa, 0xcd1, 0x2, 0x9c27, 0x1, 0xb5e8, 0x7, 0x8, 0x22, 0x6c0, 0x1, 0xcb4, 0x1, 0x6, 0x0, 0x2b5, 0x9bdf, 0x8, 0x9, 0xc, 0x7fff, 0x5, 0x3, 0x9, 0x400, 0x9, 0xf, 0x0, 0x5, 0x0, 0x6, 0x8, 0x10001, 0xa7ee, 0x101, 0x5, 0x9, 0x9, 0x8, 0x4, 0x1000, 0x0, 0x61df, 0xb23, 0x3ff, 0xa12c, 0x9, 0x3, 0x1, 0x0, 0x7f1, 0x8, 0x3, 0xcb9e, 0x1, 0x2, 0x66, 0x4a4, 0x1, 0x6, 0x8, 0x5, 0x2, 0x4f34, 0x9, 0x3, 0x9, 0xaf0, 0x9, 0x4f4, 0x68, 0xe, 0xfffffff8, 0x7fffffff, 0x5, 0x1, 0x4, 0x8, 0x10, 0x3, 0x2, 0x32, 0x2, 0x6, 0x9, 0x10000, 0x39d, 0x4, 0x3, 0x6, 0xa, 0x8, 0x7, 0x81aa, 0x80000001, 0x6, 0x4, 0x61, 0x2, 0x4, 0x55, 0x17e9, 0x1, 0x2, 0x1, 0xae, 0x8, 0xd, 0x4, 0x6, 0x6201fb07, 0x80000001, 0x1, 0x3, 0xd0b, 0x2, 0x3, 0x1ff, 0x3, 0xf3c, 0x101, 0x2, 0x1b96, 0x9, 0x2, 0x401, 0x2, 0x400, 0x8, 0x3, 0x2, 0x1, 0x4, 0x8000, 0x6, 0x8, 0x7, 0xb455, 0x40, 0x8, 0x8, 0x5, 0x7, 0x3, 0xb8, 0x263, 0x2, 0x401, 0x9, 0xfffffffa, 0x80000001, 0x2, 0x5, 0x9, 0x4075, 0x2, 0x2, 0x2, 0x5, 0x879c, 0x9, 0x4, 0x2, 0x1, 0xe7, 0x3, 0x800, 0x539c5d9f, 0x3, 0x40, 0x7fffffff, 0x41a4, 0x4, 0x3, 0xcac9, 0xe, 0x81, 0x9, 0xf011, 0xb2, 0x9, 0x4, 0x1c, 0xb, 0x7, 0xc4b, 0x2, 0x4, 0x7ce, 0x7, 0xffffffff, 0x3, 0x3, 0x6, 0x9, 0x9535, 0x10000, 0x4, 0x3, 0x7, 0x4, 0xff, 0xf, 0x711b0000, 0x217, 0xe072, 0x1, 0x9, 0x0, 0x8, 0xba, 0x0, 0x1, 0xffffffff, 0x7, 0x7, 0xa5c4, 0x7, 0xfffffffe]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x6, 0x101, 0x7ff, 0xc26, {0x8, 0x0, 0x3, 0xfff9, 0x7ff, 0x1}, {0xfd, 0x2, 0x7fff, 0xffff, 0xc9, 0x546}, 0xffff, 0x780, 0x9}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7f, 0x56e5, 0x9, 0x401, 0xfff, 0x5, 0x305, 0x400, 0x81, 0x2b, 0xd3a6, 0x5, 0x19, 0x3, 0x96, 0x7, 0x9, 0x6, 0x5, 0x3, 0x92, 0x7, 0x8, 0x2, 0x9, 0x6, 0x200, 0x9c, 0x1, 0x6, 0x8, 0xa1cd, 0x75, 0xb11, 0x8, 0xdbc, 0x8, 0x10000, 0x9, 0x1, 0x8, 0x6d9a, 0x8, 0x47c, 0x3, 0x1, 0x1, 0xff, 0x7, 0x5a, 0x800, 0x9, 0x3, 0x2, 0x2, 0xfffff001, 0x3, 0x8e3, 0x5, 0xa8eb, 0x76ad, 0x7, 0x97, 0x4, 0x101, 0x3, 0xfffffe01, 0x8, 0xf419, 0x7ff, 0x8000, 0x800, 0x9d, 0xffff, 0xfffffffb, 0x0, 0x3, 0x8, 0xd, 0x7, 0x40, 0x5, 0x7, 0xfe, 0x0, 0x6, 0x4, 0x3aa, 0x7, 0xfc4, 0x3, 0x101, 0x9, 0x4, 0x2, 0x1, 0x80000000, 0xf, 0x4e8, 0x7f, 0x2, 0x3, 0x7, 0x499d, 0xd4, 0x1, 0x5, 0x5, 0x7, 0x58a80000, 0xa, 0x7, 0x80000000, 0x4, 0x6, 0x401, 0x100, 0x9, 0x4, 0x6, 0x7, 0x99, 0x1, 0xbc, 0x4, 0x0, 0x400, 0xffffffff, 0x4, 0x80, 0x9, 0x3ff, 0x5, 0x6, 0x7, 0x1, 0x1, 0x1515, 0x4, 0x5, 0x3, 0xe0b8, 0xb15, 0x3, 0x6, 0x9, 0x9, 0x8000, 0x6, 0x53a8, 0x4, 0x3581, 0x8, 0x2, 0x1, 0x2, 0x639, 0x0, 0x6, 0x0, 0x5, 0xffffffff, 0x3f, 0x2, 0x3, 0x2, 0x2, 0x223, 0xd08, 0x2, 0x3, 0x4, 0xb, 0x8, 0x4, 0x8001, 0xd44, 0xfffffff9, 0x8, 0x25, 0x7, 0x3, 0x9, 0x80000000, 0x80000001, 0x7, 0x3, 0x7, 0xfff, 0x87, 0x6f1e, 0xbb42, 0x1, 0x7f, 0xee, 0x5, 0x3, 0x3, 0x7, 0x8, 0x3, 0x10000, 0x1, 0x7, 0x9, 0x1, 0x81, 0x2, 0x1, 0x1, 0x4, 0x8, 0x4, 0x3, 0x1, 0x70, 0x40e, 0xb, 0x1, 0x7, 0xdbe, 0x41a, 0x1, 0x87, 0x5, 0x2, 0x623, 0x577, 0x3, 0x10000, 0xfffffffb, 0x5, 0x1, 0x8, 0x100, 0x3, 0x9, 0x7, 0x7fff, 0x4304, 0xffff, 0x7f, 0x4, 0xfff, 0x1, 0x7fff, 0x1, 0x66, 0x5, 0x2, 0x6, 0x7, 0x2, 0x4, 0x0, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0xffffffffffffffff, 0xa, 0x401, 0x88, {0x6, 0x3, 0x5, 0x2, 0xfffc, 0x1b8}, {0x4, 0x1, 0x0, 0x87, 0x365, 0x8000}, 0x80000000, 0x103, 0xa}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x54, 0x6, 0x9, 0x4, 0x1000, 0x5, 0x1000, 0x1c0000, 0x1, 0x6, 0x8, 0x8, 0x9, 0x6, 0x9, 0x0, 0xfffffffe, 0x400, 0x6b0, 0x5, 0xa, 0x200, 0xfffff800, 0xdb, 0x8, 0xa0, 0x4, 0x5, 0x7f, 0x4, 0x2, 0xfffffffc, 0x10, 0x4, 0x5, 0x3, 0x7c, 0xfffff001, 0x8, 0xa, 0x3, 0x6, 0x6, 0x7fffffff, 0xfffff801, 0x1, 0x4, 0x0, 0x7, 0xfff, 0x3, 0x8, 0x1000007, 0x2, 0x5, 0xc2e0, 0x6, 0x1, 0xdf, 0x80000000, 0x0, 0xfffffffc, 0x4, 0x0, 0x80000000, 0x1ff, 0x5, 0x80, 0xb, 0x7, 0x1, 0x0, 0x9, 0xa, 0x2, 0x6, 0x6, 0x3, 0x2, 0x7f, 0xe5c, 0x77c, 0x3, 0x6, 0x4, 0x3, 0x3, 0x0, 0x10, 0xa4, 0x643, 0x6, 0x4, 0x2, 0xb, 0x2, 0x3, 0x10001, 0x4, 0x6, 0xe, 0x9, 0x40, 0xfffffffa, 0x1bc8, 0xfffffffc, 0x1, 0xffff, 0x5, 0x9877, 0x4, 0x4, 0x6992, 0x7, 0x7, 0x10001, 0xda4, 0x3, 0xfffffffa, 0x0, 0x0, 0x3, 0x3, 0x1000, 0x80, 0x321e, 0x3ff, 0xc, 0xd, 0xe, 0xd9c, 0x4, 0x1, 0x8, 0x101, 0x8ef8, 0x4, 0x59d0f32a, 0xffffff28, 0x1e, 0xa88, 0x5, 0x9, 0x2, 0x1, 0x3, 0x9, 0x2, 0x6, 0x0, 0x6, 0x9, 0x2, 0x9, 0x400, 0x5, 0x9, 0x100, 0xb, 0x0, 0xfc, 0x3, 0xfffffff9, 0x7, 0x14, 0x9, 0x2, 0x7, 0x998, 0xd9, 0x5, 0x3, 0x9, 0x8, 0x2, 0x200, 0x7, 0x80000000, 0x4, 0x6, 0x3, 0xc, 0xd, 0xf, 0x5, 0xfa2, 0x7, 0x8, 0x3, 0x8, 0x81, 0x10a4, 0x6, 0xfffffff9, 0x9, 0x6, 0x101, 0x80000001, 0x2, 0x7, 0xffffffff, 0xa5, 0x7, 0x5, 0x8001, 0x1000, 0x80000001, 0x1, 0xab, 0x6, 0x6, 0x4, 0x401, 0x9, 0x80000001, 0x4, 0x35a8b410, 0x3f, 0x1c35, 0x8, 0x9, 0x8, 0x5, 0x3, 0x5, 0x4, 0x5, 0xe006, 0x2, 0x2, 0x7, 0x10001, 0x9, 0x3800000, 0x1, 0xdd, 0x9, 0x0, 0x80, 0x1, 0x8, 0x5, 0xeb554b3, 0xec9e6aa1, 0x7f, 0x1, 0x8, 0x3, 0x0, 0x1, 0x5, 0x3, 0x7, 0x932c564, 0xffffff31]}]]}, {0xd1, 0x6, "6bdcfeb443127d77dfa4c40bb4b98ba2f1200d8571f7236f0942d3bb5f2cc7cfcab4df09fca0d109754c45dc04a46e6934628a82e5ea45b74ebf623d6e43d168c524fc3f946157185c496d1875149b320e7d689dd8135ee385cf6a29f4591b0998263c2a07b6e2a160049f0bcd3a79602a71e0ff76faaee96e5e81e50580790bceb393543422fe50067e92e8680d2f4ee909226654c90c671ede54ef2b0b7eac1d226d54a209b6521195a7c789aa581ec649a91452a926ddff081a87c30492f57d89183e5c23d0714ab05e76a1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x1600}}, 0x0) r8 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) preadv2(r8, &(0x7f0000000500)=[{&(0x7f0000000080)=""/51, 0x33}, {&(0x7f00000000c0)=""/57, 0x39}, {&(0x7f0000000100)=""/60, 0x3c}, {&(0x7f0000000140)=""/133, 0x85}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000400)=""/205, 0xcd}, {&(0x7f0000000240)=""/67, 0x43}, {&(0x7f0000000340)=""/31, 0x1f}, {&(0x7f0000000380)=""/11, 0xb}], 0x9, 0x5, 0x4037, 0x10) r9 = socket(0xa, 0x3, 0x87) socket$nl_netfilter(0x10, 0x3, 0xc) sendto(r9, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) 8.151826433s ago: executing program 0 (id=886): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$GETPID(0x0, 0x3, 0xb, 0x0) syz_open_dev$sndpcmp(&(0x7f0000004c00), 0x1, 0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 7.745443701s ago: executing program 0 (id=887): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0x0, 0x0, 0x56555958}}) 7.647963242s ago: executing program 3 (id=888): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_clone3(&(0x7f0000003b00)={0x20ca6bd519f76f4b, 0x0, 0x0, 0x0, {0x24}, 0x0, 0x0, 0x0, 0x0}, 0x58) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0x9, 0x0, 0x0, @binary="38eac21a"}]}, 0x1c}}, 0x20000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) r5 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r5, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r3, &(0x7f0000000580)='fd/3\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_ep_write$ath9k_ep2(r6, 0x83, 0x40, &(0x7f0000000300)=@generic={0x3, 0x0, 0x38, "632de200", "12a6dc03076f40b53ac4db5ae53ab811379bdee74b58d0ee63c0d1156534e13024da60b2affea260837b691242efba5fcac969757e1ea4fb"}) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) 7.414065057s ago: executing program 0 (id=890): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) semctl$GETALL(0x0, 0x0, 0xd, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x3}, 0xffffff1a) syz_usb_connect(0x4, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$nvram(0xffffffffffffff9c, 0x0, 0x800, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000240)={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, 0xc) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000300)=0x6, &(0x7f0000000340)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = open(&(0x7f0000000280)='.\x00', 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r6, {0x1000}}, './file0\x00'}) 6.311967439s ago: executing program 2 (id=892): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, 0x0, 0x0, 0x40800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01010000000000000000010000000900010073797a30000000000900020073797a3000000000140003"], 0xc8}}, 0x4000450) 6.22736625s ago: executing program 1 (id=893): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) 4.890206306s ago: executing program 2 (id=894): socketpair$unix(0x1, 0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x2c) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000000)) 4.812884237s ago: executing program 1 (id=895): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$GETPID(0x0, 0x3, 0xb, 0x0) syz_open_dev$sndpcmp(&(0x7f0000004c00), 0x1, 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3.931953474s ago: executing program 2 (id=896): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$inet(0x2, 0x1, 0x100) r6 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44001}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @broadcast, 'bond_slave_1\x00'}}, 0x1e) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) 3.790982207s ago: executing program 1 (id=897): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000005000000000000000200000604000000030000000200000003000000c000000000e4de95e5"], &(0x7f0000000f40)=""/4089, 0x39, 0xff9, 0x1}, 0x28) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = dup3(0xffffffffffffffff, r4, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0x2, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e2, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x9, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6cfe, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x8, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0xd7, 0x201, 0xffff3441, 0x4]}, 0x45c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x1800, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000fc0), 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x100000000000000, &(0x7f0000000580)="b3"}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.201485338s ago: executing program 2 (id=898): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r0, 0x1000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000280)="d17e", 0x2}, {&(0x7f0000002640)='9', 0x1}], 0x2) 2.131979369s ago: executing program 3 (id=899): io_uring_setup(0x6dc6, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r3) sendmsg$IEEE802154_LIST_PHY(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r4, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20000004) 2.131801339s ago: executing program 1 (id=900): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) cachestat(0xffffffffffffffff, 0x0, 0x0, 0xee) 2.007627332s ago: executing program 1 (id=901): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) 1.974214852s ago: executing program 2 (id=902): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1000000, '\x00', 0x0, 0x0}, 0x50) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002700), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002ac0)=ANY=[@ANYRES16=r1, @ANYBLOB="01002abd7000fbdbcf2521000000"], 0x14}}, 0x40010) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_clone(0x2080, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x1, r3) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r9, @ANYBLOB="0c009900f400000017000000080026007f1700000800270001"], 0x40}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f0000003880)={0x3d8, r7, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xe3}, @NL80211_ATTR_CSA_IES={0x388, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x26, 0xf, [@challenge={0x10, 0x1, 0xa2}, @ht={0x2d, 0x1a, {0x400, 0x2, 0x7, 0x0, {0x649a, 0x8, 0x0, 0x80, 0x0, 0x0, 0x1, 0x2}, 0x8, 0x6, 0x2c}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}]}], @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x8f, 0xf, [@fast_bss_trans={0x37, 0x72, {0x1, 0x1, "5ff2c735300afd9ee7352982e2d5e063", "ca512d02c6072214db0cfb07e1ffef836dcbfaa2f825e97baa1412373cd32f16", "4d45ae5ad433d2024e5c7c644df6867994128ec0a18af5a078caf6de3aba43a2", [{0x2, 0x1e, "e201914a26e740adcc946997661affc72673bdee2b1418aa20da1a23cb97"}]}}, @rann={0x7e, 0x15, {{0x0, 0x52}, 0x6, 0xb, @device_a, 0x80, 0x5, 0x5}}]}, @NL80211_ATTR_IE={0x31, 0x2a, [@link_id={0x65, 0x12, {@initial, @broadcast, @device_b}}, @link_id={0x65, 0x12, {@random="ddcb5fcf3ef8"}}, @channel_switch={0x25, 0x3, {0x0, 0xac, 0x80}}]}, @NL80211_ATTR_BEACON_TAIL={0x4}, @NL80211_ATTR_IE_PROBE_RESP={0x73, 0x7f, [@measure_req={0x26, 0x44, {0x0, 0x2, 0x30, "d67e2ac75495595f964ef8a378b80e3c94124e6db8024703a049561d3c236e39c4b518b052df53e693a90c7351f531a0a200b397b2ede2f3a4eab0b7dc6eeb05a3"}}, @supported_rates={0x1, 0x6, [{0x3}, {0x18, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0xb}, {0x9}]}, @prep={0x83, 0x1f, {{}, 0x3, 0x3, @broadcast, 0x1, @void, 0x2, 0xfff, @broadcast, 0x5}}]}, @NL80211_ATTR_IE={0x1ea, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x99, 0xae, 0x8}}, @chsw_timing={0x68, 0x4, {0x8, 0x8}}, @random_vendor={0xdd, 0xa4, "d3b591771c2f54dfc38fd48d7b0324a72d7f5c5da133dc877fca9fe8679a57457f1994a1a8c227fa3aa42d4230ca67f4a06b0dbd5bf0ae35561388ea8d3709d40ef73794d690f48ab57f3d48462fddb70ada74b8048b43e5b0a9d6140f0c346429157b95ec70b42af0188f0fd939070523f6fc66ff70eb95fc982b3c6a6171a3d6aa6d75fd44da9cb048e1d7c050162393dd6b3397de74018b1a718eac7dc2dd071b2bb5"}, @random_vendor={0xdd, 0xc5, "dc42feaa7e69f9b51088ba73cce02a89d59c6ed7567db0bd1f6b2c1829fc128e3c7678b192cf3734ec986c9fad5b18769237f7ecfec036aab5f43b00f780e6e995d8490bd2eeed7868e22869ff779cb03385c2f568931bcc1bd67343f615ae406b4f5b0d5ac5e9a4935c413017a726c56fdcae23286f641256031d938de314f8d8f4b2f25b2fa6d0feaff004a846b53a8e2778702a3c4b3e6fa01f08961b1e72557fd8aaf2b9797017f3892a2da68f652eb04d3d2383363150db65cc1eb2e18672029bf318"}, @random_vendor={0xdd, 