last executing test programs: 22.74926409s ago: executing program 2 (id=971): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r1, 0x0, 0x0}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xf, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ecb5f9f500ab00000008004112040000000808950000000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x8, 0x80000) fanotify_mark(r7, 0x105, 0x4800003a, r6, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x5020, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}], [{@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@dont_measure}, {@smackfsfloor={'smackfsfloor', 0x3d, 'upperdir'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mount$nfs(&(0x7f0000000540)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0) r8 = fanotify_init(0x18, 0x0) fanotify_mark(r8, 0x105, 0x4800003a, r0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21.440654258s ago: executing program 2 (id=975): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f00000002c0)={0x17, 0x14, 0x8000003, 0x12, 0x4, 0x2, 0x3, 0x84, 0x1}) 21.009331864s ago: executing program 4 (id=977): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xffffffffffffff10, 0x0, 0x3, 0x4}) 20.428904232s ago: executing program 4 (id=979): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) sendmsg$alg(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)}, 0x0) recvmmsg(r1, &(0x7f0000000a40), 0x0, 0x2021, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbmon(0x0, 0x0, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioperm(0x0, 0x8, 0x8000000000004) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) 19.308552415s ago: executing program 4 (id=981): pipe(0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x181002, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x0, 0x3, 0xff, 0x0, 0xc6cd, 0x8, {0x0, 0x8000000000008, 0x2313, 0x9, 0xde, 0x20000000008, 0x6, 0x8000, 0xfffffffa, 0xc000, 0x7, 0x0, 0x0, 0x0, 0x200}}, {0x0, 0x11}}}, 0xa0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) capset(&(0x7f0000000180)={0x19980330}, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') setns(r0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x6719, 0x0, 0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1, &(0x7f0000002280)=ANY=[@ANYBLOB='fd', @ANYBLOB=',rootmode=', @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB]) pivot_root(&(0x7f0000002240)='./file0/file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000240)=0xffff7c00, 0x0, 0x4) 14.915226337s ago: executing program 4 (id=984): socket$nl_netfilter(0x10, 0x3, 0xc) openat$mice(0xffffffffffffff9c, 0x0, 0x2da6bf4510d2e224) syz_usb_connect(0x0, 0x36, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r3, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f00000002c0)=0x65, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) creat(&(0x7f00000005c0)='./file0\x00', 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000003c000180060001000a000000080005000300e5ff0b00070000000000000000000800090043000000090006006e6f"], 0x50}}, 0x0) 10.151748961s ago: executing program 4 (id=990): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)=ANY=[], 0x50) r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x450}) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) r1 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405515, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRAWPHYS(r3, 0x4004480d, 0x0) pipe(&(0x7f0000000140)) socket$inet_udp(0x2, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f0000000580)={0x0, 0x0, 0x5, 0xfffffffffffffffd}, 0x0, &(0x7f0000000540)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x2100000002, 0x7fffffff}, 0x0, 0x0) 9.871334054s ago: executing program 1 (id=992): socket$nl_netfilter(0x10, 0x3, 0xc) openat$mice(0xffffffffffffff9c, 0x0, 0x2da6bf4510d2e224) syz_usb_connect(0x0, 0x36, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x0, 0x0, 0x0, 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r4, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f00000002c0)=0x65, 0x2) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) creat(&(0x7f00000005c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 8.771097265s ago: executing program 0 (id=994): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x20, 0x800) fanotify_mark(r1, 0x441, 0x4800001a, r0, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x440502, 0x13d) fanotify_mark(r1, 0x541, 0x40001019, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) r4 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r4, 0x40106183, &(0x7f0000000000)) 8.581022981s ago: executing program 2 (id=995): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0], 0x44}}, 0x20048010) creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x20000080ffff, 0x1}}, 0x40) ioctl$TCFLSH(r0, 0x540b, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000040)='nilfs2\x00', 0x1004050, 0x0) 8.35296025s ago: executing program 3 (id=997): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 7.718759722s ago: executing program 0 (id=999): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) msgctl$MSG_STAT(0x0, 0xb, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$unlink(0x9, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) unshare(0x2040400) 6.89917827s ago: executing program 2 (id=1000): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20400}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x7, "bf32568d2fd41b329a5f8a92fc91d2ff"}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000800}, 0x4000010) fsetxattr$security_ima(0xffffffffffffffff, 0x0, &(0x7f0000000500)=ANY=[], 0x1009, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000000206010300000000000000000000000005000400000000000900020073797a31000000001400078008000840000000200500140005000000050005000200000005000100060000000c000300686173683a6970008b820f9329444054a00dc90fbe7fe8121d66e02ae2c8d2a788fd91ff9980d45ed1f2a266344778552960733decd69a513e31dfb9aeae93f4b7717d3699918aa1deb52904fd665bffe2eddcc60917b5bd5dd3fc44a8687c0bdcd1fa19c4c811f5ecc6a7834093ff9b1ae5e7d01b07099ba7addd9b45c7026aefa8fea735c225af4dc091e1a72c54d0c3d720f0ddab371ea6073fde9a6ea0c42dfaf0d30493"], 0x58}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r4 = socket$inet(0x2, 0x2, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x6, 0x5, 0xb9, &(0x7f0000000000)) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x86) fchdir(r8) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080000001e000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) close_range(r4, 0xffffffffffffffff, 0x0) 6.804758058s ago: executing program 3 (id=1001): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001080)=@nat={'nat\x00', 0x670, 0x5, 0x398, 0x0, 0x0, 0xffffffff, 0x110, 0x110, 0x300, 0x300, 0xffffffff, 0x300, 0x300, 0x5, 0x0, {[{{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x40000, 0x2, 0x0, 0x6}}, @common=@ttl={{0x28}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4=@dev, @gre_key}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x250}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x3, "d596aeacb7ccdc0169c1d865b82ad7084d1c88c6b7cec8c99cc89cb57cda"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1cfaff00000005000300110000000000000000000000000000000000f8f8d32ca4aafea9198ad60080d38a1ce9016d3debe8ac6d8e5b0161da2c5bdc5b797cd93c373e82152646e88a0112cd814722690f8dfdb6"], 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x200000c4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r4, 0x0) listen(r4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) recvmmsg(r4, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000002ac0)=""/4101, 0x1005}], 0x1}, 0x4}], 0x1, 0x2, 0x0) 6.746876152s ago: executing program 0 (id=1002): socket$nl_netfilter(0x10, 0x3, 0xc) openat$mice(0xffffffffffffff9c, 0x0, 0x2da6bf4510d2e224) syz_usb_connect(0x0, 0x36, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r3, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f00000002c0)=0x65, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) creat(&(0x7f00000005c0)='./file0\x00', 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000003c000180060001000a000000080005000300e5ff0b00070000000000000000000800090043000000090006006e6f"], 0x50}}, 0x0) 6.724482614s ago: executing program 1 (id=1003): pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000040)={0xe, @raw_data="02ca3c81462e38d9533ffce6e3f48d3a42583b334f479695af1f0baaa9121d5adf5f551b5b32416a781f2a7bee04ac730c2d4bd49aceb27e169ab830ae49d132dea21361dfb6de0098e37bd2d5bf4857cc86cb6366b5c467920fdafdffab927a7480a3e820d7faef90eb4176f40854002a98800be5253b0f7645aa8084878bf040820480e6feb2e8a801eddf3baf089a0a3f96d0786b2ca4d0229b3a44b09af97b75a7446bd32892c615c5b0534331140402a1c492ef46d90deb6b742dd28b7e7cd729955e77c905"}) ioctl$SOUND_MIXER_INFO(r0, 0x805c4d65, &(0x7f0000000580)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x1, 0x5001) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, 0x0, &(0x7f00000012c0)) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f0000000480)={{0x3, 0x0, 0x1, 0x1, 0x4}, 0x0, 0x6, 'id0\x00', 'timer0\x00'}) 5.68511105s ago: executing program 0 (id=1004): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r1, 0x0, 0x4ab}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffeffff}, 0x50) syz_open_dev$hidraw(&(0x7f00000004c0), 0xfffffffffefffffc, 0x10a002) syz_open_dev$loop(0x0, 0x1, 0x40240) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x68, 0x2, {{0x6, 0x2, 0x0, 0x2}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffb}}, @TCA_NETEM_CORR={0x10, 0x1, {0x3, 0x6, 0x4}}, @TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x50c1, 0x5, 0x3}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x2, 0x8001, 0xfffffff1, 0x401}}]}]}}}]}, 0x98}}, 0x20000000) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 5.68467275s ago: executing program 1 (id=1005): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0x4000423) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}}}, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0x1a, r4, 0xb, 0x0) inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x4000423) 5.373962916s ago: executing program 3 (id=1006): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x4ee0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) 4.821499211s ago: executing program 2 (id=1007): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x9, 0x80080) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000), 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4000001) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ptrace(0x10, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31") ptrace$getregset(0x4205, 0x0, 0x200, &(0x7f0000000080)={0x0}) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r3, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x10}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0xf0, @private2, 0xe}, @in6={0xa, 0x4e22, 0x5, @private0, 0x407c78}], 0x38) 3.674499446s ago: executing program 1 (id=1008): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x20040400) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x8, 0x4}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r6}, 0x10) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={&(0x7f0000000000)="c68f7dff0962754a68f0d7b6bb0579477a8c2076ee1328e02529ef8857c13a52de09e6a4bf10fa99bbacab43f59f8c63950b7be8f638570fc572c847548d31957426471b78d88b5a7b75e0fd264e2ee77ae5d3592101f04d9e", &(0x7f0000000080)=""/19, 0x0, 0x0, 0xfffff800, r5, 0x2da1eb4c6b234c8f}, 0x38) syz_clone(0x80001280, 0x0, 0x0, 0x0, 0x0, 0x0) 3.569830594s ago: executing program 0 (id=1009): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}}}, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001580)={0x30, r3, 0x1, 0x0, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x4}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000014c0)=@newtfilter={0x48, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {}, {}, {0xd, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x3, 0xfff2}}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @broadcast}]}}]}, 0x48}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000208000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f8c0000000c0a01010000000000000000010000000900060073797a3200000000600003805c000080080003400000000250000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000002c0001800a0001006c696d69740000001c0002800c98299e48000000000000050c00024000000000000000000900010073797a3000000000140000001000010000000000000000000000000a"], 0x110}}, 0x0) 3.531914968s ago: executing program 4 (id=1010): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0], 0x44}}, 0x20048010) creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x20000080ffff, 0x1}}, 0x40) ioctl$TCFLSH(r0, 0x540b, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000040)='nilfs2\x00', 0x1004050, 0x0) 3.492955531s ago: executing program 3 (id=1011): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 2.732949694s ago: executing program 1 (id=1012): unshare(0x2040400) 2.311293289s ago: executing program 1 (id=1013): socket$nl_netfilter(0x10, 0x3, 0xc) openat$mice(0xffffffffffffff9c, 0x0, 0x2da6bf4510d2e224) syz_usb_connect(0x0, 0x36, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x0, 0x0, 0x0, 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r4, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f00000002c0)=0x65, 0x2) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) creat(&(0x7f00000005c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 1.427025502s ago: executing program 0 (id=1014): socket$nl_netfilter(0x10, 0x3, 0xc) openat$mice(0xffffffffffffff9c, 0x0, 0x2da6bf4510d2e224) syz_usb_connect(0x0, 0x36, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r3, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f00000002c0)=0x65, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) creat(&(0x7f00000005c0)='./file0\x00', 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000003c000180060001000a000000080005000300e5ff0b00070000000000000000000800090043000000090006006e6f"], 0x50}}, 0x0) 1.113239368s ago: executing program 3 (id=1015): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004050}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$netlink(0x10, 0x3, 0x8000000004) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x54, r6, 0x11, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}]]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x200140, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000010c0)={0x2c, r10, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}]}]}, 0x2c}}, 0x4004) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, 0x0, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r11, 0x0, 0x60, &(0x7f00000030c0)={'filter\x00', 0x6002, 0x4, 0x3d0, 0x0, 0x0, 0xf0, 0x310, 0x310, 0x310, 0x4, 0x0, {[{{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7}}}, {{@uncond, 0xffffff99, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @local, 0x0, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @mangle={0x0, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @private=0xa010100, 0xd, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0xff9b) 1.112821918s ago: executing program 2 (id=1016): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001080)=@nat={'nat\x00', 0x670, 0x5, 0x398, 0x0, 0x0, 0xffffffff, 0x110, 0x110, 0x300, 0x300, 0xffffffff, 0x300, 0x300, 0x5, 0x0, {[{{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x40000, 0x2, 0x0, 0x6}}, @common=@ttl={{0x28}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4=@dev, @gre_key}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x250}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x3, "d596aeacb7ccdc0169c1d865b82ad7084d1c88c6b7cec8c99cc89cb57cda"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1cfaff00000005000300110000000000000000000000000000000000f8f8d32ca4aafea9198ad60080d38a1ce9016d3debe8ac6d8e5b0161da2c5bdc5b797cd93c373e82152646e88a0112cd814722690f8dfdb6"], 