0x5a, "da6347c05eb55c9fe9a331a25894503f7764c3698eb2c214275f7fd2c3c008f1ce4de62e0b806fafffb699da0853b66ce9fba857051839b6a4cbc46eff645686148f7caba87572798fd9b198605d9d9fc04097e2b7e5ce63ca09"}, @gcr_ga={0xbd, 0x6, @device_b}, @erp={0x2a, 0x1}, @peer_mgmt={0x75, 0x4, {0x0, 0xffff, @void, @void, @void}}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x6, 0x19c9, 0xff, 0x5, 0xc1e6, 0x2]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0xbe88, 0x8, 0x401, 0xba8b]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x3, 0x6, 0xa6, 0x2]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x7, 0x9621, 0xab]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x1c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x40, 0x8001, 0x8, 0xfc3]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x8c1b, 0x7, 0xff]}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x6f}]}, 0x3d8}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r11 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r11, 0xc1007c01, &(0x7f0000000500)) 1.707954607s ago: executing program 0 (id=903): openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x3, 0x215}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r4, 0x32, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) io_uring_enter(r5, 0x3516, 0x483, 0x0, 0x0, 0x0) 976.617161ms ago: executing program 3 (id=904): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f00000018c0)=""/102400, 0x19000) unshare(0x20000400) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, 0x0, 0x0) tkill(r1, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000180)={0x81, 0x5, 0x1, 'queue1\x00', 0xfffffffe}) socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xd8c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) kexec_load(0x1, 0x6, &(0x7f0000001580)=[{&(0x7f0000000140)="a1f943a701aa9a4cf6676877ef68a5d7ac133f7835a986f44d6af10a166ed841244a674f5a25424761c9e9d6abb2284185b73c2c415c481fe6b6312a7a6dfa10b9434860fb1f517101b09f33664296db001ce778eca6c345c7a9115f6eb6f5ffa510010e98fb7120f6a54ac6d10fb3c0a8aa4f8ec91edcb9f4c961b5882fcf9e9c3f86924564cbd9671d2dc92247fd6c44644be13a7612703275a61441a71d7b97832a6f57c46f90a7c8264ad23d6ab06891c84329a350d403bb10df8c972111e046ad936276ea0a08186cc4d96ce9be173e72418b4f5330", 0xd8, 0x3, 0x9}, {&(0x7f0000000240)="8cdc8322a65879d5597d4f4b6091099782ed0a35c3a81190aca24167e58682b9ae32e21c8960e613cc35e7f1325501de606a500f986945a5333bb1b1948e5d9184d00df459d876ab325c3da0c3c2f9ebd7ff3be3f772aadf5d3adc30cc84edb43c11468f342130f3979b42ccd5430081076bfcb0b3af5c00f679fb74afd5290f0feb2548692edad3817a9484444ee05ccc203e2715f8ccac77080959b79367205a3bbfae73b13dea00418e3e2743dee5703d58f00fd4fe56e189127bf657d814c4a9beef001aa9d3b217f5e50435b2b0cb3299bc8c8165c0a1a75a17e6999ef7b65bd9dbffbe45612e1eeebdf5c2ddda4ea88a6f04b556948d9a986b3b805a029ca986d0e051fcf969f072c042333186c5d848ffdbd9df68b6725687dccf1298e077fbdcd4f9a8465fa64ae008346926077105a967be310716de5d163e69a4bf6471fdde7f831bb0c95f37bfb0396074e9557bf84fad4510744893348bae05f90f583d10837a6d727cd1ecd62864777403b90061f3ceaccba979891b6ece87a882b10648a61b18d3ef5e1fd221c214a144b9711a96d31fe5eaf053d5a98eb62fb7f2628588dee1a25729314ade6fd09361b683de952ae268646d3b9ef76b8c3ee08f8fc9f1c07331bd2420ee7c123e51006a6d04b7a92c0842690df48b1536c149c6a4bab332cb2b91b05b1bbf91e92cc0d43793d0c820fae95ded8d5a35496f1fb27464d622e21fb6d49704af9fcc3c3c13bbf70256f8113b110eee58c55da1de8948d9a7a300293bf3dc07f06e9755c283c8d0df8f0a88d2f6c75cc14ee2fd897e5b0fb1802af5e182c81c2e7ddbe64ab3c52e3f7bed61015b24ec45c42eed506c782150c9839f8ec493f3c5944688e61a8e00b8940b1914bd39d25cab1e25a6e5d689c2dae27901916bbb706fade713d3c19eb2ecc14c0fa00fb4617e53997251adcaf30c7f524228901798a37a8d2ef3d65af733be3fdd3459fdcfcc230ca4a845b700c51d7a04a63910e1f8ec93aadc4043794ec069abb898cfc4a5224e3c26b3d732927dad83d6ee51436b7203e187edb9b280de42339b0913ae26b143678083ab440eb2203b789c15d1381ab9ad77a38338d578c4a9c9508e5b88b490e5fb02bc12ac29ab2930f613230a7629d37846d45a0c63a1d1960bc3a08f664db19c5fc78e24f139a6c0b4bd1f9e2830a513ed60c40714b78f79ee039d887f788fd184a6803c755652741b6620774bf3c5996c53fb30323911e44c70c3d82c26ffe2f662f961da6bbf5f9e4206c5d22596ab8e3d48f3e1f8585fa8a925152e115910b24122cd9d8bac4660c0eec2f23ceeed49fd77381df49ad55c1bc59e9c8ae66b0359d564a63a11c90b8262464026c6a5093986ad91c7f48dc1a7df68a16f45b025e75f9221afc8ca8bb991d8476608ad414aab5277689dd7ac97e0f99a29f6430d76989423366c64e5e8827eba13f9eb5e18d52777168d771694815d77fb493c419543ab0635e8c9b8cca19ad9b5fb53ffb9663eb56b14362581295accbff07732f9072538f5522cb1cb5489bc2722e82f2f90ae1fda96944e0ef2690e48e31978c482a727ca8c277d9da369c5bc8b4bc886fc784eb0676162732c7e19297d0d7214f7fb596d2dedeb3cdf5b2eeea9c8b3d6f204e9ac6287bc5f90e9c35ba4f2ba3fbd72e9c27b217bd62601fc79c51e3ff2bc102e9fe6d033a6851caf43a9670f9ac7fad8abb82ec822b00c2683a4746cbcede17ebbf84a9b682e806ce70c9c2fcc13682792585f4932168d50b542074fd7d420df3050d87eec38e571bab8b57834572aa4b9912eee453a5a86c91ccc9e05aa56d3006bc662b5b5a68b5ebb3fa35edef3a17bbdc688f88d6df121d8897fbbe30415b1ed81987c72c3e915dbaf2a324be4eb3942028868ed9c5ead47de31e57ae6686b905c3f5ff206cc23a7a593733d42ce5b5233aa1f470d22bbc0869db199fa6cd093dcb5d92657faabb78e08da32262377e05e74867ea2a7eca2c3e2cc205b9d2a0338b08ccc45a8df8b089041fbe33d8f6d1645dcfeb919686f92527f47d22a793c6925185fa6798c4a49c5bf2e326680130237531ed00f75dc16bb0acaf934e98f049e8bfadc3226669bd7661dc84c3d1a968da22e01a602929ad977bff4617ff101086e47459ea9c6f54871a571ab8b77b0996caf2b2260a802b3f06c741f3e8eee4ab4e3d6e46d352025746a5091e4c97649c4fbf5cd5103c578290c6fbb95087f6d68612edd36d1fd71de4e04b3de7c783b2a54ba2af1c31df9d584c24d8910ef99686187c554f15454c9799d1cd5d07644c2deac19c60f05be699bb4595cd269c72b7dbf096cf8021be15ca03055994ca95673ff0cf5feb7476e18e79238ae06e09ee04a619764d4bde9f25850ef57b4040515886ccbc7ba3820f01bbed424bb2537450d02fd82e857d4276e9cb7a0b907c882246305d713cfc1377de2cee1767563d137fa8c824e2ab206246662d77b417ee629cbdcef1972c96a0674aec5d7f61d8bf15c4af54dda97e9a9b7dca06dd72f6f43bf63c805e70581d310925bab571e885f6ecbc7b79d7aeb451fd76d5710fac00a5a89e1a1dc1355e80c892f65df784467dcd9ee33918c92330214f452b184f5b2e4203d20d545ff2d3504b7fb65730fc574e2a73b5150ff287cdeb8ff34d4c3e851e2218f5aff204d9d889c332bf9686a0bd406b2649c5c3c3016225b6254986ee1e1f677bdffe572521dd631c81b1a5d15e8a428e993530420d43a366ecd3a3ff8a97595ba37cf5bc4e14b9714f60be2ac14705b2e7662bf761107cedb6d4568c8c2832099f1cf933e309456922d207ccf1a93e0ed02e85af4c32c56fcf40579239c50651a4a0da44f699b88070ec38f0856", 0x800, 0xffffffffffffb1b6}, {&(0x7f0000001240), 0x0, 0xff, 0x6}, {&(0x7f0000001300)="3e5a882cb7c032c030bc9edff47132577b5d39c28d9e982d693bd0bd35628be82c4415a88e92b615160a23d8cc0025aa2bbf69aeb7a03d7772c63047296732cf22760350e12eb7d1be857e29724a9e4fe544dd5b185f077f8927b3a150b35eb006e186ed4c70f9c6f9b222b3de487f4a82228ba516ca191a25c8834afaa9de5e6350a635eb94ce198ae07da717", 0x8d, 0x5, 0x4}, {&(0x7f00000013c0)="9a3e329eae899d657595d6bfc605f980a52329d68c75703e49b33a481e29a557e0e7cbd99778d2b35a5adb99a31d7a10bfb8e0d439c3021943e4759841e7c32a5d5fd64bd9e31d91164abbdd429942927a3b4b5984a2042e31de4ba92543d13f7120328131d195c1e9d6872ba4cf92cbfe66880eb083645809d20a1a07f1aed71e78637a86d989bb3fcf57d7282779d896b8f8d13d705d7b49238a5de7d50aba056756fdd67d95abd16558c05f18051153ecb667ab6e44f56b0a9653b1d9c89232c3d8cb0aa32801c3b983e44390ca78b2feb7acb2e770c795056a28a47bc10411c9f1ead56eaff9", 0xe8, 0xff, 0x8000000000000001}, {&(0x7f00000014c0)="854686fa58e59b6d8cc07c932b05e237ad1dd25c600f9274d7536d2f2935f3c56248b97509fdd68185ac87516ce9878989b95d406df3f5459110332c0cb1757038b4809465821ceb8fcd6eeafcae44dcf397e34a6983d01a698441616c88e3dd051db89cbbc151cef9d8c5031651ffc13c03d41409bc285d5b578ad67e44a8ac217ad789a565bf71ffd1dcc95187c8e4373434c510f563cefbfbb77cc729310147777d6e", 0xa4, 0x4, 0x7}], 0x1) syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x2, "0e3d5f3c"}]}}, 0x0}, 0x0) 912.560083ms ago: executing program 1 (id=905): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$GETPID(0x0, 0x3, 0xb, 0x0) syz_open_dev$sndpcmp(&(0x7f0000004c00), 0x1, 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=906): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x14, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271a, 0x0, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@local, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x10, 0x0, 0x2c}, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xd, 0xfffffffffffffffe}, {0x0, 0x0, 0x0, 0x5c}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x2}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.68' (ED25519) to the list of known hosts. [ 56.636504][ T5772] cgroup: Unknown subsys name 'net' [ 56.798102][ T5772] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.164369][ T5772] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 59.704345][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.722896][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.730496][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.738904][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.746840][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 59.754386][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.799341][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 59.808787][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 59.816664][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.825137][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 59.832490][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 59.847758][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 59.862426][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 59.892587][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 59.900323][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 59.908500][ T5794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 59.916417][ T5794] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 59.924369][ T5791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 59.924579][ T5794] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 59.940413][ T5794] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 59.948520][ T5790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 59.950353][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 59.963939][ T50] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 59.976101][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.149423][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 60.336591][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.346474][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.353960][ T5782] bridge_slave_0: entered allmulticast mode [ 60.360635][ T5782] bridge_slave_0: entered promiscuous mode [ 60.369346][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.376534][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.383709][ T5782] bridge_slave_1: entered allmulticast mode [ 60.390643][ T5782] bridge_slave_1: entered promiscuous mode [ 60.478348][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.507425][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.548621][ T5782] team0: Port device team_slave_0 added [ 60.555496][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 60.575707][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 60.585944][ T5782] team0: Port device team_slave_1 added [ 60.660717][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.668137][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.694897][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.728441][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.738792][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.765203][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.813195][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 60.861394][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.868758][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.876666][ T5787] bridge_slave_0: entered allmulticast mode [ 60.884251][ T5787] bridge_slave_0: entered promiscuous mode [ 60.925686][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.933104][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.940202][ T5787] bridge_slave_1: entered allmulticast mode [ 60.948606][ T5787] bridge_slave_1: entered promiscuous mode [ 60.955245][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.962477][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.969590][ T5786] bridge_slave_0: entered allmulticast mode [ 60.976746][ T5786] bridge_slave_0: entered promiscuous mode [ 60.989951][ T5782] hsr_slave_0: entered promiscuous mode [ 60.996584][ T5782] hsr_slave_1: entered promiscuous mode [ 61.024650][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.031785][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.039392][ T5786] bridge_slave_1: entered allmulticast mode [ 61.046753][ T5786] bridge_slave_1: entered promiscuous mode [ 61.074450][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.129804][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.152603][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.168400][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.177862][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.185401][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.192632][ T5785] bridge_slave_0: entered allmulticast mode [ 61.199214][ T5785] bridge_slave_0: entered promiscuous mode [ 61.244231][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.251372][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.258813][ T5785] bridge_slave_1: entered allmulticast mode [ 61.266192][ T5785] bridge_slave_1: entered promiscuous mode [ 61.275088][ T5787] team0: Port device team_slave_0 added [ 61.320278][ T5787] team0: Port device team_slave_1 added [ 61.352350][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.365017][ T5786] team0: Port device team_slave_0 added [ 61.376801][ T5786] team0: Port device team_slave_1 added [ 61.383257][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.390203][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.416791][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.429528][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.465880][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.472984][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.499399][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.540926][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.547917][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.573875][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.597098][ T5785] team0: Port device team_slave_0 added [ 61.630678][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.637722][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.663971][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.681349][ T5785] team0: Port device team_slave_1 added [ 61.698448][ T5787] hsr_slave_0: entered promiscuous mode [ 61.705153][ T5787] hsr_slave_1: entered promiscuous mode [ 61.711157][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.718951][ T5787] Cannot create hsr debugfs directory [ 61.789987][ T5786] hsr_slave_0: entered promiscuous mode [ 61.797800][ T5786] hsr_slave_1: entered promiscuous mode [ 61.803993][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.811535][ T5786] Cannot create hsr debugfs directory [ 61.817685][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.826364][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.852591][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.863800][ T50] Bluetooth: hci0: command tx timeout [ 61.865685][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.876591][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.902840][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.005048][ T5785] hsr_slave_0: entered promiscuous mode [ 62.012171][ T5785] hsr_slave_1: entered promiscuous mode [ 62.018240][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.025884][ T50] Bluetooth: hci2: command tx timeout [ 62.031732][ T5785] Cannot create hsr debugfs directory [ 62.032214][ T5784] Bluetooth: hci3: command tx timeout [ 62.042417][ T50] Bluetooth: hci1: command tx timeout [ 62.169052][ T5782] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.210264][ T5782] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.237871][ T5782] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.254721][ T5782] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.358805][ T5787] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.371834][ T5787] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.400277][ T5787] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.410823][ T5787] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.455772][ T5786] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.475444][ T5786] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.486632][ T5786] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.496137][ T5786] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.575418][ T5785] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.587103][ T5785] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.596953][ T5785] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.618329][ T5785] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.685010][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.737470][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.751144][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.775269][ T3453] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.782529][ T3453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.793063][ T3453] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.800141][ T3453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.845809][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.874399][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.881481][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.915836][ T2940] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.922949][ T2940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.955507][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.976667][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.026191][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.045827][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.078909][ T3453] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.086080][ T3453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.106799][ T3453] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.113942][ T3453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.141827][ T5787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.159920][ T3453] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.167076][ T3453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.185053][ T3453] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.192229][ T3453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.344034][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.458990][ T5782] veth0_vlan: entered promiscuous mode [ 63.491886][ T5782] veth1_vlan: entered promiscuous mode [ 63.545810][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.608679][ T5782] veth0_macvtap: entered promiscuous mode [ 63.656165][ T5782] veth1_macvtap: entered promiscuous mode [ 63.698694][ T5787] veth0_vlan: entered promiscuous mode [ 63.719845][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.732811][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.752617][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.768537][ T5782] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.777825][ T5782] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.787505][ T5782] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.797123][ T5782] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.825821][ T5787] veth1_vlan: entered promiscuous mode [ 63.859384][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.943016][ T50] Bluetooth: hci0: command tx timeout [ 63.966616][ T5786] veth0_vlan: entered promiscuous mode [ 63.991719][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.000781][ T5786] veth1_vlan: entered promiscuous mode [ 64.026727][ T5787] veth0_macvtap: entered promiscuous mode [ 64.033723][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.045392][ T5785] veth0_vlan: entered promiscuous mode [ 64.068314][ T5787] veth1_macvtap: entered promiscuous mode [ 64.091083][ T5786] veth0_macvtap: entered promiscuous mode [ 64.100125][ T5785] veth1_vlan: entered promiscuous mode [ 64.103183][ T50] Bluetooth: hci1: command tx timeout [ 64.106515][ T5784] Bluetooth: hci3: command tx timeout [ 64.110959][ T50] Bluetooth: hci2: command tx timeout [ 64.131050][ T5786] veth1_macvtap: entered promiscuous mode [ 64.146405][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.154338][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.170477][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.183851][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.196714][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.218737][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.236639][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.248534][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.260569][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.274615][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.285853][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.296842][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.308200][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.323704][ T5787] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.333131][ T5787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.342134][ T5787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.350832][ T5787] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.373097][ T5785] veth0_macvtap: entered promiscuous mode [ 64.384972][ T5785] veth1_macvtap: entered promiscuous mode [ 64.393213][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.404195][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.414131][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.424811][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.435650][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.446388][ T5786] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.455809][ T5786] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.464567][ T5786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.473667][ T5786] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.542311][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.557647][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.568685][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.579488][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.591309][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.601895][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.616240][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.970402][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.983240][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.995188][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.089916][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.102123][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.132478][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.154653][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.192390][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.200689][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.251743][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.275493][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.285571][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.297867][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.345587][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.360394][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.462142][ T3453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.470003][ T3453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.619772][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.664196][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.144541][ T50] Bluetooth: hci0: command tx timeout [ 66.192124][ T50] Bluetooth: hci3: command tx timeout [ 66.197548][ T50] Bluetooth: hci1: command tx timeout [ 66.203432][ T50] Bluetooth: hci2: command tx timeout [ 66.344103][ T3453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.361001][ T2940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.371044][ T2940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.373883][ T3453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.425841][ T5879] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 66.473676][ T5874] syz.1.6[5874]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 66.491984][ T2940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.524069][ T2940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.530728][ T5874] loop1: detected capacity change from 0 to 64 [ 66.681803][ T5884] loop2: detected capacity change from 0 to 64 [ 66.862659][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.098724][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.303529][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.311821][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.405866][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.508301][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.782379][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 68.532574][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 68.572098][ T5784] Bluetooth: hci0: command tx timeout [ 68.577534][ T5784] Bluetooth: hci2: command tx timeout [ 68.583063][ T5784] Bluetooth: hci1: command tx timeout [ 68.588468][ T5784] Bluetooth: hci3: command tx timeout [ 68.822849][ T5891] loop3: detected capacity change from 0 to 512 [ 68.916518][ T5895] loop1: detected capacity change from 0 to 4096 [ 68.934800][ T5891] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.952569][ T5895] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 68.964009][ T5891] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.996304][ T5891] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.115274][ T5895] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 69.121827][ T5895] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 69.304143][ T5904] loop2: detected capacity change from 0 to 1024 [ 69.312517][ T2916] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22. [ 69.320709][ T5895] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 69.350611][ T5895] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 69.379569][ T5895] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 69.424090][ T3453] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22. [ 69.488002][ T5904] hfsplus: xattr searching failed [ 69.567363][ T5879] loop3: detected capacity change from 0 to 8192 [ 69.590762][ T5879] FAT-fs (loop3): Unrecognized mount option "ÿÿÿÿ" or missing value [ 69.680764][ T5908] loop1: detected capacity change from 0 to 128 [ 69.812286][ T5833] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 70.765468][ T1324] kworker/u4:6: attempt to access beyond end of device [ 70.765468][ T1324] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 70.885025][ T5913] loop0: detected capacity change from 0 to 2048 [ 70.908602][ T5833] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 70.919203][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.954885][ T5833] usb 3-1: config 0 descriptor?? [ 71.001532][ T5833] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 71.002497][ T5915] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.173059][ T5833] gspca_sunplus: reg_w_riv err -71 [ 71.178288][ T5833] sunplus: probe of 3-1:0.0 failed with error -71 [ 71.205585][ T5833] usb 3-1: USB disconnect, device number 2 [ 71.475331][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.486187][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.974466][ T12] hfsplus: b-tree write err: -5, ino 3 [ 73.814314][ T5937] nfs: Unknown parameter '' [ 73.833672][ T5937] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18'. [ 74.222793][ T5938] netlink: 'syz.3.18': attribute type 2 has an invalid length. [ 74.250784][ T5938] netlink: 32 bytes leftover after parsing attributes in process `syz.3.18'. [ 74.555474][ T5924] loop2: detected capacity change from 0 to 131072 [ 74.601447][ T5924] F2FS-fs (loop2): invalid crc value [ 74.639471][ T5924] F2FS-fs (loop2): Found nat_bits in checkpoint [ 74.832574][ T5924] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 75.067366][ T5948] netlink: 80 bytes leftover after parsing attributes in process `syz.0.21'. [ 75.598153][ T5954] F2FS-fs (loop2): list inode (7) has corrupted xattr [ 76.012247][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.234573][ T5915] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 76.276544][ T5915] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 76.342980][ T5961] netlink: 'syz.0.25': attribute type 9 has an invalid length. [ 76.414978][ T5915] Remounting filesystem read-only [ 76.422496][ T23] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 76.449462][ T23] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 76.507295][ T23] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 76.640456][ T23] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 76.709676][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.033291][ T23] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 77.836634][ T5901] udevd[5901]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 77.987005][ T23] snd-usb-audio: probe of 4-1:27.0 failed with error -12 [ 79.292337][ T5919] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 79.347594][ T5919] NILFS (loop0): discard dirty page: offset=0, ino=18 [ 79.482206][ T5919] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 79.490188][ T5919] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 79.512103][ T5919] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 80.274626][ T5919] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 80.284225][ T5919] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 80.291359][ T5919] NILFS (loop0): discard dirty block: blocknr=18, size=1024 [ 80.301606][ T5919] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 80.347100][ T5919] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 80.356356][ T5919] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 80.377880][ T5919] NILFS (loop0): discard dirty page: offset=0, ino=12 [ 80.403648][ T5919] NILFS (loop0): discard dirty block: blocknr=17, size=1024 [ 80.421912][ T5919] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 80.448046][ T5919] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 80.461717][ T5919] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 80.532877][ T5919] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 80.546921][ T786] usb 4-1: USB disconnect, device number 2 [ 80.557018][ T5919] NILFS (loop0): discard dirty block: blocknr=35, size=1024 [ 80.568050][ T5919] NILFS (loop0): discard dirty block: blocknr=36, size=1024 [ 80.576352][ T5919] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 80.586951][ T5919] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 80.605981][ T5919] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 80.632886][ T28] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 80.640441][ T5919] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 80.705119][ T6001] ======================================================= [ 80.705119][ T6001] WARNING: The mand mount option has been deprecated and [ 80.705119][ T6001] and is ignored by this kernel. Remove the mand [ 80.705119][ T6001] option from the mount to silence this warning. [ 80.705119][ T6001] ======================================================= [ 80.741700][ T5919] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 80.763599][ T5919] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 80.789301][ T6001] 9pnet_fd: Insufficient options for proto=fd [ 80.798516][ T6003] netlink: 20 bytes leftover after parsing attributes in process `syz.0.36'. [ 80.813988][ T5919] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 80.843928][ T5919] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 80.850637][ T5919] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 80.858011][ T5919] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 80.866899][ T5919] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 80.875807][ T5919] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 80.884910][ T5919] NILFS (loop0): discard dirty page: offset=0, ino=4 [ 81.414261][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.473210][ T5919] NILFS (loop0): discard dirty block: blocknr=40, size=1024 [ 81.480810][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.496303][ T5919] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 81.511591][ T28] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 81.547789][ T5919] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 81.571956][ T28] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 81.644509][ T5919] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 81.654364][ T5919] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 81.661063][ T5919] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 81.669190][ T5919] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 81.676520][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.684658][ T5919] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 81.691956][ T5919] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 81.700883][ T5919] NILFS (loop0): discard dirty page: offset=65536, ino=3 [ 81.712847][ T1186] cfg80211: failed to load regulatory.db [ 81.720086][ T5919] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 81.730154][ T5919] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 81.739084][ T5919] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 81.749042][ T28] usb 3-1: config 0 descriptor?? [ 81.758432][ T5919] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 81.782699][ T5919] NILFS (loop0): discard dirty page: offset=98304, ino=3 [ 81.789742][ T5919] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 81.819640][ T5919] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 81.849460][ T5919] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 81.857248][ T6018] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 81.905537][ T5919] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 82.060624][ T5919] NILFS (loop0): discard dirty page: offset=131072, ino=3 [ 82.186316][ T5919] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 82.392607][ T28] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 82.403526][ T5919] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 83.504176][ T5919] NILFS (loop0): discard dirty block: blocknr=46, size=1024 [ 83.511539][ T5919] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 83.520668][ T5919] NILFS (loop0): discard dirty page: offset=196608, ino=3 [ 83.527831][ T5919] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 83.536827][ T5919] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 83.548063][ T5919] NILFS (loop0): discard dirty block: blocknr=49, size=1024 [ 83.551594][ T28] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 83.555616][ T5919] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 83.645620][ T28] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 86.022239][ T1186] usb 3-1: USB disconnect, device number 3 [ 89.702221][ T6079] Zero length message leads to an empty skb [ 91.173939][ T6096] UBIFS error (pid: 6096): cannot open "/dev/sg0", error -22 [ 95.632091][ T6135] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.057990][ T6147] netlink: 'syz.3.74': attribute type 2 has an invalid length. [ 97.115142][ T6147] netlink: 'syz.3.74': attribute type 2 has an invalid length. [ 97.624182][ T6157] overlayfs: overlapping lowerdir path [ 102.635842][ T6219] fuse: Bad value for 'fd' [ 103.364706][ T6221] affs: No valid root block on device nbd2 [ 103.668699][ T6230] syz_tun: entered allmulticast mode [ 103.687670][ T6229] syz_tun: left allmulticast mode [ 104.793659][ T6243] netlink: 20 bytes leftover after parsing attributes in process `syz.1.98'. [ 105.580029][ T6243] : renamed from bridge_slave_0 (while UP) [ 106.557045][ T6254] netlink: 204 bytes leftover after parsing attributes in process `syz.2.103'. [ 109.631889][ T6272] overlayfs: failed to resolve './file0': -2 [ 111.251524][ T6295] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.677481][ T6323] syz.0.126 (6323) used greatest stack depth: 17960 bytes left [ 115.769031][ T50] Bluetooth: hci1: command tx timeout [ 115.810627][ T1186] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 116.282191][ T1186] usb 2-1: Using ep0 maxpacket: 8 [ 116.351904][ T1186] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 116.382213][ T1186] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.509248][ T1186] usb 2-1: Product: syz [ 117.382682][ T1186] usb 2-1: Manufacturer: syz [ 117.387289][ T1186] usb 2-1: SerialNumber: syz [ 117.405330][ T1186] usb 2-1: config 0 descriptor?? [ 117.641054][ T1186] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 118.212442][ T6377] netlink: 'syz.3.142': attribute type 4 has an invalid length. [ 118.660587][ T1186] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 118.713378][ T1186] usb 2-1: USB disconnect, device number 2 [ 119.437758][ T6408] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bond, syncid = 3, id = 0 [ 121.597680][ T6426] sctp: [Deprecated]: syz.0.161 (pid 6426) Use of int in max_burst socket option deprecated. [ 121.597680][ T6426] Use struct sctp_assoc_value instead [ 124.522293][ T1186] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 124.726052][ T1186] usb 3-1: Using ep0 maxpacket: 32 [ 124.740949][ T1186] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 124.755417][ T1186] usb 3-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 124.764962][ T6463] nvme_fabrics: unknown parameter or missing value 'C' in ctrl creation request [ 124.774903][ T1186] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.791496][ T1186] usb 3-1: config 0 descriptor?? [ 125.441464][ T1186] usb 3-1: USB disconnect, device number 4 [ 125.494355][ T6470] binder: 6469:6470 unknown command 0 [ 125.500500][ T6470] binder: 6469:6470 ioctl c0306201 200000000080 returned -22 [ 127.264805][ T6490] 9pnet_fd: Insufficient options for proto=fd [ 129.447509][ T6506] program syz.1.187 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.515004][ T6528] overlayfs: failed to clone upperpath [ 131.980748][ T6539] batman_adv: batadv0: Adding interface: gretap1 [ 132.654382][ T6539] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.717391][ T6539] batman_adv: batadv0: Interface activated: gretap1 [ 132.928919][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.956139][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.971951][ T6549] pim6reg1: entered promiscuous mode [ 132.983744][ T6549] pim6reg1: entered allmulticast mode [ 133.731732][ T6559] process 'syz.2.205' launched '/dev/fd/5' with NULL argv: empty string added [ 136.685120][ T6588] syz.1.213: attempt to access beyond end of device [ 136.685120][ T6588] nbd1: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 136.908663][ T6597] warning: `syz.3.217' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 137.562265][ T6607] netlink: 24 bytes leftover after parsing attributes in process `syz.1.219'. [ 140.445258][ T6622] netlink: 148 bytes leftover after parsing attributes in process `syz.1.220'. [ 140.454501][ T6622] netlink: 56 bytes leftover after parsing attributes in process `syz.1.220'. [ 140.463632][ T6622] netlink: 'syz.1.220': attribute type 1 has an invalid length. [ 140.907419][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.225'. [ 140.950435][ T6626] syz_tun: entered promiscuous mode [ 141.252385][ T6635] overlayfs: failed to clone lowerpath [ 142.031176][ T6645] 9pnet_fd: Insufficient options for proto=fd [ 142.312169][ T5982] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 143.052432][ T5982] usb 4-1: config 0 has no interfaces? [ 143.083919][ T5982] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 143.096900][ T5982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.105664][ T5982] usb 4-1: Product: syz [ 143.109961][ T5982] usb 4-1: Manufacturer: syz [ 143.132102][ T5982] usb 4-1: SerialNumber: syz [ 143.142539][ T5982] usb 4-1: config 0 descriptor?? [ 143.435121][ T6658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.234'. [ 144.302886][ T6641] veth0_vlan: left promiscuous mode [ 144.310344][ T6641] veth0_vlan: entered promiscuous mode [ 144.322388][ T6642] tipc: Started in network mode [ 144.327408][ T6642] tipc: Node identity aaaaaaaaaa34, cluster identity 4711 [ 144.336279][ T6642] tipc: Enabled bearer , priority 10 [ 144.347145][ T9] usb 4-1: USB disconnect, device number 3 [ 145.453725][ T5982] tipc: Node number set to 10398378 [ 147.530498][ T3518] tipc: Resetting bearer [ 147.676380][ T3518] tipc: Disabling bearer [ 147.925251][ T6713] netlink: 'syz.3.250': attribute type 12 has an invalid length. [ 