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x200000c4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r4, 0x0) listen(r4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) recvmmsg(r4, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000002ac0)=""/4101, 0x1005}], 0x1}, 0x4}], 0x1, 0x2, 0x0) 0s ago: executing program 3 (id=1017): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) syz_clone(0xc0001480, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.186' (ED25519) to the list of known hosts. [ 59.532114][ T4173] cgroup: Unknown subsys name 'net' [ 59.667286][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.168609][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 63.165493][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 63.202026][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 63.265509][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 63.367418][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.374798][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.383922][ T4183] device bridge_slave_0 entered promiscuous mode [ 63.395466][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.402687][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.410711][ T4183] device bridge_slave_1 entered promiscuous mode [ 63.434947][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 63.475790][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.483419][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.492312][ T4189] device bridge_slave_0 entered promiscuous mode [ 63.502550][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.539449][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.546916][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.555127][ T4189] device bridge_slave_1 entered promiscuous mode [ 63.564053][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.573536][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.580994][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.588810][ T4188] device bridge_slave_0 entered promiscuous mode [ 63.599106][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.606425][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.615004][ T4188] device bridge_slave_1 entered promiscuous mode [ 63.641876][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 63.688769][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.700274][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.715988][ T4183] team0: Port device team_slave_0 added [ 63.734620][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.753516][ T4183] team0: Port device team_slave_1 added [ 63.782031][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.807840][ T4189] team0: Port device team_slave_0 added [ 63.814280][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.821588][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.829548][ T4187] device bridge_slave_0 entered promiscuous mode [ 63.858929][ T4189] team0: Port device team_slave_1 added [ 63.865063][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.872489][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.880877][ T4187] device bridge_slave_1 entered promiscuous mode [ 63.894036][ T4188] team0: Port device team_slave_0 added [ 63.901046][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.908018][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.934551][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.974118][ T4188] team0: Port device team_slave_1 added [ 63.987930][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.995021][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.021071][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.041765][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.072232][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.079213][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.105891][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.118882][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.143600][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.151183][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.159038][ T4193] device bridge_slave_0 entered promiscuous mode [ 64.168170][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.175902][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.202120][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.220519][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.227825][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.254012][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.273412][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.280511][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.288756][ T4193] device bridge_slave_1 entered promiscuous mode [ 64.310269][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.317373][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.343683][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.366258][ T4183] device hsr_slave_0 entered promiscuous mode [ 64.373352][ T4183] device hsr_slave_1 entered promiscuous mode [ 64.383612][ T4187] team0: Port device team_slave_0 added [ 64.403046][ T4187] team0: Port device team_slave_1 added [ 64.471572][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.495671][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.502837][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.529016][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.543850][ T4189] device hsr_slave_0 entered promiscuous mode [ 64.551075][ T4189] device hsr_slave_1 entered promiscuous mode [ 64.557671][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.565525][ T4189] Cannot create hsr debugfs directory [ 64.572610][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.593833][ T4188] device hsr_slave_0 entered promiscuous mode [ 64.600714][ T4188] device hsr_slave_1 entered promiscuous mode [ 64.607263][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.615104][ T4188] Cannot create hsr debugfs directory [ 64.625550][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.632572][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.658596][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.707972][ T4193] team0: Port device team_slave_0 added [ 64.739242][ T4193] team0: Port device team_slave_1 added [ 64.782322][ T1325] Bluetooth: hci0: command 0x0409 tx timeout [ 64.826066][ T4187] device hsr_slave_0 entered promiscuous mode [ 64.833354][ T4187] device hsr_slave_1 entered promiscuous mode [ 64.839871][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.847886][ T4187] Cannot create hsr debugfs directory [ 64.857627][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.860984][ T1325] Bluetooth: hci4: command 0x0409 tx timeout [ 64.865191][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.876291][ T1325] Bluetooth: hci2: command 0x0409 tx timeout [ 64.896625][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.912101][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.920251][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.946634][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.976232][ T1325] Bluetooth: hci1: command 0x0409 tx timeout [ 64.982709][ T1325] Bluetooth: hci3: command 0x0409 tx timeout [ 65.043985][ T4193] device hsr_slave_0 entered promiscuous mode [ 65.053618][ T4193] device hsr_slave_1 entered promiscuous mode [ 65.060304][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.068095][ T4193] Cannot create hsr debugfs directory [ 65.226511][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.239409][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.260706][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.277523][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.331833][ T4188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.344966][ T4188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.355667][ T4188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.365710][ T4188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.453597][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.461948][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.499902][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.509065][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.519000][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.528961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.538721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.561737][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.591336][ T4193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.603628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.612852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.622357][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.629629][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.638403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.661928][ T4193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.672701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.685131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.694565][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.701816][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.709626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.740625][ T4193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.751166][ T4193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.766170][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.776106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.785649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.799064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.808133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.825631][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.838470][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.866092][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.887266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.896573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.918429][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.956604][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.967577][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.979760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.989794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.999809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.008736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.020789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.060001][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.069910][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.088050][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.107842][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.135121][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.146661][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.159108][ T422] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.166388][ T422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.177746][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.198591][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.214893][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.230179][ T422] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.237359][ T422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.251739][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.264122][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.279921][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.299326][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.307691][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.316614][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.326479][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.335691][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.344711][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.353925][ T422] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.361051][ T422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.368746][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.378376][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.389038][ T422] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.396170][ T422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.403873][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.412197][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.443778][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.457312][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.472877][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.483298][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.493669][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.502629][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.512791][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.522464][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.530915][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.539979][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.547943][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.555782][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.571667][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.594190][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.610703][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.619588][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.629602][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.639312][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.648180][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.657230][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.666035][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.688277][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.697906][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.714995][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.724904][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.736777][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.747308][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.756376][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.767532][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.785175][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.799798][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.835504][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.850413][ T4183] device veth0_vlan entered promiscuous mode [ 66.859404][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.871149][ T4223] Bluetooth: hci0: command 0x041b tx timeout [ 66.877569][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.887666][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.894830][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.903868][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.913245][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.923555][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.930692][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.938379][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.946840][ T4223] Bluetooth: hci4: command 0x041b tx timeout [ 66.949516][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.961850][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.968944][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.976778][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.986138][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.995005][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.002122][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.009863][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.019345][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.028174][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.036491][ T4223] Bluetooth: hci3: command 0x041b tx timeout [ 67.038022][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.042675][ T4223] Bluetooth: hci1: command 0x041b tx timeout [ 67.056999][ T4223] Bluetooth: hci2: command 0x041b tx timeout [ 67.058794][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.073049][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.081658][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.089745][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.098059][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.113010][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.122812][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.133023][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.153029][ T4183] device veth1_vlan entered promiscuous mode [ 67.195241][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.207441][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.226383][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.239284][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.255058][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.264573][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.272323][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.279792][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.288798][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.298342][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.307587][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.317324][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.326216][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.335473][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.345017][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.354297][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.363087][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.383819][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.397652][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.407385][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.424168][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.444923][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.492585][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.517708][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.541683][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.554574][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.565664][ T4183] device veth0_macvtap entered promiscuous mode [ 67.596692][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.607195][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.618199][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.628964][ T4183] device veth1_macvtap entered promiscuous mode [ 67.646871][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.660995][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.669489][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.688707][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.710145][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.730290][ T4188] device veth0_vlan entered promiscuous mode [ 67.739108][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.748174][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.758152][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.769899][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.791596][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.798952][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.812564][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.822954][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.832052][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.847519][ T4188] device veth1_vlan entered promiscuous mode [ 67.871383][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.880308][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.889840][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.900372][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.918015][ T4187] device veth0_vlan entered promiscuous mode [ 67.932104][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.940883][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.949095][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.957862][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.967275][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.974991][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.983297][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.992276][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.999791][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.007752][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.022625][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.041199][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.073999][ T4187] device veth1_vlan entered promiscuous mode [ 68.106421][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.115531][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.125695][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.152622][ T4188] device veth0_macvtap entered promiscuous mode [ 68.177230][ T4188] device veth1_macvtap entered promiscuous mode [ 68.201410][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.209689][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.226199][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.241601][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.250414][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.312942][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.325852][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.353361][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.365020][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.384886][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.402834][ T4187] device veth0_macvtap entered promiscuous mode [ 68.417313][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.426970][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.436213][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.446573][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.455202][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.472843][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.481745][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.490157][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.501469][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.513355][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.523763][ T4187] device veth1_macvtap entered promiscuous mode [ 68.533614][ T422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.547917][ T422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.553168][ T4189] device veth0_vlan entered promiscuous mode [ 68.568704][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.578732][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.587338][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.596414][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.626634][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.635705][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.644850][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.653705][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.679287][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.688871][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.712381][ T4189] device veth1_vlan entered promiscuous mode [ 68.723830][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.733406][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.742177][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.773480][ T4193] device veth0_vlan entered promiscuous mode [ 68.781127][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.789212][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.800535][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.813569][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.816070][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.837228][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.847577][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.857656][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.869278][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.882400][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.893042][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.904956][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.914908][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.925396][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.936981][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.944919][ T4223] Bluetooth: hci0: command 0x040f tx timeout [ 68.964237][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.972961][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.982545][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.991938][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.001355][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.012844][ T4193] device veth1_vlan entered promiscuous mode [ 69.021891][ T4223] Bluetooth: hci4: command 0x040f tx timeout [ 69.032481][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.042256][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.051288][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.060011][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.082272][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.090841][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.099580][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.109417][ T4245] Bluetooth: hci2: command 0x040f tx timeout [ 69.116539][ T4245] Bluetooth: hci1: command 0x040f tx timeout [ 69.134618][ T4189] device veth0_macvtap entered promiscuous mode [ 69.142804][ T4245] Bluetooth: hci3: command 0x040f tx timeout [ 69.174029][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.198320][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.202013][ T4189] device veth1_macvtap entered promiscuous mode [ 69.226673][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.235994][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.253968][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.269648][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.289155][ T4193] device veth0_macvtap entered promiscuous mode [ 69.318697][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.336921][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.349790][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.360920][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.372633][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.385595][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.414252][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.440593][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 69.449724][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 69.458960][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 69.468022][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 69.737129][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.808619][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.827687][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.843392][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.950174][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.950401][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.038903][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.042867][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.062829][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.075625][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.086310][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.097288][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.111617][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.133182][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.146996][ T4193] device veth1_macvtap entered promiscuous mode [ 70.175947][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.243427][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.262472][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.273877][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.295412][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.305145][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.314446][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.331484][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.432904][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.442035][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.460382][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.468528][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.487372][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.508674][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.519166][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.537316][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.547748][ T4299] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 70.556687][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.580310][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.591321][ T4295] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 70.591499][ T4300] syz.0.6 uses obsolete (PF_INET,SOCK_PACKET) [ 70.620185][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.633874][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.634199][ T4295] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 70.660215][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.684204][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.728135][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.759366][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.779618][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.810673][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.831108][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.850901][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.880767][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.910861][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.925846][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.936971][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.956776][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.008878][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.020996][ T4236] Bluetooth: hci0: command 0x0419 tx timeout [ 71.030005][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.044228][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.054934][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.101557][ T4293] Bluetooth: hci4: command 0x0419 tx timeout [ 71.120050][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.160199][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.176233][ T4292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.183817][ T4236] Bluetooth: hci3: command 0x0419 tx timeout [ 71.206222][ T4236] Bluetooth: hci1: command 0x0419 tx timeout [ 71.213032][ T4236] Bluetooth: hci2: command 0x0419 tx timeout [ 71.258677][ T4292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.298847][ T4308] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7'. [ 71.338971][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.351556][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.357334][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.365379][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.413467][ T422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.449370][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.463844][ T422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.471918][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.531597][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.542941][ T4311] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.571023][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.657284][ T4292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.800365][ T4292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.961700][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.221483][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 72.301133][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 72.301164][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 72.310210][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 72.319059][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #108!!! [ 72.327934][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 72.336816][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 72.878301][ T4338] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5'. [ 73.346487][ T4349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16'. [ 73.670693][ T3577] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.910661][ T3577] usb 1-1: Using ep0 maxpacket: 8 [ 74.030803][ T3577] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 74.039587][ T3577] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 74.049944][ T3577] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 74.063072][ T3577] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 74.073574][ T3577] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 74.096620][ T3577] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 74.108331][ T3577] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.146513][ T4295] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 74.179362][ T4295] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 74.410766][ T3577] usb 1-1: usb_control_msg returned -32 [ 74.416759][ T3577] usbtmc 1-1:16.0: can't read capabilities [ 74.926398][ T4363] usbtmc 1-1:16.0: stb usb_control_msg returned -32 [ 74.957150][ T4328] usb 1-1: USB disconnect, device number 2 [ 75.171354][ T4367] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19'. [ 75.265833][ T4372] kAFS: unable to lookup cell '' [ 76.251552][ T4389] xt_hashlimit: overflow, rate too high: 0 [ 81.113769][ T4295] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 81.380018][ T4295] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 82.503892][ T4428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.32'. [ 84.031415][ T4431] kAFS: unable to lookup cell '' [ 84.466501][ T4432] fido_id[4432]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 84.512744][ T4441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.37'. [ 85.691180][ T4458] netlink: 'syz.0.44': attribute type 1 has an invalid length. [ 86.702714][ T1108] cfg80211: failed to load regulatory.db [ 86.771004][ T4464] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 87.191848][ T4480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.51'. [ 87.978078][ T4464] orangefs_mount: mount request failed with -4 [ 88.644893][ T4490] kAFS: unable to lookup cell '' [ 92.884549][ T4548] process 'syz.0.70' launched './bus' with NULL argv: empty string added [ 93.169214][ T1111] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 94.100672][ T1111] usb 5-1: Using ep0 maxpacket: 8 [ 94.231115][ T1111] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 94.313387][ T4557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.72'. [ 94.619989][ T1111] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 94.701264][ T1111] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 94.759152][ T1111] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 94.781903][ T1111] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.810746][ T1111] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 94.831181][ T1111] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.112423][ T1111] usb 5-1: usb_control_msg returned -32 [ 95.120898][ T1111] usbtmc 5-1:16.0: can't read capabilities [ 97.037368][ T4295] usb 5-1: USB disconnect, device number 2 [ 99.927812][ T4598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.83'. [ 100.463963][ T4603] kAFS: unable to lookup cell '' [ 100.938549][ T4609] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 102.537277][ T4628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.89'. [ 103.185926][ T4634] IPVS: Scheduler module ip_vs_sip not found [ 104.179456][ T4658] kAFS: unable to lookup cell '' [ 106.406516][ T4677] syz.4.102 (4677) used greatest stack depth: 18176 bytes left [ 106.903354][ T4690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.103'. [ 110.760804][ T1111] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 111.421165][ T1111] usb 4-1: Using ep0 maxpacket: 16 [ 111.539930][ T4725] kAFS: unable to lookup cell '' [ 111.620907][ T1111] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 111.635363][ T1111] usb 4-1: config 0 has no interface number 0 [ 111.646091][ T1111] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 111.656969][ T1111] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 111.667609][ T1111] usb 4-1: config 0 interface 41 has no altsetting 0 [ 111.830906][ T1111] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 111.842794][ T1111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.852978][ T1111] usb 4-1: Product: syz [ 111.859842][ T1111] usb 4-1: Manufacturer: syz [ 111.874523][ T1111] usb 4-1: SerialNumber: syz [ 111.888286][ T1111] usb 4-1: config 0 descriptor?? [ 111.920864][ T4717] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 111.934640][ T4717] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 111.956822][ T4741] capability: warning: `syz.4.124' uses deprecated v2 capabilities in a way that may be insecure [ 112.291539][ T4746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.125'. [ 113.661752][ T1111] CoreChips: probe of 4-1:0.41 failed with error -71 [ 113.723413][ T1111] usb 4-1: USB disconnect, device number 2 [ 114.320966][ T4771] xt_CT: No such helper "snmp" [ 115.173959][ T4797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.140'. [ 116.960810][ T1108] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 117.480802][ T1108] usb 5-1: Using ep0 maxpacket: 16 [ 117.850871][ T1108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.966857][ T1108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.032054][ T1108] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 118.078879][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.141809][ T1108] usb 5-1: config 0 descriptor?? [ 118.562538][ T4835] atomic_op ffff88807487d998 conn xmit_atomic 0000000000000000 [ 121.128816][ T4860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.160'. [ 121.696575][ T4859] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.360766][ T1108] usbhid 5-1:0.0: can't add hid device: -32 [ 124.190753][ T1108] usbhid: probe of 5-1:0.0 failed with error -32 [ 125.536580][ T4895] ======================================================= [ 125.536580][ T4895] WARNING: The mand mount option has been deprecated and [ 125.536580][ T4895] and is ignored by this kernel. Remove the mand [ 125.536580][ T4895] option from the mount to silence this warning. [ 125.536580][ T4895] ======================================================= [ 125.685002][ T4895] NILFS (nullb0): couldn't find nilfs on the device [ 125.970073][ T4295] usb 5-1: USB disconnect, device number 3 [ 126.534085][ T26] audit: type=1326 audit(1755951374.684:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4901 comm="syz.3.173" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e2f309be9 code=0x0 [ 133.179605][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.185983][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.303442][ T4970] sched: RT throttling activated [ 135.596327][ T4979] binder: BINDER_SET_CONTEXT_MGR already set [ 135.604271][ T4979] binder: 4977:4979 ioctl 4018620d 200000000040 returned -16 [ 136.522807][ T4987] NILFS (nullb0): couldn't find nilfs on the device [ 137.477007][ T4991] device syzkaller0 entered promiscuous mode [ 137.599964][ T1325] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 137.618934][ T1325] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 138.230606][ T4245] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 138.480608][ T4245] usb 4-1: Using ep0 maxpacket: 16 [ 138.601020][ T4245] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 138.615590][ T4245] usb 4-1: config 0 has no interface number 0 [ 138.622120][ T4245] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 138.632354][ T4245] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 138.642696][ T4245] usb 4-1: config 0 interface 41 has no altsetting 0 [ 138.831446][ T4245] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 138.859134][ T4245] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.891036][ T4245] usb 4-1: Product: syz [ 138.895266][ T4245] usb 4-1: Manufacturer: syz [ 138.901197][ T4245] usb 4-1: SerialNumber: syz [ 138.917040][ T4245] usb 4-1: config 0 descriptor?? [ 139.017603][ T5011] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 139.057125][ T5011] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 139.280580][ T5020] atomic_op ffff88807b8d1998 conn xmit_atomic 0000000000000000 [ 140.491005][ T4245] CoreChips: probe of 4-1:0.41 failed with error -71 [ 140.514343][ T4245] usb 4-1: USB disconnect, device number 3 [ 142.933145][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 142.984215][ T23] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 143.554203][ T5048] NILFS (nullb0): couldn't find nilfs on the device [ 143.704250][ T5050] fido_id[5050]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 144.176710][ T5066] atomic_op ffff88807ced7998 conn xmit_atomic 0000000000000000 [ 144.222808][ T5065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.222'. [ 146.299993][ T5083] tmpfs: Unknown parameter 'grpquota' [ 148.263749][ T4295] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 149.691829][ T4295] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 150.085527][ T5109] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 151.233674][ T5125] atomic_op ffff88806118f998 conn xmit_atomic 0000000000000000 [ 151.287326][ T5126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.239'. [ 151.643244][ T5124] Zero length message leads to an empty skb [ 152.189168][ T5135] snd_dummy snd_dummy.0: control 3:4:-2:syz0:2147483647 is already present [ 152.211350][ T5135] autofs4:pid:5135:autofs_fill_super: called with bogus options [ 152.477340][ T5138] xt_l2tp: v2 sid > 0xffff: 262144 [ 157.901248][ T4286] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 158.143185][ T5170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.261'. [ 158.480403][ T21] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 158.490612][ T4286] usb 3-1: Using ep0 maxpacket: 32 [ 158.507149][ T21] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 158.711031][ T4286] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.090481][ T4286] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 159.107207][ T4286] usb 3-1: config 1 has no interface number 1 [ 159.117753][ T4286] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 159.168581][ T5179] fido_id[5179]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 159.381340][ T5186] kAFS: unable to lookup cell '' [ 160.031272][ T4286] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 160.040677][ T4286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.119393][ T4286] usb 3-1: Product: syz [ 160.131158][ T4286] usb 3-1: Manufacturer: syz [ 160.138421][ T4286] usb 3-1: SerialNumber: syz [ 160.661839][ T4286] usb 3-1: can't set config #1, error -71 [ 160.715954][ T4286] usb 3-1: USB disconnect, device number 2 [ 161.849496][ T5209] atomic_op ffff88805ecc4198 conn xmit_atomic 0000000000000000 [ 162.752164][ T4328] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 162.787829][ T4328] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 162.972718][ T5224] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.391794][ T4328] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 165.252047][ T5243] kAFS: unable to lookup cell '' [ 165.393523][ T4328] usb 2-1: Using ep0 maxpacket: 32 [ 165.621518][ T4328] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.635246][ T5248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.274'. [ 165.650274][ T4328] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 165.669716][ T4328] usb 2-1: config 1 has no interface number 1 [ 165.683371][ T4328] usb 2-1: config 1 interface 2 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 165.860873][ T4328] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 165.874363][ T4328] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.890953][ T4328] usb 2-1: Product: syz [ 165.899444][ T4328] usb 2-1: Manufacturer: syz [ 165.909442][ T4328] usb 2-1: SerialNumber: syz [ 166.387284][ T5260] atomic_op ffff888078e68998 conn xmit_atomic 0000000000000000 [ 167.442420][ T4328] usb 2-1: USB disconnect, device number 2 [ 167.552942][ T5270] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.897421][ T4358] udevd[4358]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 168.936034][ T21] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 168.946455][ T21] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 169.521249][ T5296] kAFS: unable to lookup cell '' [ 169.553092][ T5289] fido_id[5289]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 169.859091][ T5303] atomic_op ffff88805de26198 conn xmit_atomic 0000000000000000 [ 170.590773][ T4293] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 171.030972][ T4293] usb 1-1: Using ep0 maxpacket: 32 [ 171.640847][ T4293] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.652677][ T4293] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 171.661919][ T4293] usb 1-1: config 1 has no interface number 1 [ 171.669924][ T5318] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.678263][ T4293] usb 1-1: config 1 interface 2 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 172.437430][ T4293] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 172.455042][ T4293] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.463291][ T4293] usb 1-1: Product: syz [ 172.468422][ T4293] usb 1-1: Manufacturer: syz [ 172.473417][ T4293] usb 1-1: SerialNumber: syz [ 172.720897][ T4293] usb 1-1: can't set config #1, error -71 [ 172.945270][ T5335] xt_l2tp: v2 sid > 0xffff: 262144 [ 173.050633][ T5338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.299'. [ 173.895255][ T4293] usb 1-1: USB disconnect, device number 3 [ 176.231824][ T5361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.307'. [ 176.733464][ T5367] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 177.611229][ T4293] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 177.870882][ T4293] usb 3-1: Using ep0 maxpacket: 16 [ 178.031028][ T4293] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 178.050230][ T4293] usb 3-1: config 0 has no interface number 0 [ 178.089474][ T4293] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 178.150349][ T4293] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 178.353811][ T4293] usb 3-1: config 0 interface 41 has no altsetting 0 [ 178.910812][ T4293] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 178.927274][ T4293] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.937879][ T4293] usb 3-1: Product: syz [ 178.948625][ T4293] usb 3-1: Manufacturer: syz [ 178.956640][ T4293] usb 3-1: SerialNumber: syz [ 178.968597][ T4293] usb 3-1: config 0 descriptor?? [ 178.980606][ T4328] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 179.001036][ T5374] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 179.016134][ T5374] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 