149.944742][ T6740] overlayfs: failed to clone upperpath [ 150.350791][ T6736] syz.2.257 (6736): drop_caches: 2 [ 150.577840][ T6754] overlayfs: missing 'lowerdir' [ 150.613296][ T6754] overlayfs: failed to clone upperpath [ 150.652976][ T5982] IPVS: starting estimator thread 0... [ 150.802725][ T6755] IPVS: using max 18 ests per chain, 43200 per kthread [ 156.447425][ T6812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.287'. [ 156.472507][ T6812] vlan0: entered promiscuous mode [ 156.477561][ T6812] bond0: entered promiscuous mode [ 156.482991][ T6812] bond_slave_0: entered promiscuous mode [ 156.488742][ T6812] bond_slave_1: entered promiscuous mode [ 157.812929][ T6828] Driver unsupported XDP return value 0 on prog (id 53) dev N/A, expect packet loss! [ 159.204498][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 159.653652][ T8] usb 2-1: config index 0 descriptor too short (expected 7768, got 18) [ 159.736037][ T8] usb 2-1: config 0 has an invalid interface number: 97 but max is 0 [ 159.745121][ T8] usb 2-1: config 0 has no interface number 0 [ 159.751721][ T8] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 159.761606][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.781094][ T8] usb 2-1: config 0 descriptor?? [ 159.818661][ T8] ftdi_sio 2-1:0.97: FTDI USB Serial Device converter detected [ 159.846312][ T8] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 159.977999][ T6848] virtio-fs: tag not found [ 162.112185][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.299'. [ 162.134713][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.299'. [ 162.150849][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.299'. [ 162.166875][ T6860] syz.2.300 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 162.174095][ T8] usb 2-1: USB disconnect, device number 3 [ 162.187732][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.299'. [ 162.217714][ T8] ftdi_sio 2-1:0.97: device disconnected [ 162.244046][ T6860] Bluetooth: MGMT ver 1.22 [ 162.372094][ T5819] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 163.382647][ T5819] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.400735][ T5819] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.424137][ T5819] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 163.452087][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 163.461104][ T5819] usb 4-1: SerialNumber: syz [ 164.225647][ T5819] usb 4-1: 0:2 : does not exist [ 164.322123][ T5819] usb 4-1: unit 5 not found! [ 164.336948][ T6890] netlink: 52 bytes leftover after parsing attributes in process `syz.1.312'. [ 164.343221][ T5784] Bluetooth: hci2: command 0x0401 tx timeout [ 164.351898][ T50] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 164.379438][ T5819] usb 4-1: USB disconnect, device number 4 [ 164.489045][ T6890] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.497273][ T6890] bridge0: port 1() entered disabled state [ 164.508439][ T5901] udevd[5901]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 164.832701][ T6904] mac80211_hwsim hwsim8 4: renamed from wlan1 (while UP) [ 166.352674][ T5872] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 166.502064][ T28] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 166.642602][ T5872] usb 3-1: unable to get BOS descriptor or descriptor too short [ 166.673037][ T5872] usb 3-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 166.714207][ T5872] usb 3-1: config 66 has 1 interface, different from the descriptor's value: 2 [ 166.758932][ T28] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 166.784859][ T5872] usb 3-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 166.804483][ T28] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 166.834847][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.872759][ T28] usb 2-1: config 0 interface 0 has no altsetting 0 [ 166.902067][ T5872] usb 3-1: Product: syz [ 166.906253][ T5872] usb 3-1: Manufacturer: syz [ 166.910851][ T5872] usb 3-1: SerialNumber: syz [ 166.933154][ T28] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 166.992449][ T28] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 167.000638][ T28] usb 2-1: Product: syz [ 167.066077][ T28] usb 2-1: Manufacturer: syz [ 167.070720][ T28] usb 2-1: SerialNumber: syz [ 167.125805][ T28] usb 2-1: config 0 descriptor?? [ 167.165258][ T28] hub 2-1:0.0: bad descriptor, ignoring hub [ 167.171210][ T28] hub: probe of 2-1:0.0 failed with error -5 [ 167.229633][ T5872] ati_remote2 3-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint [ 167.244968][ T28] usb 2-1: selecting invalid altsetting 0 [ 167.296707][ T5872] usb 3-1: USB disconnect, device number 5 [ 167.422599][ T28] usb 2-1: USB disconnect, device number 4 [ 167.539822][ T5775] udevd[5775]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 167.967324][ T6948] netlink: 'syz.1.333': attribute type 1 has an invalid length. [ 168.052299][ T6948] netlink: 244 bytes leftover after parsing attributes in process `syz.1.333'. [ 168.215749][ T6948] NCSI netlink: No device for ifindex 0 [ 169.696151][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.337'. [ 170.842152][ T9] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 171.240671][ T9] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 171.294244][ T9] usb 4-1: config 0 has no interface number 0 [ 171.294938][ T9] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 171.295079][ T9] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 171.295368][ T9] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 171.295422][ T9] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 171.295545][ T9] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 171.295581][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.432736][ T9] usb 4-1: config 0 descriptor?? [ 171.437237][ T6967] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 171.437429][ T6967] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 171.439323][ T9] ldusb 4-1:0.55: Interrupt in endpoint not found [ 172.655023][ T6977] tty tty4: ldisc open failed (-12), clearing slot 3 [ 173.075886][ T7002] vivid-002: ================= START STATUS ================= [ 173.087964][ T7002] vivid-002: Radio HW Seek Mode: Bounded [ 173.104431][ T7002] vivid-002: Radio Programmable HW Seek: false [ 173.129780][ T7002] vivid-002: RDS Rx I/O Mode: Block I/O [ 173.147047][ T7002] vivid-002: Generate RBDS Instead of RDS: false [ 173.156640][ T7002] vivid-002: RDS Reception: true [ 173.166066][ T7002] vivid-002: RDS Program Type: 0 inactive [ 173.213945][ T7002] vivid-002: RDS PS Name: inactive [ 173.222048][ T7002] vivid-002: RDS Radio Text: inactive [ 173.334471][ T7002] vivid-002: RDS Traffic Announcement: false inactive [ 173.407630][ T7002] vivid-002: RDS Traffic Program: false inactive [ 173.417380][ T7002] vivid-002: RDS Music: false inactive [ 173.424049][ T7002] vivid-002: ================== END STATUS ================== [ 173.662753][ T9] usb 4-1: USB disconnect, device number 5 [ 174.299523][ T7020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.368279][ T7020] random: crng reseeded on system resumption [ 177.092460][ T5872] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 177.893497][ T5872] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 177.915591][ T5872] usb 3-1: config 0 has no interface number 0 [ 177.950525][ T5872] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 177.980121][ T5872] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 178.007654][ T5872] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 178.059537][ T5872] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 178.089993][ T5872] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 178.110230][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.157941][ T5872] usb 3-1: config 0 descriptor?? [ 178.307330][ T7045] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 178.314978][ T7045] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 178.325338][ T5872] ldusb 3-1:0.55: Interrupt in endpoint not found [ 178.382361][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 178.573469][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 178.655521][ T9] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 178.702411][ T5872] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 178.738577][ T9] usb 4-1: config 0 has no interface number 0 [ 178.750301][ T9] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 178.767836][ T9] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 178.777609][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.828798][ T9] usb 4-1: Product: syz [ 179.411543][ T9] usb 4-1: Manufacturer: syz [ 179.423624][ T9] usb 4-1: SerialNumber: syz [ 179.437919][ T9] usb 4-1: config 0 descriptor?? [ 179.486923][ T5872] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.498396][ T5872] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 179.509830][ T5872] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 179.533169][ T5872] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 179.543089][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 179.551811][ T5872] usb 2-1: Product: syz [ 179.557066][ T5872] usb 2-1: Manufacturer: syz [ 179.562180][ T5872] usb 2-1: SerialNumber: syz [ 179.577636][ T5872] usb 2-1: config 0 descriptor?? [ 179.619586][ T5872] radio-si470x 2-1:0.0: could not find interrupt in endpoint [ 179.627409][ T5872] radio-si470x: probe of 2-1:0.0 failed with error -5 [ 179.637487][ T5872] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 179.661741][ T9] usbtouchscreen 4-1:0.214: Failed to read FW rev: 0 [ 179.669437][ T9] usbtouchscreen: probe of 4-1:0.214 failed with error -5 [ 180.524355][ T5982] usb 3-1: USB disconnect, device number 6 [ 181.144333][ T5982] usb 4-1: USB disconnect, device number 6 [ 181.184723][ T9] usb 2-1: USB disconnect, device number 5 [ 182.225752][ T7102] netlink: 'syz.3.379': attribute type 7 has an invalid length. [ 182.582410][ T5982] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 182.699464][ T7102] netlink: 44 bytes leftover after parsing attributes in process `syz.3.379'. [ 182.806331][ T5982] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.817523][ T5982] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.829350][ T5982] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 182.838470][ T5982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 182.847055][ T5982] usb 2-1: SerialNumber: syz [ 183.757158][ T5982] usb 2-1: 0:2 : does not exist [ 183.786367][ T5982] usb 2-1: unit 5 not found! [ 183.828127][ T5982] usb 2-1: USB disconnect, device number 6 [ 183.879581][ T5901] udevd[5901]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 183.959807][ T7129] syz.3.388 uses obsolete (PF_INET,SOCK_PACKET) [ 183.968315][ T7129] syz.3.388: attempt to access beyond end of device [ 183.968315][ T7129] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 184.276846][ T7139] capability: warning: `syz.0.391' uses deprecated v2 capabilities in a way that may be insecure [ 184.362172][ T1186] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 184.512151][ T23] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 184.555021][ T1186] usb 3-1: config 0 has an invalid interface number: 30 but max is 0 [ 184.618162][ T1186] usb 3-1: config 0 has no interface number 0 [ 184.655983][ T1186] usb 3-1: New USB device found, idVendor=2040, idProduct=c000, bcdDevice=ae.86 [ 184.682912][ T1186] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.715961][ T1186] usb 3-1: config 0 descriptor?? [ 184.733298][ T1186] smsusb:smsusb_probe: board id=8, interface number 30 [ 184.816952][ T23] usb 2-1: config 27 has an invalid descriptor of length 48, skipping remainder of the config [ 184.827971][ T23] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 48, changing to 9 [ 184.843419][ T23] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 184.863641][ T23] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 184.884444][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.919372][ T23] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 184.939537][ T23] usb 2-1: invalid MIDI out EP 0 [ 184.962560][ T1186] usb 3-1: USB disconnect, device number 7 [ 185.114696][ T23] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 185.564032][ T7154] geneve2: entered promiscuous mode [ 186.032076][ T5872] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 186.190845][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 186.197432][ T5794] Bluetooth: hci1: command 0x0406 tx timeout [ 186.204092][ T5790] Bluetooth: hci2: command 0x0401 tx timeout [ 186.213568][ T5784] Bluetooth: hci0: command 0x0406 tx timeout [ 186.272087][ T5872] usb 3-1: Using ep0 maxpacket: 16 [ 186.279006][ T5872] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 186.296992][ T5872] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 186.306777][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.316076][ T5872] usb 3-1: Product: syz [ 186.320508][ T5872] usb 3-1: Manufacturer: syz [ 186.325514][ T5872] usb 3-1: SerialNumber: syz [ 186.342633][ T5872] usb 3-1: config 0 descriptor?? [ 187.554324][ T5872] usb 2-1: USB disconnect, device number 7 [ 187.570290][ T7175] netlink: 24 bytes leftover after parsing attributes in process `syz.0.399'. [ 187.584385][ T7133] delete_channel: no stack [ 187.589701][ T7175] netlink: 24 bytes leftover after parsing attributes in process `syz.0.399'. [ 189.270563][ T1186] usb 3-1: USB disconnect, device number 8 [ 190.412301][ T7197] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 191.723085][ T7228] netlink: 'syz.0.416': attribute type 21 has an invalid length. [ 191.737718][ T7228] netlink: 156 bytes leftover after parsing attributes in process `syz.0.416'. [ 191.970525][ T7233] netlink: 'syz.1.419': attribute type 7 has an invalid length. [ 191.978407][ T7233] netlink: 44 bytes leftover after parsing attributes in process `syz.1.419'. [ 192.344980][ T7234] netlink: 'syz.0.416': attribute type 21 has an invalid length. [ 192.374752][ T7234] netlink: 156 bytes leftover after parsing attributes in process `syz.0.416'. [ 192.674416][ T7239] Invalid ELF header magic: != ELF [ 193.510498][ T7247] mmap: syz.2.422 (7247) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 194.358374][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.364796][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.805057][ T7271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.651030][ T7282] (null): rxe_set_mtu: Set mtu to 256 [ 195.665642][ T7282] vxcan1 speed is unknown, defaulting to 1000 [ 195.708167][ T7282] vxcan1 speed is unknown, defaulting to 1000 [ 195.736849][ T7282] vxcan1 speed is unknown, defaulting to 1000 [ 196.177360][ T7282] infiniband syz2: set active [ 196.182431][ T7282] infiniband syz2: added vxcan1 [ 196.197824][ T9] vxcan1 speed is unknown, defaulting to 1000 [ 196.236380][ T7282] RDS/IB: syz2: added [ 196.240817][ T7282] smc: adding ib device syz2 with port count 1 [ 196.247247][ T7282] smc: ib device syz2 port 1 has pnetid [ 196.256076][ T7282] vxcan1 speed is unknown, defaulting to 1000 [ 196.336846][ T7282] vxcan1 speed is unknown, defaulting to 1000 [ 196.416271][ T7282] vxcan1 speed is unknown, defaulting to 1000 [ 196.496425][ T7282] vxcan1 speed is unknown, defaulting to 1000 [ 196.578493][ T9] vxcan1 speed is unknown, defaulting to 1000 [ 196.742076][ T5819] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 196.972826][ T5819] usb 2-1: Using ep0 maxpacket: 8 [ 197.208619][ T7289] kvm: pic: non byte write [ 197.215668][ T7289] kvm: pic: non byte write [ 197.224084][ T7289] kvm: pic: single mode not supported [ 197.224220][ T7289] kvm: pic: level sensitive irq not supported [ 197.235041][ T7289] kvm: pic: non byte write [ 197.248274][ T7289] kvm: pic: non byte write [ 197.254425][ T7289] kvm: pic: level sensitive irq not supported [ 197.255856][ T7289] kvm: pic: non byte write [ 197.268862][ T7289] kvm: pic: non byte write [ 198.531698][ T5819] usb 2-1: unable to get BOS descriptor or descriptor too short [ 198.687359][ T23] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 198.752362][ T5819] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 198.845844][ T5819] usb 2-1: can't read configurations, error -71 [ 198.954890][ T23] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 198.964664][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.994936][ T23] usb 4-1: config 0 descriptor?? [ 199.025498][ T23] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 199.903983][ T23] usb 4-1: USB disconnect, device number 7 [ 202.622179][ T7346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.393060][ T7346] random: crng reseeded on system resumption [ 208.087251][ T7410] blktrace: Concurrent blktraces are not allowed on loop6 [ 210.198623][ T7439] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 210.205423][ T7439] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 210.254830][ T7439] vhci_hcd vhci_hcd.0: Device attached [ 210.295733][ T7443] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(7) [ 210.302269][ T7443] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 210.516283][ T7443] vhci_hcd vhci_hcd.0: Device attached [ 210.539512][ T7448] vhci_hcd: connection closed [ 210.548588][ T7440] vhci_hcd: connection closed [ 210.553397][ T3453] vhci_hcd: stop threads [ 210.593852][ T3453] vhci_hcd: release socket [ 210.599299][ T3453] vhci_hcd: disconnect device [ 210.605022][ T3453] vhci_hcd: stop threads [ 210.611247][ T3453] vhci_hcd: release socket [ 210.625704][ T3453] vhci_hcd: disconnect device [ 210.662263][ T23] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 210.707061][ T23] usb 37-1: enqueue for inactive port 0 [ 210.856596][ T23] vhci_hcd: vhci_device speed not set [ 213.059868][ T7476] autofs4:pid:7476:autofs_fill_super: called with bogus options [ 214.284113][ T7482] binder: 7477:7482 unknown command 1074553619 [ 214.290447][ T7482] binder: 7477:7482 ioctl c0306201 200000000540 returned -22 [ 216.368793][ T7513] kAFS: No cell specified [ 218.177689][ T7524] vlan0: entered allmulticast mode [ 218.183882][ T7524] veth0_to_bond: entered allmulticast mode [ 219.310356][ T7533] netlink: 48 bytes leftover after parsing attributes in process `syz.0.514'. [ 220.483301][ T7570] netlink: 68 bytes leftover after parsing attributes in process `syz.1.520'. [ 222.128493][ T7621] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 222.347672][ T7631] program syz.3.527 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 224.032771][ T7643] vxcan1 speed is unknown, defaulting to 1000 [ 226.025900][ T7661] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 226.523036][ T7669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.538'. [ 226.532286][ T7669] netlink: set zone limit has 8 unknown bytes [ 226.662389][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 226.853864][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.883712][ T9] usb 4-1: config 0 has no interfaces? [ 226.889726][ T9] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 226.899695][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.920488][ T9] usb 4-1: config 0 descriptor?? [ 227.671302][ T9] usb 4-1: USB disconnect, device number 8 [ 230.117821][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.550'. [ 233.400946][ T7737] netlink: 16 bytes leftover after parsing attributes in process `syz.1.555'. [ 234.873752][ T5819] IPVS: starting estimator thread 0... [ 234.992318][ T7755] IPVS: using max 34 ests per chain, 81600 per kthread [ 240.852218][ T7825] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 240.858774][ T7825] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 240.867557][ T7825] vhci_hcd vhci_hcd.0: Device attached [ 240.960849][ T7825] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 241.020274][ T7825] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 241.065457][ T7828] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(9) [ 241.066555][ T7825] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 241.071975][ T7828] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 241.091342][ T7828] vhci_hcd vhci_hcd.0: Device attached [ 241.245939][ T7829] vhci_hcd: connection closed [ 241.246162][ T7586] vhci_hcd: stop threads [ 241.258094][ T7826] vhci_hcd: connection closed [ 241.258690][ T7586] vhci_hcd: release socket [ 241.275424][ T7586] vhci_hcd: disconnect device [ 241.286328][ T7586] vhci_hcd: stop threads [ 241.290660][ T7586] vhci_hcd: release socket [ 241.297504][ T7586] vhci_hcd: disconnect device [ 241.342169][ T5819] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 241.349638][ T5819] usb 39-1: enqueue for inactive port 0 [ 241.432219][ T5819] vhci_hcd: vhci_device speed not set [ 243.224591][ T7857] netlink: 16 bytes leftover after parsing attributes in process `syz.2.586'. [ 243.225824][ T7856] netlink: 40 bytes leftover after parsing attributes in process `syz.3.583'. [ 244.525656][ T7866] netlink: 32 bytes leftover after parsing attributes in process `syz.0.589'. [ 246.833648][ T7891] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 246.842457][ T7891] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 246.850985][ T7891] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 249.849675][ T7841] Set syz1 is full, maxelem 65536 reached [ 250.193650][ T7912] overlayfs: failed to resolve './file0': -2 [ 251.211946][ C0] sched: RT throttling activated [ 252.410583][ T7924] netlink: zone id is out of range [ 253.256211][ T7942] trusted_key: syz.2.611 sent an empty control message without MSG_MORE. [ 255.787421][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.799838][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.405889][ T7995] netlink: 'syz.1.625': attribute type 4 has an invalid length. [ 258.977801][ T8000] netlink: 'syz.0.627': attribute type 12 has an invalid length. [ 260.070093][ T8007] netlink: 'syz.0.629': attribute type 1 has an invalid length. [ 260.190646][ T8015] overlayfs: failed to clone upperpath [ 260.201040][ T8007] bond1: entered promiscuous mode [ 260.235578][ T8007] 8021q: adding VLAN 0 to HW filter on device bond1 [ 263.180525][ T8043] ksmbd: Unknown IPC event: 4, ignore. [ 263.734357][ T23] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 264.582065][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 264.613116][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 264.643629][ T23] usb 4-1: config 4 interface 0 has no altsetting 0 [ 264.792642][ T23] usb 4-1: string descriptor 0 read error: -22 [ 264.798891][ T23] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 264.809433][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.340655][ T23] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 265.615219][ T23] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 266.292521][ T23] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 266.300082][ T23] usb 4-1: media controller created [ 266.405169][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 266.497978][ T23] zl10353_read_register: readreg error (reg=127, ret==0) [ 266.573197][ T23] usb 4-1: USB disconnect, device number 9 [ 272.990170][ T8132] syz2: rxe_newlink: already configured on vxcan1 [ 273.784343][ T8133] vxcan1 speed is unknown, defaulting to 1000 [ 274.123330][ T8137] netlink: 56 bytes leftover after parsing attributes in process `syz.0.667'. [ 274.250680][ T27] audit: type=1326 audit(2000000068.276:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8143 comm="syz.0.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb3b8eba9 code=0x7ffc0000 [ 274.325181][ T27] audit: type=1326 audit(2000000068.326:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8143 comm="syz.0.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb3b8eba9 code=0x7ffc0000 [ 274.448644][ T27] audit: type=1326 audit(2000000068.366:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8143 comm="syz.0.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f5cb3b8eba9 code=0x7ffc0000 [ 274.448686][ T27] audit: type=1326 audit(2000000068.366:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8143 comm="syz.0.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb3b8eba9 code=0x7ffc0000 [ 274.448721][ T27] audit: type=1326 audit(2000000068.366:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8143 comm="syz.0.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb3b8eba9 code=0x7ffc0000 [ 274.612955][ C0] vkms_vblank_simulate: vblank timer overrun [ 274.645141][ C0] vkms_vblank_simulate: vblank timer overrun [ 276.541835][ T8171] syz.3.676: attempt to access beyond end of device [ 276.541835][ T8171] nbd3: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 280.982186][ T8189] netlink: 24 bytes leftover after parsing attributes in process `syz.1.682'. [ 284.069658][ T8201] netlink: 36 bytes leftover after parsing attributes in process `syz.1.686'. [ 285.812470][ T8222] tipc: Started in network mode [ 285.842021][ T8222] tipc: Node identity 5a2efc05b3bd, cluster identity 4711 [ 285.872997][ T8222] tipc: Enabled bearer , priority 0 [ 285.890139][ T8222] syzkaller0: entered promiscuous mode [ 285.896616][ T8222] syzkaller0: entered allmulticast mode [ 285.951833][ T8222] tipc: Resetting bearer [ 285.968284][ T8221] tipc: Resetting bearer [ 286.064077][ T8221] tipc: Disabling bearer [ 286.438815][ T8230] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 289.502109][ T5774] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 289.714011][ T5774] usb 4-1: config 0 has an invalid interface number: 25 but max is 0 [ 289.731980][ T5774] usb 4-1: config 0 has no interface number 0 [ 289.741855][ T5774] usb 4-1: too many endpoints for config 0 interface 25 altsetting 205: 246, using maximum allowed: 30 [ 289.778401][ T5774] usb 4-1: config 0 interface 25 altsetting 205 has 0 endpoint descriptors, different from the interface descriptor's value: 246 [ 289.874129][ T5774] usb 4-1: config 0 interface 25 has no altsetting 0 [ 289.880884][ T5774] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 289.896802][ T5774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.054272][ T5774] usb 4-1: config 0 descriptor?? [ 290.862345][ T8264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.879188][ T8264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.209395][ T5774] usb 4-1: string descriptor 0 read error: -71 [ 291.217858][ T5774] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 291.269151][ T5774] gp8psk: usb in 128 operation failed. [ 291.294789][ T5774] gp8psk: usb in 137 operation failed. [ 291.306498][ T5774] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 291.362765][ T5774] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 291.371403][ T5774] usb 4-1: media controller created [ 291.455664][ T5774] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 291.509406][ T5774] gp8psk_fe: Frontend attached [ 291.526960][ T5774] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 291.598819][ T5774] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 291.877683][ T5774] gp8psk: usb in 138 operation failed. [ 292.035683][ T5774] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 292.189858][ T5774] gp8psk: found Genpix USB device pID = 203 (hex) [ 292.427006][ T5774] usb 4-1: USB disconnect, device number 10 [ 292.831768][ T5774] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 294.426536][ T8301] loop5: detected capacity change from 0 to 7 [ 294.745060][ T8068] Dev loop5: unable to read RDB block 7 [ 294.751168][ T8068] loop5: AHDI p1 p2 [ 294.759676][ T8068] loop5: partition table partially beyond EOD, truncated [ 294.773513][ T8068] loop5: p1 start 1702000233 is beyond EOD, truncated [ 294.894371][ T8301] Dev loop5: unable to read RDB block 7 [ 294.901819][ T8301] loop5: AHDI p1 p2 [ 294.910288][ T8301] loop5: partition table partially beyond EOD, truncated [ 294.922790][ T8301] loop5: p1 start 1702000233 is beyond EOD, truncated [ 298.526929][ T8340] netlink: 'syz.0.723': attribute type 1 has an invalid length. [ 298.669984][ T8340] 8021q: adding VLAN 0 to HW filter on device bond2 [ 298.702638][ T8343] bond2: (slave ip6erspan0): making interface the new active one [ 298.713821][ T8343] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 300.790149][ T8374] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 300.797756][ T8374] IPv6: NLM_F_CREATE should be set when creating new route [ 300.807812][ T8374] lo: entered allmulticast mode [ 300.879043][ T8374] tunl0: entered allmulticast mode [ 301.045937][ T8374] gre0: entered allmulticast mode [ 301.742515][ T8374] gretap0: entered allmulticast mode [ 301.843798][ T8374] erspan0: entered allmulticast mode [ 301.884578][ T8374] ip_vti0: entered allmulticast mode [ 301.915180][ T8374] ip6_vti0: entered allmulticast mode [ 301.957962][ T8374] sit0: entered allmulticast mode [ 301.984679][ T8374] ip6tnl0: entered allmulticast mode [ 302.006789][ T8374] ip6gre0: entered allmulticast mode [ 302.021868][ T8374] syz_tun: entered allmulticast mode [ 302.031761][ T8374] ip6gretap0: entered allmulticast mode [ 302.055839][ T8374] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.063899][ T8374] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.071788][ T8374] bridge0: entered allmulticast mode [ 302.103212][ T8374] vcan0: entered allmulticast mode [ 302.128207][ T8374] bond0: entered allmulticast mode [ 302.133362][ T8374] bond_slave_0: entered allmulticast mode [ 302.139066][ T8374] bond_slave_1: entered allmulticast mode [ 302.208158][ T8374] team0: entered allmulticast mode [ 302.213672][ T8374] team_slave_0: entered allmulticast mode [ 302.219378][ T8374] team_slave_1: entered allmulticast mode [ 302.246174][ T8374] dummy0: entered allmulticast mode [ 302.291141][ T8374] nlmon0: entered allmulticast mode [ 302.297879][ T8374] caif0: entered allmulticast mode [ 302.345835][ T8374] batadv0: entered allmulticast mode [ 302.372254][ T8374] vxcan0: entered allmulticast mode [ 302.392975][ T8374] vxcan1: entered allmulticast mode [ 302.405179][ T8374] veth0: entered allmulticast mode [ 302.432506][ T8374] veth1: entered allmulticast mode [ 302.458512][ T5819] Process accounting resumed [ 302.472742][ T8374] wg0: entered allmulticast mode [ 302.498975][ T8374] wg1: entered allmulticast mode [ 302.530259][ T8374] wg2: entered allmulticast mode [ 302.570039][ T8374] veth0_to_bridge: entered allmulticast mode [ 302.639278][ T8374] veth1_to_bridge: entered allmulticast mode [ 302.802384][ T8374] veth0_to_bond: entered allmulticast mode [ 303.485117][ T5819] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 303.634494][ T8374] veth1_to_bond: entered allmulticast mode [ 303.669035][ T8374] veth0_to_team: entered allmulticast mode [ 303.695442][ T5819] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 303.707993][ T8374] veth1_to_team: entered allmulticast mode [ 303.718945][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.729640][ T5819] usb 4-1: Product: syz [ 303.846553][ T8374] veth0_to_batadv: entered allmulticast mode [ 303.855072][ T8374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.872682][ T5819] usb 4-1: Manufacturer: syz [ 303.877613][ T5819] usb 4-1: SerialNumber: syz [ 303.878255][ T8374] batadv_slave_0: entered allmulticast mode [ 304.636548][ T8374] veth1_to_batadv: entered allmulticast mode [ 304.655792][ T8374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.664832][ T5819] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 304.682796][ T8374] batadv_slave_1: entered allmulticast mode [ 304.713488][ T8374] xfrm0: entered allmulticast mode [ 304.742786][ T8374] veth0_to_hsr: entered allmulticast mode [ 304.777582][ T8374] hsr_slave_0: entered allmulticast mode [ 304.793054][ T8] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 304.977618][ T8374] veth1_to_hsr: entered allmulticast mode [ 305.000689][ T8374] hsr_slave_1: entered allmulticast mode [ 305.018772][ T8374] hsr0: entered allmulticast mode [ 305.455559][ T5819] usb 4-1: USB disconnect, device number 11 [ 305.489424][ T8374] veth1_virt_wifi: entered allmulticast mode [ 305.512726][ T8374] veth0_virt_wifi: entered allmulticast mode [ 305.520390][ T8374] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 305.541103][ T8374] veth1_vlan: entered allmulticast mode [ 305.567012][ T8374] veth0_vlan: entered allmulticast mode [ 305.707972][ T8374] vlan0: entered allmulticast mode [ 305.713217][ T8374] vlan1: entered allmulticast mode [ 305.730208][ T8374] macvlan0: entered allmulticast mode [ 306.380138][ T8374] macvlan1: entered allmulticast mode [ 306.387855][ T8374] ipvlan0: entered allmulticast mode [ 306.393272][ T8374] ipvlan1: entered allmulticast mode [ 306.398886][ T8] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 306.467110][ T8374] veth1_macvtap: entered allmulticast mode [ 306.473955][ T8] ath9k_htc: Failed to initialize the device [ 306.491500][ T5819] usb 4-1: ath9k_htc: USB layer deinitialized [ 306.521757][ T8374] veth0_macvtap: entered allmulticast mode [ 306.548038][ T8374] macvtap0: entered allmulticast mode [ 306.572569][ T8374] macsec0: entered allmulticast mode [ 306.598640][ T8374] geneve0: entered allmulticast mode [ 306.632692][ T8374] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.641551][ T8374] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.650455][ T8374] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.659336][ T8374] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.672361][ T8374] geneve1: entered allmulticast mode [ 306.707312][ T8374] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 306.726564][ T8374] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 306.848717][ T8374] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 306.877356][ T8374] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 307.625535][ T8374] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 307.670707][ T8374] mac80211_hwsim hwsim8 4: entered allmulticast mode [ 307.679307][ T8374] syztnl1: entered allmulticast mode [ 307.684793][ T8374] syztnl0: entered allmulticast mode [ 307.889780][ T8424] netlink: 24 bytes leftover after parsing attributes in process `syz.1.744'. [ 307.982372][ T8429] netlink: 16 bytes leftover after parsing attributes in process `syz.2.745'. [ 310.029949][ T8441] netlink: 16 bytes leftover after parsing attributes in process `syz.3.748'. [ 311.603605][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 312.460430][ T9] usb 2-1: config 0 has an invalid interface number: 25 but max is 0 [ 312.482035][ T9] usb 2-1: config 0 has no interface number 0 [ 312.488229][ T9] usb 2-1: too many endpoints for config 0 interface 25 altsetting 205: 246, using maximum allowed: 30 [ 312.500017][ T9] usb 2-1: config 0 interface 25 altsetting 205 has 0 endpoint descriptors, different from the interface descriptor's value: 246 [ 312.514043][ T9] usb 2-1: config 0 interface 25 has no altsetting 0 [ 312.520926][ T9] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 312.530239][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.605393][ T9] usb 2-1: config 0 descriptor?? [ 313.444529][ T8462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.461978][ T8462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.722634][ T9] usb 2-1: string descriptor 0 read error: -71 [ 313.736792][ T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 313.746956][ T9] gp8psk: usb in 128 operation failed. [ 313.755854][ T9] gp8psk: usb in 137 operation failed. [ 313.762124][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 313.777446][ T9] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 313.787567][ T9] usb 2-1: media controller created [ 313.827697][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 313.853172][ T9] gp8psk_fe: Frontend attached [ 313.859826][ T9] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 313.871300][ T9] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 313.961276][ T9] gp8psk: usb in 138 operation failed. [ 313.966977][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 313.976870][ T9] gp8psk: found Genpix USB device pID = 203 (hex) [ 313.988016][ T9] usb 2-1: USB disconnect, device number 10 [ 314.081715][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 317.228603][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.235066][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.309055][ T8514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.774'. [ 322.558750][ T8536] Invalid ELF header type: 3 != 1 [ 333.381979][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 334.222003][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 334.284608][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 334.318323][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 334.335244][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.373080][ T9] usb 3-1: Product: syz [ 334.380268][ T9] usb 3-1: Manufacturer: syz [ 334.401953][ T9] usb 3-1: SerialNumber: syz [ 334.417201][ T9] usb 3-1: config 0 descriptor?? [ 336.555146][ T23] usb 3-1: USB disconnect, device number 9 [ 339.892442][ T8675] ISOFS: Unable to identify CD-ROM format. [ 346.336968][ T8754] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 346.407079][ T8755] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 346.435026][ T8755] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 346.459978][ T8755] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 346.485935][ T8755] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 346.514202][ T8755] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 346.523811][ T8755] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 346.545475][ T8755] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 346.554632][ T8755] kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 346.563535][ T8755] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 346.602560][ T8755] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 350.746990][ T8790] 9pnet_fd: Insufficient options for proto=fd [ 352.078506][ T27] audit: type=1326 audit(2000000146.116:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8806 comm="syz.3.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effefd8eba9 code=0x7ffc0000 [ 352.243750][ T27] audit: type=1326 audit(2000000146.116:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8806 comm="syz.3.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effefd8eba9 code=0x7ffc0000 [ 352.265725][ C0] vkms_vblank_simulate: vblank timer overrun [ 352.272806][ T27] audit: type=1326 audit(2000000146.116:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8806 comm="syz.3.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7effefd8eba9 code=0x7ffc0000 [ 352.295638][ C0] vkms_vblank_simulate: vblank timer overrun [ 353.219800][ T27] audit: type=1326 audit(2000000146.116:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8806 comm="syz.3.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effefd8eba9 code=0x7ffc0000 [ 353.429295][ T27] audit: type=1326 audit(2000000146.116:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8806 comm="syz.3.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7effefd8eba9 code=0x7ffc0000 [ 353.485253][ T27] audit: type=1326 audit(2000000146.116:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8806 comm="syz.3.