179.131336][ T5396] kAFS: unable to lookup cell '' [ 179.220856][ T4328] usb 4-1: Using ep0 maxpacket: 32 [ 179.302227][ T4293] CoreChips: probe of 3-1:0.41 failed with error -71 [ 179.331942][ T4293] usb 3-1: USB disconnect, device number 3 [ 179.350857][ T4328] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.373950][ T4328] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 179.404609][ T4328] usb 4-1: config 1 has no interface number 1 [ 179.411096][ T4328] usb 4-1: config 1 interface 2 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 179.590714][ T4328] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 179.607969][ T4328] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.628182][ T4328] usb 4-1: Product: syz [ 179.635387][ T4328] usb 4-1: Manufacturer: syz [ 179.640109][ T4328] usb 4-1: SerialNumber: syz [ 179.916046][ T5403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.318'. [ 180.221623][ T5407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.320'. [ 180.254506][ T4328] usb 4-1: USB disconnect, device number 4 [ 181.698727][ T5426] atomic_op ffff888021df2198 conn xmit_atomic 0000000000000000 [ 182.830953][ T5436] kAFS: unable to lookup cell '' [ 184.418131][ T5453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.334'. [ 184.460587][ T4293] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 184.710685][ T4293] usb 3-1: Using ep0 maxpacket: 16 [ 184.910897][ T1325] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 185.160852][ T1325] usb 5-1: Using ep0 maxpacket: 32 [ 185.281256][ T1325] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.317036][ T1325] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 185.378355][ T1325] usb 5-1: config 1 has no interface number 1 [ 185.421678][ T1325] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 185.661064][ T4293] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 185.672542][ T4293] usb 3-1: config 0 has no interface number 0 [ 185.686839][ T4293] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 185.708477][ T4293] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 185.740219][ T4293] usb 3-1: config 0 interface 41 has no altsetting 0 [ 185.822775][ T1325] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 185.832119][ T1325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.840283][ T1325] usb 5-1: Product: syz [ 185.845052][ T1325] usb 5-1: Manufacturer: syz [ 185.849691][ T1325] usb 5-1: SerialNumber: syz [ 185.950095][ T5469] atomic_op ffff8880758b0998 conn xmit_atomic 0000000000000000 [ 186.332345][ T1325] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 186.364497][ T1325] usb 5-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 186.454265][ T1325] usb 5-1: 2:1 : unsupported sample bitwidth 71 in 38 bytes [ 186.552997][ T1325] usb 5-1: USB disconnect, device number 4 [ 186.612630][ T4293] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 186.623387][ T4293] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.631796][ T4293] usb 3-1: Product: syz [ 186.636082][ T4293] usb 3-1: Manufacturer: syz [ 186.640839][ T4293] usb 3-1: SerialNumber: syz [ 186.645691][ T21] Bluetooth: hci2: command 0x0406 tx timeout [ 186.653529][ T21] Bluetooth: hci0: command 0x0406 tx timeout [ 186.660024][ T21] Bluetooth: hci4: command 0x0406 tx timeout [ 186.667055][ T4293] usb 3-1: config 0 descriptor?? [ 186.703422][ T5472] kAFS: unable to lookup cell '' [ 186.759503][ T21] Bluetooth: hci1: command 0x0406 tx timeout [ 186.765664][ T21] Bluetooth: hci3: command 0x0406 tx timeout [ 186.811225][ T5448] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 186.819436][ T5448] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 187.032071][ T4358] udevd[4358]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.223003][ T5481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.342'. [ 187.430790][ T4293] CoreChips: probe of 3-1:0.41 failed with error -71 [ 187.498183][ T4293] usb 3-1: USB disconnect, device number 4 [ 189.190452][ T5506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.349'. [ 190.201423][ T5510] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.529880][ T5518] atomic_op ffff88802ba3d998 conn xmit_atomic 0000000000000000 [ 191.930683][ T4293] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 192.134873][ T5531] kAFS: unable to lookup cell '' [ 192.210867][ T4293] usb 2-1: Using ep0 maxpacket: 16 [ 192.300860][ T21] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 192.356226][ T4293] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 192.376422][ T4293] usb 2-1: config 0 has no interface number 0 [ 192.502672][ T4293] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 192.513091][ T4293] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 192.523547][ T4293] usb 2-1: config 0 interface 41 has no altsetting 0 [ 192.809495][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 192.982527][ T21] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.982600][ T4293] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 193.002914][ T4293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.024755][ T4293] usb 2-1: Product: syz [ 193.048653][ T4293] usb 2-1: Manufacturer: syz [ 193.075878][ T4293] usb 2-1: SerialNumber: syz [ 193.267179][ T21] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 193.296416][ T4293] usb 2-1: config 0 descriptor?? [ 193.310368][ T21] usb 5-1: config 1 has no interface number 1 [ 193.317381][ T21] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 193.341930][ T5526] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 193.373796][ T5526] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 193.570960][ T21] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 193.580117][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.588336][ T21] usb 5-1: Product: syz [ 193.605272][ T21] usb 5-1: Manufacturer: syz [ 193.614231][ T21] usb 5-1: SerialNumber: syz [ 193.661864][ T4293] CoreChips: probe of 2-1:0.41 failed with error -71 [ 193.678441][ T4293] usb 2-1: USB disconnect, device number 3 [ 193.855886][ T5548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.362'. [ 193.994019][ T21] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 194.007423][ T21] usb 5-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 194.016582][ T21] usb 5-1: 2:1 : unsupported sample bitwidth 71 in 38 bytes [ 194.067810][ T21] usb 5-1: USB disconnect, device number 5 [ 194.101091][ T4358] udevd[4358]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 194.251130][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.257551][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.328691][ T4246] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 194.338433][ T4246] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 194.655268][ T5558] atomic_op ffff888025598198 conn xmit_atomic 0000000000000000 [ 196.391421][ T5573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.368'. [ 196.523917][ T5576] kAFS: unable to lookup cell '' [ 198.600685][ T1108] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 198.622369][ T5594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.376'. [ 198.833061][ T21] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 198.890619][ T1108] usb 4-1: Using ep0 maxpacket: 16 [ 199.050758][ T1108] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 199.090615][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 199.626001][ T5604] atomic_op ffff888078852998 conn xmit_atomic 0000000000000000 [ 200.468483][ T1108] usb 4-1: config 0 has no interface number 0 [ 200.478404][ T1108] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 200.488647][ T1108] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 200.500887][ T1108] usb 4-1: config 0 interface 41 has no altsetting 0 [ 200.590809][ T21] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.610837][ T21] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 200.619844][ T21] usb 1-1: config 1 has no interface number 1 [ 200.640778][ T21] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 200.818306][ T1108] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 200.839248][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.866717][ T1108] usb 4-1: Product: syz [ 200.871789][ T1108] usb 4-1: Manufacturer: syz [ 200.876438][ T1108] usb 4-1: SerialNumber: syz [ 200.890770][ T1108] usb 4-1: config 0 descriptor?? [ 200.910918][ T5590] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 200.919021][ T5590] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 201.044495][ T21] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 201.055017][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.070728][ T21] usb 1-1: Product: syz [ 201.074943][ T21] usb 1-1: Manufacturer: syz [ 201.079559][ T21] usb 1-1: SerialNumber: syz [ 201.853783][ T1108] CoreChips: probe of 4-1:0.41 failed with error -71 [ 201.872299][ T1108] usb 4-1: USB disconnect, device number 5 [ 201.960939][ T21] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 201.978053][ T1325] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 201.985691][ T21] usb 1-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 202.019865][ T1325] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 202.023087][ T5626] kAFS: unable to lookup cell '' [ 202.039943][ T21] usb 1-1: 2:1 : unsupported sample bitwidth 71 in 38 bytes [ 202.240231][ T21] usb 1-1: USB disconnect, device number 4 [ 202.492903][ T4358] udevd[4358]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 202.720332][ T5631] fido_id[5631]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 203.103995][ T5640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.389'. [ 204.518726][ T5653] atomic_op ffff888029d23998 conn xmit_atomic 0000000000000000 [ 204.584978][ T5654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.393'. [ 206.438577][ T4236] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 206.700647][ T4236] usb 3-1: Using ep0 maxpacket: 16 [ 206.740919][ T4293] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 206.830648][ T4236] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 206.839123][ T4236] usb 3-1: config 0 has no interface number 0 [ 206.849373][ T4236] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 206.860097][ T4236] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 206.872593][ T4236] usb 3-1: config 0 interface 41 has no altsetting 0 [ 206.990952][ T4293] usb 2-1: Using ep0 maxpacket: 32 [ 207.030939][ T4236] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 207.044833][ T4236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.055760][ T4236] usb 3-1: Product: syz [ 207.060045][ T4236] usb 3-1: Manufacturer: syz [ 207.073323][ T4236] usb 3-1: SerialNumber: syz [ 207.095631][ T4236] usb 3-1: config 0 descriptor?? [ 207.111373][ T4293] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.122061][ T5656] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 207.135299][ T5656] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 207.143986][ T4293] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 207.157945][ T4293] usb 2-1: config 1 has no interface number 1 [ 207.320767][ T4293] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 207.350002][ T4293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.369855][ T4293] usb 2-1: Product: syz [ 207.376872][ T4293] usb 2-1: Manufacturer: syz [ 207.381945][ T4236] CoreChips: probe of 3-1:0.41 failed with error -71 [ 207.396953][ T4293] usb 2-1: SerialNumber: syz [ 207.412345][ T4236] usb 3-1: USB disconnect, device number 5 [ 207.684634][ T5681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.403'. [ 207.751487][ T4293] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 207.765823][ T4293] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 207.814705][ T4293] usb 2-1: 2:1 : unsupported sample bitwidth 71 in 38 bytes [ 208.164599][ T4293] usb 2-1: USB disconnect, device number 4 [ 208.578363][ T1325] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 208.613899][ T1325] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 210.477313][ T5717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.412'. [ 211.065745][ T5728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.418'. [ 211.362858][ T1325] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 211.610556][ T1325] usb 5-1: Using ep0 maxpacket: 16 [ 211.760774][ T1108] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 212.211319][ T1108] usb 1-1: Using ep0 maxpacket: 32 [ 212.331192][ T1108] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.405020][ T1108] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 212.420778][ T1108] usb 1-1: config 1 has no interface number 1 [ 212.590828][ T1108] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 212.610699][ T1325] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 212.612439][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.622279][ T1325] usb 5-1: config 0 has no interface number 0 [ 212.675176][ T1108] usb 1-1: Product: syz [ 212.685131][ T5744] atomic_op ffff88806abea998 conn xmit_atomic 0000000000000000 [ 212.711825][ T1108] usb 1-1: Manufacturer: syz [ 212.736287][ T1108] usb 1-1: SerialNumber: syz [ 213.161994][ T1108] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 213.206858][ T1108] usb 1-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 213.257450][ T1108] usb 1-1: 2:1 : unsupported sample bitwidth 71 in 38 bytes [ 213.367258][ T1108] usb 1-1: USB disconnect, device number 5 [ 213.396384][ T1325] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 213.406844][ T1325] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 213.417470][ T1325] usb 5-1: config 0 interface 41 has no altsetting 0 [ 213.600865][ T1325] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 213.609992][ T1325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.830200][ T1325] usb 5-1: Product: syz [ 214.568981][ T1325] usb 5-1: Manufacturer: syz [ 214.573912][ T1325] usb 5-1: SerialNumber: syz [ 214.597136][ T1325] usb 5-1: config 0 descriptor?? [ 214.630705][ T1325] usb 5-1: can't set config #0, error -71 [ 214.643484][ T1325] usb 5-1: USB disconnect, device number 6 [ 215.045602][ T5774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.432'. [ 215.499637][ T5787] atomic_op ffff88801baaa198 conn xmit_atomic 0000000000000000 [ 216.514064][ T1108] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 216.557664][ T1108] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 216.633529][ T5797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.438'. [ 217.890709][ T4295] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 218.035697][ T4236] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 218.150648][ T4295] usb 1-1: Using ep0 maxpacket: 32 [ 218.290715][ T4295] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.291326][ T4236] usb 3-1: Using ep0 maxpacket: 16 [ 218.301023][ T4295] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 218.315223][ T4295] usb 1-1: config 1 has no interface number 1 [ 218.454122][ T4236] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 218.468134][ T4236] usb 3-1: config 0 has no interface number 0 [ 218.488957][ T4236] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 218.500649][ T4295] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 218.516905][ T4295] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.535157][ T4236] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 218.545370][ T4295] usb 1-1: Product: syz [ 218.545392][ T4295] usb 1-1: Manufacturer: syz [ 218.545408][ T4295] usb 1-1: SerialNumber: syz [ 218.600567][ T4236] usb 3-1: config 0 interface 41 has no altsetting 0 [ 218.780915][ T4236] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 218.810279][ T4236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.866316][ T4236] usb 3-1: Product: syz [ 218.906195][ T4236] usb 3-1: Manufacturer: syz [ 218.925508][ T4236] usb 3-1: SerialNumber: syz [ 218.934005][ T4236] usb 3-1: config 0 descriptor?? [ 218.951046][ T5809] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 218.970182][ T5809] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 219.036558][ T4295] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 219.049229][ T4295] usb 1-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 219.059961][ T4295] usb 1-1: 2:1 : unsupported sample bitwidth 71 in 38 bytes [ 219.276533][ T4295] usb 1-1: USB disconnect, device number 6 [ 219.855643][ T5831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.448'. [ 220.080618][ T4358] udevd[4358]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 220.336014][ T5836] atomic_op ffff88801fe4d998 conn xmit_atomic 0000000000000000 [ 221.181229][ T4236] CoreChips: probe of 3-1:0.41 failed with error -71 [ 221.204793][ T4236] usb 3-1: USB disconnect, device number 6 [ 222.801448][ T1325] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 222.962423][ T1325] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 223.250655][ T1325] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 223.570591][ T1325] usb 1-1: Using ep0 maxpacket: 32 [ 223.690842][ T1325] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.837043][ T1325] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 223.866385][ T1325] usb 1-1: config 1 has no interface number 1 [ 224.050734][ T1325] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 224.081918][ T1325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.117399][ T1325] usb 1-1: Product: syz [ 224.128974][ T1325] usb 1-1: Manufacturer: syz [ 224.208322][ T1325] usb 1-1: SerialNumber: syz [ 225.506366][ T1325] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 225.537308][ T1325] usb 1-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 225.567714][ T1325] usb 1-1: 2:1 : unsupported sample bitwidth 71 in 38 bytes [ 225.740232][ T5888] atomic_op ffff88801ea4c198 conn xmit_atomic 0000000000000000 [ 225.962638][ T13] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 226.300788][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 226.360169][ T1325] usb 1-1: USB disconnect, device number 7 [ 226.489709][ T4358] udevd[4358]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 226.528720][ T13] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 226.560527][ T13] usb 4-1: config 0 has no interface number 0 [ 226.698584][ T13] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 226.729479][ T13] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 226.794148][ T13] usb 4-1: config 0 interface 41 has no altsetting 0 [ 226.945637][ T5899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.468'. [ 227.061374][ T13] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 227.085165][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.103777][ T13] usb 4-1: Product: syz [ 227.114140][ T13] usb 4-1: Manufacturer: syz [ 227.272041][ T13] usb 4-1: SerialNumber: syz [ 227.308758][ T13] usb 4-1: config 0 descriptor?? [ 227.351242][ T5878] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 227.358639][ T5878] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 228.215190][ T5919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.474'. [ 229.110774][ T13] CoreChips: probe of 4-1:0.41 failed with error -71 [ 229.181324][ T13] usb 4-1: USB disconnect, device number 6 [ 230.580588][ T13] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 230.890654][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 231.057143][ T1325] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 231.074902][ T5945] atomic_op ffff888073b56998 conn xmit_atomic 0000000000000000 [ 231.092389][ T1325] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 231.161101][ T13] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.188615][ T13] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 231.210735][ T13] usb 4-1: config 1 has no interface number 1 [ 231.380684][ T13] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 231.394114][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.402793][ T13] usb 4-1: Product: syz [ 231.406316][ T5947] fido_id[5947]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 231.407082][ T13] usb 4-1: Manufacturer: syz [ 231.425287][ T13] usb 4-1: SerialNumber: syz [ 231.740844][ T13] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 231.870722][ T13] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 231.887017][ T13] usb 4-1: 2:1 : unsupported sample bitwidth 71 in 38 bytes [ 231.954134][ T13] usb 4-1: USB disconnect, device number 7 [ 232.245181][ T4358] udevd[4358]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 232.786491][ T13] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 233.220589][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 233.351323][ T13] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 233.391689][ T13] usb 4-1: config 0 has no interface number 0 [ 233.478611][ T13] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 233.640446][ T13] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 233.811298][ T13] usb 4-1: config 0 interface 41 has no altsetting 0 [ 234.226906][ T13] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 234.236496][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.333249][ T13] usb 4-1: Product: syz [ 234.337976][ T13] usb 4-1: Manufacturer: syz [ 234.355856][ T13] usb 4-1: SerialNumber: syz [ 234.367441][ T13] usb 4-1: config 0 descriptor?? [ 234.400895][ T5964] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 234.410900][ T5964] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 235.020456][ T5988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.493'. [ 235.760737][ T13] CoreChips: probe of 4-1:0.41 failed with error -71 [ 235.782609][ T13] usb 4-1: USB disconnect, device number 8 [ 235.956101][ T5997] atomic_op ffff888023218998 conn xmit_atomic 0000000000000000 [ 236.350678][ T13] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 236.632854][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 236.922165][ T13] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.946432][ T13] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 236.972015][ T6014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.501'. [ 237.004061][ T13] usb 4-1: config 1 has no interface number 1 [ 237.190991][ T13] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 237.229646][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.350421][ T13] usb 4-1: Product: syz [ 237.363243][ T13] usb 4-1: Manufacturer: syz [ 237.369237][ T13] usb 4-1: SerialNumber: syz [ 237.721975][ T13] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 237.780680][ T13] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 237.802474][ T13] usb 4-1: 2:1 : unsupported sample bitwidth 71 in 38 bytes [ 237.899744][ T13] usb 4-1: USB disconnect, device number 9 [ 237.992719][ T4358] udevd[4358]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 239.450572][ T1108] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 239.724104][ T1108] usb 4-1: Using ep0 maxpacket: 16 [ 239.886101][ T1108] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 239.898492][ T1108] usb 4-1: config 0 has no interface number 0 [ 239.917055][ T1108] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 239.947367][ T1108] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 239.978018][ T1108] usb 4-1: config 0 interface 41 has no altsetting 0 [ 240.197251][ T1108] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 240.210108][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.247785][ T1108] usb 4-1: Product: syz [ 240.263884][ T1108] usb 4-1: Manufacturer: syz [ 240.273672][ T1108] usb 4-1: SerialNumber: syz [ 240.302582][ T1108] usb 4-1: config 0 descriptor?? [ 240.346153][ T6032] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 240.359483][ T6032] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 240.690861][ T1108] CoreChips: probe of 4-1:0.41 failed with error -71 [ 240.752907][ T1108] usb 4-1: USB disconnect, device number 10 [ 241.752260][ T6059] atomic_op ffff88805f6c2198 conn xmit_atomic 0000000000000000 [ 242.159896][ T6069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.517'. [ 242.206075][ C1] hrtimer: interrupt took 39602 ns [ 242.412618][ T4295] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 242.660783][ T4295] usb 2-1: Using ep0 maxpacket: 32 [ 242.780818][ T4295] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 242.826896][ T4295] usb 2-1: config 1 has no interface number 1 [ 243.110846][ T4295] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 243.130737][ T4295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.139618][ T4295] usb 2-1: Product: syz [ 243.144849][ T4295] usb 2-1: Manufacturer: syz [ 243.149787][ T4295] usb 2-1: SerialNumber: syz [ 243.245189][ T6084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.521'. [ 243.611937][ T4295] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 243.639016][ T4295] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 243.692777][ T4295] usb 2-1: 2:1 : unsupported sample bitwidth 71 in 38 bytes [ 243.797960][ T4295] usb 2-1: USB disconnect, device number 5 [ 244.083620][ T4358] udevd[4358]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 244.378881][ T4246] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 244.620589][ T4246] usb 5-1: Using ep0 maxpacket: 16 [ 244.740804][ T4246] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 244.756520][ T4246] usb 5-1: config 0 has no interface number 0 [ 244.788303][ T4246] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 244.847363][ T4246] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 244.915754][ T4246] usb 5-1: config 0 interface 41 has no altsetting 0 [ 245.121329][ T4246] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 245.130430][ T4246] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.157194][ T4246] usb 5-1: Product: syz [ 245.185489][ T4246] usb 5-1: Manufacturer: syz [ 245.210656][ T4246] usb 5-1: SerialNumber: syz [ 245.291760][ T4246] usb 5-1: config 0 descriptor?? [ 245.321638][ T6091] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 245.328774][ T6091] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 245.492495][ T6100] kAFS: unable to lookup cell '' [ 247.680849][ T4246] CoreChips: probe of 5-1:0.41 failed with error -71 [ 247.738156][ T4246] usb 5-1: USB disconnect, device number 7 [ 248.011920][ T6121] atomic_op ffff88807b488198 conn xmit_atomic 0000000000000000 [ 248.737300][ T4295] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 248.757088][ T4295] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 248.802235][ T4246] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 249.070740][ T4246] usb 5-1: Using ep0 maxpacket: 32 [ 249.155872][ T6142] kAFS: unable to lookup cell '' [ 249.190797][ T4246] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 249.209986][ T4246] usb 5-1: config 1 has no interface number 1 [ 249.310307][ T6145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.540'. [ 249.530826][ T4246] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 249.540170][ T4246] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.548371][ T4246] usb 5-1: Product: syz [ 249.552865][ T4246] usb 5-1: Manufacturer: syz [ 249.557499][ T4246] usb 5-1: SerialNumber: syz [ 250.001573][ T4246] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 250.020896][ T4246] usb 5-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 250.029458][ T4246] usb 5-1: 2:1 : unsupported sample bitwidth 71 in 38 bytes [ 250.094749][ T4246] usb 5-1: USB disconnect, device number 8 [ 250.316803][ T6158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.543'. [ 250.331737][ T4358] udevd[4358]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 252.734151][ T6185] kAFS: unable to lookup cell '' [ 252.865348][ T6186] atomic_op ffff88806abed998 conn xmit_atomic 0000000000000000 [ 253.627518][ T1325] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 253.664164][ T1325] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 254.365300][ T6207] binder: BINDER_SET_CONTEXT_MGR already set [ 254.373031][ T6207] binder: 6205:6207 ioctl 4018620d 200000000040 returned -16 [ 255.662946][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.669325][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.698998][ T6227] atomic_op ffff888079364998 conn xmit_atomic 0000000000000000 [ 256.750047][ T6230] kAFS: unable to lookup cell '' [ 257.268031][ T6241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.563'. [ 259.689696][ T6266] binder: BINDER_SET_CONTEXT_MGR already set [ 259.696030][ T6266] binder: 6262:6266 ioctl 4018620d 200000000040 returned -16 [ 260.262302][ T4246] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 260.289866][ T4246] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 261.546037][ T6277] fido_id[6277]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 261.950018][ T6288] kAFS: unable to lookup cell '' [ 262.102800][ T6291] atomic_op ffff888020458198 conn xmit_atomic 0000000000000000 [ 263.040610][ T4246] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 263.284670][ T6311] binder: BINDER_SET_CONTEXT_MGR already set [ 263.290862][ T6311] binder: 6308:6311 ioctl 4018620d 200000000040 returned -16 [ 263.760642][ T4246] usb 5-1: Using ep0 maxpacket: 16 [ 264.130865][ T4246] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 264.139343][ T4246] usb 5-1: config 0 has no interface number 0 [ 264.174160][ T4246] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 264.194606][ T4246] usb 5-1: config 0 interface 41 has no altsetting 0 [ 264.325339][ T4328] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 264.339663][ T4328] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 264.399807][ T6322] kAFS: unable to lookup cell '' [ 265.230885][ T4246] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 265.251899][ T4246] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.259974][ T4246] usb 5-1: Product: syz [ 265.271121][ T4246] usb 5-1: Manufacturer: syz [ 265.275782][ T4246] usb 5-1: SerialNumber: syz [ 265.313307][ T4246] usb 5-1: config 0 descriptor?? [ 265.330843][ T6298] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 265.374481][ T4246] CoreChips: probe of 5-1:0.41 failed with error -22 [ 265.608032][ T6336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.591'. [ 265.650789][ T4246] usb 5-1: USB disconnect, device number 9 [ 268.987704][ T6382] kAFS: unable to lookup cell '' [ 269.990579][ T4236] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 270.173787][ T6397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.608'. [ 270.376301][ T4293] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 270.384066][ T4236] usb 2-1: Using ep0 maxpacket: 16 [ 270.414605][ T4293] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 270.510714][ T4236] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 270.529291][ T4236] usb 2-1: config 0 has no interface number 0 [ 270.555680][ T4236] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 270.631791][ T4236] usb 2-1: config 0 interface 41 has no altsetting 0 [ 270.831494][ T4236] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 270.882538][ T4236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.116917][ T4236] usb 2-1: Product: syz [ 271.186788][ T4236] usb 2-1: Manufacturer: syz [ 271.945811][ T4236] usb 2-1: SerialNumber: syz [ 271.972617][ T4236] usb 2-1: config 0 descriptor?? [ 271.990876][ T6390] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 272.011657][ T4236] CoreChips: probe of 2-1:0.41 failed with error -22 [ 272.275012][ T4246] usb 2-1: USB disconnect, device number 6 [ 272.908459][ T6421] atomic_op ffff888075762998 conn xmit_atomic 0000000000000000 [ 273.277399][ T6426] kAFS: unable to lookup cell '' [ 276.011456][ T1108] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 276.060796][ T1108] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 276.660596][ T1108] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 276.920680][ T1108] usb 3-1: Using ep0 maxpacket: 16 [ 277.046440][ T1108] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 277.060613][ T1108] usb 3-1: config 0 has no interface number 0 [ 277.076860][ T1108] usb 3-1: config 0 interface 41 has no altsetting 0 [ 277.437773][ T6475] atomic_op ffff888078e83998 conn xmit_atomic 0000000000000000 [ 277.503357][ T1108] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 277.517684][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.527593][ T1108] usb 3-1: Product: syz [ 277.532360][ T1108] usb 3-1: Manufacturer: syz [ 277.537064][ T1108] usb 3-1: SerialNumber: syz [ 277.610167][ T1108] usb 3-1: config 0 descriptor?? [ 277.662735][ T1108] CoreChips: probe of 3-1:0.41 failed with error -22 [ 277.697905][ T6481] kAFS: unable to lookup cell '' [ 277.978844][ T6485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.636'. [ 278.196409][ T13] usb 3-1: USB disconnect, device number 7 [ 280.530784][ T6505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.641'. [ 281.686888][ T4245] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 281.734153][ T4245] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 282.456514][ T6520] atomic_op ffff888021c55198 conn xmit_atomic 0000000000000000 [ 282.679907][ T6527] kAFS: unable to lookup cell '' [ 285.004336][ T6540] binder: BINDER_SET_CONTEXT_MGR already set [ 285.010627][ T6540] binder: 6539:6540 ioctl 4018620d 200000000040 returned -16 [ 285.254391][ T4246] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 285.278147][ T4245] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 285.322721][ T4245] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 285.510683][ T4246] usb 3-1: Using ep0 maxpacket: 16 [ 285.630780][ T4246] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 285.638902][ T4246] usb 3-1: config 0 has no interface number 0 [ 285.662250][ T6554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.654'. [ 285.688521][ T4246] usb 3-1: config 0 interface 41 has no altsetting 0 [ 285.823259][ T6558] atomic_op ffff888077927998 conn xmit_atomic 0000000000000000 [ 285.995239][ T4246] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 286.022933][ T4246] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.050354][ T4246] usb 3-1: Product: syz [ 286.057785][ T4246] usb 3-1: Manufacturer: syz [ 286.084634][ T4246] usb 3-1: SerialNumber: syz [ 286.109724][ T4246] usb 3-1: config 0 descriptor?? [ 286.181689][ T4246] CoreChips: probe of 3-1:0.41 failed with error -22 [ 286.413842][ T1111] usb 3-1: USB disconnect, device number 8 [ 288.755851][ T6582] kAFS: unable to lookup cell '' [ 289.182797][ T6591] binder: BINDER_SET_CONTEXT_MGR already set [ 289.189210][ T6591] binder: 6588:6591 ioctl 4018620d 200000000040 returned -16 [ 290.050781][ T6601] atomic_op ffff88807a432198 conn xmit_atomic 0000000000000000 [ 290.132473][ T1111] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 290.180924][ T1111] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 291.090652][ T6617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.674'. [ 292.370562][ T1108] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 293.341180][ T1108] usb 4-1: Using ep0 maxpacket: 16 [ 293.502096][ T1108] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 293.526494][ T1108] usb 4-1: config 0 has no interface number 0 [ 293.572295][ T1108] usb 4-1: config 0 interface 41 has no altsetting 0 [ 293.921259][ T1108] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 293.935241][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.950550][ T1108] usb 4-1: Product: syz [ 293.955222][ T1108] usb 4-1: Manufacturer: syz [ 293.959980][ T1108] usb 4-1: SerialNumber: syz [ 293.978070][ T1108] usb 4-1: config 0 descriptor?? [ 294.051151][ T1108] CoreChips: probe of 4-1:0.41 failed with error -22 [ 294.291388][ T1108] usb 4-1: USB disconnect, device number 11 [ 294.602673][ T6659] atomic_op ffff88807939d998 conn xmit_atomic 0000000000000000 [ 295.475405][ T1108] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 295.679695][ T1108] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 297.127656][ T6685] kAFS: unable to lookup cell '' [ 298.020972][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.695'. [ 299.490715][ T4245] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 299.760588][ T4245] usb 1-1: Using ep0 maxpacket: 16 [ 300.310885][ T4245] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 300.322465][ T4245] usb 1-1: config 0 has no interface number 0 [ 300.329320][ T6718] atomic_op ffff88801f7d1198 conn xmit_atomic 0000000000000000 [ 300.342479][ T4245] usb 1-1: config 0 interface 41 has no altsetting 0 [ 300.510680][ T4245] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 300.520006][ T4245] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.543231][ T4245] usb 1-1: Product: syz [ 300.550373][ T4245] usb 1-1: Manufacturer: syz [ 300.565242][ T4245] usb 1-1: SerialNumber: syz [ 300.575959][ T4245] usb 1-1: config 0 descriptor?? [ 300.622634][ T4245] CoreChips: probe of 1-1:0.41 failed with error -22 [ 300.896650][ T4245] usb 1-1: USB disconnect, device number 8 [ 300.919099][ T6730] kAFS: unable to lookup cell '' [ 301.475241][ T4293] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 301.494617][ T4293] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 301.543712][ T6740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.707'. [ 301.806660][ T6747] binder: BINDER_SET_CONTEXT_MGR already set [ 301.815287][ T6747] binder: 6745:6747 ioctl 4018620d 200000000040 returned -16 [ 305.338916][ T6771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.716'. [ 306.474008][ T6784] atomic_op ffff88806ad34998 conn xmit_atomic 0000000000000000 [ 306.680529][ T1108] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 306.930627][ T1108] usb 2-1: Using ep0 maxpacket: 16 [ 307.050615][ T1108] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 307.067202][ T6789] kAFS: unable to lookup cell '' [ 307.073531][ T1108] usb 2-1: config 0 has no interface number 0 [ 307.083993][ T1108] usb 2-1: config 0 interface 41 has no altsetting 0 [ 308.170676][ T1108] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 308.189991][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.221553][ T1108] usb 2-1: Product: syz [ 308.240216][ T1108] usb 2-1: Manufacturer: syz [ 308.394149][ T1108] usb 2-1: SerialNumber: syz [ 308.671461][ T1108] usb 2-1: config 0 descriptor?? [ 308.711981][ T1108] CoreChips: probe of 2-1:0.41 failed with error -22 [ 310.269167][ T1108] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 310.333040][ T4236] usb 2-1: USB disconnect, device number 7 [ 310.350430][ T1108] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 310.823897][ T6821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.730'. [ 313.833475][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.736'. [ 314.097753][ T6849] kAFS: unable to lookup cell '' [ 314.695370][ T6859] binder: BINDER_SET_CONTEXT_MGR already set [ 314.702382][ T6859] binder: 6856:6859 ioctl 4018620d 200000000040 returned -16 [ 316.420769][ T4236] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 317.155853][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.162636][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.170928][ T4236] usb 5-1: Using ep0 maxpacket: 16 [ 317.198398][ T1108] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 317.223335][ T1108] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 317.400610][ T4236] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 317.408783][ T4236] usb 5-1: config 0 has no interface number 0 [ 317.486252][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.747'. [ 318.102872][ T4236] usb 5-1: config 0 interface 41 has no altsetting 0 [ 318.280930][ T4236] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 318.378778][ T4236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.438222][ T4236] usb 5-1: Product: syz [ 318.458773][ T4236] usb 5-1: Manufacturer: syz [ 318.639887][ T4236] usb 5-1: SerialNumber: syz [ 318.789307][ T4236] usb 5-1: config 0 descriptor?? [ 318.850840][ T4236] usb 5-1: can't set config #0, error -71 [ 318.868971][ T4236] usb 5-1: USB disconnect, device number 10 [ 319.607381][ T6904] kAFS: unable to lookup cell '' [ 320.756402][ T6924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.756'. [ 322.570557][ T4245] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 322.675352][ T6948] atomic_op ffff888022f60998 conn xmit_atomic 0000000000000000 [ 323.507977][ T1108] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 323.528313][ T1108] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 323.630671][ T4245] usb 5-1: Using ep0 maxpacket: 16 [ 323.750846][ T4245] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 323.758985][ T4245] usb 5-1: config 0 has no interface number 0 [ 323.797986][ T4245] usb 5-1: config 0 interface 41 has no altsetting 0 [ 324.040758][ T4245] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 324.059168][ T4245] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.077638][ T4245] usb 5-1: Product: syz [ 324.092471][ T4245] usb 5-1: Manufacturer: syz [ 324.109153][ T4245] usb 5-1: SerialNumber: syz [ 324.148801][ T4245] usb 5-1: config 0 descriptor?? [ 324.208036][ T4245] CoreChips: probe of 5-1:0.41 failed with error -22 [ 324.909215][ T4245] usb 5-1: USB disconnect, device number 11 [ 325.256382][ T6971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.768'. [ 325.640643][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.769'. [ 325.937992][ T6975] kAFS: unable to lookup cell '' [ 327.163447][ T6985] binder: BINDER_SET_CONTEXT_MGR already set [ 327.169743][ T6985] binder: 6982:6985 ioctl 4018620d 200000000040 returned -16 [ 330.253696][ T7001] atomic_op ffff8880758de198 conn xmit_atomic 0000000000000000 [ 330.452853][ T1111] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 330.488085][ T1111] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 331.250524][ T4286] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 331.510540][ T4286] usb 2-1: Using ep0 maxpacket: 16 [ 331.650653][ T4286] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 331.700768][ T4286] usb 2-1: config 0 has no interface number 0 [ 331.706994][ T4286] usb 2-1: config 0 interface 41 has no altsetting 0 [ 331.920660][ T4286] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 331.937480][ T4286] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.954186][ T4286] usb 2-1: Product: syz [ 331.968034][ T4286] usb 2-1: Manufacturer: syz [ 331.972970][ T4286] usb 2-1: SerialNumber: syz [ 331.990184][ T4286] usb 2-1: config 0 descriptor?? [ 332.052299][ T4286] CoreChips: probe of 2-1:0.41 failed with error -22 [ 332.392402][ T7021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.782'. [ 333.828220][ T1325] usb 2-1: USB disconnect, device number 8 [ 334.170533][ T7042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.788'. [ 335.289415][ T7045] kAFS: unable to lookup cell '' [ 337.416759][ T1108] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 337.483290][ T7062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.794'. [ 337.921643][ T7063] atomic_op ffff88805e65c998 conn xmit_atomic 0000000000000000 [ 337.935286][ T1108] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 340.580735][ T4286] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 340.900722][ T4286] usb 2-1: Using ep0 maxpacket: 16 [ 341.051183][ T4286] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 341.090913][ T4286] usb 2-1: config 0 has no interface number 0 [ 341.107875][ T4286] usb 2-1: config 0 interface 41 has no altsetting 0 [ 341.601392][ T4286] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 341.684474][ T4286] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.723639][ T4286] usb 2-1: Product: syz [ 341.748014][ T4286] usb 2-1: Manufacturer: syz [ 341.782098][ T4286] usb 2-1: SerialNumber: syz [ 341.821441][ T4286] usb 2-1: config 0 descriptor?? [ 341.881718][ T4286] CoreChips: probe of 2-1:0.41 failed with error -22 [ 342.099009][ T7108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.804'. [ 342.878520][ T4295] usb 2-1: USB disconnect, device number 9 [ 342.920226][ T7111] kAFS: unable to lookup cell '' [ 345.286716][ T7137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.811'. [ 346.378080][ T7145] atomic_op ffff88807a854198 conn xmit_atomic 0000000000000000 [ 346.568738][ T4286] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 347.073483][ T4286] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 348.100148][ T7167] kAFS: unable to lookup cell '' [ 348.390546][ T4295] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 349.750529][ T4295] usb 3-1: Using ep0 maxpacket: 16 [ 350.016958][ T7189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.824'. [ 350.687077][ T4295] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 350.726019][ T4295] usb 3-1: config 0 has no interface number 0 [ 350.748467][ T4295] usb 3-1: config 0 interface 41 has no altsetting 0 [ 351.110604][ T4295] usb 3-1: string descriptor 0 read error: -71 [ 351.117193][ T4295] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 351.185888][ T4295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.236142][ T4295] usb 3-1: config 0 descriptor?? [ 351.797728][ T4295] usb 3-1: can't set config #0, error -71 [ 351.959931][ T4295] usb 3-1: USB disconnect, device number 9 [ 352.446931][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.830'. [ 353.417934][ T4286] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 353.453197][ T4286] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 354.238481][ T7228] kAFS: unable to lookup cell '' [ 356.114952][ T4295] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 356.420638][ T4295] usb 1-1: Using ep0 maxpacket: 16 [ 357.235477][ T4295] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 357.247669][ T4295] usb 1-1: config 0 has no interface number 0 [ 357.254436][ T4295] usb 1-1: config 0 interface 41 has no altsetting 0 [ 357.556756][ T7262] atomic_op ffff88806ad35998 conn xmit_atomic 0000000000000000 [ 359.393300][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.845'. [ 359.960662][ T4295] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 359.976770][ T4295] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.188205][ T7284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.849'. [ 360.211491][ T4295] usb 1-1: Product: syz [ 360.676817][ T4295] usb 1-1: config 0 descriptor?? [ 360.710856][ T4295] usb 1-1: can't set config #0, error -71 [ 360.722937][ T4295] usb 1-1: USB disconnect, device number 9 [ 360.760930][ T7290] kAFS: unable to lookup cell '' [ 362.444439][ T4295] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 362.467010][ T4295] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 365.280535][ T4246] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 366.495142][ T7346] atomic_op ffff888077a3a198 conn xmit_atomic 0000000000000000 [ 366.553882][ T4246] usb 1-1: Using ep0 maxpacket: 16 [ 366.575809][ T7351] kAFS: unable to lookup cell '' [ 366.688228][ T4246] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 366.796126][ T4246] usb 1-1: config 0 has no interface number 0 [ 367.150529][ T4246] usb 1-1: config 0 interface 41 has no altsetting 0 [ 367.500783][ T4246] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 367.888945][ T4246] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.897455][ T4246] usb 1-1: Product: syz [ 367.901839][ T4246] usb 1-1: Manufacturer: syz [ 367.901860][ T4246] usb 1-1: SerialNumber: syz [ 367.914436][ T4246] usb 1-1: config 0 descriptor?? [ 367.947178][ T4246] usb 1-1: can't set config #0, error -71 [ 367.954241][ T4246] usb 1-1: USB disconnect, device number 10 [ 369.693418][ T4328] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 369.739764][ T7389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.870'. [ 370.153859][ T4328] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 372.478441][ T7410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.879'. [ 373.131454][ T7416] binder: BINDER_SET_CONTEXT_MGR already set [ 373.137850][ T7416] binder: 7414:7416 ioctl 4018620d 200000000040 returned -16 [ 373.620748][ T4295] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 373.689111][ T7418] kAFS: unable to lookup cell '' [ 373.970629][ T4295] usb 4-1: Using ep0 maxpacket: 16 [ 374.180515][ T4295] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 374.385305][ T4295] usb 4-1: config 0 has no interface number 0 [ 374.429057][ T4295] usb 4-1: config 0 interface 41 has no altsetting 0 [ 374.910915][ T4295] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 374.930681][ T4295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.948530][ T4295] usb 4-1: Product: syz [ 374.965042][ T4295] usb 4-1: Manufacturer: syz [ 374.975197][ T4295] usb 4-1: SerialNumber: syz [ 374.996529][ T4295] usb 4-1: config 0 descriptor?? [ 375.051842][ T4295] CoreChips: probe of 4-1:0.41 failed with error -22 [ 375.886694][ T7438] atomic_op ffff8880239bc198 conn xmit_atomic 0000000000000000 [ 376.043769][ T4295] usb 4-1: USB disconnect, device number 12 [ 376.203731][ T7445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.887'. [ 378.379967][ T7456] binder: BINDER_SET_CONTEXT_MGR already set [ 378.386508][ T7456] binder: 7453:7456 ioctl 4018620d 200000000040 returned -16 [ 378.556776][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.654197][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.818957][ T4295] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 378.828254][ T4295] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 379.999102][ T7466] kAFS: unable to lookup cell '' [ 380.306857][ T7472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.897'. [ 385.038107][ T7518] kAFS: unable to lookup cell '' [ 387.091412][ T7541] atomic_op ffff888073b47998 conn xmit_atomic 0000000000000000 [ 388.210316][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.916'. [ 390.081989][ T7560] 9pnet: Insufficient options for proto=fd [ 390.237619][ T1325] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 390.431725][ T1325] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 390.541541][ T7567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.921'. [ 396.463715][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.933'. [ 399.835889][ T21] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 399.880961][ T21] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz1] on syz0 [ 403.745844][ T7678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.950'. [ 405.678044][ T7683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.952'. [ 406.361248][ T7694] NILFS (nullb0): couldn't find nilfs on the device [ 412.106628][ T7743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.966'. [ 412.941373][ T7744] NILFS (nullb0): couldn't find nilfs on the device [ 413.419272][ T4295] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 413.991110][ T4295] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz1] on syz0 [ 418.053204][ T7795] capability: warning: `syz.4.981' uses 32-bit capabilities (legacy support in use) [ 420.223097][ T7797] NILFS (nullb0): couldn't find nilfs on the device [ 424.316249][ T7815] snd_dummy snd_dummy.0: control 3:4:-2:syz0:2147483647 is already present [ 424.326587][ T7815] autofs4:pid:7815:autofs_fill_super: called with bogus options [ 425.032628][ T7825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.984'. [ 426.068016][ T7829] xt_l2tp: v2 sid > 0xffff: 262144 [ 428.970687][ T7865] NILFS (nullb0): couldn't find nilfs on the device [ 431.377953][ T7891] xt_l2tp: v2 sid > 0xffff: 262144 [ 435.827903][ T7929] NILFS (nullb0): couldn't find nilfs on the device [ 436.503418][ T7938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1014'. [ 542.260382][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 542.267074][ C1] rcu: 1-...!: (10498 ticks this GP) idle=c4f/1/0x4000000000000000 softirq=22289/22289 fqs=3 [ 542.278582][ C1] (t=10500 jiffies g=31805 q=224) [ 542.283741][ C1] rcu: rcu_preempt kthread starved for 10494 jiffies! g31805 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 542.294964][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 542.304954][ C1] rcu: RCU grace-period kthread stack dump: [ 542.310857][ C1] task:rcu_preempt state:R running task stack:27808 pid: 15 ppid: 2 flags:0x00004000 [ 542.321844][ C1] Call Trace: [ 542.325152][ C1] [ 542.328188][ C1] __schedule+0x11b8/0x43b0 [ 542.332936][ C1] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 542.338432][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 542.344349][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 542.350269][ C1] ? _raw_spin_unlock+0x40/0x40 [ 542.355143][ C1] ? rcu_is_watching+0x11/0xa0 [ 542.359931][ C1] ? release_firmware_map_entry+0x190/0x190 [ 542.365874][ C1] schedule+0x11b/0x1e0 [ 542.370053][ C1] schedule_timeout+0x15c/0x280 [ 542.374933][ C1] ? console_conditional_schedule+0x40/0x40 [ 542.380849][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 542.386771][ C1] ? update_process_times+0x200/0x200 [ 542.392185][ C1] ? prepare_to_swait_event+0x331/0x350 [ 542.397782][ C1] rcu_gp_fqs_loop+0x29e/0x11b0 [ 542.402663][ C1] ? dyntick_save_progress_counter+0x230/0x230 [ 542.408978][ C1] ? rcu_gp_init+0x10e0/0x10e0 [ 542.413771][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 542.419078][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 542.424302][ C1] rcu_gp_kthread+0x98/0x350 [ 542.429016][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 542.434149][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 542.440072][ C1] ? __kthread_parkme+0x157/0x1b0 [ 542.445131][ C1] kthread+0x436/0x520 [ 542.449239][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 542.454375][ C1] ? kthread_blkcg+0xd0/0xd0 [ 542.458993][ C1] ret_from_fork+0x1f/0x30 [ 542.463448][ C1] [ 542.466485][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 542.472829][ C1] Sending NMI from CPU 1 to CPUs 0: [ 542.478054][ C0] NMI backtrace for cpu 0 [ 542.478071][ C0] CPU: 0 PID: 7941 Comm: syz.2.1016 Not tainted 5.15.189-syzkaller #0 [ 542.478087][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 542.478100][ C0] RIP: 0010:kasan_check_range+0xb/0x290 [ 542.478125][ C0] Code: 31 c0 c3 0f 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 00 00 cc cc 00 00 cc cc 00 00 cc cc b0 01 48 85 f6 0f 84 a4 01 00 00 <41> 57 41 56 53 49 89 f8 49 01 f0 0f 82 57 02 00 00 49 89 f8 49 c1 [ 542.478138][ C0] RSP: 0018:ffffc900000078c0 EFLAGS: 00000002 [ 542.478152][ C0] RAX: 0000000000000001 RBX: 0000000000000010 RCX: ffffffff8134829d [ 542.478163][ C0] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffffc900000079f8 [ 542.478173][ C0] RBP: 0000000000000000 R08: 000000000000000f R09: 0000000000000006 [ 542.478182][ C0] R10: fffff52000000f41 R11: 1ffff92000000f3f R12: 1ffffffff1bd2eef [ 542.478194][ C0] R13: dffffc0000000000 R14: ffffc900000079f8 R15: ffffc900000079dd [ 542.478206][ C0] FS: 00007fe76d91a6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 542.478220][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 542.478231][ C0] CR2: 0000001b31e24220 CR3: 00000000794f0000 CR4: 00000000003506f0 [ 542.478245][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 542.478253][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 542.478263][ C0] Call Trace: [ 542.478267][ C0] [ 542.478272][ C0] memset+0x1e/0x40 [ 542.478291][ C0] unwind_next_frame+0xa3d/0x1d90 [ 542.478313][ C0] ? do_bpf_send_signal+0x7b/0x150 [ 542.478331][ C0] ? stack_trace_save+0xe0/0xe0 [ 542.478346][ C0] arch_stack_walk+0x10c/0x140 [ 542.478366][ C0] ? irq_work_run_list+0x1bb/0x330 [ 542.478388][ C0] stack_trace_save+0x98/0xe0 [ 542.478402][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 542.478421][ C0] ? memset+0x1e/0x40 [ 542.478437][ C0] __kasan_slab_alloc+0x9c/0xd0 [ 542.478452][ C0] ? __kasan_slab_alloc+0x9c/0xd0 [ 542.478467][ C0] ? slab_post_alloc_hook+0x4c/0x380 [ 542.478481][ C0] ? kmem_cache_alloc+0x100/0x290 [ 542.478499][ C0] ? __sigqueue_alloc+0x3a6/0x4b0 [ 542.478513][ C0] ? __send_signal+0x203/0xdb0 [ 542.478530][ C0] ? group_send_sig_info+0x1c6/0x220 [ 542.478547][ C0] ? do_bpf_send_signal+0x7b/0x150 [ 542.478585][ C0] slab_post_alloc_hook+0x4c/0x380 [ 542.478602][ C0] ? __sigqueue_alloc+0x3a6/0x4b0 [ 542.478616][ C0] kmem_cache_alloc+0x100/0x290 [ 542.478636][ C0] __sigqueue_alloc+0x3a6/0x4b0 [ 542.478653][ C0] __send_signal+0x203/0xdb0 [ 542.478674][ C0] group_send_sig_info+0x1c6/0x220 [ 542.478694][ C0] do_bpf_send_signal+0x7b/0x150 [ 542.478710][ C0] irq_work_run_list+0x1bb/0x330 [ 542.478729][ C0] ? irq_work_run+0xe0/0xe0 [ 542.478746][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 542.478765][ C0] irq_work_run+0x63/0xe0 [ 542.478782][ C0] __sysvec_irq_work+0x98/0x240 [ 542.478800][ C0] sysvec_irq_work+0x98/0xc0 [ 542.478815][ C0] [ 542.478819][ C0] [ 542.478824][ C0] asm_sysvec_irq_work+0x16/0x20 [ 542.478838][ C0] RIP: 0010:native_apic_msr_write+0x35/0x50 [ 542.478856][ C0] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 89 f6 31 d2 e9 3f 5c c7 02 66 2e 0f 1f 84 00 00 00 00 00 [ 542.478868][ C0] RSP: 0018:ffffc900039d7cb0 EFLAGS: 00000246 [ 542.478881][ C0] RAX: 00000000000000f6 RBX: ffffffff8bbbea20 RCX: 000000000000083f [ 542.478891][ C0] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 542.478900][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed10172067a7 [ 542.478910][ C0] R10: ffffed10172067a7 R11: 1ffff110172067a6 R12: ffff8880b9033b01 [ 542.478922][ C0] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000020 [ 542.478941][ C0] arch_irq_work_raise+0x82/0xd0 [ 542.478958][ C0] irq_work_queue+0x95/0x140 [ 542.478982][ C0] bpf_send_signal_common+0x2b2/0x420 [ 542.478999][ C0] ? rcu_lock_release+0x20/0x20 [ 542.479013][ C0] ? __cant_sleep+0x210/0x210 [ 542.479030][ C0] ? __context_tracking_exit+0x4c/0x80 [ 542.479048][ C0] bpf_send_signal+0x15/0x20 [ 542.479065][ C0] bpf_prog_7ba5217f62dcd359+0x38/0xe7c [ 542.479080][ C0] bpf_trace_run2+0x15b/0x2d0 [ 542.479099][ C0] ? bpf_trace_run1+0x2d0/0x2d0 [ 542.479115][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 542.479136][ C0] ? lock_chain_count+0x20/0x20 [ 542.479155][ C0] __bpf_trace_sys_enter+0x60/0x70 [ 542.479174][ C0] trace_sys_enter+0x65/0x80 [ 542.479190][ C0] syscall_trace_enter+0x115/0x180 [ 542.479209][ C0] do_syscall_64+0x24/0xa0 [ 542.479227][ C0] ? clear_bhb_loop+0x30/0x80 [ 542.479242][ C0] ? clear_bhb_loop+0x30/0x80 [ 542.479258][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 542.479277][ C0] RIP: 0033:0x7fe76f66fde9 [ 542.479290][ C0] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 542.479303][ C0] RSP: 002b:00007fe76d919b40 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 542.479318][ C0] RAX: ffffffffffffffda RBX: 00007fe76f8fb098 RCX: 00007fe76f66fde9 [ 542.479330][ C0] RDX: 00007fe76d919b40 RSI: 00007fe76d919c70 RDI: 0000000000000011 [ 542.479340][ C0] RBP: 00007fe76f8fb090 R08: 0000000000000000 R09: 0000000000000000 [ 542.479350][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 542.479359][ C0] R13: 00007fe76f8fb128 R14: 00007fff7ad00b10 R15: 00007fff7ad00bf8 [ 542.479379][ C0] [ 542.480053][ C1] NMI backtrace for cpu 1 [ 543.023062][ C1] CPU: 1 PID: 7937 Comm: syz.2.1016 Not tainted 5.15.189-syzkaller #0 [ 543.031240][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 543.041581][ C1] Call Trace: [ 543.044900][ C1] [ 543.047767][ C1] dump_stack_lvl+0x168/0x230 [ 543.052477][ C1] ? show_regs_print_info+0x20/0x20 [ 543.057706][ C1] ? load_image+0x3b0/0x3b0 [ 543.062242][ C1] ? try_to_wake_up+0x3d4/0x1050 [ 543.067226][ C1] nmi_cpu_backtrace+0x397/0x3d0 [ 543.072205][ C1] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 543.078391][ C1] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 543.083792][ C1] ? _raw_spin_lock+0x40/0x40 [ 543.088493][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 543.094589][ C1] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 543.100697][ C1] rcu_dump_cpu_stacks+0x22f/0x380 [ 543.105844][ C1] print_cpu_stall+0x31d/0x5f0 [ 543.110643][ C1] rcu_sched_clock_irq+0x6d8/0x1110 [ 543.115883][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 543.120950][ C1] ? account_process_tick+0x227/0x3a0 [ 543.126352][ C1] update_process_times+0x193/0x200 [ 543.131709][ C1] tick_sched_timer+0x37d/0x560 [ 543.136594][ C1] __hrtimer_run_queues+0x4fe/0xc40 [ 543.141836][ C1] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 543.147432][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 543.152571][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 543.158673][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 543.163744][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 543.169785][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 543.175469][ C1] [ 543.178423][ C1] [ 543.181408][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 543.187422][ C1] RIP: 0010:native_apic_msr_write+0x35/0x50 [ 543.193343][ C1] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 89 f6 31 d2 e9 3f 5c c7 02 66 2e 0f 1f 84 00 00 00 00 00 [ 543.212972][ C1] RSP: 0018:ffffc9000386fcb0 EFLAGS: 00000246 [ 543.219078][ C1] RAX: 00000000000000f6 RBX: ffffffff8bbbea20 RCX: 000000000000083f [ 543.227080][ C1] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 543.235257][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed10172267a7 [ 543.243274][ C1] R10: ffffed10172267a7 R11: 1ffff110172267a6 R12: ffff8880b9133b01 [ 543.251277][ C1] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000020 [ 543.259290][ C1] arch_irq_work_raise+0x82/0xd0 [ 543.264258][ C1] irq_work_queue+0x95/0x140 [ 543.268879][ C1] bpf_send_signal_common+0x2b2/0x420 [ 543.274392][ C1] ? rcu_lock_release+0x20/0x20 [ 543.279267][ C1] ? __cant_sleep+0x210/0x210 [ 543.283977][ C1] ? __context_tracking_exit+0x4c/0x80 [ 543.289583][ C1] bpf_send_signal+0x15/0x20 [ 543.294201][ C1] bpf_prog_7ba5217f62dcd359+0x38/0xe7c [ 543.299770][ C1] bpf_trace_run2+0x15b/0x2d0 [ 543.304492][ C1] ? bpf_trace_run1+0x2d0/0x2d0 [ 543.309376][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 543.315478][ C1] ? lock_chain_count+0x20/0x20 [ 543.320358][ C1] __bpf_trace_sys_enter+0x60/0x70 [ 543.325497][ C1] trace_sys_enter+0x65/0x80 [ 543.330108][ C1] syscall_trace_enter+0x115/0x180 [ 543.335258][ C1] do_syscall_64+0x24/0xa0 [ 543.339698][ C1] ? clear_bhb_loop+0x30/0x80 [ 543.344504][ C1] ? clear_bhb_loop+0x30/0x80 [ 543.349207][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 543.355124][ C1] RIP: 0033:0x7fe76f6d3be9 [ 543.359559][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 543.379231][ C1] RSP: 002b:00007fe76d93b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 543.387772][ C1] RAX: ffffffffffffffda RBX: 00007fe76f8fafa8 RCX: 00007fe76f6d3be9 [ 543.395860][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe76f8fafa8 [ 543.403857][ C1] RBP: 00007fe76f8fafa0 R08: 0000000000000000 R09: 0000000000000000 [ 543.411859][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 543.419944][ C1] R13: 00007fe76f8fb038 R14: 00007fff7ad00b10 R15: 00007fff7ad00bf8 [ 543.427957][ C1]