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effefd8eba9 code=0x7ffc0000 [ 353.717663][ T8819] could not allocate digest TFM handle poly1305-neon [ 354.227079][ T23] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 354.322617][ T5872] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 355.000003][ T5872] usb 3-1: Using ep0 maxpacket: 8 [ 355.013618][ T23] usb 4-1: config 27 has an invalid descriptor of length 48, skipping remainder of the config [ 355.028387][ T5872] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 355.036614][ T23] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 48, changing to 9 [ 355.049366][ T23] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 355.789540][ T23] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 355.799050][ T5872] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 355.808346][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.816531][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.853611][ T5872] usb 3-1: Product: syz [ 355.858545][ T5872] usb 3-1: Manufacturer: syz [ 355.867658][ T23] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 355.881961][ T5872] usb 3-1: SerialNumber: syz [ 355.929533][ T23] usb 4-1: invalid MIDI out EP 0 [ 355.956121][ T5872] usb 3-1: config 0 descriptor?? [ 355.971399][ T5872] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 356.000170][ T5872] usb 3-1: setting power ON [ 356.017104][ T5872] dvb-usb: bulk message failed: -22 (2/0) [ 356.059249][ T5872] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 356.091561][ T8859] udevd[8859]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 356.128945][ T5872] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 356.151502][ T23] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 356.160332][ T5872] usb 3-1: media controller created [ 356.189030][ T8838] dvb-usb: bulk message failed: -22 (3/0) [ 356.211638][ T23] usb 4-1: USB disconnect, device number 12 [ 356.223455][ T8863] 9pnet_fd: Insufficient options for proto=fd [ 356.232219][ T8838] dvb-usb: bulk message failed: -22 (4/0) [ 356.247495][ T8838] cxusb: i2c read failed [ 356.259482][ T5872] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 356.302447][ T8830] delete_channel: no stack [ 356.365665][ T5872] usb 3-1: selecting invalid altsetting 6 [ 356.383089][ T5872] usb 3-1: digital interface selection failed (-22) [ 356.409044][ T5872] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 356.449389][ T5872] usb 3-1: setting power OFF [ 356.590515][ T5872] dvb-usb: bulk message failed: -22 (2/0) [ 356.606419][ T5872] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 357.277196][ T5872] (NULL device *): no alternate interface [ 357.326746][ T5872] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 357.346731][ T5872] usb 3-1: USB disconnect, device number 10 [ 360.452418][ T5774] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 360.652061][ T5774] usb 2-1: Using ep0 maxpacket: 8 [ 360.663916][ T5774] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 360.694240][ T5774] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 360.704889][ T5774] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 360.715337][ T5774] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 360.728813][ T5774] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 360.738846][ T5774] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.960163][ T5774] usb 2-1: GET_CAPABILITIES returned 0 [ 360.969377][ T5774] usbtmc 2-1:16.0: can't read capabilities [ 361.178075][ T8898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.199712][ T8898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.240248][ T8898] vxcan1 speed is unknown, defaulting to 1000 [ 361.297964][ C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 361.315100][ T8906] usbtmc 2-1:16.0: Unable to send data, error -71 [ 361.371635][ T23] usb 2-1: USB disconnect, device number 11 [ 363.523530][ T8933] netlink: 16 bytes leftover after parsing attributes in process `syz.2.892'. [ 364.120057][ T8937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.893'. [ 364.912485][ T23] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 365.123566][ T23] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 365.132796][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.143006][ T23] usb 4-1: config 0 descriptor?? [ 365.160572][ T23] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 365.357818][ T23] gp8psk: usb in 128 operation failed. [ 365.371428][ T23] gp8psk: usb in 137 operation failed. [ 365.377312][ T23] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 365.387817][ T23] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 365.400123][ T23] usb 4-1: USB disconnect, device number 13 [ 366.648637][ T8950] binder: BINDER_SET_CONTEXT_MGR already set [ 366.655199][ T8950] binder: 8947:8950 ioctl 4018620d 200000004a80 returned -16 [ 366.693773][ T8951] bond0: entered promiscuous mode [ 366.698810][ T8951] bond_slave_0: entered promiscuous mode [ 366.704610][ T8951] bond_slave_1: entered promiscuous mode [ 366.710304][ T8951] bond0: left allmulticast mode [ 366.802396][ T8952] binder: 8947:8952 ioctl c0306201 0 returned -14 [ 367.799040][ T8967] netlink: 'syz.2.902': attribute type 1 has an invalid length. [ 368.065604][ T8972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.902'. [ 368.180552][ T8967] 8021q: adding VLAN 0 to HW filter on device bond1 [ 369.112972][ T8971] bond1: (slave veth3): Enslaving as an active interface with a down link [ 369.336170][ T5819] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 369.605716][ T5819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.626397][ T5819] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 369.647279][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.685891][ T5819] usb 4-1: config 0 descriptor?? [ 369.692644][ T3479] ------------[ cut here ]------------ [ 369.698540][ T3479] WARNING: CPU: 0 PID: 3479 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 369.709612][ T3479] Modules linked in: [ 369.713588][ T3479] CPU: 0 PID: 3479 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 369.721227][ T3479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 369.731504][ T3479] Workqueue: phy4 ieee80211_csa_finalize_work [ 369.738151][ T3479] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 369.745652][ T3479] Code: 48 89 df e8 7a ea e9 f7 e9 dc fc ff ff e8 70 9f 92 f7 eb 24 e8 69 9f 92 f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 58 9f 92 f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 4a 9f 92 f7 48 8b 7c 24 08 4c 8b 7c [ 369.765339][ T3479] RSP: 0018:ffffc9000ce179c0 EFLAGS: 00010293 [ 369.771427][ T3479] RAX: ffffffff89f2ecee RBX: 0000000000000001 RCX: ffff88802df00000 [ 369.779448][ T3479] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 369.787502][ T3479] RBP: dffffc0000000000 R08: ffff88805cae95af R09: 1ffff1100b95d2b5 [ 369.793341][ C1] ------------[ cut here ]------------ [ 369.796754][ T3479] R10: dffffc0000000000 R11: ffffed100b95d2b6 R12: 0000000000000001 [ 369.801337][ C1] WARNING: CPU: 1 PID: 8979 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600 [ 369.809415][ T3479] R13: ffff88805caea5d9 R14: ffff88807809ac70 R15: ffff88807809ace8 [ 369.819274][ C1] Modules linked in: [ 369.819291][ C1] CPU: 1 PID: 8979 Comm: syz.0.903 Not tainted syzkaller #0 [ 369.827343][ T3479] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 369.831127][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 369.838411][ T3479] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 369.847335][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 369.857479][ T3479] CR2: 0000200000092030 CR3: 00000000601a5000 CR4: 00000000003526f0 [ 369.864003][ C1] Code: 24 4c 89 e7 e8 de 69 d4 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 99 44 97 f7 0f 0b e9 f6 f7 ff ff e8 8d 44 97 f7 <0f> 0b e9 48 fb ff ff e8 81 44 97 f7 48 c7 c7 60 0f 24 8e 4c 89 e6 [ 369.864020][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 369.864038][ C1] RAX: ffffffff89ee4bb3 RBX: ffffffff89ee39b6 RCX: ffff88807a5ebc00 [ 369.864053][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 369.864065][ C1] RBP: 0000000000000000 R08: ffff88807a5ebc00 R09: 0000000000000003 [ 369.870370][ T3479] Call Trace: [ 369.878355][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805caea3c0 [ 369.898370][ T3479] [ 369.904068][ C1] R13: dffffc0000000000 R14: ffff88805caea8b0 R15: ffff88805cc96424 [ 369.904085][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 369.904100][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 369.904112][ C1] CR2: 000000110c350e47 CR3: 0000000020406000 CR4: 00000000003526e0 [ 369.912170][ T3479] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 369.920068][ C1] Call Trace: [ 369.928078][ T3479] ieee80211_csa_finalize+0x59a/0xf00 [ 369.931306][ C1] [ 369.931318][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 369.939740][ T3479] ? mutex_lock_nested+0x20/0x20 [ 369.942665][ C1] ieee80211_beacon_get_tim+0xb8/0x560 [ 369.942698][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 369.950662][ T3479] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 369.959605][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 369.959639][ C1] __iterate_interfaces+0x243/0x500 [ 369.966241][ T3479] ? ieee80211_csa_finalize_work+0x140/0x140 [ 369.974195][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 369.980684][ T3479] ? read_lock_is_recursive+0x20/0x20 [ 369.983989][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 369.984025][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 369.989377][ T3479] ieee80211_csa_finalize_work+0xf6/0x140 [ 369.992224][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 369.992258][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 369.998086][ T3479] ? process_scheduled_works+0x957/0x15b0 [ 370.002707][ C1] __hrtimer_run_queues+0x51e/0xc40 [ 370.002735][ C1] ? hw_scan_work+0xf40/0xf40 [ 370.002764][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 370.008182][ T3479] process_scheduled_works+0xa45/0x15b0 [ 370.014944][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 370.014978][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 370.020968][ T3479] ? assign_work+0x400/0x400 [ 370.026486][ C1] handle_softirqs+0x280/0x820 [ 370.026511][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 370.031691][ T3479] ? assign_work+0x39e/0x400 [ 370.037672][ C1] ? do_softirq+0x180/0x180 [ 370.037700][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 370.043971][ T3479] worker_thread+0xa55/0xfc0 [ 370.049272][ C1] __irq_exit_rcu+0xc7/0x190 [ 370.056525][ T3479] kthread+0x2fa/0x390 [ 370.062713][ C1] ? irq_exit_rcu+0x20/0x20 [ 370.068404][ T3479] ? pr_cont_work+0x560/0x560 [ 370.075440][ C1] irq_exit_rcu+0x9/0x20 [ 370.075459][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 370.080642][ T3479] ? kthread_blkcg+0xd0/0xd0 [ 370.086357][ C1] [ 370.086367][ C1] [ 370.091530][ T3479] ret_from_fork+0x48/0x80 [ 370.096209][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 370.096233][ C1] RIP: 0010:check_preemption_disabled+0x0/0x110 [ 370.101672][ T3479] ? kthread_blkcg+0xd0/0xd0 [ 370.106892][ C1] Code: f9 e9 6e ff ff ff cc cc cc cc f3 0f 1e fa 48 c7 c7 60 72 fc 8a 48 c7 c6 a0 72 fc 8a eb 0c 66 2e 0f 1f 84 00 00 00 00 00 66 90 <55> 41 57 41 56 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 [ 370.106910][ C1] RSP: 0018:ffffc90004147160 EFLAGS: 00000283 [ 370.106931][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff81d19f9c [ 370.106945][ C1] RDX: 0000000000000000 RSI: ffffffff8afc72a0 RDI: ffffffff8afc7260 [ 370.106957][ C1] RBP: 0000000000000000 R08: ffffffff8e4a94ef R09: 1ffffffff1c9529d [ 370.106970][ C1] R10: dffffc0000000000 R11: fffffbfff1c9529e R12: ffffea0001680208 [ 370.106986][ C1] R13: dffffc0000000000 R14: 1ffffd40002d0041 R15: ffffea0001680200 [ 370.107011][ C1] ? trace_mm_page_free+0x2c/0x110 [ 370.107035][ C1] rcu_is_watching+0x15/0xb0 [ 370.107058][ C1] trace_mm_page_free+0x3b/0x110 [ 370.107075][ C1] free_unref_page_prepare+0x89/0x8e0 [ 370.107105][ C1] free_unref_page_list+0xbe/0x860 [ 370.113209][ T3479] ret_from_fork_asm+0x11/0x20 [ 370.118262][ C1] ? __folio_memcg+0x63/0x160 [ 370.122874][ T3479] [ 370.127595][ C1] ? folio_memcg+0x127/0x480 [ 370.132550][ T3479] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 370.132562][ T3479] CPU: 0 PID: 3479 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 370.132579][ T3479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 370.132588][ T3479] Workqueue: phy4 ieee80211_csa_finalize_work [ 370.132608][ T3479] Call Trace: [ 370.132615][ T3479] [ 370.132622][ T3479] dump_stack_lvl+0x16c/0x230 [ 370.132646][ T3479] ? show_regs_print_info+0x20/0x20 [ 370.132664][ T3479] ? load_image+0x3b0/0x3b0 [ 370.132693][ T3479] panic+0x2c0/0x710 [ 370.132721][ T3479] ? bpf_jit_dump+0xd0/0xd0 [ 370.132751][ T3479] ? ret_from_fork_asm+0x11/0x20 [ 370.132776][ T3479] __warn+0x2e0/0x470 [ 370.132794][ T3479] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 370.132819][ T3479] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 370.132839][ T3479] report_bug+0x2be/0x4f0 [ 370.132857][ T3479] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 370.132879][ T3479] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 370.132900][ T3479] ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0 [ 370.132920][ T3479] handle_bug+0xcf/0x120 [ 370.132938][ T3479] exc_invalid_op+0x1a/0x50 [ 370.132956][ T3479] asm_exc_invalid_op+0x1a/0x20 [ 370.132971][ T3479] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 370.132993][ T3479] Code: 48 89 df e8 7a ea e9 f7 e9 dc fc ff ff e8 70 9f 92 f7 eb 24 e8 69 9f 92 f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 58 9f 92 f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 4a 9f 92 f7 48 8b 7c 24 08 4c 8b 7c [ 370.133005][ T3479] RSP: 0018:ffffc9000ce179c0 EFLAGS: 00010293 [ 370.133018][ T3479] RAX: ffffffff89f2ecee RBX: 0000000000000001 RCX: ffff88802df00000 [ 370.133030][ T3479] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 370.133039][ T3479] RBP: dffffc0000000000 R08: ffff88805cae95af R09: 1ffff1100b95d2b5 [ 370.133050][ T3479] R10: dffffc0000000000 R11: ffffed100b95d2b6 R12: 0000000000000001 [ 370.133060][ T3479] R13: ffff88805caea5d9 R14: ffff88807809ac70 R15: ffff88807809ace8 [ 370.133080][ T3479] ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0 [ 370.133121][ T3479] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 370.133148][ T3479] ieee80211_csa_finalize+0x59a/0xf00 [ 370.133163][ T3479] ? mutex_lock_nested+0x20/0x20 [ 370.133184][ T3479] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 370.133202][ T3479] ? ieee80211_csa_finalize_work+0x140/0x140 [ 370.133218][ T3479] ? read_lock_is_recursive+0x20/0x20 [ 370.133243][ T3479] ieee80211_csa_finalize_work+0xf6/0x140 [ 370.133260][ T3479] ? process_scheduled_works+0x957/0x15b0 [ 370.133278][ T3479] process_scheduled_works+0xa45/0x15b0 [ 370.133323][ T3479] ? assign_work+0x400/0x400 [ 370.133348][ T3479] ? assign_work+0x39e/0x400 [ 370.133371][ T3479] worker_thread+0xa55/0xfc0 [ 370.133415][ T3479] kthread+0x2fa/0x390 [ 370.133428][ T3479] ? pr_cont_work+0x560/0x560 [ 370.133447][ T3479] ? kthread_blkcg+0xd0/0xd0 [ 370.133461][ T3479] ret_from_fork+0x48/0x80 [ 370.133478][ T3479] ? kthread_blkcg+0xd0/0xd0 [ 370.133493][ T3479] ret_from_fork_asm+0x11/0x20 [ 370.133526][ T3479] [ 370.137160][ T3479] Kernel Offset: disabled